Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ee/dffbc8-b149-46b4-bbb8-31ea2094b557/1/OIN-SKr1mLyrVKX8iuQ7F74lQik.mft
File: OIN-SKr1mLyrVKX8iuQ7F74lQik.mft (raw, json)
Hash identifier: 5bfym5eK1XVgkxrTFhlxJjf5K/gsXCk7gLdu6xQ213U=
Subject key identifier: 9D:31:48:2C:F7:92:49:B0:8D:75:B3:98:70:96:B1:F8:83:DB:0B:AB
Authority key identifier: 38:83:7E:48:AA:F5:98:BC:AB:54:A5:FC:8A:E4:3B:17:BE:25:42:29
Certificate issuer: /CN=38837e48aaf598bcab54a5fc8ae43b17be254229
Certificate serial: 019619C85012889E8D6A2C28B10702BE09A0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OIN-SKr1mLyrVKX8iuQ7F74lQik.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ee/dffbc8-b149-46b4-bbb8-31ea2094b557/1/OIN-SKr1mLyrVKX8iuQ7F74lQik.mft
Manifest number: 0B5D
Signing time: Wed 09 Apr 2025 09:01:20 +0000
Manifest this update: Wed 09 Apr 2025 09:01:20 +0000
Manifest next update: Thu 10 Apr 2025 09:01:20 +0000
Files and hashes: 1: Mbpk8QVkIW5FKgYutE5nhEuorhg.roa (hash: XJAfJvP6njUJvUjL+QeRVdBXhasJwe6UWIW0OOiZ2es=)
2: OIN-SKr1mLyrVKX8iuQ7F74lQik.crl (hash: TGBnIKGpfXmhWIgbzECXhlz8/RkeCjQrfb06PgB/Drc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ee/dffbc8-b149-46b4-bbb8-31ea2094b557/1/OIN-SKr1mLyrVKX8iuQ7F74lQik.crl
rsync://rpki.ripe.net/repository/DEFAULT/ee/dffbc8-b149-46b4-bbb8-31ea2094b557/1/OIN-SKr1mLyrVKX8iuQ7F74lQik.mft
rsync://rpki.ripe.net/repository/DEFAULT/OIN-SKr1mLyrVKX8iuQ7F74lQik.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 10 Apr 2025 09:01:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:19:c8:50:12:88:9e:8d:6a:2c:28:b1:07:02:be:09:a0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=38837e48aaf598bcab54a5fc8ae43b17be254229
Validity
Not Before: Apr 9 09:01:20 2025 GMT
Not After : Apr 10 09:01:20 2025 GMT
Subject: CN=9d31482cf79249b08d75b3987096b1f883db0bab
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:91:43:29:aa:cc:0d:a8:2c:c5:1a:4d:f8:f8:
73:6d:76:05:4b:b8:72:83:e7:1e:7e:ab:c6:88:53:
fc:a9:2e:35:15:ac:f7:80:93:23:1d:41:1f:22:06:
ee:c1:39:c2:59:11:fd:73:98:ad:bc:94:0a:09:1c:
10:04:44:23:ba:c9:4e:a3:d5:01:6d:ec:eb:e9:9a:
2a:db:ab:e1:c5:f4:01:d8:f6:73:5c:d0:5f:f8:96:
11:0f:f4:e2:6d:1c:27:c7:7c:1c:5f:5c:00:c1:99:
50:40:a1:ec:c6:2d:d6:39:a9:e7:70:3c:6c:bc:6b:
c8:12:00:b3:71:b3:92:fa:1e:ad:ae:d9:d0:e9:52:
36:6c:bf:78:e1:7e:d3:5a:0e:bf:2b:92:8e:4d:99:
cd:c2:2c:8f:49:23:48:89:e0:47:9d:bc:8a:9d:a3:
1b:50:b5:ea:97:35:7f:af:a3:e2:b7:7c:23:da:0b:
ed:72:f1:7b:82:b9:d4:6b:d8:61:58:52:9f:04:03:
82:cd:37:f5:8d:c2:c6:8f:a3:02:ae:de:53:68:d4:
14:1c:38:be:e0:4c:98:f6:82:5d:0b:c0:88:80:68:
25:54:f4:7a:11:d9:56:03:26:ad:1e:ee:a4:ef:66:
77:d6:a5:4b:ea:42:d7:17:93:71:8a:9d:39:91:88:
4a:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9D:31:48:2C:F7:92:49:B0:8D:75:B3:98:70:96:B1:F8:83:DB:0B:AB
X509v3 Authority Key Identifier:
keyid:38:83:7E:48:AA:F5:98:BC:AB:54:A5:FC:8A:E4:3B:17:BE:25:42:29
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OIN-SKr1mLyrVKX8iuQ7F74lQik.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ee/dffbc8-b149-46b4-bbb8-31ea2094b557/1/OIN-SKr1mLyrVKX8iuQ7F74lQik.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ee/dffbc8-b149-46b4-bbb8-31ea2094b557/1/OIN-SKr1mLyrVKX8iuQ7F74lQik.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
66:ba:65:40:ec:5d:7f:ef:fa:53:ad:d3:28:9d:5d:04:b9:02:
7e:f1:4b:7d:17:16:37:fb:d4:bf:74:bf:17:28:4c:1e:fb:9f:
62:be:4a:d6:f6:7f:97:d5:e5:d2:10:5b:81:54:a1:53:34:4a:
be:ea:59:41:b9:da:71:be:9e:c8:73:3d:97:ec:4e:5c:05:0d:
cd:c7:32:46:ff:27:59:7d:2a:0e:af:1e:ae:a1:f4:81:f8:9f:
30:63:36:78:88:0a:f9:44:40:44:17:35:c9:49:44:50:6f:5a:
fc:3d:cf:8c:54:af:43:86:61:bf:25:64:9d:5c:a9:4e:64:58:
fa:f7:d6:52:77:c1:bb:90:fd:c8:d6:1e:0f:80:fa:71:11:9d:
cc:68:d2:88:aa:7f:4d:20:1a:07:41:3d:3b:ca:bf:c1:83:ce:
77:6c:20:ed:40:73:ab:ad:5c:a8:0f:a4:c5:01:db:59:b6:c6:
8c:9f:e3:09:22:63:90:d4:50:9e:85:a6:7a:3e:bd:8b:e5:53:
e8:15:99:3d:58:c0:11:4c:a5:52:f8:ce:0d:ad:20:33:cf:26:
29:e9:94:80:ab:76:e4:ce:bf:06:d0:23:1c:7b:42:40:ad:b8:
28:85:e9:1c:4d:fb:87:cf:08:02:6d:50:24:39:5f:f3:b2:79:
73:a4:79:13
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 9 17:29:54 2025 by rpki-client