Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b3/0828e7-1e57-4747-8ea1-36a808f3d14d/1/oU5JkkDOpYhUGn3HTzIckUF0S7Y.mft
File: oU5JkkDOpYhUGn3HTzIckUF0S7Y.mft (raw, json)
Hash identifier: VyMKGrRRPx1bN8xuEvozXesFMzC4FPLhyCSiq1769iQ=
Subject key identifier: 30:25:CE:76:81:96:26:92:51:A5:95:5C:C7:2D:2A:EF:28:5D:08:0F
Authority key identifier: A1:4E:49:92:40:CE:A5:88:54:1A:7D:C7:4F:32:1C:91:41:74:4B:B6
Certificate issuer: /CN=a14e499240cea588541a7dc74f321c9141744bb6
Certificate serial: 019610FC16F140B0CDC872D6B6C5AB93C452
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/oU5JkkDOpYhUGn3HTzIckUF0S7Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b3/0828e7-1e57-4747-8ea1-36a808f3d14d/1/oU5JkkDOpYhUGn3HTzIckUF0S7Y.mft
Manifest number: 1098
Signing time: Mon 07 Apr 2025 16:01:18 +0000
Manifest this update: Mon 07 Apr 2025 16:01:18 +0000
Manifest next update: Tue 08 Apr 2025 16:01:18 +0000
Files and hashes: 1: IWMZBVgX3cc5Wvjzl4jnuQAqeyw.roa (hash: o4xnvKpR1H4iSPNc9E+0WDHvByCtNlzRd8/EbIPtlMo=)
2: oU5JkkDOpYhUGn3HTzIckUF0S7Y.crl (hash: Q26Is1OHSOmIKm9gzcMcjDAMe++ezW+bzagmbpGfggs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b3/0828e7-1e57-4747-8ea1-36a808f3d14d/1/oU5JkkDOpYhUGn3HTzIckUF0S7Y.crl
rsync://rpki.ripe.net/repository/DEFAULT/b3/0828e7-1e57-4747-8ea1-36a808f3d14d/1/oU5JkkDOpYhUGn3HTzIckUF0S7Y.mft
rsync://rpki.ripe.net/repository/DEFAULT/oU5JkkDOpYhUGn3HTzIckUF0S7Y.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 08 Apr 2025 14:28:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:10:fc:16:f1:40:b0:cd:c8:72:d6:b6:c5:ab:93:c4:52
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a14e499240cea588541a7dc74f321c9141744bb6
Validity
Not Before: Apr 7 16:01:18 2025 GMT
Not After : Apr 8 16:01:18 2025 GMT
Subject: CN=3025ce768196269251a5955cc72d2aef285d080f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:85:58:bb:1e:60:52:88:d8:91:76:a3:68:f7:5b:
73:fd:b0:d2:5e:b5:da:4d:34:d7:82:24:18:ba:8f:
a5:f5:1e:27:91:7f:d3:c1:5b:a4:86:99:87:80:bb:
f3:a1:c4:91:3d:ef:9c:86:43:66:ec:21:c6:d7:ea:
57:18:b2:85:56:6d:cd:b4:79:63:df:ce:02:3a:03:
9a:e0:8e:05:99:c1:1e:f2:52:a3:4b:c0:01:b4:2c:
e1:43:e1:a7:34:ea:8e:6d:1b:57:c8:7d:3e:dc:02:
2c:c0:fa:da:44:3a:fb:95:10:24:81:c9:d8:26:e6:
69:2d:34:38:ae:05:1c:20:32:bf:1c:98:df:40:f4:
22:33:64:4e:5f:2e:47:3c:4d:18:54:39:a7:f6:9c:
1f:8c:eb:aa:03:4c:2a:9c:dd:f0:df:83:93:c6:59:
51:4d:0c:25:11:de:88:1a:48:5e:e0:51:7a:4c:b5:
c5:7a:6b:21:9d:97:fa:02:7a:c6:28:5c:f3:a4:17:
d8:56:4f:19:40:b2:ed:6e:a2:ee:0b:b4:6d:d1:91:
5e:e6:b8:98:f2:c9:ad:71:d7:7b:82:6f:c5:16:79:
8b:16:e2:42:72:46:9e:45:7e:2e:8c:fa:bb:ba:6e:
99:52:f5:2c:d5:58:4f:b9:9a:00:25:ee:75:a8:05:
a3:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
30:25:CE:76:81:96:26:92:51:A5:95:5C:C7:2D:2A:EF:28:5D:08:0F
X509v3 Authority Key Identifier:
keyid:A1:4E:49:92:40:CE:A5:88:54:1A:7D:C7:4F:32:1C:91:41:74:4B:B6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/oU5JkkDOpYhUGn3HTzIckUF0S7Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b3/0828e7-1e57-4747-8ea1-36a808f3d14d/1/oU5JkkDOpYhUGn3HTzIckUF0S7Y.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b3/0828e7-1e57-4747-8ea1-36a808f3d14d/1/oU5JkkDOpYhUGn3HTzIckUF0S7Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2c:e7:d7:7f:87:42:29:0d:cf:eb:3c:05:59:c3:66:6d:06:f9:
14:ed:08:91:6d:3f:4d:8f:fa:de:5a:f4:76:be:d0:c4:c3:47:
e1:f3:a9:74:52:3e:01:04:a9:b8:df:1b:43:78:22:0b:83:6f:
e3:ee:9a:e2:7c:1c:f5:ce:b0:ef:75:51:23:58:b9:ea:57:5e:
d8:ac:a5:2a:c6:3a:b7:5a:c4:e1:a3:2f:07:a4:ae:57:3e:5f:
c0:b6:5b:fe:9d:f7:6d:49:8b:b7:6e:73:00:99:d2:d5:43:46:
35:4d:2b:6d:4a:99:5b:02:2c:3a:ce:98:5d:7f:72:e8:28:7d:
75:8f:0a:3f:1e:14:08:2f:a0:32:37:f2:18:1e:c4:fa:2e:f3:
75:eb:26:43:77:90:b9:eb:86:bb:56:09:70:48:15:00:8b:6c:
48:48:3b:21:65:58:19:37:a6:2c:3d:1a:da:9d:d0:bb:af:36:
bb:b5:18:12:f2:5d:de:ae:4e:b7:84:7d:f9:2a:e6:6d:e4:89:
6d:cb:d3:69:5e:15:ca:05:8a:a5:60:7d:61:bb:3a:b6:f1:a7:
56:a5:1a:71:bb:94:61:de:1f:f4:06:83:36:e0:d5:20:b0:e2:
be:b6:f8:50:39:b6:81:66:f1:47:b6:26:d4:a0:a6:10:29:0c:
e2:66:b2:9a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 8 00:05:44 2025 by rpki-client