Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ae/c1c11c-2161-4afc-97a5-3f1a7c4f51b5/1/oZstcCM-Dlve9tv72pGIbSe2pa4.mft
File: oZstcCM-Dlve9tv72pGIbSe2pa4.mft (raw, json)
Hash identifier: S0N25tlnok/v6Sz1DN5ZDl4mc1BzEWliXucTadXvhPE=
Subject key identifier: 98:38:60:BD:BD:1F:D2:8E:86:29:D3:C7:26:AA:FF:8A:64:C5:43:62
Authority key identifier: A1:9B:2D:70:23:3E:0E:5B:DE:F6:DB:FB:DA:91:88:6D:27:B6:A5:AE
Certificate issuer: /CN=a19b2d70233e0e5bdef6dbfbda91886d27b6a5ae
Certificate serial: 0196594B7324ED6A1E3B861B41D941A08DC2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/oZstcCM-Dlve9tv72pGIbSe2pa4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ae/c1c11c-2161-4afc-97a5-3f1a7c4f51b5/1/oZstcCM-Dlve9tv72pGIbSe2pa4.mft
Manifest number: 03A2
Signing time: Mon 21 Apr 2025 17:00:38 +0000
Manifest this update: Mon 21 Apr 2025 17:00:38 +0000
Manifest next update: Tue 22 Apr 2025 17:00:38 +0000
Files and hashes: 1: 5Sdp75UI07U0XNu2tAWSzrc-qpk.roa (hash: SzIYjhnlLWEvz8Z1X0oLYzWFIohoOl7chIuBKt0PdE8=)
2: H1tYgXLLWfPNRsiraZOWsc2ElvQ.roa (hash: EmbP4jLbfudtKgGtKdZDrQ0gORWApQpD2bI92szlr5c=)
3: n41NhtFJXuy7O2MsnhnPAfCr2kE.roa (hash: ArC6Jxqpsmc09lGw1ULuf3dsi0Is5INs5UU1G0NJkHU=)
4: oZstcCM-Dlve9tv72pGIbSe2pa4.crl (hash: ba94nyt09ASoiPI6G4WCZKeMtDOE5HrTacRTKGnnTw0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ae/c1c11c-2161-4afc-97a5-3f1a7c4f51b5/1/oZstcCM-Dlve9tv72pGIbSe2pa4.crl
rsync://rpki.ripe.net/repository/DEFAULT/ae/c1c11c-2161-4afc-97a5-3f1a7c4f51b5/1/oZstcCM-Dlve9tv72pGIbSe2pa4.mft
rsync://rpki.ripe.net/repository/DEFAULT/oZstcCM-Dlve9tv72pGIbSe2pa4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 22 Apr 2025 10:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:59:4b:73:24:ed:6a:1e:3b:86:1b:41:d9:41:a0:8d:c2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a19b2d70233e0e5bdef6dbfbda91886d27b6a5ae
Validity
Not Before: Apr 21 17:00:38 2025 GMT
Not After : Apr 22 17:00:38 2025 GMT
Subject: CN=983860bdbd1fd28e8629d3c726aaff8a64c54362
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:0f:fc:c6:f5:39:3e:b8:de:70:b3:99:14:5f:
a8:c5:7a:7f:b3:78:73:b9:06:37:d3:0a:e8:92:ae:
89:c6:3c:0a:6f:96:f0:47:d3:e2:74:33:86:0c:35:
75:eb:33:3d:ec:61:e1:61:e3:d6:53:12:9b:70:1e:
77:bb:c9:85:32:8f:2d:90:09:07:5c:cc:15:ee:08:
37:d9:5b:08:8f:5a:3b:2b:8a:33:38:06:8e:9a:7e:
19:fc:03:e9:34:bd:be:34:56:bb:ec:e0:77:40:01:
dc:ae:16:9f:b0:d1:85:61:29:6f:08:09:95:7a:df:
31:38:2d:26:a4:39:c5:2c:a7:4f:77:e6:69:e6:8a:
7d:d1:2a:3e:ac:46:30:c3:7f:04:8e:5a:e3:54:8e:
a9:ed:e0:3e:af:b8:41:a4:7b:1a:8a:f6:55:b3:70:
56:b7:e8:ee:28:a1:47:c0:0f:8b:41:6d:a3:dd:74:
25:74:0f:c9:40:a2:a6:01:60:5d:87:f5:fb:49:18:
d6:f9:38:1c:dd:8c:33:25:94:cd:d2:0d:da:17:46:
41:50:39:fb:91:7e:88:2e:cd:8d:b6:07:39:2b:aa:
db:ab:85:e4:07:d4:81:ac:78:67:83:6b:b8:28:bd:
0f:91:1d:c0:a7:36:87:ba:1e:ee:1b:a4:ad:29:06:
5e:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
98:38:60:BD:BD:1F:D2:8E:86:29:D3:C7:26:AA:FF:8A:64:C5:43:62
X509v3 Authority Key Identifier:
keyid:A1:9B:2D:70:23:3E:0E:5B:DE:F6:DB:FB:DA:91:88:6D:27:B6:A5:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/oZstcCM-Dlve9tv72pGIbSe2pa4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ae/c1c11c-2161-4afc-97a5-3f1a7c4f51b5/1/oZstcCM-Dlve9tv72pGIbSe2pa4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ae/c1c11c-2161-4afc-97a5-3f1a7c4f51b5/1/oZstcCM-Dlve9tv72pGIbSe2pa4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
24:b9:bf:51:d5:35:d4:33:1c:b3:2a:2a:66:56:08:03:b7:a0:
18:e4:64:88:e3:ae:f7:31:66:fd:d7:94:9a:49:4e:19:cc:b6:
4b:42:53:b2:9a:b3:90:06:9a:8b:d3:57:5d:d7:f9:db:5b:93:
31:40:75:d1:a5:0d:02:e0:80:f6:b4:6f:2d:34:d5:e0:e2:08:
42:e2:e6:97:2a:af:7b:9f:97:6f:8e:21:4d:c1:ed:d7:86:a1:
9b:59:f9:12:1f:4e:c7:6c:74:21:1e:86:b0:98:60:35:b9:46:
2c:db:d4:9f:ff:00:e9:f2:ad:c7:54:db:65:ba:90:64:70:d2:
fa:2d:2c:d6:2c:23:70:b6:7f:b7:52:ce:7f:a8:51:52:3a:10:
2c:82:b6:26:c7:79:da:20:8d:7f:c4:0a:e4:25:a7:16:0c:8b:
b2:63:0b:cb:4b:9a:67:52:2b:81:f5:04:47:fc:c8:0a:15:0e:
f4:16:72:2b:b2:73:32:35:a0:44:36:bb:05:66:0a:dd:d6:83:
ad:06:db:c8:4c:0d:1b:c1:d0:f0:1c:2c:16:3b:ba:2b:ac:e8:
10:3d:1e:25:4f:e2:13:29:66:88:9d:20:de:29:af:bf:15:f4:
68:76:3b:de:17:ea:dd:35:36:67:33:92:d1:75:3b:d7:56:61:
be:f8:33:73
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 21 19:11:37 2025 by rpki-client