Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/38/2dab18-7bb7-4aa1-98ad-27c9d9114238/1/oaVb8oiHU-RGdbYd2jA5TZAVbAo.mft
File: oaVb8oiHU-RGdbYd2jA5TZAVbAo.mft (raw, json)
Hash identifier: fgO89spBe1nJZGc6qQA0RrJ85MSFcZuBz432nWdoU5Y=
Subject key identifier: C7:82:52:A3:00:71:77:47:7B:9A:E0:5C:2E:AA:B0:A6:DE:67:59:6E
Authority key identifier: A1:A5:5B:F2:88:87:53:E4:46:75:B6:1D:DA:30:39:4D:90:15:6C:0A
Certificate issuer: /CN=a1a55bf2888753e44675b61dda30394d90156c0a
Certificate serial: 01967679F0F5D505050F92411325219703E1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/oaVb8oiHU-RGdbYd2jA5TZAVbAo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/38/2dab18-7bb7-4aa1-98ad-27c9d9114238/1/oaVb8oiHU-RGdbYd2jA5TZAVbAo.mft
Manifest number: 0454
Signing time: Sun 27 Apr 2025 09:00:25 +0000
Manifest this update: Sun 27 Apr 2025 09:00:25 +0000
Manifest next update: Mon 28 Apr 2025 09:00:25 +0000
Files and hashes: 1: RAu0fNtqwivhpDFk4ehwbUssHTc.roa (hash: ASO7jKRNvxEqEpBOo5wevxzSp2tNnkfm3RRt0ZwZtAw=)
2: oaVb8oiHU-RGdbYd2jA5TZAVbAo.crl (hash: d+6SwdA2dEUMXHhrg6M37Qliq0TBXZdjY4NanRMbBxs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/38/2dab18-7bb7-4aa1-98ad-27c9d9114238/1/oaVb8oiHU-RGdbYd2jA5TZAVbAo.crl
rsync://rpki.ripe.net/repository/DEFAULT/38/2dab18-7bb7-4aa1-98ad-27c9d9114238/1/oaVb8oiHU-RGdbYd2jA5TZAVbAo.mft
rsync://rpki.ripe.net/repository/DEFAULT/oaVb8oiHU-RGdbYd2jA5TZAVbAo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Apr 2025 05:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:76:79:f0:f5:d5:05:05:0f:92:41:13:25:21:97:03:e1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a1a55bf2888753e44675b61dda30394d90156c0a
Validity
Not Before: Apr 27 09:00:25 2025 GMT
Not After : Apr 28 09:00:25 2025 GMT
Subject: CN=c78252a3007177477b9ae05c2eaab0a6de67596e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:92:9e:47:45:b6:cf:4d:47:0f:3a:78:50:f0:0d:
2a:4f:1a:b9:d4:6c:96:37:9b:b1:7c:9f:c1:95:90:
75:e6:e1:8f:ef:2d:21:fc:74:5f:64:09:2c:f3:90:
b4:81:1b:9c:12:58:b4:27:e4:71:e8:8c:e1:92:a9:
dc:08:3c:6b:af:04:61:4e:ed:99:41:2d:17:c8:82:
f6:4d:77:67:a3:d3:af:36:92:f4:15:1d:ca:2c:13:
3c:e5:ee:6e:5b:96:b9:fa:a7:07:94:df:61:ac:b4:
89:c9:47:12:52:7c:e6:2d:99:c8:d9:75:5a:af:06:
ac:a4:8a:40:15:69:fc:61:40:b2:a0:21:4a:fc:f0:
3f:d3:d8:92:66:6c:ec:c9:1d:a3:41:53:0e:9a:f7:
51:74:8f:9f:c6:b9:31:da:10:6d:74:60:8c:75:29:
c3:86:a7:d5:25:67:48:4c:eb:e3:8e:3f:a5:29:eb:
b0:c1:3b:19:31:ad:45:a6:ce:22:4c:a1:a1:13:83:
b7:69:5f:b8:1a:49:d0:a4:e5:53:4f:48:e9:f4:29:
17:f5:6f:31:ef:45:82:9e:fd:04:7d:c2:b3:8f:14:
66:f9:24:f3:a2:39:8b:b5:6b:73:7f:0b:ff:66:bb:
21:a8:1c:e0:6b:7d:94:50:6d:7a:9a:9e:a7:65:b2:
df:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C7:82:52:A3:00:71:77:47:7B:9A:E0:5C:2E:AA:B0:A6:DE:67:59:6E
X509v3 Authority Key Identifier:
keyid:A1:A5:5B:F2:88:87:53:E4:46:75:B6:1D:DA:30:39:4D:90:15:6C:0A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/oaVb8oiHU-RGdbYd2jA5TZAVbAo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/38/2dab18-7bb7-4aa1-98ad-27c9d9114238/1/oaVb8oiHU-RGdbYd2jA5TZAVbAo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/38/2dab18-7bb7-4aa1-98ad-27c9d9114238/1/oaVb8oiHU-RGdbYd2jA5TZAVbAo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
46:13:40:22:b8:37:2b:56:98:21:7d:ab:59:2c:f0:50:76:d0:
bc:4d:96:ac:1e:7d:ab:99:23:93:a1:09:76:bf:07:c4:f9:49:
c6:be:17:5f:88:c4:e6:2e:92:d4:cb:ae:bd:49:3e:37:3d:48:
1f:34:4d:e8:5f:c9:2a:03:bc:4c:86:34:c1:d6:04:00:83:be:
a8:9c:aa:31:9e:0f:49:ce:be:b8:a0:45:d6:e5:3e:a1:07:c9:
c3:37:b6:0c:d1:19:f3:d5:15:1d:09:de:df:3f:6a:7e:47:ad:
96:c7:82:0b:20:21:e7:5f:7e:cf:b7:42:c1:52:db:bd:23:ec:
96:72:0e:f2:96:f6:d0:06:49:aa:b3:db:38:a9:4b:c8:7b:57:
4b:20:9a:f0:a5:ef:2b:8b:24:49:71:fd:e9:65:af:4a:fe:18:
2d:1a:dd:90:e5:87:ab:91:26:67:6f:1a:ed:b2:8d:20:c8:a8:
a2:67:b9:0b:1b:9f:18:69:b9:73:0c:1d:26:f2:13:8c:ff:0e:
9c:fd:bd:81:7d:51:4a:18:86:dd:45:0f:b6:be:4e:c8:a5:e4:
4c:86:12:68:d4:da:08:ce:55:19:f8:7f:27:5a:02:68:74:a7:
58:bb:8f:95:b1:c8:49:2c:fb:ff:b5:12:04:14:26:9d:17:ac:
7e:04:9a:b8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 15:51:23 2025 by rpki-client