Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/16/902c1a-29f5-48dd-ada1-6a4eb37a33cc/1/Ooz8_rg-iPNror8kRduewegvDVQ.mft
File: Ooz8_rg-iPNror8kRduewegvDVQ.mft (raw, json)
Hash identifier: /9T/pGzDXfirqFucLy/mome5j7JRsx/U94N3rLvmqpc=
Subject key identifier: D7:8F:FD:84:CB:22:F6:26:8D:FD:C6:84:E7:D6:FC:8E:C7:F3:51:E5
Authority key identifier: 3A:8C:FC:FE:B8:3E:88:F3:6B:A2:BF:24:45:DB:9E:C1:E8:2F:0D:54
Certificate issuer: /CN=3a8cfcfeb83e88f36ba2bf2445db9ec1e82f0d54
Certificate serial: 019676E85CDA9DB79F34F3016A6004A46E8C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Ooz8_rg-iPNror8kRduewegvDVQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/16/902c1a-29f5-48dd-ada1-6a4eb37a33cc/1/Ooz8_rg-iPNror8kRduewegvDVQ.mft
Manifest number: 1511
Signing time: Sun 27 Apr 2025 11:01:01 +0000
Manifest this update: Sun 27 Apr 2025 11:01:01 +0000
Manifest next update: Mon 28 Apr 2025 11:01:01 +0000
Files and hashes: 1: 26TbrymsKsZjBkQHIbbRRWaFR8Y.roa (hash: SWIdCtaxTysSBJj/hZn1IHZ7qzsZ9zOqjJPPtoUQNGw=)
2: Ooz8_rg-iPNror8kRduewegvDVQ.crl (hash: SnaxEv1BYIW+sobaMXzbrq0mYmiSupda6cc+ALNK484=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/16/902c1a-29f5-48dd-ada1-6a4eb37a33cc/1/Ooz8_rg-iPNror8kRduewegvDVQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/16/902c1a-29f5-48dd-ada1-6a4eb37a33cc/1/Ooz8_rg-iPNror8kRduewegvDVQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/Ooz8_rg-iPNror8kRduewegvDVQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Apr 2025 07:29:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:76:e8:5c:da:9d:b7:9f:34:f3:01:6a:60:04:a4:6e:8c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3a8cfcfeb83e88f36ba2bf2445db9ec1e82f0d54
Validity
Not Before: Apr 27 11:01:01 2025 GMT
Not After : Apr 28 11:01:01 2025 GMT
Subject: CN=d78ffd84cb22f6268dfdc684e7d6fc8ec7f351e5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:d1:e7:61:00:fe:e5:8a:67:07:e6:ed:28:68:
65:f5:e7:cf:c7:bf:a4:8b:2b:19:e1:66:a5:ab:99:
ee:18:1b:93:37:d9:36:a2:82:fe:0f:e9:b4:a7:6f:
5f:99:02:44:f0:1c:4f:f7:38:12:26:45:fb:0a:b4:
bf:31:97:bb:91:07:04:d8:31:a3:82:5b:2e:2d:a2:
84:a9:19:d6:d1:7b:d9:a1:69:0e:65:e6:18:3f:f2:
6f:83:7f:b7:85:87:7c:5c:8e:b0:36:71:d6:46:50:
64:73:d8:e7:1c:47:11:8f:2f:64:01:8f:a7:a3:32:
28:7b:74:02:9a:95:69:1c:6f:e6:e6:b1:b5:ac:35:
75:05:47:31:73:f5:5b:4a:5b:bb:b5:a7:9d:d8:bd:
4d:b4:cd:b6:42:18:75:56:f3:ba:8c:92:50:b5:4d:
7a:b3:0d:a8:f6:e9:c0:ff:10:bb:fa:60:65:d0:b9:
d4:43:4d:84:d4:d3:c4:05:d6:da:8a:54:be:cb:68:
f3:df:7c:50:79:b1:89:57:56:0f:c0:59:14:30:61:
43:11:ac:5b:7e:0a:14:3a:d6:cf:0d:e7:c2:26:7b:
50:7e:fd:77:5a:d5:49:00:37:46:f3:9e:37:24:87:
78:71:c4:99:c1:fb:a4:82:85:6f:fe:15:98:ed:63:
95:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D7:8F:FD:84:CB:22:F6:26:8D:FD:C6:84:E7:D6:FC:8E:C7:F3:51:E5
X509v3 Authority Key Identifier:
keyid:3A:8C:FC:FE:B8:3E:88:F3:6B:A2:BF:24:45:DB:9E:C1:E8:2F:0D:54
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Ooz8_rg-iPNror8kRduewegvDVQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/16/902c1a-29f5-48dd-ada1-6a4eb37a33cc/1/Ooz8_rg-iPNror8kRduewegvDVQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/16/902c1a-29f5-48dd-ada1-6a4eb37a33cc/1/Ooz8_rg-iPNror8kRduewegvDVQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6e:43:be:05:28:4c:db:cd:c0:10:1a:7e:0b:1e:d2:16:49:78:
d1:4b:1b:88:15:1c:2c:6b:97:ca:5d:78:43:c3:32:4d:4d:e1:
be:c8:ac:79:c6:33:c3:b2:4f:6d:d7:d5:d8:e1:8f:37:d0:36:
42:fa:ff:47:e1:de:59:48:1a:0a:d3:4f:28:c6:96:5c:be:de:
34:d3:d7:31:de:23:f8:90:72:d5:c4:d8:66:48:99:72:52:b7:
e3:ab:e7:1b:39:d2:9e:c8:4d:c6:51:65:a3:a8:2f:ce:ae:34:
79:b2:5c:ae:91:ca:57:19:0b:29:c1:2b:b8:b5:97:3b:df:42:
e0:c7:82:54:25:69:82:2e:85:02:01:1d:ba:54:d7:a4:80:8b:
3e:8b:fe:81:8b:4c:5e:d3:f3:b0:6c:14:ae:15:56:b0:6b:45:
4f:63:87:40:51:aa:f6:e8:c2:c6:23:f1:e3:41:63:c9:a9:9d:
8c:96:17:89:27:0a:ae:be:2c:50:12:be:9f:86:fd:a7:bc:62:
5b:50:0c:a6:c7:9f:f8:4b:be:9f:29:11:85:f8:41:ca:45:9a:
07:a0:05:52:bd:88:43:1e:b6:cd:e7:ec:92:a9:fc:43:bd:a0:
a7:42:69:bd:d0:20:89:1d:5a:e7:f8:10:63:4d:f7:82:3f:e7:
d0:18:2e:1d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 17:44:56 2025 by rpki-client