Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e5/dd8878-2941-4c15-b204-8fc33737ceab/1/ogzGcVS0AxRdE5RpiGEnq2KeuSg.mft
File: ogzGcVS0AxRdE5RpiGEnq2KeuSg.mft (raw, json)
Hash identifier: v73mqhbWj+HFrM/K3x9OknTuR2uZb0MJOSpZ0NZmkPc=
Subject key identifier: F3:51:67:B3:EB:0A:A0:35:B5:A0:CB:5F:67:61:F9:0D:64:DE:36:C7
Authority key identifier: A2:0C:C6:71:54:B4:03:14:5D:13:94:69:88:61:27:AB:62:9E:B9:28
Certificate issuer: /CN=a20cc67154b403145d139469886127ab629eb928
Certificate serial: 01965500E95EE758E5A6945D39DB7D6DEF53
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ogzGcVS0AxRdE5RpiGEnq2KeuSg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e5/dd8878-2941-4c15-b204-8fc33737ceab/1/ogzGcVS0AxRdE5RpiGEnq2KeuSg.mft
Manifest number: 0F70
Signing time: Sun 20 Apr 2025 21:00:45 +0000
Manifest this update: Sun 20 Apr 2025 21:00:45 +0000
Manifest next update: Mon 21 Apr 2025 21:00:45 +0000
Files and hashes: 1: 13rU8nhg31f282Ufq4fY9epK_mk.roa (hash: 71Un032C55jpwedQZGjeiCXgaYcH9RkzCt+gCgI2Wak=)
2: DDq525mddfr-xwBo8-T-YcAlqlM.roa (hash: vbBu7r+JS7z7+nPsGEJDbq+t4cp8fYea0z6mgr+ClXE=)
3: ogzGcVS0AxRdE5RpiGEnq2KeuSg.crl (hash: E8JzlzgpSdpirSG0qP9itxohHXQFUYCYIGzW1TJpidw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e5/dd8878-2941-4c15-b204-8fc33737ceab/1/ogzGcVS0AxRdE5RpiGEnq2KeuSg.crl
rsync://rpki.ripe.net/repository/DEFAULT/e5/dd8878-2941-4c15-b204-8fc33737ceab/1/ogzGcVS0AxRdE5RpiGEnq2KeuSg.mft
rsync://rpki.ripe.net/repository/DEFAULT/ogzGcVS0AxRdE5RpiGEnq2KeuSg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 21 Apr 2025 21:00:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:55:00:e9:5e:e7:58:e5:a6:94:5d:39:db:7d:6d:ef:53
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a20cc67154b403145d139469886127ab629eb928
Validity
Not Before: Apr 20 21:00:45 2025 GMT
Not After : Apr 21 21:00:45 2025 GMT
Subject: CN=f35167b3eb0aa035b5a0cb5f6761f90d64de36c7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:b2:13:23:a3:d5:73:f1:03:87:a4:0a:c8:bf:
89:25:ae:a6:9e:c0:66:a0:f4:0a:c7:2d:c8:79:1c:
55:17:58:aa:8a:84:03:ca:3a:c7:a1:33:4d:a4:97:
96:14:32:b2:9a:38:f2:0d:d0:c1:50:cc:39:75:e6:
b0:44:68:63:2c:6c:4e:22:a5:82:a8:d1:f5:e2:9d:
2b:cb:6d:2a:65:cc:30:02:b7:aa:e4:35:c2:69:82:
ea:68:42:e8:5f:f8:aa:32:ce:66:8b:af:44:8a:d8:
06:12:86:98:2f:f1:5c:b8:cd:46:68:b4:02:f5:d5:
64:b3:81:92:f5:aa:74:63:e7:90:11:30:4a:4a:a8:
0b:9f:2b:44:57:2a:48:6f:ec:ad:62:30:fc:7e:bc:
a2:5e:db:92:fc:27:d8:ff:2f:8d:d2:6f:ff:cc:d1:
b4:51:b4:53:23:1e:ee:b2:ce:b4:1f:df:52:4a:93:
44:fc:f8:30:3b:15:c2:83:be:e2:eb:06:11:09:c7:
2a:01:a8:ab:78:2f:54:8c:a2:0a:b1:90:a9:2a:51:
79:12:87:8e:6a:73:a2:f3:10:f3:43:5a:eb:a5:96:
8f:84:4e:ef:9a:31:f0:08:06:bb:c3:38:42:a1:2c:
37:c3:f7:aa:1c:ac:cd:96:0b:b3:1c:2c:24:e2:33:
b5:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F3:51:67:B3:EB:0A:A0:35:B5:A0:CB:5F:67:61:F9:0D:64:DE:36:C7
X509v3 Authority Key Identifier:
keyid:A2:0C:C6:71:54:B4:03:14:5D:13:94:69:88:61:27:AB:62:9E:B9:28
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ogzGcVS0AxRdE5RpiGEnq2KeuSg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/dd8878-2941-4c15-b204-8fc33737ceab/1/ogzGcVS0AxRdE5RpiGEnq2KeuSg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/dd8878-2941-4c15-b204-8fc33737ceab/1/ogzGcVS0AxRdE5RpiGEnq2KeuSg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
80:fa:10:25:65:54:3f:54:0a:a8:3c:ba:8b:24:f0:a3:09:b0:
f9:b4:d6:f0:30:cc:a8:73:3c:12:d7:be:d2:b9:29:e3:90:6f:
dd:07:3c:55:22:f8:8c:a0:68:a8:7a:85:0f:db:fc:0f:f0:c1:
89:49:33:a9:8a:96:cf:48:25:5d:70:9d:48:9b:de:11:57:97:
83:85:d6:76:d0:c1:66:0f:2e:bd:63:11:90:48:78:72:a5:83:
b7:4e:9b:ec:b1:c0:52:95:cf:d8:e8:bd:57:39:bb:0e:3a:64:
0d:b8:9f:a6:a6:e4:6d:02:f4:1f:6d:16:bc:1c:1c:17:1e:0a:
9b:7a:fb:80:bd:79:52:c5:7b:5e:1f:fa:fa:f6:db:b7:9e:13:
c4:6a:20:dc:53:62:8c:73:25:3b:bc:c3:92:93:18:d4:73:c9:
53:96:19:d4:f4:5f:f0:96:05:1e:f0:83:16:14:25:b4:24:8a:
2b:6d:cf:ac:24:ac:50:78:20:a0:35:b9:39:6c:79:f4:51:61:
53:3d:b2:2b:05:bd:37:2b:f7:70:ea:b7:7c:b9:19:19:23:7f:
26:82:c9:83:7a:23:ea:5e:11:b6:cc:61:ec:44:a2:42:7f:37:
3f:90:36:f7:cb:6f:b6:f4:7b:3e:50:dd:c5:c3:cb:01:f8:95:
e7:1b:f5:f3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 21 04:09:28 2025 by rpki-client