Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ef/0aa494-9308-47ee-a808-b9722144513f/1/OuAJYkeoxU5d6MGw2vEFSuyMxFA.mft
File: OuAJYkeoxU5d6MGw2vEFSuyMxFA.mft (raw, json)
Hash identifier: 1EnfHSaEUlCS/rqUCuaxbtwPMi3gy+BcJyAG5pV3fEU=
Subject key identifier: A9:27:D1:7E:15:8A:59:04:7C:E5:C7:D7:6E:0A:E4:40:55:3D:E2:6F
Authority key identifier: 3A:E0:09:62:47:A8:C5:4E:5D:E8:C1:B0:DA:F1:05:4A:EC:8C:C4:50
Certificate issuer: /CN=3ae0096247a8c54e5de8c1b0daf1054aec8cc450
Certificate serial: 01963F8BC94AC94D19FB586432E394D452B9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OuAJYkeoxU5d6MGw2vEFSuyMxFA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ef/0aa494-9308-47ee-a808-b9722144513f/1/OuAJYkeoxU5d6MGw2vEFSuyMxFA.mft
Manifest number: 14F1
Signing time: Wed 16 Apr 2025 17:00:47 +0000
Manifest this update: Wed 16 Apr 2025 17:00:47 +0000
Manifest next update: Thu 17 Apr 2025 17:00:47 +0000
Files and hashes: 1: 8b8hGUt6rzi1dlifxra-q3rgP6w.roa (hash: KASE+0wVItpUVcgXdu/CScsiZaEIchQxerFmFT5uHpo=)
2: OuAJYkeoxU5d6MGw2vEFSuyMxFA.crl (hash: p1gYdVIJNFldSvpXvZ1Bn3uz/6A+Ly63NwhhWiOYcFY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ef/0aa494-9308-47ee-a808-b9722144513f/1/OuAJYkeoxU5d6MGw2vEFSuyMxFA.crl
rsync://rpki.ripe.net/repository/DEFAULT/ef/0aa494-9308-47ee-a808-b9722144513f/1/OuAJYkeoxU5d6MGw2vEFSuyMxFA.mft
rsync://rpki.ripe.net/repository/DEFAULT/OuAJYkeoxU5d6MGw2vEFSuyMxFA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 17 Apr 2025 13:16:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:3f:8b:c9:4a:c9:4d:19:fb:58:64:32:e3:94:d4:52:b9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3ae0096247a8c54e5de8c1b0daf1054aec8cc450
Validity
Not Before: Apr 16 17:00:47 2025 GMT
Not After : Apr 17 17:00:47 2025 GMT
Subject: CN=a927d17e158a59047ce5c7d76e0ae440553de26f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:5d:e0:b7:99:ee:7f:1a:0c:2e:2d:02:d1:2e:
eb:aa:0c:65:8f:c6:d1:a1:3e:7c:71:eb:4f:4b:7a:
23:ff:fd:e6:dd:90:ec:a9:68:32:e6:14:4d:f4:b4:
ab:ab:c4:13:b7:6b:cb:76:de:0b:24:60:b8:05:a6:
db:ef:3c:0d:df:b3:a0:2d:a0:3a:b5:83:52:4c:c4:
ef:b7:5e:0d:a1:c3:5a:0a:31:91:5a:ab:e8:eb:c8:
7f:1f:48:f6:b4:b7:25:42:8f:8e:88:b0:66:c5:78:
4a:26:2f:13:16:05:95:55:b4:45:04:87:23:65:e4:
00:6b:82:67:1f:6f:87:22:0f:00:c2:63:0d:cd:29:
92:9e:a8:6d:95:fd:8b:05:4c:6b:4a:50:53:60:9e:
38:b7:81:97:26:74:04:bb:95:d2:08:3f:a1:de:93:
7d:d7:d9:9a:a2:ba:74:e9:87:7d:f6:74:93:b9:43:
48:ee:93:91:4c:d1:06:f2:7c:5f:d5:a8:5b:66:d5:
5a:50:03:d1:43:7d:99:58:c8:a0:a2:c1:02:3f:1b:
7a:40:ab:6b:90:0c:27:a9:5f:e5:e0:f9:2e:ae:08:
f6:12:49:c5:eb:d5:ae:cb:00:14:56:88:af:68:bc:
82:6a:3d:1e:1a:85:f2:9b:ea:c5:87:b0:94:f1:ac:
03:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A9:27:D1:7E:15:8A:59:04:7C:E5:C7:D7:6E:0A:E4:40:55:3D:E2:6F
X509v3 Authority Key Identifier:
keyid:3A:E0:09:62:47:A8:C5:4E:5D:E8:C1:B0:DA:F1:05:4A:EC:8C:C4:50
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OuAJYkeoxU5d6MGw2vEFSuyMxFA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ef/0aa494-9308-47ee-a808-b9722144513f/1/OuAJYkeoxU5d6MGw2vEFSuyMxFA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ef/0aa494-9308-47ee-a808-b9722144513f/1/OuAJYkeoxU5d6MGw2vEFSuyMxFA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
73:95:73:52:ae:29:11:3b:d1:50:0b:91:bb:dc:d3:c0:e3:86:
50:fb:04:55:f1:16:48:99:5c:f8:b0:be:c4:21:68:74:fa:0b:
13:51:fe:a5:3d:50:03:8a:47:cf:88:1e:3d:62:17:36:43:ed:
1b:5e:3f:e3:b9:a8:36:0b:09:c6:a5:6a:ea:99:09:49:17:9b:
4c:0e:3e:90:c9:84:24:41:d6:8f:bf:f5:01:10:35:ef:eb:f4:
cf:f9:91:db:06:6b:f1:d0:33:f1:12:78:d7:59:31:2d:03:33:
6f:18:7c:32:a1:29:75:52:00:b1:12:9b:1c:f9:4c:bf:0b:50:
f9:3e:a4:e8:68:32:bc:99:52:0b:23:6f:36:a7:a5:2c:dc:33:
9e:e1:b0:93:c9:35:79:6b:fe:af:41:02:48:b3:a9:95:e8:c4:
3c:db:5b:68:61:e7:fd:c8:b6:e3:7a:c7:d8:a9:ca:13:49:38:
3f:eb:3c:3d:78:1f:93:d0:d0:bc:97:a2:be:84:41:43:21:58:
0e:86:d5:41:8b:0d:45:70:ba:6b:3b:a0:e0:33:87:db:c8:61:
c6:c5:f7:c1:64:52:30:45:39:47:59:d3:27:06:3c:1d:25:3a:
f6:a8:ee:dd:09:39:b9:39:b8:74:88:11:cd:74:19:26:36:d9:
a1:d2:3f:8f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 17 02:18:54 2025 by rpki-client