Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bb/32eaa2-ccb9-48e1-962d-e3ea6494d4ea/1/OExnnLr4wq171-FZCG_fCifSooQ.mft
File: OExnnLr4wq171-FZCG_fCifSooQ.mft (raw, json)
Hash identifier: +Kuc2AUsM3GbpNokCRmZVUbdODQPqOXp5UXgNrLPqng=
Subject key identifier: B1:E5:A8:5B:2F:67:10:13:E2:0A:D5:8A:45:A1:54:22:7E:B2:D3:B3
Authority key identifier: 38:4C:67:9C:BA:F8:C2:AD:7B:D7:E1:59:08:6F:DF:0A:27:D2:A2:84
Certificate issuer: /CN=384c679cbaf8c2ad7bd7e159086fdf0a27d2a284
Certificate serial: 0196108E5EDE2CD521A1FA441469C3141CDF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OExnnLr4wq171-FZCG_fCifSooQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bb/32eaa2-ccb9-48e1-962d-e3ea6494d4ea/1/OExnnLr4wq171-FZCG_fCifSooQ.mft
Manifest number: 0AC8
Signing time: Mon 07 Apr 2025 14:01:27 +0000
Manifest this update: Mon 07 Apr 2025 14:01:27 +0000
Manifest next update: Tue 08 Apr 2025 14:01:27 +0000
Files and hashes: 1: OExnnLr4wq171-FZCG_fCifSooQ.crl (hash: Km7nIt6fIB27l3U8Wg1GtRzugqZJqtDEOhw7sVShIlM=)
2: dOLAcZqxH53yb4L2nTWOqgwfPdw.roa (hash: 2YFuU3G8qtklSATjn4cas6IxZSziYEVnTqShHhdL/7w=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bb/32eaa2-ccb9-48e1-962d-e3ea6494d4ea/1/OExnnLr4wq171-FZCG_fCifSooQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/bb/32eaa2-ccb9-48e1-962d-e3ea6494d4ea/1/OExnnLr4wq171-FZCG_fCifSooQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/OExnnLr4wq171-FZCG_fCifSooQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 08 Apr 2025 14:01:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:10:8e:5e:de:2c:d5:21:a1:fa:44:14:69:c3:14:1c:df
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=384c679cbaf8c2ad7bd7e159086fdf0a27d2a284
Validity
Not Before: Apr 7 14:01:27 2025 GMT
Not After : Apr 8 14:01:27 2025 GMT
Subject: CN=b1e5a85b2f671013e20ad58a45a154227eb2d3b3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:ba:4a:4e:06:a2:82:b8:7e:ac:00:d0:ac:7d:
6a:e6:97:0b:42:4b:5a:08:9c:18:30:6e:f2:43:b9:
ce:43:e9:b6:23:41:1b:98:0b:4c:33:0b:97:09:02:
04:4c:ff:11:37:7d:a4:7d:c1:21:df:e1:37:c2:fd:
4c:d2:4b:b7:bb:e1:9f:28:17:58:48:1f:d8:3a:4a:
aa:84:98:2c:6e:17:82:31:29:93:31:07:b4:35:61:
a2:11:8c:41:75:82:61:26:82:9b:91:0e:f7:f7:33:
09:ad:6a:fa:23:a4:e4:ff:cc:d6:62:ee:35:65:3a:
7a:aa:ac:7f:2d:c0:8c:19:c3:59:e8:a5:8e:09:07:
8a:f1:c2:f0:3d:4a:64:52:53:bb:da:83:83:51:2c:
99:04:4a:7a:05:61:75:85:d7:f9:31:92:6f:8c:16:
0f:dd:f0:d2:ee:5e:ba:d5:26:3c:28:30:e1:2b:93:
0a:34:7a:49:74:1a:78:c7:35:65:9a:8f:d8:93:44:
4b:8f:ad:02:64:00:25:e8:b5:7e:bf:eb:64:67:14:
39:69:3e:d9:ac:b4:24:95:ea:f7:9f:5a:be:ca:f6:
e9:eb:d5:1a:ca:78:5b:18:b1:6b:b1:58:ad:8b:dd:
25:78:a9:6d:da:84:8a:82:30:c0:5a:1a:64:f7:61:
8c:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B1:E5:A8:5B:2F:67:10:13:E2:0A:D5:8A:45:A1:54:22:7E:B2:D3:B3
X509v3 Authority Key Identifier:
keyid:38:4C:67:9C:BA:F8:C2:AD:7B:D7:E1:59:08:6F:DF:0A:27:D2:A2:84
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OExnnLr4wq171-FZCG_fCifSooQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bb/32eaa2-ccb9-48e1-962d-e3ea6494d4ea/1/OExnnLr4wq171-FZCG_fCifSooQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bb/32eaa2-ccb9-48e1-962d-e3ea6494d4ea/1/OExnnLr4wq171-FZCG_fCifSooQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b2:85:dc:e0:cc:0c:fa:8b:d3:b6:02:81:cb:88:83:11:17:a2:
c0:98:ee:6c:db:2f:6d:03:42:67:a8:66:93:a8:50:9a:51:2d:
88:80:f4:0c:ed:e3:d6:37:fe:6a:50:4a:f9:fe:21:56:f0:54:
bd:df:fd:16:77:57:10:db:50:ad:b6:67:fc:9a:d0:ef:0f:00:
d3:b7:54:6a:ca:cc:cb:d7:7b:cc:ba:fd:ed:48:6c:13:3c:82:
6e:6d:df:8e:28:4e:dd:9c:e2:33:63:3b:59:ec:5a:0a:21:46:
da:f7:38:bc:45:c0:f1:3e:27:5c:af:62:16:64:64:85:a2:eb:
09:39:a5:df:2b:f2:65:d8:92:92:40:a9:2a:61:5d:60:5a:2e:
13:8e:60:ce:48:31:f8:a5:0e:e1:f7:c5:47:fc:56:7c:6f:a6:
7a:db:45:95:b8:e0:fe:8b:b4:64:92:8d:b0:42:ec:89:26:f3:
7f:dd:88:23:24:42:d7:4a:82:60:33:9f:f3:98:83:b9:48:8b:
ca:e8:ba:65:52:9e:29:db:f7:1e:70:c3:1e:48:ec:35:24:2b:
18:93:b6:db:26:b4:3c:a2:e1:ca:36:8a:4b:74:aa:99:f5:bd:
0f:4a:61:a4:41:b7:3e:ce:a6:44:fd:44:df:cb:f0:3e:30:c3:
dc:bf:38:b6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 20:07:47 2025 by rpki-client