Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/02/ba1f88-707f-41bd-b9bd-fb6983ce9dff/1/oKZH2scp9HsGNpxMl0HPlDlT3Fk.mft
File: oKZH2scp9HsGNpxMl0HPlDlT3Fk.mft (raw, json)
Hash identifier: HjnN9ucovSVXlG3N9qM3+vfjod8IBgt/tb8G3AdtDSU=
Subject key identifier: 10:25:9B:83:F5:44:27:5E:51:8C:41:D2:24:1F:7A:04:9B:7A:E9:CB
Authority key identifier: A0:A6:47:DA:C7:29:F4:7B:06:36:9C:4C:97:41:CF:94:39:53:DC:59
Certificate issuer: /CN=a0a647dac729f47b06369c4c9741cf943953dc59
Certificate serial: 019674F9FC0EF8C1C2F16D0F36F731686554
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/oKZH2scp9HsGNpxMl0HPlDlT3Fk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/02/ba1f88-707f-41bd-b9bd-fb6983ce9dff/1/oKZH2scp9HsGNpxMl0HPlDlT3Fk.mft
Manifest number: 0A6D
Signing time: Sun 27 Apr 2025 02:01:02 +0000
Manifest this update: Sun 27 Apr 2025 02:01:02 +0000
Manifest next update: Mon 28 Apr 2025 02:01:02 +0000
Files and hashes: 1: fgBVP-p2zmTya0_4qFVlHpogzj8.roa (hash: bS/DWNViHxGcmHSoDDhkfhplvAMKypbICmsWzuWRKNU=)
2: oKZH2scp9HsGNpxMl0HPlDlT3Fk.crl (hash: kHDGTHavZzryj5YNtybPQ53MJbE1IPkjNskaWcFLlKs=)
3: tD78yaOKHxAMN54cZ_UiavO4CHA.roa (hash: jAbvoTBMupwzsMRTiVDhIW4eUBQnYA3NsicKftAzOOQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/02/ba1f88-707f-41bd-b9bd-fb6983ce9dff/1/oKZH2scp9HsGNpxMl0HPlDlT3Fk.crl
rsync://rpki.ripe.net/repository/DEFAULT/02/ba1f88-707f-41bd-b9bd-fb6983ce9dff/1/oKZH2scp9HsGNpxMl0HPlDlT3Fk.mft
rsync://rpki.ripe.net/repository/DEFAULT/oKZH2scp9HsGNpxMl0HPlDlT3Fk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Apr 2025 20:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:74:f9:fc:0e:f8:c1:c2:f1:6d:0f:36:f7:31:68:65:54
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a0a647dac729f47b06369c4c9741cf943953dc59
Validity
Not Before: Apr 27 02:01:02 2025 GMT
Not After : Apr 28 02:01:02 2025 GMT
Subject: CN=10259b83f544275e518c41d2241f7a049b7ae9cb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:1d:54:27:16:cc:63:d4:ee:bb:dc:7d:91:ae:
1d:e6:52:06:c5:47:65:78:d6:6c:ef:cf:14:53:3e:
b1:14:22:01:0b:41:4a:8d:54:1e:8d:8d:a5:e8:eb:
ef:f8:2c:ef:a6:ae:d8:ed:16:e5:87:04:9c:24:10:
2e:94:a1:f4:f6:60:f3:99:f1:3d:77:5a:a8:f8:52:
b7:39:0d:c7:3a:25:68:de:28:ea:0e:76:ac:a0:93:
a7:21:fd:4f:76:0b:ba:97:9b:aa:00:08:22:44:6e:
07:86:5e:af:12:d7:63:fb:fc:48:4d:c0:22:ad:2b:
72:9e:33:40:2b:20:7e:70:42:97:d4:a7:27:16:91:
12:9b:e7:2b:df:ed:fc:04:a3:4b:21:f9:e9:6e:fb:
dc:f3:0d:8e:e1:cf:da:59:61:04:d9:c3:d4:3c:2a:
5f:2f:69:87:dc:69:18:eb:6b:67:d6:fc:d6:e4:92:
c7:12:94:68:b7:0a:64:1f:d6:7b:7a:e8:4f:3b:60:
9b:92:18:9e:e7:14:50:75:56:d1:7c:bd:1a:88:7a:
30:05:58:4c:29:62:12:47:fb:e3:50:ee:11:0d:ad:
49:38:5a:93:b2:ff:eb:2e:64:19:f9:b1:5d:77:23:
08:9e:0e:f0:d1:d6:80:3c:8e:d5:e5:8d:d1:b0:23:
36:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
10:25:9B:83:F5:44:27:5E:51:8C:41:D2:24:1F:7A:04:9B:7A:E9:CB
X509v3 Authority Key Identifier:
keyid:A0:A6:47:DA:C7:29:F4:7B:06:36:9C:4C:97:41:CF:94:39:53:DC:59
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/oKZH2scp9HsGNpxMl0HPlDlT3Fk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/02/ba1f88-707f-41bd-b9bd-fb6983ce9dff/1/oKZH2scp9HsGNpxMl0HPlDlT3Fk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/02/ba1f88-707f-41bd-b9bd-fb6983ce9dff/1/oKZH2scp9HsGNpxMl0HPlDlT3Fk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
20:68:50:a4:66:2a:99:2c:d1:72:dd:07:0c:1a:7a:ea:67:a0:
22:ff:cc:22:77:70:2f:78:dd:6f:77:63:21:74:0f:38:af:2d:
d9:67:85:1a:be:8d:f6:20:83:6e:66:f3:a0:72:b2:0f:10:bd:
e7:34:ab:67:33:25:a3:c2:b7:a4:83:f1:cf:50:91:2c:d4:95:
33:27:fa:0a:ab:7e:28:ef:06:93:3a:3e:c3:e5:79:4b:b2:43:
b4:b2:6b:29:15:bd:d3:ce:98:b7:b6:04:09:c2:30:b0:07:27:
3f:44:fc:21:09:e1:9f:b9:19:cc:0a:3e:e7:18:f1:a2:fa:c0:
fe:04:9e:4f:a4:c2:22:8a:40:65:77:07:bd:8b:83:cc:c8:f5:
bf:7a:99:32:40:b5:e5:b0:a1:46:bc:b4:1b:79:bf:c4:42:ea:
89:13:e6:6e:81:38:d5:1c:36:f9:d2:39:e0:0e:b3:72:7f:29:
27:89:42:e3:1a:bf:02:51:8a:c3:09:f6:89:9f:29:19:7e:c8:
d4:52:ba:9b:78:c0:80:7d:0e:25:7e:e1:17:da:f5:f8:ac:50:
c8:0d:79:92:b3:b5:8c:ed:42:ef:63:4d:5d:84:15:44:c6:f9:
50:a4:c4:f0:36:41:7c:0f:37:1f:20:9f:a0:bc:b3:74:f3:39:
7e:1c:14:aa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 03:58:08 2025 by rpki-client