Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a0/464660-7a6e-49a7-903d-5cbc636bd7e7/1/oBjWgRXcS3MPFXkGsEQm5ZmzqMo.mft
File: oBjWgRXcS3MPFXkGsEQm5ZmzqMo.mft (raw, json)
Hash identifier: OBoyvjkaSf/qlc5L78WfcSdtNYfEpPOWhkUIwcBgoFs=
Subject key identifier: 03:5D:28:4E:D5:87:22:38:C8:6E:BE:E7:E8:D2:FA:11:58:80:AE:35
Authority key identifier: A0:18:D6:81:15:DC:4B:73:0F:15:79:06:B0:44:26:E5:99:B3:A8:CA
Certificate issuer: /CN=a018d68115dc4b730f157906b04426e599b3a8ca
Certificate serial: 01964BFDBF45BEC548B54AABF3A4D1D86278
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/oBjWgRXcS3MPFXkGsEQm5ZmzqMo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a0/464660-7a6e-49a7-903d-5cbc636bd7e7/1/oBjWgRXcS3MPFXkGsEQm5ZmzqMo.mft
Manifest number: 0AC2
Signing time: Sat 19 Apr 2025 03:00:42 +0000
Manifest this update: Sat 19 Apr 2025 03:00:42 +0000
Manifest next update: Sun 20 Apr 2025 03:00:42 +0000
Files and hashes: 1: OwUS3NXybv4j2e2fp7XuRCsj9G8.roa (hash: 1wSHkE+/1+8ByWbwo11cGeXiOHBKl5OZ9BEstqVoHFw=)
2: oBjWgRXcS3MPFXkGsEQm5ZmzqMo.crl (hash: kLO/crqOLWOWQDN3fzm1ESzIszmjXWCD7Q/bDFYZBvA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a0/464660-7a6e-49a7-903d-5cbc636bd7e7/1/oBjWgRXcS3MPFXkGsEQm5ZmzqMo.crl
rsync://rpki.ripe.net/repository/DEFAULT/a0/464660-7a6e-49a7-903d-5cbc636bd7e7/1/oBjWgRXcS3MPFXkGsEQm5ZmzqMo.mft
rsync://rpki.ripe.net/repository/DEFAULT/oBjWgRXcS3MPFXkGsEQm5ZmzqMo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 20 Apr 2025 03:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:4b:fd:bf:45:be:c5:48:b5:4a:ab:f3:a4:d1:d8:62:78
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a018d68115dc4b730f157906b04426e599b3a8ca
Validity
Not Before: Apr 19 03:00:42 2025 GMT
Not After : Apr 20 03:00:42 2025 GMT
Subject: CN=035d284ed5872238c86ebee7e8d2fa115880ae35
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:88:d5:79:a4:92:03:1b:a1:f9:71:3c:49:5b:98:
a2:4a:02:0f:bf:5d:df:7a:fc:3c:dd:cc:0d:c7:65:
09:bf:e7:44:4c:c7:1a:51:38:8a:0f:db:a8:74:64:
a7:e5:f0:1e:79:bf:a1:f1:64:c4:a3:1c:fb:c1:15:
ad:74:4f:63:2c:4f:7f:a3:82:54:9b:61:9b:a4:ac:
d7:90:51:b1:67:4a:f0:c8:4d:ba:21:ce:7b:32:46:
2d:fc:ba:f2:67:7d:d3:e8:6e:19:c3:ce:3d:03:1b:
61:21:dc:40:de:12:59:26:6b:12:9b:0f:c9:cb:44:
09:68:a1:c3:c1:84:12:bd:1d:e0:f8:0f:b3:74:c5:
81:ba:79:53:63:f5:34:5f:5d:7a:45:c8:19:6c:5b:
fb:34:d6:5f:27:62:1d:51:fc:78:89:74:ee:fc:b5:
f0:b4:de:f8:59:cd:b6:6b:05:04:c1:98:55:29:13:
52:97:af:23:cd:bc:11:15:fc:2e:e9:07:e5:5a:c7:
95:29:61:c8:51:2d:fd:8c:74:8e:91:0c:ad:72:29:
66:fc:3b:65:3c:f3:ca:a3:51:64:6c:6d:dc:7d:d0:
ad:7b:f9:b5:ee:ad:22:45:70:a1:19:3f:d9:34:75:
24:80:8f:2a:12:c2:b7:f5:ca:5b:2d:36:75:3a:df:
8a:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
03:5D:28:4E:D5:87:22:38:C8:6E:BE:E7:E8:D2:FA:11:58:80:AE:35
X509v3 Authority Key Identifier:
keyid:A0:18:D6:81:15:DC:4B:73:0F:15:79:06:B0:44:26:E5:99:B3:A8:CA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/oBjWgRXcS3MPFXkGsEQm5ZmzqMo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/464660-7a6e-49a7-903d-5cbc636bd7e7/1/oBjWgRXcS3MPFXkGsEQm5ZmzqMo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/464660-7a6e-49a7-903d-5cbc636bd7e7/1/oBjWgRXcS3MPFXkGsEQm5ZmzqMo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
21:99:99:4c:7e:0b:bc:32:2f:00:ec:47:e8:82:30:cc:e0:a6:
89:21:ee:70:57:5a:96:9d:2b:16:dc:7b:fe:be:06:9d:39:8f:
b1:b8:fe:90:70:87:67:3c:5f:6d:46:d2:84:43:fa:20:19:43:
4f:dd:6d:0f:e4:c1:99:c2:47:42:83:37:61:9e:4b:d3:72:34:
82:fa:18:04:e5:17:8b:86:49:b5:1d:56:70:6a:14:62:e6:8c:
61:04:69:9a:97:b1:87:a5:33:47:c3:94:51:7c:ea:df:4a:37:
58:25:6c:4a:89:8f:33:01:e1:43:83:11:55:1c:52:5c:71:60:
e4:d0:69:d5:25:dd:d4:c0:07:26:7f:b8:6a:19:71:0a:b9:13:
2a:83:5c:9c:af:64:51:54:85:5d:24:28:45:30:0a:3d:d4:b1:
ad:c4:3d:24:b5:3b:1f:23:08:15:99:76:0c:7e:4c:de:19:25:
26:31:23:4c:4d:ab:d5:53:3d:e6:c7:85:4b:ec:10:a0:9b:12:
dc:fb:86:9f:05:c9:f8:cd:b6:60:06:4c:97:a7:01:0e:1b:6a:
52:f7:27:09:40:d7:76:94:bb:26:89:96:b5:b2:95:0f:de:30:
f5:27:ba:a3:a9:1c:c3:fc:b7:7a:63:2b:3b:07:fb:10:4c:23:
14:7d:76:f1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 19 12:24:37 2025 by rpki-client