Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0d/b51d0f-3df9-491d-af90-bf2c7a3908da/1/om1GISmD2nHzGuV-WcOeCbM5ygI.mft
File: om1GISmD2nHzGuV-WcOeCbM5ygI.mft (raw, json)
Hash identifier: kqBtTMVyE6oT++TO/a+KW2X9llF8752sZldaI03a4cA=
Subject key identifier: 88:02:D5:9E:5D:87:11:21:CD:D8:FB:9F:B5:A5:20:BC:E4:75:86:E2
Authority key identifier: A2:6D:46:21:29:83:DA:71:F3:1A:E5:7E:59:C3:9E:09:B3:39:CA:02
Certificate issuer: /CN=a26d46212983da71f31ae57e59c39e09b339ca02
Certificate serial: 0196759E5910859571FF710C226F9DD22790
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/om1GISmD2nHzGuV-WcOeCbM5ygI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0d/b51d0f-3df9-491d-af90-bf2c7a3908da/1/om1GISmD2nHzGuV-WcOeCbM5ygI.mft
Manifest number: 0BDA
Signing time: Sun 27 Apr 2025 05:00:33 +0000
Manifest this update: Sun 27 Apr 2025 05:00:33 +0000
Manifest next update: Mon 28 Apr 2025 05:00:33 +0000
Files and hashes: 1: SV1PBkOmZ6MIfKK9aCw6UnMTAMA.roa (hash: IF9hTJNwg+C6sOiJxM0wjia7V2gTMUUf+M1j+KMX6Hk=)
2: om1GISmD2nHzGuV-WcOeCbM5ygI.crl (hash: cCnXTPlFe4/Pq5CsjhENg8AjHR9sw/iJtcAeHTmgij4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0d/b51d0f-3df9-491d-af90-bf2c7a3908da/1/om1GISmD2nHzGuV-WcOeCbM5ygI.crl
rsync://rpki.ripe.net/repository/DEFAULT/0d/b51d0f-3df9-491d-af90-bf2c7a3908da/1/om1GISmD2nHzGuV-WcOeCbM5ygI.mft
rsync://rpki.ripe.net/repository/DEFAULT/om1GISmD2nHzGuV-WcOeCbM5ygI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Apr 2025 05:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:75:9e:59:10:85:95:71:ff:71:0c:22:6f:9d:d2:27:90
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a26d46212983da71f31ae57e59c39e09b339ca02
Validity
Not Before: Apr 27 05:00:33 2025 GMT
Not After : Apr 28 05:00:33 2025 GMT
Subject: CN=8802d59e5d871121cdd8fb9fb5a520bce47586e2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f8:1d:ab:5d:6b:50:5f:40:d9:5b:5f:25:51:d1:
31:b9:51:3b:06:29:5b:e9:67:3c:9c:f9:59:08:e3:
20:83:43:b6:22:53:83:5a:8d:7f:95:39:7b:c0:61:
60:88:d4:e8:04:f7:fd:4a:91:65:6f:a8:99:ee:91:
ad:4e:f4:88:4b:77:13:35:8c:9b:15:b7:0c:ce:fe:
9b:42:98:d7:24:84:79:ef:82:3e:b3:e8:2b:00:d1:
f4:c0:59:2b:7c:3c:1a:be:54:7f:83:43:29:32:82:
40:6d:5a:6e:87:97:12:e4:51:9f:50:18:c3:d4:d5:
27:62:cc:7f:e8:8e:db:0f:75:a3:6b:4f:d1:4a:5d:
fc:c1:88:13:cc:14:35:72:ef:3b:6f:7f:1e:0d:bd:
17:71:85:ff:0c:5f:44:41:2e:37:82:8f:07:7a:ea:
93:5b:7b:0f:c3:64:fb:09:25:07:71:52:ec:46:76:
1c:df:d5:27:08:9a:e5:37:67:5d:52:c0:65:aa:46:
b1:71:29:7e:4c:da:cf:e6:06:21:a6:f0:65:8c:78:
d5:b9:b4:c8:61:dc:7d:bf:6c:74:08:3d:00:be:ab:
67:0c:62:97:3f:fa:9f:60:a8:35:0e:f5:c6:e8:f2:
e2:4f:a6:8e:90:e6:aa:12:a1:9c:69:83:4c:cf:aa:
0d:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
88:02:D5:9E:5D:87:11:21:CD:D8:FB:9F:B5:A5:20:BC:E4:75:86:E2
X509v3 Authority Key Identifier:
keyid:A2:6D:46:21:29:83:DA:71:F3:1A:E5:7E:59:C3:9E:09:B3:39:CA:02
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/om1GISmD2nHzGuV-WcOeCbM5ygI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/b51d0f-3df9-491d-af90-bf2c7a3908da/1/om1GISmD2nHzGuV-WcOeCbM5ygI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/b51d0f-3df9-491d-af90-bf2c7a3908da/1/om1GISmD2nHzGuV-WcOeCbM5ygI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
01:a4:6e:a8:2a:0f:93:1e:dd:80:bb:3e:55:ea:07:06:6e:eb:
9d:b2:2e:22:97:93:1f:6d:79:1e:e7:ed:af:9c:16:19:d0:f6:
22:c3:16:86:a6:e9:31:04:a7:6c:d7:50:c7:37:c0:c1:10:79:
06:08:75:ef:70:a6:61:1b:4d:3e:f6:74:a4:22:b4:25:af:98:
c2:f9:4d:98:b5:9f:b0:ee:d2:3c:71:ce:58:3d:7f:f3:7e:91:
85:bc:90:e6:e4:ad:a1:1a:b0:b3:b0:bb:60:eb:84:46:d3:10:
8b:9d:7d:6c:cf:0c:7b:d6:b8:eb:c2:8f:87:5b:5d:99:93:56:
fa:5b:fc:10:89:a5:91:3b:8e:1b:19:89:54:6e:6e:b4:cd:81:
d1:35:69:ff:12:3e:1a:fe:17:9a:29:1b:e4:de:5d:1a:cc:25:
0e:03:be:a8:e9:f9:0b:b9:b8:df:64:cd:87:63:98:df:3f:c8:
ff:0f:83:f6:d6:89:f2:54:0f:79:4b:80:11:2f:95:31:38:bc:
0f:4d:be:37:6f:1a:5d:de:fb:fe:c6:fc:1f:dc:13:bd:7d:2e:
f8:a3:15:e9:5b:00:bc:e1:65:64:a8:50:71:88:10:61:83:bc:
b7:7b:8d:d9:2b:4d:26:83:52:ad:ed:be:09:52:a1:60:18:36:
48:74:cf:2b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 12:09:12 2025 by rpki-client