Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/11/408e83-530d-4462-b1c9-df324c4c6eed/1/osvpq6H_dWTZE-14Zy4zcbfzWCQ.mft
File: osvpq6H_dWTZE-14Zy4zcbfzWCQ.mft (raw, json)
Hash identifier: qT2YTKOTi5Qmj4NSV/NkAKtVEp865XaJfWt1gCh7HJM=
Subject key identifier: 36:F4:FB:AE:C6:15:71:BF:07:02:1F:57:EF:7D:F9:AA:85:67:CA:28
Authority key identifier: A2:CB:E9:AB:A1:FF:75:64:D9:13:ED:78:67:2E:33:71:B7:F3:58:24
Certificate issuer: /CN=a2cbe9aba1ff7564d913ed78672e3371b7f35824
Certificate serial: 0196789F867BFF508F330D5F2F1771C8A48E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/osvpq6H_dWTZE-14Zy4zcbfzWCQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/11/408e83-530d-4462-b1c9-df324c4c6eed/1/osvpq6H_dWTZE-14Zy4zcbfzWCQ.mft
Manifest number: 1511
Signing time: Sun 27 Apr 2025 19:00:42 +0000
Manifest this update: Sun 27 Apr 2025 19:00:42 +0000
Manifest next update: Mon 28 Apr 2025 19:00:42 +0000
Files and hashes: 1: T1KxzYg5ki8jROBXHnXsuuF1Usc.roa (hash: pSMvp0rn5YAkLffVlSaMpmmw60CI4RpSAuDI1ZJ7Bys=)
2: osvpq6H_dWTZE-14Zy4zcbfzWCQ.crl (hash: +JpQunutoHcidigRbVPPtcTbck3Aq9qAKZFAC3Hwxqo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/11/408e83-530d-4462-b1c9-df324c4c6eed/1/osvpq6H_dWTZE-14Zy4zcbfzWCQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/11/408e83-530d-4462-b1c9-df324c4c6eed/1/osvpq6H_dWTZE-14Zy4zcbfzWCQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/osvpq6H_dWTZE-14Zy4zcbfzWCQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Apr 2025 14:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:78:9f:86:7b:ff:50:8f:33:0d:5f:2f:17:71:c8:a4:8e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a2cbe9aba1ff7564d913ed78672e3371b7f35824
Validity
Not Before: Apr 27 19:00:42 2025 GMT
Not After : Apr 28 19:00:42 2025 GMT
Subject: CN=36f4fbaec61571bf07021f57ef7df9aa8567ca28
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:6e:d1:ea:a0:ee:62:c9:48:1b:4c:9c:f6:39:
c2:46:4d:53:5e:45:72:95:be:b5:b9:2a:90:44:3d:
63:87:35:e7:9c:39:84:63:55:15:d2:f4:37:e6:1d:
cf:75:ac:c8:bb:9c:8a:4b:8a:45:0d:f6:f1:46:de:
bc:62:32:39:7b:71:15:d0:36:ca:2e:1d:11:a8:36:
5f:e1:9f:14:df:e2:e2:09:3e:51:07:13:94:81:f3:
34:df:e7:b5:fe:6b:d3:b3:32:0f:65:c7:55:24:b8:
85:af:1a:86:69:64:ed:cf:72:e5:7c:41:07:80:f0:
2f:13:0d:44:48:4b:27:e9:2a:d8:86:7a:2e:6f:f2:
64:ad:aa:fa:61:3f:05:20:bc:0b:c5:13:b5:2c:b1:
2e:d6:50:7b:2e:a2:dc:7c:36:13:23:b0:3c:d5:8b:
7a:67:91:34:d1:3b:d7:89:99:75:24:3b:1f:77:5d:
36:c3:9f:ee:bc:db:a5:e6:da:24:7f:97:c6:08:48:
a4:44:72:1b:3c:80:5b:e5:7a:12:35:9d:4e:ce:f4:
4e:67:4d:b7:8c:37:c7:7a:1c:bb:fc:bd:f6:dc:50:
7f:b8:33:df:93:9c:9a:a8:24:2e:bc:ae:ea:18:11:
b7:7b:2b:d6:58:2c:b9:3a:72:43:52:89:c4:fb:c8:
e3:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
36:F4:FB:AE:C6:15:71:BF:07:02:1F:57:EF:7D:F9:AA:85:67:CA:28
X509v3 Authority Key Identifier:
keyid:A2:CB:E9:AB:A1:FF:75:64:D9:13:ED:78:67:2E:33:71:B7:F3:58:24
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/osvpq6H_dWTZE-14Zy4zcbfzWCQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/11/408e83-530d-4462-b1c9-df324c4c6eed/1/osvpq6H_dWTZE-14Zy4zcbfzWCQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/11/408e83-530d-4462-b1c9-df324c4c6eed/1/osvpq6H_dWTZE-14Zy4zcbfzWCQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
90:4a:6b:7a:70:0f:cd:33:b3:b7:ba:9f:72:05:ba:af:a7:8d:
bb:17:08:ba:52:c6:fd:f8:54:a5:a2:31:4b:ac:70:54:e6:e4:
dc:e8:49:18:56:61:78:63:1e:cb:28:85:6b:f6:ff:e2:3d:b9:
e7:e8:e9:da:66:f9:f5:2f:57:65:b3:ae:0c:ca:29:b5:a2:fa:
2d:15:83:00:76:53:65:9c:2c:5e:04:07:fe:6e:50:8b:22:39:
92:e3:40:bc:37:ee:df:06:b7:e7:b9:21:69:05:db:09:d5:7f:
12:65:6e:09:1d:f1:74:a5:e2:de:98:4a:44:e0:af:60:67:95:
2a:8d:42:78:f1:d5:56:b5:5f:2d:1a:c6:d9:96:69:9a:60:06:
e9:51:f4:67:99:92:4b:c6:82:ff:f8:df:38:1a:3e:41:13:ed:
b0:45:77:18:4e:2c:a1:8d:ed:09:b8:f2:62:af:7e:1f:0f:3e:
ab:e2:ba:cd:23:99:29:69:e6:07:85:57:40:03:ef:de:cb:ea:
fc:aa:60:c8:53:5b:be:04:6a:2b:86:24:69:56:c1:bd:ea:b7:
e8:2d:98:a9:d2:5d:6b:10:5e:90:98:78:61:74:9e:58:17:cb:
7e:11:0f:fe:ee:1f:bd:62:55:fb:9f:62:1f:27:2b:2f:0a:52:
68:17:37:e1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 22:08:59 2025 by rpki-client