Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f4/c566c7-3cac-45a9-82a1-04b09057522f/1/oK89hVH73Tti9P_f1ZytQWHkRx4.mft
File: oK89hVH73Tti9P_f1ZytQWHkRx4.mft (raw, json)
Hash identifier: 7KVJltI9SO67pOSHEyY7Qk/IvDmi2ZMUz2vrwAWFHzQ=
Subject key identifier: EF:FB:A4:5A:3C:55:46:6C:3C:42:B9:F9:9F:85:F2:30:27:72:93:DD
Authority key identifier: A0:AF:3D:85:51:FB:DD:3B:62:F4:FF:DF:D5:9C:AD:41:61:E4:47:1E
Certificate issuer: /CN=a0af3d8551fbdd3b62f4ffdfd59cad4161e4471e
Certificate serial: 0196293C1DFBEF02B4F72CED14D9FA5EFB0D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/oK89hVH73Tti9P_f1ZytQWHkRx4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f4/c566c7-3cac-45a9-82a1-04b09057522f/1/oK89hVH73Tti9P_f1ZytQWHkRx4.mft
Manifest number: 0C6E
Signing time: Sat 12 Apr 2025 09:02:07 +0000
Manifest this update: Sat 12 Apr 2025 09:02:07 +0000
Manifest next update: Sun 13 Apr 2025 09:02:07 +0000
Files and hashes: 1: Fa0oKJS-5OytgjD9FfEKRTyYbH4.roa (hash: uvEwc2Oby4x64qeSjPHNoFr0vjSUe2G9BJiy9VMRAr0=)
2: oK89hVH73Tti9P_f1ZytQWHkRx4.crl (hash: eOY3ETfAojx8/R/06GRY2Qzb8nnDnELTA0mSLsEhK9g=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f4/c566c7-3cac-45a9-82a1-04b09057522f/1/oK89hVH73Tti9P_f1ZytQWHkRx4.crl
rsync://rpki.ripe.net/repository/DEFAULT/f4/c566c7-3cac-45a9-82a1-04b09057522f/1/oK89hVH73Tti9P_f1ZytQWHkRx4.mft
rsync://rpki.ripe.net/repository/DEFAULT/oK89hVH73Tti9P_f1ZytQWHkRx4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 13 Apr 2025 05:00:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:29:3c:1d:fb:ef:02:b4:f7:2c:ed:14:d9:fa:5e:fb:0d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a0af3d8551fbdd3b62f4ffdfd59cad4161e4471e
Validity
Not Before: Apr 12 09:02:07 2025 GMT
Not After : Apr 13 09:02:07 2025 GMT
Subject: CN=effba45a3c55466c3c42b9f99f85f230277293dd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:54:06:d3:de:b3:f3:35:6e:da:eb:2c:db:8e:
84:56:df:6d:45:a0:b8:d6:f0:c6:3d:90:68:88:74:
6f:58:32:ef:31:32:62:73:8a:e9:8e:68:63:7b:22:
7b:0d:bd:0a:10:b2:b1:84:42:22:74:c7:fb:d1:51:
fd:63:88:7c:7f:fe:0f:5a:4e:31:9c:48:ad:bd:52:
a0:60:21:4f:c2:79:ea:4c:c6:93:da:8b:82:46:12:
54:42:e0:e2:5f:04:8f:f6:e2:b8:a5:33:38:0e:7e:
c9:0a:02:82:07:dd:a8:29:2c:f1:e9:ed:bf:d1:6a:
81:2d:2e:d5:6b:cb:c2:33:73:a4:42:fe:41:e7:a0:
4d:c7:37:75:c2:c6:90:c2:f7:f1:f8:59:85:d5:a2:
44:16:d2:f5:a6:17:91:b7:2e:7d:be:af:df:08:c7:
d6:2b:ca:a7:bc:0b:1e:fc:20:04:83:65:e2:a7:21:
3b:2d:e5:e9:93:b9:5a:59:38:27:5c:bb:fa:37:53:
cb:63:b9:6e:17:b6:62:4a:50:c0:2f:17:fb:6d:23:
7c:12:28:3b:e9:7c:70:de:72:8a:aa:8e:8d:c2:44:
5b:b2:35:d5:11:7f:d1:76:e2:da:53:47:d7:4b:e4:
75:63:2b:99:71:d2:1b:06:3d:f0:cc:4d:c2:4a:5d:
ce:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EF:FB:A4:5A:3C:55:46:6C:3C:42:B9:F9:9F:85:F2:30:27:72:93:DD
X509v3 Authority Key Identifier:
keyid:A0:AF:3D:85:51:FB:DD:3B:62:F4:FF:DF:D5:9C:AD:41:61:E4:47:1E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/oK89hVH73Tti9P_f1ZytQWHkRx4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/c566c7-3cac-45a9-82a1-04b09057522f/1/oK89hVH73Tti9P_f1ZytQWHkRx4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/c566c7-3cac-45a9-82a1-04b09057522f/1/oK89hVH73Tti9P_f1ZytQWHkRx4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0c:7f:7b:45:e4:f1:72:4e:b1:1b:dd:42:54:ff:05:41:fd:84:
84:e6:52:74:d3:58:cc:28:d3:de:ac:57:31:87:77:58:74:0e:
c1:72:fd:1e:f4:ab:01:d4:2a:d7:1a:f0:6b:72:da:7e:69:aa:
28:33:52:31:65:a0:f2:96:e9:67:f5:0b:6b:80:a5:5f:29:2d:
a0:60:b1:82:f5:4e:bc:02:d3:16:c0:a3:1c:cc:6c:22:ea:85:
da:1c:f3:26:50:63:c9:29:5f:fa:c0:0a:02:69:3d:18:1e:5b:
b4:b2:95:60:67:38:de:07:dc:cb:17:0e:4b:e1:ab:85:39:e2:
34:53:47:12:12:86:98:bd:c5:77:88:17:99:de:92:21:a1:7d:
71:9b:78:a9:b8:42:ae:4c:20:6a:18:b2:03:41:3e:f2:6f:aa:
f9:8e:03:2e:4c:21:ee:f0:41:2b:b2:a9:14:88:a5:8e:9b:7b:
7a:e1:90:cc:89:05:7a:70:49:cd:49:ba:06:ab:c2:f8:86:8d:
f6:72:3d:c7:65:90:01:aa:f0:58:67:c2:76:ca:d5:b9:b0:82:
f1:ea:02:17:92:54:e4:be:7b:ad:93:f8:b4:fd:1f:d3:8d:96:
b3:16:c6:9a:ad:5c:6f:88:dd:1b:7c:19:3d:2c:4c:09:5d:d8:
97:47:48:70
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 12 13:17:28 2025 by rpki-client