Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fc/d88aae-68c3-4909-9f8a-07e83cd5b60d/1/OjFJ2goSvb8b71mLBGMJB4AgbOA.mft
File: OjFJ2goSvb8b71mLBGMJB4AgbOA.mft (raw, json)
Hash identifier: Peyi7vC3Khpdke1cqy1I/n4HyP5ViyiEmH5iVs1XOEw=
Subject key identifier: B0:5B:2B:55:12:D4:C8:1C:67:79:6B:64:10:98:B7:B1:56:C7:46:8C
Authority key identifier: 3A:31:49:DA:0A:12:BD:BF:1B:EF:59:8B:04:63:09:07:80:20:6C:E0
Certificate issuer: /CN=3a3149da0a12bdbf1bef598b0463090780206ce0
Certificate serial: 01964D7EDAC5261FFAD6140A3D11BFC6C1AB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OjFJ2goSvb8b71mLBGMJB4AgbOA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fc/d88aae-68c3-4909-9f8a-07e83cd5b60d/1/OjFJ2goSvb8b71mLBGMJB4AgbOA.mft
Manifest number: 03EC
Signing time: Sat 19 Apr 2025 10:01:21 +0000
Manifest this update: Sat 19 Apr 2025 10:01:21 +0000
Manifest next update: Sun 20 Apr 2025 10:01:21 +0000
Files and hashes: 1: OjFJ2goSvb8b71mLBGMJB4AgbOA.crl (hash: QoME2LcE1G8fxo5D7GGx8zP/z463b1JJzal4p3pZhMw=)
2: iCi2fS7ETh308D0HxV49gSj_2Oc.roa (hash: 8Z0U9uTAtysIVIgEvm+zkP+R4k0ov21EhkUk/LCqI28=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fc/d88aae-68c3-4909-9f8a-07e83cd5b60d/1/OjFJ2goSvb8b71mLBGMJB4AgbOA.crl
rsync://rpki.ripe.net/repository/DEFAULT/fc/d88aae-68c3-4909-9f8a-07e83cd5b60d/1/OjFJ2goSvb8b71mLBGMJB4AgbOA.mft
rsync://rpki.ripe.net/repository/DEFAULT/OjFJ2goSvb8b71mLBGMJB4AgbOA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 20 Apr 2025 07:26:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:4d:7e:da:c5:26:1f:fa:d6:14:0a:3d:11:bf:c6:c1:ab
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3a3149da0a12bdbf1bef598b0463090780206ce0
Validity
Not Before: Apr 19 10:01:21 2025 GMT
Not After : Apr 20 10:01:21 2025 GMT
Subject: CN=b05b2b5512d4c81c67796b641098b7b156c7468c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:bd:22:f6:7a:e3:e9:7b:4a:40:66:4e:47:f5:
f3:d1:a2:98:99:11:ba:7f:ce:2d:23:99:db:93:d5:
59:d2:1b:fb:ee:ca:aa:05:27:ad:fe:9b:bc:fa:a2:
19:27:ba:5f:fd:1a:bb:72:5e:e9:0e:ee:f8:cb:bd:
27:0d:07:03:cc:63:6e:3f:4a:ba:19:62:85:45:61:
e4:59:59:88:d2:3f:4f:82:5a:1d:0d:f1:d0:c5:58:
22:d6:86:62:e5:0a:e9:92:51:fa:44:a3:44:47:fe:
87:e1:45:c8:6a:79:72:89:a3:0d:20:2c:7c:08:19:
8f:25:01:82:e1:02:0a:ad:40:5a:10:8b:e8:eb:d9:
2b:7e:d4:e6:69:b5:61:a9:d6:48:02:ef:9c:ea:75:
33:2a:f6:8e:ac:a0:49:34:11:62:30:9a:6a:46:51:
eb:d4:91:38:64:32:11:92:1a:98:9c:7a:42:51:e0:
79:2a:37:d0:e2:c6:3e:94:b5:e8:e6:07:46:2c:07:
03:34:ad:c3:96:21:63:a7:b3:b7:50:59:d3:4f:52:
6b:90:92:e0:a8:d8:df:ae:ee:80:bb:0e:b6:97:63:
c3:2d:eb:35:75:b9:92:1f:36:53:67:cb:c0:a2:8c:
6b:ca:d1:a9:50:df:fd:25:ca:92:eb:67:32:6c:ad:
73:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B0:5B:2B:55:12:D4:C8:1C:67:79:6B:64:10:98:B7:B1:56:C7:46:8C
X509v3 Authority Key Identifier:
keyid:3A:31:49:DA:0A:12:BD:BF:1B:EF:59:8B:04:63:09:07:80:20:6C:E0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OjFJ2goSvb8b71mLBGMJB4AgbOA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/d88aae-68c3-4909-9f8a-07e83cd5b60d/1/OjFJ2goSvb8b71mLBGMJB4AgbOA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/d88aae-68c3-4909-9f8a-07e83cd5b60d/1/OjFJ2goSvb8b71mLBGMJB4AgbOA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
99:0a:11:7b:21:55:84:73:94:4e:71:6d:f2:a0:a1:cb:18:e2:
08:e9:ba:9c:60:53:d0:d7:32:79:e5:15:84:38:bd:1e:9d:a8:
a3:ae:38:be:4d:05:a6:d8:33:d1:23:ac:48:9a:80:3e:6f:fa:
4c:39:76:cf:d2:be:ea:83:c0:68:36:bf:12:76:21:bc:01:32:
a9:4b:d5:56:a1:95:3f:41:d8:05:93:73:1a:35:d4:6c:78:a2:
8b:32:1d:d5:1d:08:b7:c0:e1:cc:32:58:9e:23:aa:e2:a8:80:
b2:3a:c4:88:b7:a1:86:04:38:c6:8e:da:fb:ce:b1:34:c4:79:
e4:b6:54:6d:1e:44:e9:25:9b:96:bc:e3:7b:8e:56:43:7a:b4:
b7:a4:d7:e9:e6:14:67:ec:36:fe:56:04:a1:44:fe:40:04:61:
82:f4:f6:be:d5:d9:73:61:03:ea:32:c7:19:cf:1d:c2:45:bd:
f9:91:b9:ad:c1:b4:2f:15:90:d9:b9:73:7a:1f:c6:da:f2:5a:
c1:c6:c2:21:30:10:65:97:32:3e:af:d2:71:f4:66:27:9b:c0:
92:8d:9c:04:af:66:7c:50:f1:91:44:e7:7f:3f:b8:91:6a:3a:
c1:04:05:82:6d:12:12:e6:57:70:6f:79:24:5b:a5:7c:77:c5:
55:e7:0e:0c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 19 17:13:28 2025 by rpki-client