Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fd/d91255-3243-4a47-946a-f04cc1c230cf/1/OA73_1tU9T_PIxKr4uw_WVi6FCU.mft
File: OA73_1tU9T_PIxKr4uw_WVi6FCU.mft (raw, json)
Hash identifier: 3ELdYjHZS8uW6FiHdWhYcl9L/ZK6VMhwGrrQFhpzRxE=
Subject key identifier: 27:D9:D3:41:A3:D1:37:3C:33:2F:CA:88:77:05:C5:D6:67:BF:4C:B0
Authority key identifier: 38:0E:F7:FF:5B:54:F5:3F:CF:23:12:AB:E2:EC:3F:59:58:BA:14:25
Certificate issuer: /CN=380ef7ff5b54f53fcf2312abe2ec3f5958ba1425
Certificate serial: 0196146AE8C9197C9B1969A66FFBB409C9D0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OA73_1tU9T_PIxKr4uw_WVi6FCU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fd/d91255-3243-4a47-946a-f04cc1c230cf/1/OA73_1tU9T_PIxKr4uw_WVi6FCU.mft
Manifest number: 14E3
Signing time: Tue 08 Apr 2025 08:01:12 +0000
Manifest this update: Tue 08 Apr 2025 08:01:12 +0000
Manifest next update: Wed 09 Apr 2025 08:01:12 +0000
Files and hashes: 1: MS2eFccf4vEvkGRnlPG3imTckEg.roa (hash: +v5mVYQhL/JfyFrRFVMWxQ02mierIx6iDDJ3fFkdoPo=)
2: OA73_1tU9T_PIxKr4uw_WVi6FCU.crl (hash: 0WWydisYtq0UWwsDzOHo6m93MaEu1Z7Wb3hfxj14zug=)
3: XQ5elbBA2ZOvWo4wBD0xrzoPgZw.roa (hash: ziFD345nN2nfL35s2objtJIz7sADWUma9lbt9LOBqXI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fd/d91255-3243-4a47-946a-f04cc1c230cf/1/OA73_1tU9T_PIxKr4uw_WVi6FCU.crl
rsync://rpki.ripe.net/repository/DEFAULT/fd/d91255-3243-4a47-946a-f04cc1c230cf/1/OA73_1tU9T_PIxKr4uw_WVi6FCU.mft
rsync://rpki.ripe.net/repository/DEFAULT/OA73_1tU9T_PIxKr4uw_WVi6FCU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 09 Apr 2025 08:00:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:14:6a:e8:c9:19:7c:9b:19:69:a6:6f:fb:b4:09:c9:d0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=380ef7ff5b54f53fcf2312abe2ec3f5958ba1425
Validity
Not Before: Apr 8 08:01:12 2025 GMT
Not After : Apr 9 08:01:12 2025 GMT
Subject: CN=27d9d341a3d1373c332fca887705c5d667bf4cb0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:c0:04:6a:6d:e3:eb:bd:e8:6b:04:1b:7c:6f:
dc:14:76:be:b8:5a:f5:17:76:45:6e:13:75:64:09:
d7:5c:58:2f:e8:0b:55:ad:6c:a1:21:d7:83:ee:46:
7e:ea:f0:7a:b6:02:b2:05:da:a0:f3:99:c6:35:d3:
35:57:2d:5f:ce:2c:9c:11:ad:40:de:67:75:e2:e5:
6a:d9:c1:70:49:21:7f:c3:d1:51:a4:26:6e:93:aa:
0a:b5:cf:1f:f3:fe:be:90:a9:88:dc:30:4a:87:85:
69:87:1e:19:0c:37:d1:ec:40:12:16:1e:ba:e5:3c:
b0:81:08:5b:a2:34:7a:97:c3:b2:65:a1:ab:b5:12:
82:4a:e0:6f:4e:ac:09:e8:16:47:42:3b:7d:f6:c3:
1f:f4:3e:ce:b9:4f:e7:54:dd:38:d8:07:7f:7b:c7:
c2:b7:f7:05:ed:b8:da:6c:d7:29:71:47:b3:12:ea:
4b:63:19:dd:78:da:b5:42:ec:9d:1f:3b:68:6e:ca:
28:39:53:ef:ae:7c:4a:0e:7e:66:d6:bf:a3:7a:5b:
28:9f:46:d1:36:48:e8:85:91:fd:41:9e:83:4b:fa:
6d:86:1f:d8:2e:6f:2e:12:61:33:61:97:9f:b9:9d:
64:30:c4:15:46:4a:6e:8e:3c:95:6f:68:01:5f:3a:
de:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
27:D9:D3:41:A3:D1:37:3C:33:2F:CA:88:77:05:C5:D6:67:BF:4C:B0
X509v3 Authority Key Identifier:
keyid:38:0E:F7:FF:5B:54:F5:3F:CF:23:12:AB:E2:EC:3F:59:58:BA:14:25
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OA73_1tU9T_PIxKr4uw_WVi6FCU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/d91255-3243-4a47-946a-f04cc1c230cf/1/OA73_1tU9T_PIxKr4uw_WVi6FCU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/d91255-3243-4a47-946a-f04cc1c230cf/1/OA73_1tU9T_PIxKr4uw_WVi6FCU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2b:30:81:5c:7d:9e:0d:70:7c:6a:ab:46:96:ff:66:3c:49:7d:
cf:63:55:46:1a:98:f6:1f:c6:00:be:48:f4:31:19:47:73:32:
8f:1c:02:50:34:ac:83:34:80:79:c4:f2:10:ec:56:26:32:a9:
2a:b8:7d:40:f0:c6:38:e0:23:72:f1:cd:65:29:d1:62:88:79:
18:97:d4:a0:a7:1e:0e:5d:53:2d:bb:b0:2f:ef:74:3f:c7:85:
a1:e4:7b:e7:54:fa:4a:a5:28:93:09:46:65:8c:4a:d4:9d:47:
82:3a:b2:45:47:6e:ac:81:29:ab:06:eb:1c:e5:72:5d:e3:e7:
1e:0a:e7:0e:a9:7c:fa:fc:27:1b:28:a9:f9:ff:c3:df:18:5f:
22:10:66:df:4e:05:62:a0:53:e7:7b:75:e7:70:5b:3b:2b:60:
d4:ce:e9:8d:e1:d2:21:4e:86:27:d0:ac:c3:e1:11:02:96:df:
45:38:68:9b:90:c3:e0:c6:99:cf:93:5d:81:c9:49:e3:00:c1:
89:20:bc:4b:51:e8:a5:8b:23:d5:5d:c5:eb:07:04:82:40:fe:
9a:70:0f:4e:2b:cc:bd:91:6a:f5:0f:9a:1a:ed:ba:a6:56:09:
ac:c7:42:6a:c4:f8:48:e2:87:4e:c2:4f:d6:c8:25:63:cd:4e:
f2:29:fe:6b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 8 13:26:02 2025 by rpki-client