Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ba/143d29-cf72-4d01-918c-16afc4dffdd4/1/OgCAdpjwsJfWmrOSaRfR3Mg4piQ.mft
File: OgCAdpjwsJfWmrOSaRfR3Mg4piQ.mft (raw, json)
Hash identifier: Eu8o1UpcPpamFYuCTsDjfbO0FnQZEQi7KJOo6g+61vo=
Subject key identifier: 55:B6:70:38:E4:85:1D:AD:A3:7D:C1:FC:B3:BE:F7:21:FC:94:BC:27
Authority key identifier: 3A:00:80:76:98:F0:B0:97:D6:9A:B3:92:69:17:D1:DC:C8:38:A6:24
Certificate issuer: /CN=3a00807698f0b097d69ab3926917d1dcc838a624
Certificate serial: 019609E7C1B8CEE101D9CAA60BEED81F3441
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OgCAdpjwsJfWmrOSaRfR3Mg4piQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ba/143d29-cf72-4d01-918c-16afc4dffdd4/1/OgCAdpjwsJfWmrOSaRfR3Mg4piQ.mft
Manifest number: 13D3
Signing time: Sun 06 Apr 2025 07:01:45 +0000
Manifest this update: Sun 06 Apr 2025 07:01:45 +0000
Manifest next update: Mon 07 Apr 2025 07:01:45 +0000
Files and hashes: 1: 3R71uiQs8A2yEYIuhFU6ltMSdoA.roa (hash: q6Bu6mNsK7g3Ktdy/8WD0fy0JiscBHWIuVXEPQ7F3vc=)
2: 4SmSne42qkJfP_8H235Hb69otEg.roa (hash: Rw2BEcxlO/hT8MVd1GJXC5JIyQ4FgN6SIY1eGGUmqEM=)
3: H0NKaOe5bQ8Q0_5pjno5XSaRBtA.roa (hash: 23YuHYDJK8ztv50Y7XASqWUgok/NgTr64wM7KdMg6xM=)
4: OgCAdpjwsJfWmrOSaRfR3Mg4piQ.crl (hash: e19pwAmO1dGOxuUS2mgVQviz4e8G5BbSdYNNcooTvS8=)
5: PSgnnJoiSIw5Hv12Voa8VUomZgQ.roa (hash: aSwQ/+jyVOvQ9xtFsxD7WSERWfDCCWFCBTIigVEVgk8=)
6: e6DZbvh_L3W1UeddH35B67LJi9Q.roa (hash: +0Dm3AWD3U6fAKnLyGuhhEgtHeQpyhFkn7EMeVE2k/Q=)
7: p3Y3crt9wWUb6xKtKHwtfKRhpKA.roa (hash: NWTiGaZGuwbETRLnJD5VxxB23JLGGVuboYx2qrcj0Vo=)
8: snLBQzXncuCutjB-6mlkbK17Uy8.roa (hash: Cw28lHOUeHUJQIAt/a1n6lZjE3/YqZwG3kLD22GHFE8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ba/143d29-cf72-4d01-918c-16afc4dffdd4/1/OgCAdpjwsJfWmrOSaRfR3Mg4piQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/ba/143d29-cf72-4d01-918c-16afc4dffdd4/1/OgCAdpjwsJfWmrOSaRfR3Mg4piQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/OgCAdpjwsJfWmrOSaRfR3Mg4piQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 06 Apr 2025 23:34:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:09:e7:c1:b8:ce:e1:01:d9:ca:a6:0b:ee:d8:1f:34:41
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3a00807698f0b097d69ab3926917d1dcc838a624
Validity
Not Before: Apr 6 07:01:45 2025 GMT
Not After : Apr 7 07:01:45 2025 GMT
Subject: CN=55b67038e4851dada37dc1fcb3bef721fc94bc27
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:47:dd:8e:bc:25:08:57:e7:9d:e2:c8:9c:62:
8b:b4:20:72:b3:03:24:9e:60:28:e9:d3:75:54:4e:
d9:3f:ee:f9:91:65:c4:bc:df:8a:f0:e1:77:96:a4:
52:4a:86:8f:39:ba:71:f2:88:23:7b:a8:ac:50:d0:
6e:da:7f:c2:ef:03:85:cb:dc:24:89:38:31:19:f0:
87:ea:5c:2a:0d:b8:95:1e:e8:50:6c:32:3b:04:a1:
64:dd:29:fd:d8:60:06:ce:71:b1:70:a5:d3:d5:7a:
7b:7c:6b:e4:67:45:2f:74:dd:4a:fe:78:c3:6a:37:
76:a8:9c:5a:f1:f1:8d:7a:b8:5c:7a:00:fe:89:ef:
26:d3:95:6b:1c:06:fa:3d:53:e6:fa:68:30:50:e6:
65:dc:ef:52:70:79:05:00:83:a4:a5:6a:85:46:0f:
00:5c:35:12:a5:b0:7b:40:ca:07:c2:67:d5:57:a6:
74:40:d4:82:4c:20:d7:00:6b:13:fa:94:19:81:7d:
14:6d:dc:2b:04:c6:3c:5b:7d:d2:44:ef:48:7c:85:
ee:b5:a5:86:3a:92:9b:44:2a:e6:3e:e6:5c:9d:4c:
f7:4a:4e:3d:6b:a7:9a:b5:5a:43:d6:c3:5a:fd:af:
73:ea:55:2c:8b:23:59:ff:65:9c:13:c9:fa:a3:9b:
1a:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
55:B6:70:38:E4:85:1D:AD:A3:7D:C1:FC:B3:BE:F7:21:FC:94:BC:27
X509v3 Authority Key Identifier:
keyid:3A:00:80:76:98:F0:B0:97:D6:9A:B3:92:69:17:D1:DC:C8:38:A6:24
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OgCAdpjwsJfWmrOSaRfR3Mg4piQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ba/143d29-cf72-4d01-918c-16afc4dffdd4/1/OgCAdpjwsJfWmrOSaRfR3Mg4piQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ba/143d29-cf72-4d01-918c-16afc4dffdd4/1/OgCAdpjwsJfWmrOSaRfR3Mg4piQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8d:a0:bc:5a:e3:f9:a9:f7:30:8c:28:b3:41:1f:b9:53:96:77:
e4:c5:f1:ad:b8:08:e6:c7:64:80:18:62:0b:69:61:2d:15:d0:
2b:94:df:53:1c:a1:da:d6:65:90:8a:78:77:47:22:41:cf:ef:
f9:2a:2b:e1:15:ef:d8:62:3b:95:aa:be:8c:40:84:22:e0:de:
bd:81:fc:1d:d7:ab:dd:c0:30:73:18:d7:92:cc:b4:6f:da:d6:
64:72:a0:ae:75:4e:15:fd:2e:92:4b:5c:be:3f:5a:9c:df:0c:
f2:b1:9d:f6:b6:b6:0f:22:38:fc:bd:e0:9e:d6:ad:82:0b:13:
e8:76:58:3e:23:c1:62:fe:51:03:1b:a3:d0:88:70:7d:08:c8:
b8:28:98:d0:e5:65:0e:0e:70:cd:15:2f:64:29:b0:19:73:74:
8a:a9:ac:b3:38:34:0a:31:9c:c7:90:03:0a:c2:41:0e:09:88:
b4:96:7d:8a:01:7c:ae:0d:01:09:eb:9d:9e:e4:ba:16:43:f3:
5d:ad:34:78:0a:df:27:36:35:0b:cb:c6:8f:f0:bf:fc:29:79:
96:5b:55:8c:b6:bc:7d:6e:0d:d8:d7:77:ea:57:4a:7b:c5:e0:
b7:af:73:3b:65:2d:2c:91:67:c9:bf:c0:06:51:5d:68:67:6e:
92:35:94:30
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 08:23:59 2025 by rpki-client