Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c5/e5c877-a2ee-4c3f-ad5c-02a7f6df6810/1/OsREa6mbQ4kezx9_os2wLhSjRPM.mft
File: OsREa6mbQ4kezx9_os2wLhSjRPM.mft (raw, json)
Hash identifier: /DvzwtZ2DEsRmLekFmkrX3TIYSrw6bSMk2nwimxt2kg=
Subject key identifier: 8E:78:0A:AB:5E:99:64:DE:8A:DA:C1:BE:02:C5:D3:BB:0B:6D:6D:F1
Authority key identifier: 3A:C4:44:6B:A9:9B:43:89:1E:CF:1F:7F:A2:CD:B0:2E:14:A3:44:F3
Certificate issuer: /CN=3ac4446ba99b43891ecf1f7fa2cdb02e14a344f3
Certificate serial: 01963F1DC08F62E159FBCC26E946D02E421C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OsREa6mbQ4kezx9_os2wLhSjRPM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c5/e5c877-a2ee-4c3f-ad5c-02a7f6df6810/1/OsREa6mbQ4kezx9_os2wLhSjRPM.mft
Manifest number: 0969
Signing time: Wed 16 Apr 2025 15:00:36 +0000
Manifest this update: Wed 16 Apr 2025 15:00:36 +0000
Manifest next update: Thu 17 Apr 2025 15:00:36 +0000
Files and hashes: 1: OsREa6mbQ4kezx9_os2wLhSjRPM.crl (hash: 2Y5SiVYGd55jsiLWxR+ZybuUMCEILfyN3BJfTASA2pc=)
2: V65aigPklzLMXli-Tma7YMiy9ac.roa (hash: 9I1JxRzOP3IIZw3rQmGtzPQg16sopd8Gd0K1+blUv2k=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c5/e5c877-a2ee-4c3f-ad5c-02a7f6df6810/1/OsREa6mbQ4kezx9_os2wLhSjRPM.crl
rsync://rpki.ripe.net/repository/DEFAULT/c5/e5c877-a2ee-4c3f-ad5c-02a7f6df6810/1/OsREa6mbQ4kezx9_os2wLhSjRPM.mft
rsync://rpki.ripe.net/repository/DEFAULT/OsREa6mbQ4kezx9_os2wLhSjRPM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 17 Apr 2025 13:16:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:3f:1d:c0:8f:62:e1:59:fb:cc:26:e9:46:d0:2e:42:1c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3ac4446ba99b43891ecf1f7fa2cdb02e14a344f3
Validity
Not Before: Apr 16 15:00:36 2025 GMT
Not After : Apr 17 15:00:36 2025 GMT
Subject: CN=8e780aab5e9964de8adac1be02c5d3bb0b6d6df1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:30:3e:52:78:a8:3e:71:d6:c9:ca:f9:bb:c1:
0e:1a:21:89:bd:ff:1d:97:e5:ca:99:d9:e9:70:25:
78:95:e6:d1:5d:a4:a0:c5:98:f2:e3:72:9c:3f:53:
8d:fa:8e:20:e4:c6:8f:e6:b9:96:5a:af:ef:0a:fb:
bb:2b:f6:c2:91:d4:78:87:b2:41:26:f2:59:d9:78:
d2:ff:d3:6a:a2:57:1f:d0:fd:8c:a9:34:c1:64:c8:
27:09:82:f1:22:56:4b:5f:4a:b5:84:53:67:43:68:
8a:25:b1:be:db:ca:3d:70:24:13:df:ee:6f:f1:f6:
cf:6d:fe:97:67:67:07:7f:e8:fa:0d:a1:d4:69:d1:
a5:0b:19:50:07:55:b5:cd:d9:97:e5:c1:b6:20:4d:
ef:d6:b7:ca:63:d6:e4:2b:45:9f:3c:86:86:2f:0d:
2b:e1:01:26:32:bf:d6:0d:7a:c1:d1:04:45:ab:0d:
48:5c:0e:c0:c6:24:a2:66:b7:6c:61:69:3c:b6:9d:
65:19:c5:be:ff:35:a0:89:f5:7b:30:8c:87:15:ee:
e9:0f:f0:75:8c:5c:a2:ea:c9:63:41:ce:c7:18:00:
fe:38:4f:20:4d:7f:a3:80:6a:0c:0a:1f:0d:a1:98:
21:aa:23:62:3a:9b:99:78:e6:97:09:c4:44:95:9e:
45:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8E:78:0A:AB:5E:99:64:DE:8A:DA:C1:BE:02:C5:D3:BB:0B:6D:6D:F1
X509v3 Authority Key Identifier:
keyid:3A:C4:44:6B:A9:9B:43:89:1E:CF:1F:7F:A2:CD:B0:2E:14:A3:44:F3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OsREa6mbQ4kezx9_os2wLhSjRPM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/e5c877-a2ee-4c3f-ad5c-02a7f6df6810/1/OsREa6mbQ4kezx9_os2wLhSjRPM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/e5c877-a2ee-4c3f-ad5c-02a7f6df6810/1/OsREa6mbQ4kezx9_os2wLhSjRPM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4b:a4:0f:a2:bf:b1:c9:1e:fe:13:ec:63:7e:2e:82:de:6d:a7:
be:77:09:f4:b4:8f:ab:f6:a2:c7:77:ec:c0:38:be:3d:e5:78:
59:9a:9b:03:25:a5:bf:05:12:7b:3d:a8:ac:d2:99:ef:db:09:
be:ff:09:cf:8b:9a:fe:da:33:5b:99:5b:d3:ac:e2:68:7c:9b:
61:03:53:16:42:00:12:18:7c:39:71:c1:35:42:1f:ab:d4:1f:
4c:26:2b:f0:ea:92:89:3c:05:77:e3:d9:f8:1f:22:d8:d6:2a:
22:a4:72:54:9c:be:f6:3e:71:52:95:5d:66:0a:b7:b6:a9:5c:
67:cc:48:61:e7:24:b9:3c:28:de:b8:85:c8:5a:e3:ba:1e:92:
1a:e5:9f:38:c8:a1:43:4e:5d:0a:89:9e:3f:2d:19:4f:37:d4:
6a:32:d2:26:76:fd:4c:ed:67:1b:ec:04:36:5c:a9:4f:f1:3a:
2c:9a:28:24:d3:c6:31:8e:aa:b7:88:6e:85:50:85:0f:f8:79:
d9:4d:04:c9:74:41:b5:74:11:2d:82:dd:fe:69:59:04:99:c5:
23:77:fb:89:42:2d:09:0d:82:57:9f:28:9d:15:ad:b2:1f:55:
c8:ed:34:01:36:4e:2a:09:14:51:ca:92:84:78:8b:c9:47:af:
ae:d6:e7:3f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 17 00:58:49 2025 by rpki-client