Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fd/9e2dfd-f2e9-416d-8f1f-bb3431fe0285/1/oGBriq1VPwlIx6iU1oZxhw64LLA.mft
File: oGBriq1VPwlIx6iU1oZxhw64LLA.mft (raw, json)
Hash identifier: 6IwJAZtDlEkbyXC2d/oRg5Mp/9Y2grUueEa/Qo1oigE=
Subject key identifier: 2D:A3:4E:0E:8F:C1:38:C7:7B:AB:E1:42:BD:9D:F5:82:64:85:D9:7D
Authority key identifier: A0:60:6B:8A:AD:55:3F:09:48:C7:A8:94:D6:86:71:87:0E:B8:2C:B0
Certificate issuer: /CN=a0606b8aad553f0948c7a894d68671870eb82cb0
Certificate serial: 019640D5389547838F14BBB87D811A6843DE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/oGBriq1VPwlIx6iU1oZxhw64LLA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fd/9e2dfd-f2e9-416d-8f1f-bb3431fe0285/1/oGBriq1VPwlIx6iU1oZxhw64LLA.mft
Manifest number: 12F9
Signing time: Wed 16 Apr 2025 23:00:37 +0000
Manifest this update: Wed 16 Apr 2025 23:00:37 +0000
Manifest next update: Thu 17 Apr 2025 23:00:37 +0000
Files and hashes: 1: KrIvvgvNcbldjoVbc0aYd49MKLk.roa (hash: Efb7XeSs1Qr2rRr6o/FWnq95UEV78aFPxWcZg4DCWHc=)
2: ZkYwAX8sFU0tx7MlmzFWDuReNoo.roa (hash: 1bC+YhGSYAmLg99m2lBrTp2m6aERC4TuVMQpOPNQzNM=)
3: coBIhj-g7a4t_QkFPEnA3t3TN8U.roa (hash: FMtCmhYv8BwdhkKpNroPbCbepJ79NGcx+1J9x7kaHKA=)
4: oGBriq1VPwlIx6iU1oZxhw64LLA.crl (hash: YHORruZjNpbvuXmykrCO1myA6Y+jvj2jHH3xauR5T7c=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fd/9e2dfd-f2e9-416d-8f1f-bb3431fe0285/1/oGBriq1VPwlIx6iU1oZxhw64LLA.crl
rsync://rpki.ripe.net/repository/DEFAULT/fd/9e2dfd-f2e9-416d-8f1f-bb3431fe0285/1/oGBriq1VPwlIx6iU1oZxhw64LLA.mft
rsync://rpki.ripe.net/repository/DEFAULT/oGBriq1VPwlIx6iU1oZxhw64LLA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 17 Apr 2025 22:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:40:d5:38:95:47:83:8f:14:bb:b8:7d:81:1a:68:43:de
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a0606b8aad553f0948c7a894d68671870eb82cb0
Validity
Not Before: Apr 16 23:00:37 2025 GMT
Not After : Apr 17 23:00:37 2025 GMT
Subject: CN=2da34e0e8fc138c77babe142bd9df5826485d97d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8c:c2:37:2e:93:5d:e2:bc:53:6d:9c:fd:07:af:
35:78:f7:bf:3d:3c:d3:d8:50:30:67:b3:1a:6b:91:
d7:24:97:15:2d:7d:54:95:89:80:6e:6f:d0:3c:2b:
25:1a:1a:5d:8e:9c:f4:c7:8d:47:d5:9d:5b:5f:3d:
0d:51:23:9c:e3:7d:c3:5c:29:88:04:12:2f:8a:59:
67:1d:7f:30:1c:69:bd:c9:99:81:e0:52:31:02:55:
44:d8:39:ad:96:68:30:69:b1:24:c3:b4:48:19:bb:
c2:7a:ae:e6:08:8d:c2:4d:7b:ac:b2:dd:c1:c7:5a:
16:e4:99:79:ea:af:53:d3:aa:ad:5e:8d:2b:02:6f:
52:4b:7c:c5:a3:fa:f5:7e:a8:cc:e1:d6:d7:c2:17:
f8:f7:69:e7:93:ae:7f:5f:d5:96:d1:cd:dd:40:37:
75:34:88:b2:65:f5:d5:93:c1:c8:71:5e:8d:a6:a1:
ee:a9:76:db:45:8f:b7:9f:d1:84:89:64:77:1d:57:
30:12:fc:16:cf:88:28:38:ca:9d:51:ab:f3:53:b3:
d9:aa:97:85:8f:e2:5b:c3:66:db:72:9e:25:db:28:
e2:0f:04:35:d7:f3:1e:28:14:a0:b2:95:81:5d:65:
8c:f2:8f:4e:07:5f:2a:e6:0d:62:6c:af:9a:17:14:
74:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2D:A3:4E:0E:8F:C1:38:C7:7B:AB:E1:42:BD:9D:F5:82:64:85:D9:7D
X509v3 Authority Key Identifier:
keyid:A0:60:6B:8A:AD:55:3F:09:48:C7:A8:94:D6:86:71:87:0E:B8:2C:B0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/oGBriq1VPwlIx6iU1oZxhw64LLA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/9e2dfd-f2e9-416d-8f1f-bb3431fe0285/1/oGBriq1VPwlIx6iU1oZxhw64LLA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/9e2dfd-f2e9-416d-8f1f-bb3431fe0285/1/oGBriq1VPwlIx6iU1oZxhw64LLA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
48:4c:d2:34:57:ac:4e:3b:43:56:8f:66:a1:81:4e:17:05:34:
c7:fc:f3:d6:f9:eb:55:2d:21:63:c4:94:20:b7:29:db:20:16:
45:0b:da:6d:18:e8:84:80:ad:86:35:24:39:6f:b3:7e:f1:3d:
4b:8f:8c:4f:5b:04:f8:c5:57:e9:3b:6c:a4:30:f0:8a:a5:ea:
72:90:3c:18:40:86:9b:c4:f8:a3:28:9e:54:dc:4e:11:e6:be:
9f:d2:c8:e0:45:2a:84:cb:7e:66:24:3f:f6:83:ec:cc:07:9c:
57:f7:43:8a:1c:c0:52:6c:82:ed:e6:25:e9:52:9f:85:8c:f9:
41:94:1a:6f:f1:30:f2:26:d0:f1:32:79:84:5c:2a:45:4f:c0:
63:36:1a:46:33:80:15:21:28:2a:52:5f:11:fb:3f:35:2f:8a:
63:81:cb:b6:d5:4e:a4:85:23:91:c9:c6:df:70:d0:14:0d:e5:
6a:18:0d:92:57:9a:80:b2:86:b5:f9:ed:04:2a:e2:8d:c9:7f:
55:d2:8f:c1:18:d7:5c:dd:79:a6:45:ad:c2:a2:a3:6d:3b:90:
a4:5d:6f:b3:0b:e0:93:2d:7c:48:32:cd:b9:bf:55:85:69:51:
1e:ff:4f:a9:4a:db:5b:87:3d:7d:86:e5:a9:ae:0e:23:f0:84:
44:17:61:08
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 17 08:17:05 2025 by rpki-client