Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/20/d46e2b-de4d-4b6f-8dd7-69629c501943/1/0OMaFJwuaumsxynPesFwbePec5s.mft
File: 0OMaFJwuaumsxynPesFwbePec5s.mft (raw, json)
Hash identifier: V17Amw4JjtGm1Ye6XUw9Zm/LCfZoEZ2js1E/OAjtG10=
Subject key identifier: F2:DF:3B:ED:2A:19:5A:AC:2B:48:45:D5:38:C0:1C:06:F2:3B:7F:F3
Authority key identifier: D0:E3:1A:14:9C:2E:6A:E9:AC:C7:29:CF:7A:C1:70:6D:E3:DE:73:9B
Certificate issuer: /CN=d0e31a149c2e6ae9acc729cf7ac1706de3de739b
Certificate serial: 0196771EB18D395784B6F20C4E3ABDC8039F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0OMaFJwuaumsxynPesFwbePec5s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/20/d46e2b-de4d-4b6f-8dd7-69629c501943/1/0OMaFJwuaumsxynPesFwbePec5s.mft
Manifest number: 0C78
Signing time: Sun 27 Apr 2025 12:00:22 +0000
Manifest this update: Sun 27 Apr 2025 12:00:22 +0000
Manifest next update: Mon 28 Apr 2025 12:00:22 +0000
Files and hashes: 1: 0OMaFJwuaumsxynPesFwbePec5s.crl (hash: xMEDO+rg/5KF6LtZkDxhWrEsRoFgnYaOttMQBohGKFw=)
2: lIbtDRQwlkkBZMdeQgJ8xj0YUi8.roa (hash: qmtm5lTuGIY7QCk9HhBMZ0EdWah1WvmsmlTlfIMZwP4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/20/d46e2b-de4d-4b6f-8dd7-69629c501943/1/0OMaFJwuaumsxynPesFwbePec5s.crl
rsync://rpki.ripe.net/repository/DEFAULT/20/d46e2b-de4d-4b6f-8dd7-69629c501943/1/0OMaFJwuaumsxynPesFwbePec5s.mft
rsync://rpki.ripe.net/repository/DEFAULT/0OMaFJwuaumsxynPesFwbePec5s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Apr 2025 12:00:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:77:1e:b1:8d:39:57:84:b6:f2:0c:4e:3a:bd:c8:03:9f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d0e31a149c2e6ae9acc729cf7ac1706de3de739b
Validity
Not Before: Apr 27 12:00:22 2025 GMT
Not After : Apr 28 12:00:22 2025 GMT
Subject: CN=f2df3bed2a195aac2b4845d538c01c06f23b7ff3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e1:97:0c:a2:c9:59:31:57:39:11:a7:0e:da:44:
59:3b:31:1c:00:78:ad:a5:f4:31:82:cb:17:4c:2b:
24:0a:3b:72:0a:34:92:2a:3c:32:4d:0c:99:09:c9:
85:3a:bb:69:da:ec:b5:19:a5:c3:6e:9a:ec:21:59:
8f:25:aa:77:dc:72:00:bc:92:65:5a:2a:fd:29:b5:
4e:f1:c8:59:d8:e7:cf:c7:dc:ef:67:e4:fd:0e:34:
bf:f6:76:42:1a:53:c8:20:f1:df:63:4c:8c:2e:6a:
e7:95:3e:6a:34:bd:9a:55:ce:e0:78:1a:54:3e:dd:
4d:a4:9f:77:86:1e:c2:29:7d:a0:08:95:f3:fc:2e:
25:84:04:9e:3b:25:97:9c:34:4b:13:31:b3:f3:96:
b0:8c:1e:8e:a7:52:3e:a4:a3:5d:64:7c:0e:23:d1:
68:18:24:89:6e:1e:9f:1a:36:87:9f:fe:ed:d3:a0:
8c:3e:92:c2:39:21:38:1b:cc:d6:10:bf:d8:69:27:
e7:38:a6:53:02:e9:0b:83:51:82:16:c9:3e:70:c9:
b9:88:37:a7:6c:f7:7a:49:18:3b:a8:2f:81:d3:08:
81:2f:be:77:dd:77:0f:13:48:b5:56:89:6f:41:a1:
dd:fa:45:b9:c0:04:f9:ab:69:1e:5d:1d:6a:f6:d9:
d4:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F2:DF:3B:ED:2A:19:5A:AC:2B:48:45:D5:38:C0:1C:06:F2:3B:7F:F3
X509v3 Authority Key Identifier:
keyid:D0:E3:1A:14:9C:2E:6A:E9:AC:C7:29:CF:7A:C1:70:6D:E3:DE:73:9B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0OMaFJwuaumsxynPesFwbePec5s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/20/d46e2b-de4d-4b6f-8dd7-69629c501943/1/0OMaFJwuaumsxynPesFwbePec5s.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/20/d46e2b-de4d-4b6f-8dd7-69629c501943/1/0OMaFJwuaumsxynPesFwbePec5s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
47:e0:de:6c:14:c3:cb:c6:fd:b2:9f:30:35:34:cf:78:41:62:
ce:02:e4:08:1c:03:b5:af:d8:dd:6e:f9:9b:be:85:ac:78:3c:
ef:33:de:a2:83:a0:4b:5d:da:d1:d6:fe:ad:8b:15:ca:7b:e6:
65:36:a0:fa:b6:76:74:05:3d:93:9a:88:50:c3:f0:6d:e9:ed:
86:ff:26:45:31:ad:b7:07:a7:b8:8d:e3:40:07:de:9e:d4:11:
99:f1:08:5a:4f:96:91:4b:5c:5e:cc:e8:5b:e9:12:8b:02:29:
ca:cd:89:4a:bc:27:92:29:85:60:ba:76:a8:ab:9d:00:ff:92:
33:e7:5d:8c:20:b4:ce:1d:b8:f9:c2:b4:c8:b1:ae:d4:42:16:
a0:ee:74:95:d4:31:ff:aa:b2:71:b8:79:aa:ed:1a:c7:53:e0:
98:55:5b:e5:32:ee:53:90:2a:cc:ce:79:81:03:6b:50:27:3d:
46:eb:a2:ed:99:a0:bb:ac:58:f4:12:2c:5e:62:1a:4e:43:5f:
98:4a:05:81:9b:a7:f6:42:f3:07:23:8c:bc:6d:e3:4a:e7:fe:
ca:74:ff:11:68:f9:d4:2c:6e:65:59:61:db:6e:c3:e3:43:28:
82:d2:e0:15:71:c1:e3:31:75:7b:d5:c6:28:10:dc:d5:76:e9:
8e:bb:1d:57
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 19:12:27 2025 by rpki-client