Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/19/eed9ce-aef9-4fc9-8a4a-c442a18f1efc/1/OXJF0Eku7eWbBFtb4f1OuRYbxBc.mft
File: OXJF0Eku7eWbBFtb4f1OuRYbxBc.mft (raw, json)
Hash identifier: pFUsK0Kd5+/TDYaQ4OI07LW2bOAQkwIfR1Uan2AdIWM=
Subject key identifier: C9:FF:D1:76:78:24:8B:18:B8:A3:5F:69:DE:80:9B:4B:CB:2F:57:10
Authority key identifier: 39:72:45:D0:49:2E:ED:E5:9B:04:5B:5B:E1:FD:4E:B9:16:1B:C4:17
Certificate issuer: /CN=397245d0492eede59b045b5be1fd4eb9161bc417
Certificate serial: 01967CB2D7CFB99B62C9D046C43FEC0DFE9E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OXJF0Eku7eWbBFtb4f1OuRYbxBc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/19/eed9ce-aef9-4fc9-8a4a-c442a18f1efc/1/OXJF0Eku7eWbBFtb4f1OuRYbxBc.mft
Manifest number: 0AA3
Signing time: Mon 28 Apr 2025 14:00:17 +0000
Manifest this update: Mon 28 Apr 2025 14:00:17 +0000
Manifest next update: Tue 29 Apr 2025 14:00:17 +0000
Files and hashes: 1: OXJF0Eku7eWbBFtb4f1OuRYbxBc.crl (hash: BJZTFcjT8FgSG9GgykQENPNRTLwG+tbsZQWo8ObVpJk=)
2: UKW0CudXmVsa94mwyxDedWLkDqo.roa (hash: E4C4f0Mq5JaE575lYSnINz97OAHbBRWbnBdkV1itt84=)
3: WainZrZS95pV_wUDdXdKx-4zd8w.roa (hash: qSjOELN6BypOnZ25i1Ntw/+kYsT/hMNWS9eAPB2j+R4=)
4: fkySyXgYloFA_rSIKapDu83z4nA.roa (hash: YRI59uMH17c60OUwKfHOzSVfz3vipSg0/ta9/6RebOI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/19/eed9ce-aef9-4fc9-8a4a-c442a18f1efc/1/OXJF0Eku7eWbBFtb4f1OuRYbxBc.crl
rsync://rpki.ripe.net/repository/DEFAULT/19/eed9ce-aef9-4fc9-8a4a-c442a18f1efc/1/OXJF0Eku7eWbBFtb4f1OuRYbxBc.mft
rsync://rpki.ripe.net/repository/DEFAULT/OXJF0Eku7eWbBFtb4f1OuRYbxBc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 29 Apr 2025 14:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:7c:b2:d7:cf:b9:9b:62:c9:d0:46:c4:3f:ec:0d:fe:9e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=397245d0492eede59b045b5be1fd4eb9161bc417
Validity
Not Before: Apr 28 14:00:17 2025 GMT
Not After : Apr 29 14:00:17 2025 GMT
Subject: CN=c9ffd17678248b18b8a35f69de809b4bcb2f5710
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e6:f8:39:a4:12:e8:2b:00:51:90:0f:3f:c2:80:
b3:25:ac:58:c5:c8:fa:00:73:a1:e6:75:a1:85:de:
9c:23:90:c0:1a:93:66:db:e3:1f:f3:00:b7:ab:19:
6a:38:87:49:53:cb:fe:fd:ca:d9:ff:6b:3c:45:07:
7c:a8:ce:72:4c:f1:37:84:80:f6:91:91:05:dc:15:
8c:12:95:c5:0b:77:9c:08:c4:94:58:96:18:96:b8:
10:3d:75:3c:cd:39:26:44:55:08:de:e6:51:36:4a:
f4:c1:30:f2:84:ed:c6:fd:ae:e6:ec:60:19:34:89:
ee:2e:85:15:f6:ad:e4:f7:de:99:f6:7f:06:ba:f6:
e9:dd:61:a7:5c:e1:4d:08:3c:72:61:ea:0a:2e:b9:
11:4a:77:1e:bd:e4:e8:d0:0f:d4:a3:4a:c5:ef:a8:
9e:04:1b:5d:ba:3e:1a:79:b2:93:32:32:4e:d3:e4:
5b:20:81:62:59:3c:ad:6d:5e:4a:3b:d7:e9:20:0f:
c7:8c:2e:49:ca:0c:8b:60:aa:af:44:51:89:37:40:
e5:1a:67:99:7e:3a:de:18:20:aa:65:45:fa:8c:f5:
97:30:1d:fc:52:c8:36:6a:62:c3:c8:a7:bf:89:51:
d8:f4:a2:04:d7:51:d5:bd:cd:d6:0d:9c:ea:8f:6b:
96:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C9:FF:D1:76:78:24:8B:18:B8:A3:5F:69:DE:80:9B:4B:CB:2F:57:10
X509v3 Authority Key Identifier:
keyid:39:72:45:D0:49:2E:ED:E5:9B:04:5B:5B:E1:FD:4E:B9:16:1B:C4:17
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OXJF0Eku7eWbBFtb4f1OuRYbxBc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/19/eed9ce-aef9-4fc9-8a4a-c442a18f1efc/1/OXJF0Eku7eWbBFtb4f1OuRYbxBc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/19/eed9ce-aef9-4fc9-8a4a-c442a18f1efc/1/OXJF0Eku7eWbBFtb4f1OuRYbxBc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
68:53:af:b3:ec:6d:d7:f2:13:ff:30:a9:e9:cc:ad:10:47:2d:
dc:43:10:86:30:75:ac:6f:9f:8f:b0:ce:6d:54:8e:5e:db:d6:
1d:a1:c5:04:c9:fc:34:8c:ee:c8:f9:07:59:3f:90:eb:fb:f3:
c2:fa:ae:ce:44:94:5e:5d:53:3a:1f:d5:4b:14:82:a0:df:5c:
cd:8e:2c:d0:25:8a:b7:35:0d:02:42:a1:ea:8c:c5:49:1f:82:
e8:e5:81:82:e7:96:b7:9d:f7:09:29:f2:94:bf:bf:79:d5:7a:
e7:f6:08:5a:d7:04:d7:6c:0d:33:99:4e:7d:fe:d5:33:3c:5b:
ac:14:b2:df:8b:89:98:b8:26:d5:9e:2f:43:c9:e2:4f:43:9b:
74:09:fd:b8:1a:ca:be:24:11:9e:4c:e4:e7:02:d2:e1:99:ea:
66:2c:76:64:79:24:50:4a:e0:6c:08:09:84:f0:f2:f6:c7:28:
d6:02:a9:6a:95:64:c8:58:a7:83:27:4b:88:15:f3:be:72:35:
29:9a:c7:ea:ce:54:1f:ea:17:f7:a1:a3:1f:0a:ca:5d:20:3f:
5e:e7:01:65:7d:de:78:2c:8a:d1:06:0b:ad:a3:99:bf:ce:d0:
0d:7e:e2:dc:a3:c1:14:02:85:85:a2:12:1f:36:77:6d:36:80:
2e:8a:64:02
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 21:23:20 2025 by rpki-client