Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/16/59d4ee-4613-4649-ad2c-749e2bca73ce/1/Oh2CJbJxInlLyC6RuWe7JdvkUI4.mft
File: Oh2CJbJxInlLyC6RuWe7JdvkUI4.mft (raw, json)
Hash identifier: TbXC5yP9DWutm5LIO2rinvzrL+wRmz+pddTajCC/zsY=
Subject key identifier: 6A:A9:AF:37:69:A6:9F:68:64:0E:C3:25:1D:5B:CD:04:54:BE:03:94
Authority key identifier: 3A:1D:82:25:B2:71:22:79:4B:C8:2E:91:B9:67:BB:25:DB:E4:50:8E
Certificate issuer: /CN=3a1d8225b27122794bc82e91b967bb25dbe4508e
Certificate serial: 019675D504F357D3418A69361D3FB51D2AB9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Oh2CJbJxInlLyC6RuWe7JdvkUI4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/16/59d4ee-4613-4649-ad2c-749e2bca73ce/1/Oh2CJbJxInlLyC6RuWe7JdvkUI4.mft
Manifest number: 0E8B
Signing time: Sun 27 Apr 2025 06:00:16 +0000
Manifest this update: Sun 27 Apr 2025 06:00:16 +0000
Manifest next update: Mon 28 Apr 2025 06:00:16 +0000
Files and hashes: 1: N4CwZRnLnlumD-RJFVgkbIUrCBc.roa (hash: EtoC/NIHh5NhO9jyQ35IICnYchDtP+NYLu/Fs0pjNjc=)
2: Oh2CJbJxInlLyC6RuWe7JdvkUI4.crl (hash: 6EvQ/7ue9xU46GA6r6TfhfzCK02lrSidT/JBnVq6zg8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/16/59d4ee-4613-4649-ad2c-749e2bca73ce/1/Oh2CJbJxInlLyC6RuWe7JdvkUI4.crl
rsync://rpki.ripe.net/repository/DEFAULT/16/59d4ee-4613-4649-ad2c-749e2bca73ce/1/Oh2CJbJxInlLyC6RuWe7JdvkUI4.mft
rsync://rpki.ripe.net/repository/DEFAULT/Oh2CJbJxInlLyC6RuWe7JdvkUI4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Apr 2025 05:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:75:d5:04:f3:57:d3:41:8a:69:36:1d:3f:b5:1d:2a:b9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3a1d8225b27122794bc82e91b967bb25dbe4508e
Validity
Not Before: Apr 27 06:00:16 2025 GMT
Not After : Apr 28 06:00:16 2025 GMT
Subject: CN=6aa9af3769a69f68640ec3251d5bcd0454be0394
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:aa:bf:7d:44:46:0e:1c:28:98:b5:b2:90:f1:
fb:e7:0f:97:2b:d8:44:f4:a5:8a:b1:05:3d:15:d4:
09:8b:22:17:42:b3:17:fa:d3:e7:dd:cf:e4:10:d9:
cd:ad:c9:c5:65:3d:0d:de:65:0e:e9:47:b1:ea:81:
6b:3e:91:73:cf:5b:55:69:76:ab:86:18:93:60:b9:
02:48:b4:6f:e3:57:6e:83:0d:2b:ec:5a:45:db:30:
b9:8e:78:e4:6a:68:9c:cb:fc:ed:53:90:c5:b1:7d:
2a:f6:97:7a:f0:39:6c:00:59:86:42:9c:ee:95:b2:
89:1e:5c:df:03:85:21:27:ed:28:35:08:a8:30:f7:
6d:07:8b:f5:78:ec:87:94:59:61:1d:4d:9d:32:2a:
64:14:ba:a7:e2:c0:af:46:2d:30:f9:77:6e:4d:a6:
b3:21:0f:28:62:2f:5a:46:ea:15:4e:8a:e6:23:f2:
b0:fb:a4:48:d2:58:bf:8c:86:79:dc:0d:e0:b5:16:
eb:7f:29:e8:14:66:6a:c5:ca:7a:82:b0:64:2d:37:
4b:32:51:a7:93:88:7b:f6:74:90:b0:d5:3a:ba:f8:
62:d5:e2:a6:e2:90:58:03:25:a9:1e:3b:c7:65:4d:
9f:71:f3:e8:44:d5:ad:25:1a:6b:42:3d:92:2e:8b:
fb:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6A:A9:AF:37:69:A6:9F:68:64:0E:C3:25:1D:5B:CD:04:54:BE:03:94
X509v3 Authority Key Identifier:
keyid:3A:1D:82:25:B2:71:22:79:4B:C8:2E:91:B9:67:BB:25:DB:E4:50:8E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Oh2CJbJxInlLyC6RuWe7JdvkUI4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/16/59d4ee-4613-4649-ad2c-749e2bca73ce/1/Oh2CJbJxInlLyC6RuWe7JdvkUI4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/16/59d4ee-4613-4649-ad2c-749e2bca73ce/1/Oh2CJbJxInlLyC6RuWe7JdvkUI4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
46:11:ad:cb:d4:69:f3:a2:c2:cc:dc:bd:46:0b:00:88:d0:1b:
40:00:6e:c0:0e:4d:96:83:88:8d:98:1c:89:97:16:b3:12:d5:
e2:7d:25:0f:da:e8:86:f0:ce:ef:ab:a7:95:77:e5:ec:f4:8a:
30:2b:ae:72:dc:6a:58:f3:73:fe:15:23:6a:e8:e2:5b:6c:7d:
c3:93:fc:68:ca:30:1d:7e:ff:38:13:26:d4:ef:f3:6d:b6:1b:
6d:82:f1:67:70:34:3b:d9:de:b6:f0:22:a3:cb:98:e7:06:4f:
ac:c3:62:6e:6d:48:a8:82:7d:4c:25:bd:19:25:eb:4d:51:c7:
78:88:fb:cc:01:73:fe:9a:15:88:c8:3a:d9:df:1f:2e:bc:1b:
b3:50:6b:3d:b5:1c:59:80:bb:49:5a:90:41:ee:4b:ef:6a:22:
5e:e8:5f:8d:7e:65:34:46:e8:82:8f:05:ca:19:5e:ff:52:06:
c9:c0:3c:b4:02:c7:19:38:fd:03:1a:aa:4c:bc:59:7a:3c:8a:
09:28:a8:cf:ff:23:3d:8d:d9:06:97:c7:2d:36:5e:e9:f8:db:
d2:54:36:f3:7f:8f:46:e7:0d:e2:8b:3e:4b:8f:54:83:75:e2:
87:e3:e8:06:02:b8:dd:d6:20:e9:7a:33:e4:d4:ee:85:9e:28:
f4:36:5d:24
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 10:27:35 2025 by rpki-client