Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/aa9922-e92c-4105-8365-040129aeb0bf/1/oum7stw2HxSLUadQgNjgtPeKH4I.mft
File: oum7stw2HxSLUadQgNjgtPeKH4I.mft (raw, json)
Hash identifier: Nk56Ir6vFj8jln7sV61+svHaH6Sd486Ghcr9jv+dBiM=
Subject key identifier: EB:B8:71:D9:90:0C:F5:57:22:39:BF:FD:02:EE:AB:2F:BC:4C:55:24
Authority key identifier: A2:E9:BB:B2:DC:36:1F:14:8B:51:A7:50:80:D8:E0:B4:F7:8A:1F:82
Certificate issuer: /CN=a2e9bbb2dc361f148b51a75080d8e0b4f78a1f82
Certificate serial: 01964F6D39AA012667B1AD35D432C5978417
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/oum7stw2HxSLUadQgNjgtPeKH4I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/aa9922-e92c-4105-8365-040129aeb0bf/1/oum7stw2HxSLUadQgNjgtPeKH4I.mft
Manifest number: 14FD
Signing time: Sat 19 Apr 2025 19:01:20 +0000
Manifest this update: Sat 19 Apr 2025 19:01:20 +0000
Manifest next update: Sun 20 Apr 2025 19:01:20 +0000
Files and hashes: 1: f_wGHHPcfp4gWwowZYMDfcJ1Mog.roa (hash: An25AbmP3oyWt72GnalaU42kIKjPDFrI7RZhZqfvEO8=)
2: oum7stw2HxSLUadQgNjgtPeKH4I.crl (hash: B30z2pCiziu5CrevsO77iv6fFLNbCCYLMn7O7Q7Xmwg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c8/aa9922-e92c-4105-8365-040129aeb0bf/1/oum7stw2HxSLUadQgNjgtPeKH4I.crl
rsync://rpki.ripe.net/repository/DEFAULT/c8/aa9922-e92c-4105-8365-040129aeb0bf/1/oum7stw2HxSLUadQgNjgtPeKH4I.mft
rsync://rpki.ripe.net/repository/DEFAULT/oum7stw2HxSLUadQgNjgtPeKH4I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 20 Apr 2025 16:41:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:4f:6d:39:aa:01:26:67:b1:ad:35:d4:32:c5:97:84:17
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a2e9bbb2dc361f148b51a75080d8e0b4f78a1f82
Validity
Not Before: Apr 19 19:01:20 2025 GMT
Not After : Apr 20 19:01:20 2025 GMT
Subject: CN=ebb871d9900cf5572239bffd02eeab2fbc4c5524
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:4a:5f:e8:c0:4d:4a:b7:30:03:ff:5f:da:57:
cb:97:67:67:ef:fa:33:91:ee:b8:1f:a6:d1:bb:ec:
8b:99:8e:ee:53:54:cd:17:f6:08:cc:59:85:b2:a9:
80:12:c6:ca:e2:ef:83:d0:b9:1d:86:86:2b:96:50:
54:79:21:8c:f9:c6:aa:bc:9c:6a:eb:58:bd:1d:39:
87:53:c7:5b:5a:74:03:38:dd:c9:ef:9b:24:d6:23:
d7:84:1c:d1:6b:4a:b1:25:e7:0d:2d:70:18:cf:0e:
0f:7c:23:59:b7:23:ed:e3:a6:ec:26:a7:fd:f4:2b:
0d:16:9f:9c:bd:c8:17:b7:bf:ed:0e:b8:71:68:7f:
37:f9:36:cb:85:54:d3:dd:39:f0:c9:9f:84:ad:0b:
13:74:c0:ef:9b:76:4c:4d:59:1a:85:6c:f8:38:c8:
33:bb:6a:31:a7:8b:9c:c9:2b:56:7e:11:c0:89:89:
88:1a:1a:1f:f3:cc:de:e1:60:92:87:00:2a:5b:a0:
75:0c:83:a4:33:37:d9:50:bc:6a:2a:6f:44:af:17:
c2:95:f0:9d:43:de:64:3c:d4:48:cf:e5:8a:98:04:
0e:5f:74:ac:38:8c:ab:70:36:70:81:ff:b7:37:0c:
e8:d9:7d:2d:b5:85:d9:68:4a:98:3f:41:b5:d9:5c:
36:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EB:B8:71:D9:90:0C:F5:57:22:39:BF:FD:02:EE:AB:2F:BC:4C:55:24
X509v3 Authority Key Identifier:
keyid:A2:E9:BB:B2:DC:36:1F:14:8B:51:A7:50:80:D8:E0:B4:F7:8A:1F:82
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/oum7stw2HxSLUadQgNjgtPeKH4I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/aa9922-e92c-4105-8365-040129aeb0bf/1/oum7stw2HxSLUadQgNjgtPeKH4I.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/aa9922-e92c-4105-8365-040129aeb0bf/1/oum7stw2HxSLUadQgNjgtPeKH4I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
85:28:bb:8f:b6:7a:eb:86:23:4e:f9:f9:b7:9b:51:b7:ae:fd:
5f:47:17:a9:dd:da:33:00:6b:3a:08:fe:02:fe:6f:7b:e1:0c:
b4:1f:ea:fd:31:32:b5:15:e8:a7:f2:5b:ae:b9:f7:4b:36:5a:
28:e8:80:61:ba:12:65:0c:d7:da:8d:f6:85:1b:1b:26:ec:d3:
4d:e1:51:90:6b:00:0b:16:84:1a:3d:1b:38:09:d4:6b:01:59:
e5:ea:89:d5:4e:a5:3c:7c:69:af:6a:ac:e3:69:5b:9d:55:7c:
48:d3:c0:d0:48:b2:d7:4f:07:01:2c:9e:04:7e:1c:e5:9d:a5:
ba:68:fe:14:2c:e2:0b:d4:8d:aa:49:da:bd:95:f1:ce:c8:a0:
00:ea:52:92:f7:43:17:3e:91:0b:3f:c9:c0:e4:0a:12:3a:84:
89:d4:78:27:2b:17:4f:df:76:81:7a:3a:d2:7f:45:d1:49:21:
0d:45:9c:12:58:b9:1a:8f:35:b6:5a:1d:ee:96:24:5c:fd:5e:
6b:ca:7f:54:51:93:31:8a:62:10:c0:eb:38:82:d2:12:2c:ba:
f0:75:6e:1b:d6:80:57:ff:cc:62:41:d8:dc:bb:5d:e5:9a:06:
71:68:31:2b:19:10:9a:22:ca:e3:6b:83:e1:da:32:42:05:b0:
8d:59:38:03
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 20 02:03:24 2025 by rpki-client