Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cf/a13a17-6c73-4c78-9752-949dbe9b57fe/1/OqMu4BJm4BjSNlw7uhdy9CQXmsI.mft
File: OqMu4BJm4BjSNlw7uhdy9CQXmsI.mft (raw, json)
Hash identifier: 8dpkvC+ixTUXFD/3hP0HS78E97ZI0i9zUniD3oNmifE=
Subject key identifier: 91:B9:A3:8C:AD:FD:12:CB:25:CB:57:E3:43:FC:DA:FE:79:1C:6B:1B
Authority key identifier: 3A:A3:2E:E0:12:66:E0:18:D2:36:5C:3B:BA:17:72:F4:24:17:9A:C2
Certificate issuer: /CN=3aa32ee01266e018d2365c3bba1772f424179ac2
Certificate serial: 01963F1DA6197949BE17D33FAC97C5CFE194
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OqMu4BJm4BjSNlw7uhdy9CQXmsI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cf/a13a17-6c73-4c78-9752-949dbe9b57fe/1/OqMu4BJm4BjSNlw7uhdy9CQXmsI.mft
Manifest number: 14F5
Signing time: Wed 16 Apr 2025 15:00:29 +0000
Manifest this update: Wed 16 Apr 2025 15:00:29 +0000
Manifest next update: Thu 17 Apr 2025 15:00:29 +0000
Files and hashes: 1: OqMu4BJm4BjSNlw7uhdy9CQXmsI.crl (hash: ZCM/N5HLs+I+o+wM/35yo4rotDOgHUyIqUQKilIzL7Q=)
2: gkWQrDSBz4IQ4_XEEVy4Y27yU80.roa (hash: VF6i/0gNwt2tTOONBHG2KH5sytCAkilisQqp9v19k2Y=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cf/a13a17-6c73-4c78-9752-949dbe9b57fe/1/OqMu4BJm4BjSNlw7uhdy9CQXmsI.crl
rsync://rpki.ripe.net/repository/DEFAULT/cf/a13a17-6c73-4c78-9752-949dbe9b57fe/1/OqMu4BJm4BjSNlw7uhdy9CQXmsI.mft
rsync://rpki.ripe.net/repository/DEFAULT/OqMu4BJm4BjSNlw7uhdy9CQXmsI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 17 Apr 2025 13:16:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:3f:1d:a6:19:79:49:be:17:d3:3f:ac:97:c5:cf:e1:94
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3aa32ee01266e018d2365c3bba1772f424179ac2
Validity
Not Before: Apr 16 15:00:29 2025 GMT
Not After : Apr 17 15:00:29 2025 GMT
Subject: CN=91b9a38cadfd12cb25cb57e343fcdafe791c6b1b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:ae:dd:72:58:b8:16:fc:5b:92:a8:57:4d:66:
99:af:44:b9:50:f7:ab:53:1c:33:59:2b:3d:73:2b:
6c:6c:09:5d:f7:ac:a9:76:b3:c0:c7:fb:b9:3c:d0:
92:93:84:70:94:6b:96:90:fe:0b:44:08:f9:e6:68:
65:e2:4d:11:1c:22:88:43:e8:19:66:00:99:d8:df:
88:fb:84:8f:ad:80:45:67:b3:3e:a8:cb:6c:2e:e2:
2d:6d:b8:c1:b5:d3:a2:f7:8d:59:4f:d3:4f:68:8f:
66:1a:ca:59:e0:3b:87:dd:27:91:0d:b8:19:e9:bc:
1d:97:e3:86:7e:67:73:5f:90:dd:88:f2:56:cb:12:
07:a4:51:56:1c:dd:cb:5e:d6:ba:46:d1:d7:04:e4:
18:c4:4b:1b:2c:4f:e7:3f:10:cc:97:70:60:fd:37:
df:e0:2d:86:d6:de:e1:cb:90:8c:93:56:f3:f5:da:
2c:0d:a8:48:f6:d0:b8:c0:85:40:30:98:54:9e:ca:
af:6a:3e:8d:72:86:8f:1d:18:33:a9:c1:79:47:2f:
9f:8a:69:82:7b:81:a8:11:36:04:db:2e:47:20:69:
f5:83:32:5d:2e:98:1d:ae:0b:a0:f2:08:63:fc:45:
63:1d:aa:88:6b:86:29:2d:ff:97:b4:3c:49:33:45:
54:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
91:B9:A3:8C:AD:FD:12:CB:25:CB:57:E3:43:FC:DA:FE:79:1C:6B:1B
X509v3 Authority Key Identifier:
keyid:3A:A3:2E:E0:12:66:E0:18:D2:36:5C:3B:BA:17:72:F4:24:17:9A:C2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OqMu4BJm4BjSNlw7uhdy9CQXmsI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cf/a13a17-6c73-4c78-9752-949dbe9b57fe/1/OqMu4BJm4BjSNlw7uhdy9CQXmsI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cf/a13a17-6c73-4c78-9752-949dbe9b57fe/1/OqMu4BJm4BjSNlw7uhdy9CQXmsI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
36:93:7c:14:a1:50:b3:0f:f7:4f:e5:03:94:d8:6b:b2:cd:9d:
96:4f:0c:45:7e:92:fc:14:f3:53:eb:45:c9:c2:70:33:27:9b:
a6:a1:22:e3:1c:d2:fc:b3:cc:09:b4:67:d5:77:0f:37:f5:3b:
0c:5b:e5:bb:4d:9d:b7:e0:88:72:3b:6a:d0:02:e3:ea:c8:23:
3e:aa:2c:2f:9e:7a:32:b5:df:06:a9:7a:64:dd:af:87:6a:48:
83:59:a7:4d:c4:c4:93:27:7d:f0:d5:dd:e6:6e:48:dc:1a:bc:
28:d9:01:3d:e3:2e:b4:12:60:2c:a5:9b:c5:f8:f3:7c:8f:e7:
86:e5:4b:d1:03:0e:6f:25:af:cb:14:98:3d:6f:84:f6:71:88:
63:d1:d4:34:c1:8f:df:94:96:19:6e:57:a6:96:57:41:92:e6:
c7:71:c2:6b:aa:d0:38:97:23:48:7a:bb:a9:3b:08:71:0b:3f:
c0:24:16:46:4e:53:78:8e:a5:51:1c:9d:59:fb:f8:25:1c:51:
91:d1:94:c9:be:41:0f:9b:68:91:6f:fb:2c:70:02:fe:e8:94:
70:a7:8c:7c:dd:e8:ba:47:e6:44:0f:20:66:cf:ff:28:9c:61:
93:92:66:48:6c:64:50:f9:d7:36:8e:ac:1c:e2:6c:1c:c2:06:
cc:db:cf:d9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 17 09:01:10 2025 by rpki-client