Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/21/067b07-5eb6-43f1-86ff-1d67c324501f/1/Oj6jOuqLOEJ_K8717UwhQjoqnWQ.mft
File: Oj6jOuqLOEJ_K8717UwhQjoqnWQ.mft (raw, json)
Hash identifier: oMgnWAr424Os5Luv5v/qtUPGhCKsoZ1dn/K60CW6g7Q=
Subject key identifier: 52:41:04:33:51:62:D0:4D:DC:53:32:A2:DA:85:B7:A1:30:60:27:02
Authority key identifier: 3A:3E:A3:3A:EA:8B:38:42:7F:2B:CE:F5:ED:4C:21:42:3A:2A:9D:64
Certificate issuer: /CN=3a3ea33aea8b38427f2bcef5ed4c21423a2a9d64
Certificate serial: 0196B1459D02E4EFEBBE63D12A1162BD255E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Oj6jOuqLOEJ_K8717UwhQjoqnWQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/21/067b07-5eb6-43f1-86ff-1d67c324501f/1/Oj6jOuqLOEJ_K8717UwhQjoqnWQ.mft
Manifest number: 014C
Signing time: Thu 08 May 2025 19:00:51 +0000
Manifest this update: Thu 08 May 2025 19:00:51 +0000
Manifest next update: Fri 09 May 2025 19:00:51 +0000
Files and hashes: 1: GHoYC29SdZ8JHtSYpKsW5kablNc.roa (hash: Ggk2bB2uCoFFVfvkzavwaobQUbDhv+a9KTxQ1jDSQZ0=)
2: Oj6jOuqLOEJ_K8717UwhQjoqnWQ.crl (hash: hHDGkFYFaxie8LuzVLAmI744x83m4YrAXjpk5C6NiPg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/21/067b07-5eb6-43f1-86ff-1d67c324501f/1/Oj6jOuqLOEJ_K8717UwhQjoqnWQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/21/067b07-5eb6-43f1-86ff-1d67c324501f/1/Oj6jOuqLOEJ_K8717UwhQjoqnWQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/Oj6jOuqLOEJ_K8717UwhQjoqnWQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 09 May 2025 19:00:51 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:b1:45:9d:02:e4:ef:eb:be:63:d1:2a:11:62:bd:25:5e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3a3ea33aea8b38427f2bcef5ed4c21423a2a9d64
Validity
Not Before: May 8 19:00:51 2025 GMT
Not After : May 9 19:00:51 2025 GMT
Subject: CN=524104335162d04ddc5332a2da85b7a130602702
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:e2:db:cd:7a:57:ee:89:ad:78:d7:db:16:0f:
cc:95:b3:bf:5b:a4:3b:1b:15:e3:fc:f5:75:40:dc:
9b:b7:30:b6:8d:1a:be:f4:d3:35:00:ce:a1:22:0b:
9f:69:a8:44:56:15:6c:04:1a:4e:5a:16:db:9c:66:
03:94:09:4e:f4:db:eb:0e:f1:ad:3a:b4:90:10:d6:
c7:b3:ec:fe:74:38:0b:06:a9:a7:97:a3:dd:05:a9:
76:50:66:18:0a:ef:90:e6:66:1c:8a:1c:2a:86:ac:
50:b6:18:28:5a:f7:f7:cb:3f:d3:44:4b:6c:96:18:
62:f0:bd:88:6f:14:fd:2e:ad:7f:23:b6:cc:1e:36:
6f:a2:5c:85:34:1c:2e:3f:11:28:68:ba:f8:eb:08:
c3:a4:ae:4e:85:41:13:32:85:5b:87:2d:68:73:f8:
ae:62:9b:1b:fa:1d:69:31:6f:c5:af:9a:5c:86:03:
c1:30:d5:4b:f0:e6:f9:53:fe:65:4d:ca:d5:8c:19:
52:96:4d:89:36:4a:a1:cc:a3:aa:96:45:5d:39:e2:
11:ba:59:98:ef:2a:97:63:f3:3c:65:9c:b4:19:02:
46:10:03:c7:79:12:a9:71:20:99:4b:24:fd:2b:b9:
70:4e:77:99:63:f6:4e:e5:c9:5b:b4:00:06:00:47:
de:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
52:41:04:33:51:62:D0:4D:DC:53:32:A2:DA:85:B7:A1:30:60:27:02
X509v3 Authority Key Identifier:
keyid:3A:3E:A3:3A:EA:8B:38:42:7F:2B:CE:F5:ED:4C:21:42:3A:2A:9D:64
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Oj6jOuqLOEJ_K8717UwhQjoqnWQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/21/067b07-5eb6-43f1-86ff-1d67c324501f/1/Oj6jOuqLOEJ_K8717UwhQjoqnWQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/21/067b07-5eb6-43f1-86ff-1d67c324501f/1/Oj6jOuqLOEJ_K8717UwhQjoqnWQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
02:aa:eb:de:ac:b9:2d:cc:82:89:6a:f5:1b:46:ad:ac:a9:c7:
ac:af:7a:02:2c:1c:dc:0f:ae:ad:ce:bb:d3:98:41:eb:60:25:
11:cb:d6:f6:98:2e:85:17:86:6c:06:2c:b0:57:c7:6c:f9:af:
4d:fd:81:63:b8:a5:42:ed:78:60:01:e5:d4:36:51:22:0f:ac:
40:e3:43:ae:80:75:9a:6a:1e:b3:71:89:c7:6c:2b:be:60:52:
16:10:26:7b:8c:7c:da:eb:4a:80:45:7a:d4:2b:be:b4:26:02:
1b:37:f2:37:9f:ef:ea:14:2a:10:a6:2d:ca:80:c1:7c:42:ba:
e3:8b:94:71:39:57:37:8b:d7:dc:18:1a:ef:3e:8e:41:41:62:
ba:9e:c3:83:e2:eb:58:5d:a0:1b:29:b7:81:5f:07:4b:87:31:
ef:89:a1:2c:0f:fa:2b:42:d6:39:b9:f4:5f:05:75:ba:b9:2d:
16:3a:29:8c:8d:7f:10:e9:90:02:a5:b0:97:e1:16:22:b0:8e:
01:53:28:89:7c:c0:f7:e8:d6:6c:b6:e9:a7:96:6d:32:36:b7:
4d:2e:d7:5e:07:21:2b:17:13:57:49:8c:6b:43:0e:57:38:e5:
59:c1:1d:15:a1:60:92:11:d1:0f:50:ca:e9:3c:16:5e:98:0a:
d8:d1:a7:b7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 9 03:11:37 2025 by rpki-client