Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1c/4560e9-7173-429c-b6f1-5f4a15cb9054/1/oOBJ0AuoQh5MRalISSlFx4_Z4W0.mft
File: oOBJ0AuoQh5MRalISSlFx4_Z4W0.mft (raw, json)
Hash identifier: CWW+BcrydWL/jEDVv7vjp78hnTNCLpwu+0Qx4upjJdI=
Subject key identifier: 70:8A:1B:8A:53:AB:E5:87:E8:5D:1D:26:47:17:A2:53:F8:04:98:7D
Authority key identifier: A0:E0:49:D0:0B:A8:42:1E:4C:45:A9:48:49:29:45:C7:8F:D9:E1:6D
Certificate issuer: /CN=a0e049d00ba8421e4c45a948492945c78fd9e16d
Certificate serial: 019683FF10D58D98EDDA2887BD7FFA8F8737
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/oOBJ0AuoQh5MRalISSlFx4_Z4W0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1c/4560e9-7173-429c-b6f1-5f4a15cb9054/1/oOBJ0AuoQh5MRalISSlFx4_Z4W0.mft
Manifest number: 1514
Signing time: Wed 30 Apr 2025 00:00:53 +0000
Manifest this update: Wed 30 Apr 2025 00:00:53 +0000
Manifest next update: Thu 01 May 2025 00:00:53 +0000
Files and hashes: 1: 1WhGgkr3JY5zEMoTpLWWw0HSqUE.roa (hash: iFLoTBcfXjLN91W8rDzjN3Un9O78u0pd8+4HdguEcmg=)
2: kY1a0BACd1_TYMv9GQ8E9K8p7qU.roa (hash: YxOrzROBL63q/PQ0W9//5oVoP7okiooDJdhlfo33RWM=)
3: oOBJ0AuoQh5MRalISSlFx4_Z4W0.crl (hash: 22CY5OqqoacUSggeMIUT0svuZwcmwoibQl8kMLwBvzo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1c/4560e9-7173-429c-b6f1-5f4a15cb9054/1/oOBJ0AuoQh5MRalISSlFx4_Z4W0.crl
rsync://rpki.ripe.net/repository/DEFAULT/1c/4560e9-7173-429c-b6f1-5f4a15cb9054/1/oOBJ0AuoQh5MRalISSlFx4_Z4W0.mft
rsync://rpki.ripe.net/repository/DEFAULT/oOBJ0AuoQh5MRalISSlFx4_Z4W0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 01 May 2025 00:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:83:ff:10:d5:8d:98:ed:da:28:87:bd:7f:fa:8f:87:37
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a0e049d00ba8421e4c45a948492945c78fd9e16d
Validity
Not Before: Apr 30 00:00:53 2025 GMT
Not After : May 1 00:00:53 2025 GMT
Subject: CN=708a1b8a53abe587e85d1d264717a253f804987d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:a7:60:9a:fb:53:f8:fe:d7:46:49:a4:2d:8d:
1c:4f:df:c5:d3:84:2a:0c:e1:18:35:10:72:f2:3f:
91:0e:b1:c7:a8:58:47:d0:0c:21:dc:e7:97:b4:a8:
82:f5:8a:5a:19:0f:dd:66:e7:f3:db:b2:dc:43:d5:
56:d3:a9:08:ce:7c:7b:d5:e2:7b:bf:33:39:ca:f7:
2e:05:91:91:12:70:4d:49:84:b5:b2:ec:0d:cb:33:
78:df:47:5a:5c:87:f8:0d:b4:41:66:cd:ec:f8:a0:
a8:48:5b:f4:55:f6:3b:8a:bd:75:d2:83:d3:29:0f:
60:40:63:b4:ed:37:9f:bb:31:9c:e5:6d:c0:6e:5f:
66:76:40:70:03:5c:ba:06:85:78:03:9d:f9:10:63:
93:8d:ff:71:4c:1d:24:2e:8e:0e:f0:02:82:6e:21:
b6:81:b9:24:67:ff:bf:e2:bf:56:d7:22:f2:90:dd:
6d:a6:70:c9:a6:98:06:0a:77:c4:db:b8:7e:b5:19:
75:bf:8b:bb:e3:85:b3:a0:03:16:96:df:a7:e5:6a:
eb:c6:aa:2a:45:79:97:19:08:c9:cb:29:a6:b5:fe:
aa:2c:f2:8a:71:81:6e:ae:a7:ac:8e:3f:7b:11:b8:
5d:38:70:1f:f2:e7:67:ef:80:73:44:c8:62:4f:79:
57:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
70:8A:1B:8A:53:AB:E5:87:E8:5D:1D:26:47:17:A2:53:F8:04:98:7D
X509v3 Authority Key Identifier:
keyid:A0:E0:49:D0:0B:A8:42:1E:4C:45:A9:48:49:29:45:C7:8F:D9:E1:6D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/oOBJ0AuoQh5MRalISSlFx4_Z4W0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/4560e9-7173-429c-b6f1-5f4a15cb9054/1/oOBJ0AuoQh5MRalISSlFx4_Z4W0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/4560e9-7173-429c-b6f1-5f4a15cb9054/1/oOBJ0AuoQh5MRalISSlFx4_Z4W0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5c:49:24:f6:91:13:ac:1e:2a:5c:56:9c:2e:4e:78:e5:93:48:
30:54:10:39:74:bd:f5:53:b9:f8:47:d1:cb:71:ab:fd:0f:b7:
d6:e6:b1:aa:08:ec:3c:07:af:c9:fa:94:4e:95:10:0b:8b:93:
61:39:a8:e2:7b:14:9a:23:1b:78:f7:4c:5c:7d:ed:1a:10:d2:
77:59:94:77:c5:d4:c3:41:22:76:0a:0f:25:0b:ab:d0:ae:6e:
8a:98:59:b4:d9:c0:e1:ae:b4:1c:e2:0b:54:45:be:7b:4b:33:
23:4a:4f:aa:7c:59:92:53:7a:15:d9:ec:6d:16:e6:c2:02:b4:
cc:e8:5e:79:c3:7c:2d:b6:30:7f:d2:28:89:c6:a2:6f:80:d3:
59:66:1d:64:3e:0c:3f:3e:7e:75:78:83:4f:bf:19:f8:eb:f6:
2f:2a:1a:47:ff:c3:b5:87:23:fa:e1:c8:c8:a7:ca:70:7e:6f:
94:56:20:b8:75:8c:6c:80:1b:02:2f:95:27:d8:62:5a:11:9c:
87:00:08:98:68:3e:9d:9c:59:53:44:1b:e2:c8:38:d3:c7:4f:
54:aa:58:05:6b:af:53:14:34:d8:0b:9b:6d:84:d0:14:12:ba:
09:a8:27:11:de:9e:26:cc:35:4f:66:bb:13:9d:16:7b:c0:b3:
57:b6:64:55
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 30 05:50:38 2025 by rpki-client