Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fe/edbf44-3732-44ff-a944-e21974a294ba/1/oaLWN8sKzPhyH0PiZs4hP47d0mo.mft
File: oaLWN8sKzPhyH0PiZs4hP47d0mo.mft (raw, json)
Hash identifier: XdDsK3bO5h3KvA60wTfeQanhFRpZX8WhSlf6kglfepY=
Subject key identifier: 67:7D:1E:72:76:CE:8A:09:DB:C0:2F:8F:2F:71:46:4A:B6:BA:5D:07
Authority key identifier: A1:A2:D6:37:CB:0A:CC:F8:72:1F:43:E2:66:CE:21:3F:8E:DD:D2:6A
Certificate issuer: /CN=a1a2d637cb0accf8721f43e266ce213f8eddd26a
Certificate serial: 01964DEBA6CA8EABA0280EC9B5B70B60A86D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/oaLWN8sKzPhyH0PiZs4hP47d0mo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fe/edbf44-3732-44ff-a944-e21974a294ba/1/oaLWN8sKzPhyH0PiZs4hP47d0mo.mft
Manifest number: 1501
Signing time: Sat 19 Apr 2025 12:00:11 +0000
Manifest this update: Sat 19 Apr 2025 12:00:11 +0000
Manifest next update: Sun 20 Apr 2025 12:00:11 +0000
Files and hashes: 1: 4VXryZNlGszOvVCrHsnCqJ1trsE.roa (hash: k+VFLGrGtXyTFaFbYpVCIVsEOX3gC2kjUfFrAgtlCzk=)
2: EzrvXLF-MmLybEmZJ2eW2xEONHs.roa (hash: RF6Dl/sCu3vkVuvkH1yCtoGTVf/6WBZmKUrbuif2lko=)
3: oaLWN8sKzPhyH0PiZs4hP47d0mo.crl (hash: AuHMbxouqjUwGjG7a8OENn3OoVH66K1QuGG0CxxNOIQ=)
4: ruIwqLknbql4jBEA51u8Ov6Q1Tk.roa (hash: Z0E5RF1yfzZZiEr9zy9z5xXvvb8+Wc07OPz1Qm4MGWM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fe/edbf44-3732-44ff-a944-e21974a294ba/1/oaLWN8sKzPhyH0PiZs4hP47d0mo.crl
rsync://rpki.ripe.net/repository/DEFAULT/fe/edbf44-3732-44ff-a944-e21974a294ba/1/oaLWN8sKzPhyH0PiZs4hP47d0mo.mft
rsync://rpki.ripe.net/repository/DEFAULT/oaLWN8sKzPhyH0PiZs4hP47d0mo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 20 Apr 2025 07:26:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:4d:eb:a6:ca:8e:ab:a0:28:0e:c9:b5:b7:0b:60:a8:6d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a1a2d637cb0accf8721f43e266ce213f8eddd26a
Validity
Not Before: Apr 19 12:00:11 2025 GMT
Not After : Apr 20 12:00:11 2025 GMT
Subject: CN=677d1e7276ce8a09dbc02f8f2f71464ab6ba5d07
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:e4:84:c3:67:4e:28:f4:e0:cf:f2:57:db:e5:
da:51:14:52:ee:37:fa:de:91:50:a4:f6:fa:90:2c:
5e:fc:bd:f0:b4:fb:11:e6:88:cb:6a:e6:be:52:ca:
e3:ad:26:0e:64:b9:c3:80:5c:43:22:92:9a:74:8e:
7c:97:1f:da:48:7b:ee:7c:37:21:ac:b1:ea:98:a4:
33:f2:e1:1b:c5:e2:3e:d3:b8:92:bb:4a:c3:8d:7e:
d4:04:af:83:82:53:f0:fa:f0:3f:a8:b8:f6:0f:9a:
9c:65:97:8b:66:ab:55:2e:46:a7:8f:19:12:e1:26:
9a:70:38:ce:ed:90:91:1a:7c:22:b7:b0:f9:4f:55:
5f:b0:ba:0a:63:b2:cd:b6:bb:0e:97:4b:24:c6:3a:
a1:f9:9d:54:77:1e:60:10:8c:45:86:ea:cf:05:7b:
eb:f1:43:db:15:2d:26:aa:e5:7b:03:40:b6:a7:80:
83:26:4c:23:19:2b:ab:f1:33:ab:82:b6:e6:07:6a:
ab:f2:c2:78:f1:2d:2b:aa:d5:92:c1:62:e2:8d:28:
51:46:5b:de:40:49:67:4e:d9:87:37:2b:9b:39:c1:
7c:19:6c:77:4f:c6:94:e6:6f:26:34:21:c5:45:95:
b2:b4:72:c5:73:63:23:3a:01:f3:a0:70:b0:e6:48:
62:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
67:7D:1E:72:76:CE:8A:09:DB:C0:2F:8F:2F:71:46:4A:B6:BA:5D:07
X509v3 Authority Key Identifier:
keyid:A1:A2:D6:37:CB:0A:CC:F8:72:1F:43:E2:66:CE:21:3F:8E:DD:D2:6A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/oaLWN8sKzPhyH0PiZs4hP47d0mo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/edbf44-3732-44ff-a944-e21974a294ba/1/oaLWN8sKzPhyH0PiZs4hP47d0mo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/edbf44-3732-44ff-a944-e21974a294ba/1/oaLWN8sKzPhyH0PiZs4hP47d0mo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
af:62:63:79:e0:52:37:be:6f:26:37:68:d5:e0:62:96:9f:04:
d6:2e:9d:d0:43:a2:7b:3e:87:79:15:40:0f:f6:80:43:99:a6:
c5:4a:99:56:d3:be:32:a0:5d:57:0b:9a:3b:b3:58:ef:be:a2:
15:82:65:71:e9:7f:44:16:29:ca:32:00:f4:cd:6c:35:71:09:
5e:6e:7a:84:db:ea:af:35:df:ee:94:c7:39:64:be:a6:7d:d0:
0c:78:18:11:74:96:5a:b5:cf:71:29:41:e8:2e:5d:f4:5e:e4:
b2:25:6d:df:3f:50:70:22:fd:1a:e9:8a:7d:85:61:18:68:8f:
d9:88:50:e3:a6:a1:c9:8b:b2:00:b6:9e:2c:64:56:15:10:0d:
db:ee:9a:0b:b8:f0:8d:8a:70:38:b4:59:df:a3:15:5a:5e:b8:
14:af:cf:16:ba:34:a2:4b:53:58:ab:37:a3:9e:2b:c6:f5:13:
02:6a:bd:5e:93:24:f3:6e:18:f6:1a:7d:f2:4c:fe:2a:c3:17:
7a:4c:9e:6b:5b:f4:ec:06:6d:c9:5b:39:1e:06:26:56:7d:0c:
e1:37:05:9b:07:6c:4d:19:56:99:94:81:d3:07:59:67:00:1d:
af:89:3b:3a:4f:eb:b4:09:c1:07:8e:97:37:a7:14:44:59:0a:
f2:b5:7d:d6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 19 16:05:44 2025 by rpki-client