Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ba/f97d7e-8078-4cee-af76-9f6d0bfd2058/1/oBGgLpKcQ_AZnIMmMC4kiZxKQVE.mft
File: oBGgLpKcQ_AZnIMmMC4kiZxKQVE.mft (raw, json)
Hash identifier: DhAtkevigAXYPM5Io7lcGyKzTdTwmFgJksDPl7NlRbI=
Subject key identifier: 41:11:C3:94:3D:1E:BC:97:3C:A2:C0:8F:D8:6A:5C:20:10:90:27:F9
Authority key identifier: A0:11:A0:2E:92:9C:43:F0:19:9C:83:26:30:2E:24:89:9C:4A:41:51
Certificate issuer: /CN=a011a02e929c43f0199c8326302e24899c4a4151
Certificate serial: 019654C9DAD0E98E8961D99BC1A5AB68C672
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/oBGgLpKcQ_AZnIMmMC4kiZxKQVE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ba/f97d7e-8078-4cee-af76-9f6d0bfd2058/1/oBGgLpKcQ_AZnIMmMC4kiZxKQVE.mft
Manifest number: 1268
Signing time: Sun 20 Apr 2025 20:00:36 +0000
Manifest this update: Sun 20 Apr 2025 20:00:36 +0000
Manifest next update: Mon 21 Apr 2025 20:00:36 +0000
Files and hashes: 1: ZgCbU_j-D8W_yz4NxjG1uIsvyRs.roa (hash: XLCyo6svOneJBnox9Jy1GVfURxAN14ccdkNtugIRAH8=)
2: oBGgLpKcQ_AZnIMmMC4kiZxKQVE.crl (hash: GkKCqJ2UJhK9pTM8EQuADcMTVL8MtgH/G5CHEUVABis=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ba/f97d7e-8078-4cee-af76-9f6d0bfd2058/1/oBGgLpKcQ_AZnIMmMC4kiZxKQVE.crl
rsync://rpki.ripe.net/repository/DEFAULT/ba/f97d7e-8078-4cee-af76-9f6d0bfd2058/1/oBGgLpKcQ_AZnIMmMC4kiZxKQVE.mft
rsync://rpki.ripe.net/repository/DEFAULT/oBGgLpKcQ_AZnIMmMC4kiZxKQVE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 21 Apr 2025 20:00:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:54:c9:da:d0:e9:8e:89:61:d9:9b:c1:a5:ab:68:c6:72
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a011a02e929c43f0199c8326302e24899c4a4151
Validity
Not Before: Apr 20 20:00:36 2025 GMT
Not After : Apr 21 20:00:36 2025 GMT
Subject: CN=4111c3943d1ebc973ca2c08fd86a5c20109027f9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:0e:29:2b:1b:e8:c6:75:a1:f3:36:e5:30:3c:
82:93:1d:f5:9c:11:41:05:55:a5:c3:ab:94:75:3d:
03:af:0c:2a:59:03:d5:a5:f0:ee:70:df:47:54:3c:
36:96:7a:3c:d6:94:3f:06:8d:ab:12:f4:d5:b8:13:
7a:7e:db:a6:39:e8:3e:00:4f:be:e7:d4:34:2b:32:
cf:d7:56:f0:cd:39:d3:9e:fe:b3:15:94:56:f5:7d:
a0:f7:ae:e7:cb:5c:c6:df:66:77:d7:76:d3:22:1c:
55:2e:f8:ff:d1:b5:9f:08:60:9e:6a:99:b6:fe:68:
85:4d:e4:d2:3c:ec:92:b8:46:3c:19:86:91:74:fb:
62:01:ba:4d:ee:8f:f1:a4:33:20:4c:0d:f6:42:9c:
e5:ca:b3:f4:d0:ee:8d:47:08:af:53:bb:70:87:47:
8b:c5:48:c2:e5:4a:78:40:54:8b:1e:30:67:5d:34:
c6:97:13:1d:b7:96:f3:69:ce:2b:61:af:5d:7f:01:
9d:ea:a1:91:35:84:ca:a3:e8:46:2b:5c:2d:72:28:
2e:cf:eb:a6:da:47:16:e7:54:bf:d5:9c:cd:0d:90:
ac:3a:09:27:5a:c7:2c:55:f0:c8:be:49:be:89:7d:
c5:a0:dd:2e:1c:59:36:b1:a8:08:c2:2b:20:97:fe:
5f:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
41:11:C3:94:3D:1E:BC:97:3C:A2:C0:8F:D8:6A:5C:20:10:90:27:F9
X509v3 Authority Key Identifier:
keyid:A0:11:A0:2E:92:9C:43:F0:19:9C:83:26:30:2E:24:89:9C:4A:41:51
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/oBGgLpKcQ_AZnIMmMC4kiZxKQVE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ba/f97d7e-8078-4cee-af76-9f6d0bfd2058/1/oBGgLpKcQ_AZnIMmMC4kiZxKQVE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ba/f97d7e-8078-4cee-af76-9f6d0bfd2058/1/oBGgLpKcQ_AZnIMmMC4kiZxKQVE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2f:70:5d:5d:8f:c7:7b:a4:f3:de:76:e2:76:e4:3d:69:8b:ad:
05:ca:b1:e3:8b:92:6e:fd:58:90:cd:5d:bc:87:08:3f:c3:77:
3f:7f:fd:69:40:a8:b1:c5:bf:06:98:31:c6:e3:65:ef:44:78:
ae:df:d2:d6:0e:5c:02:b5:c5:1a:ae:4e:10:22:b9:9e:cf:2b:
83:07:1f:76:ac:51:42:a4:e0:92:dc:59:fc:de:58:0c:07:6d:
06:30:5d:de:4a:12:82:03:d5:2f:9b:f1:18:01:e6:f6:a5:66:
5e:62:51:1f:d4:cd:d4:14:4e:c1:58:47:1d:35:f4:e4:86:b7:
8c:b7:28:03:5d:21:1a:52:d0:9c:35:f5:af:d4:7d:94:06:2b:
10:4f:9c:f1:04:c2:21:ae:dc:88:c9:11:16:2d:9d:a1:c2:8e:
32:68:a0:45:5d:16:bf:dd:b4:ce:2e:82:2c:97:1b:d7:43:95:
f8:49:88:fb:2e:36:29:1e:31:89:8a:49:f9:f0:66:1a:c6:4e:
d5:05:71:5a:86:47:fa:ab:f1:0f:23:96:0b:69:33:b6:f6:75:
06:85:a2:62:83:79:20:30:7a:86:a4:18:54:b0:af:10:f6:0c:
90:86:ce:d4:ce:a3:5e:60:73:23:00:22:f9:20:cb:c1:95:37:
d5:f3:91:e5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 21 02:56:13 2025 by rpki-client