Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cb/9c72ae-8365-4f50-825e-f82137e00bc3/1/oej-6X2jZbZICCGxi-35_CNVOCY.mft
File: oej-6X2jZbZICCGxi-35_CNVOCY.mft (raw, json)
Hash identifier: SMar+TDYJ76W1iKoJwII75JdhHUwSZFdq4k2LT88Xv8=
Subject key identifier: 97:7F:25:74:A4:71:1D:FE:32:42:18:5C:16:E7:EB:DA:63:65:94:7B
Authority key identifier: A1:E8:FE:E9:7D:A3:65:B6:48:08:21:B1:8B:ED:F9:FC:23:55:38:26
Certificate issuer: /CN=a1e8fee97da365b6480821b18bedf9fc23553826
Certificate serial: 019637645FCC9031D59CFB1E9FFE3E708E2D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/oej-6X2jZbZICCGxi-35_CNVOCY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cb/9c72ae-8365-4f50-825e-f82137e00bc3/1/oej-6X2jZbZICCGxi-35_CNVOCY.mft
Manifest number: 0BD4
Signing time: Tue 15 Apr 2025 03:00:46 +0000
Manifest this update: Tue 15 Apr 2025 03:00:46 +0000
Manifest next update: Wed 16 Apr 2025 03:00:46 +0000
Files and hashes: 1: 4DXia6r4DTEgUbfUdc0kmvwmm1Y.roa (hash: Z6UcUFwAm3cKPg0mR+/9vcq4H9MwUtI5vEk+Pz3XR3A=)
2: oej-6X2jZbZICCGxi-35_CNVOCY.crl (hash: hz7irfl1790+hj4aB1MTKpfY1Vjzzuzbv3MMBOCPCFE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cb/9c72ae-8365-4f50-825e-f82137e00bc3/1/oej-6X2jZbZICCGxi-35_CNVOCY.crl
rsync://rpki.ripe.net/repository/DEFAULT/cb/9c72ae-8365-4f50-825e-f82137e00bc3/1/oej-6X2jZbZICCGxi-35_CNVOCY.mft
rsync://rpki.ripe.net/repository/DEFAULT/oej-6X2jZbZICCGxi-35_CNVOCY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 15 Apr 2025 23:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:37:64:5f:cc:90:31:d5:9c:fb:1e:9f:fe:3e:70:8e:2d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a1e8fee97da365b6480821b18bedf9fc23553826
Validity
Not Before: Apr 15 03:00:46 2025 GMT
Not After : Apr 16 03:00:46 2025 GMT
Subject: CN=977f2574a4711dfe3242185c16e7ebda6365947b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:da:b9:10:fa:6a:bb:9c:d6:32:98:c3:32:b0:c7:
d9:82:fc:4a:5e:82:0f:1b:7e:12:80:4a:29:c8:e7:
06:94:1f:c6:70:eb:99:f9:e6:82:dd:d7:14:0a:ff:
62:bb:4a:fd:ba:32:14:28:3d:1c:6c:19:13:cb:9c:
0c:0d:c3:ce:a8:66:97:e4:5a:5f:20:9c:80:60:bf:
1b:4f:cf:38:66:fa:a2:16:ec:e8:c7:d0:d0:56:6c:
bf:5d:7a:91:f0:b9:35:56:71:ff:af:84:c2:1b:d9:
1a:a2:9c:9e:72:c5:b7:26:65:15:7b:9a:1c:5b:11:
de:7f:b8:13:1c:1a:13:c4:58:a4:5b:a3:4f:32:c0:
9b:e6:76:63:60:f2:17:f8:39:6d:f3:76:12:9c:d7:
b5:86:bf:4c:2e:81:b5:d3:18:3b:42:f5:73:79:01:
1c:09:0f:b2:8e:e4:0d:3a:0a:92:37:89:d8:a2:7a:
c0:0a:db:21:2f:fa:ee:d1:dc:cb:69:bb:20:8a:58:
36:a8:54:e0:64:f0:44:4d:d2:d8:29:e2:59:d5:68:
5a:e6:05:b9:d5:bc:03:e2:21:02:f6:14:10:b5:22:
2e:cb:39:44:84:f9:c8:f1:f3:17:a8:3a:08:74:4d:
73:aa:78:db:c4:4b:64:c5:9a:5e:ce:2d:6a:6c:a4:
02:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
97:7F:25:74:A4:71:1D:FE:32:42:18:5C:16:E7:EB:DA:63:65:94:7B
X509v3 Authority Key Identifier:
keyid:A1:E8:FE:E9:7D:A3:65:B6:48:08:21:B1:8B:ED:F9:FC:23:55:38:26
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/oej-6X2jZbZICCGxi-35_CNVOCY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cb/9c72ae-8365-4f50-825e-f82137e00bc3/1/oej-6X2jZbZICCGxi-35_CNVOCY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cb/9c72ae-8365-4f50-825e-f82137e00bc3/1/oej-6X2jZbZICCGxi-35_CNVOCY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
10:a6:8e:ec:10:39:41:1a:63:61:b7:ed:ab:c4:e4:a5:3f:01:
50:c0:60:b9:d0:64:d4:2a:6f:a6:e6:03:03:99:e8:41:09:40:
4b:cb:da:88:5b:93:ca:91:92:d0:ee:e2:d0:05:eb:55:26:8a:
9c:06:76:3f:01:30:4e:ff:c8:6e:fa:e5:3b:ae:a9:c9:24:a8:
eb:47:9e:7f:8d:61:5e:d9:65:73:4e:e1:17:a9:b1:b0:af:d6:
b1:ae:6d:ec:be:25:1b:c3:9a:58:d2:38:dc:ce:02:f1:ff:a2:
4a:1f:80:99:4f:61:90:79:77:c1:f8:d5:cc:21:58:4f:c4:2d:
95:4b:8b:9d:db:42:8a:24:0a:21:18:0d:86:72:d4:10:aa:1b:
f1:88:ed:60:0e:78:cb:96:96:b0:87:48:f3:b0:61:39:e5:c4:
38:25:e1:c8:df:1b:6d:6d:68:38:eb:1a:f7:75:11:34:90:15:
7b:79:29:8c:c2:2d:e9:88:24:ee:6d:b6:27:bc:8c:cb:7b:85:
98:30:ea:cb:92:9e:3c:98:a9:60:c6:f7:44:8e:c9:a2:6a:79:
d9:f8:2b:6f:49:8c:36:5d:ab:83:9d:a2:12:9d:02:20:93:29:
24:20:00:e7:d0:89:89:55:29:04:eb:68:55:23:92:6c:1b:ed:
3d:a6:3e:a0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 15 09:27:19 2025 by rpki-client