Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ff/fe5ac1-28fe-43ec-8700-bf25ce0f8393/1/OALHmHAErngZDmkeNw3lCf9ZEns.mft
File: OALHmHAErngZDmkeNw3lCf9ZEns.mft (raw, json)
Hash identifier: sUDDtE1ofUCT8fnsj15UZSAleP9pmoKmAtj204mYEvY=
Subject key identifier: 51:E0:74:E3:8D:C7:8C:EB:57:C7:EE:0D:E7:57:78:36:68:43:41:24
Authority key identifier: 38:02:C7:98:70:04:AE:78:19:0E:69:1E:37:0D:E5:09:FF:59:12:7B
Certificate issuer: /CN=3802c7987004ae78190e691e370de509ff59127b
Certificate serial: 01964EC7D01D3531A78D70BE3F9148178E93
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OALHmHAErngZDmkeNw3lCf9ZEns.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ff/fe5ac1-28fe-43ec-8700-bf25ce0f8393/1/OALHmHAErngZDmkeNw3lCf9ZEns.mft
Manifest number: 054B
Signing time: Sat 19 Apr 2025 16:00:39 +0000
Manifest this update: Sat 19 Apr 2025 16:00:39 +0000
Manifest next update: Sun 20 Apr 2025 16:00:39 +0000
Files and hashes: 1: 6zhmWGIe4Q-ZROn6ekXb0Zv33_A.roa (hash: F27SVg7KmPKSSSpLfMg9+298fdBlmLMbNRr359aPHLc=)
2: OALHmHAErngZDmkeNw3lCf9ZEns.crl (hash: uVySF/ZBtpReQIFpNJadsCLr9uMD3fownF1nJiSFX6k=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ff/fe5ac1-28fe-43ec-8700-bf25ce0f8393/1/OALHmHAErngZDmkeNw3lCf9ZEns.crl
rsync://rpki.ripe.net/repository/DEFAULT/ff/fe5ac1-28fe-43ec-8700-bf25ce0f8393/1/OALHmHAErngZDmkeNw3lCf9ZEns.mft
rsync://rpki.ripe.net/repository/DEFAULT/OALHmHAErngZDmkeNw3lCf9ZEns.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 20 Apr 2025 13:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:4e:c7:d0:1d:35:31:a7:8d:70:be:3f:91:48:17:8e:93
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3802c7987004ae78190e691e370de509ff59127b
Validity
Not Before: Apr 19 16:00:39 2025 GMT
Not After : Apr 20 16:00:39 2025 GMT
Subject: CN=51e074e38dc78ceb57c7ee0de757783668434124
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:f3:6f:67:56:62:40:ef:a2:c9:e5:f5:a7:e0:
eb:5e:e8:1b:c5:44:d0:5a:d4:8b:af:20:77:6e:58:
3a:11:c6:8d:4f:63:b7:51:fa:68:11:ae:b9:dd:69:
ea:a5:c3:34:15:78:e0:cf:49:81:a3:bd:11:72:5d:
08:70:45:05:38:d2:14:a9:b4:b3:e1:4e:15:e1:fe:
cf:e9:c3:99:04:3f:fc:75:da:5c:45:f1:49:ea:c9:
2d:c3:20:90:cb:47:58:ac:6f:ed:4e:54:0b:63:c9:
03:1d:23:94:c0:01:a6:11:de:0a:9c:47:28:47:ab:
26:dc:a9:8b:88:87:1e:8c:d8:5c:5c:d1:09:57:26:
df:29:c8:68:d5:b6:16:2d:cb:23:1c:02:19:34:28:
84:bb:08:be:b7:b9:ac:82:97:ce:f6:60:06:33:aa:
2b:b0:72:7e:a3:f3:55:62:ba:81:50:36:a7:4f:14:
c1:82:d3:6c:fd:70:24:06:ab:79:fb:56:25:d0:74:
6d:f2:eb:f5:37:84:ca:e7:b7:a4:e6:ee:da:e1:ac:
74:0e:0f:6f:d4:e8:cb:45:73:ad:ac:fc:9a:99:e8:
bd:28:16:22:85:25:2a:55:90:23:94:a7:a4:18:a6:
60:43:3f:8a:34:d4:68:e4:69:8e:ad:35:70:26:4f:
49:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
51:E0:74:E3:8D:C7:8C:EB:57:C7:EE:0D:E7:57:78:36:68:43:41:24
X509v3 Authority Key Identifier:
keyid:38:02:C7:98:70:04:AE:78:19:0E:69:1E:37:0D:E5:09:FF:59:12:7B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OALHmHAErngZDmkeNw3lCf9ZEns.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/fe5ac1-28fe-43ec-8700-bf25ce0f8393/1/OALHmHAErngZDmkeNw3lCf9ZEns.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/fe5ac1-28fe-43ec-8700-bf25ce0f8393/1/OALHmHAErngZDmkeNw3lCf9ZEns.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
63:c7:6c:44:54:52:48:db:af:17:02:13:1c:85:c0:de:f1:9d:
46:6d:c6:2e:44:6a:b3:b1:71:c7:74:13:14:46:f8:5d:b7:09:
1c:ca:ba:37:79:25:d0:44:f4:c2:d5:5e:5d:3e:fb:a5:75:62:
bb:28:e6:c9:ac:93:96:f3:78:8e:2d:0a:f5:cc:09:89:70:af:
33:ba:1a:38:cd:da:99:43:01:cc:ac:73:44:91:56:d6:d4:04:
b7:ba:45:e1:81:73:c3:2e:b2:44:07:59:79:1a:a4:5b:52:bf:
98:bc:c4:a9:87:46:13:aa:7d:24:c1:b4:46:a7:2d:57:92:63:
53:d6:40:24:0a:68:35:21:bd:81:fa:59:fa:95:f9:f8:0c:29:
8b:45:89:eb:aa:45:19:60:c0:d1:0f:a0:2d:b6:ec:11:32:00:
24:48:fb:0e:9f:4f:84:9b:dd:50:ab:e6:bb:72:9c:37:b4:4a:
af:ec:29:ce:f9:3a:31:ee:42:32:17:6d:90:2f:8c:e3:7e:9b:
8d:20:3f:7e:18:2c:ba:11:45:80:de:b5:3a:84:ba:e4:36:b8:
de:6c:8c:81:44:a1:18:73:97:e4:4e:28:5c:97:b2:98:79:93:
af:80:45:4b:61:e5:23:21:5e:eb:b8:5a:28:4c:ce:9a:14:e7:
c9:1d:3e:90
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 19 17:50:08 2025 by rpki-client