Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3d/895502-4e14-4963-a305-3b6b0a5555ef/1/oED5aPpS5ssv5lcQlwD6B0wZC4U.mft
File: oED5aPpS5ssv5lcQlwD6B0wZC4U.mft (raw, json)
Hash identifier: ApokQnGhTtyMIN6RlUKM5OefvX0Kpo/ptvQMAiMv4QA=
Subject key identifier: 1E:EB:46:31:FA:D9:56:AE:FE:9E:A0:7A:44:25:B5:39:CB:A2:4F:2E
Authority key identifier: A0:40:F9:68:FA:52:E6:CB:2F:E6:57:10:97:00:FA:07:4C:19:0B:85
Certificate issuer: /CN=a040f968fa52e6cb2fe657109700fa074c190b85
Certificate serial: 01967FEB1343169E183F746F9EFC61B36712
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/oED5aPpS5ssv5lcQlwD6B0wZC4U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3d/895502-4e14-4963-a305-3b6b0a5555ef/1/oED5aPpS5ssv5lcQlwD6B0wZC4U.mft
Manifest number: 04BF
Signing time: Tue 29 Apr 2025 05:00:34 +0000
Manifest this update: Tue 29 Apr 2025 05:00:34 +0000
Manifest next update: Wed 30 Apr 2025 05:00:34 +0000
Files and hashes: 1: lG9M0ytelOsltsM45OHzpDj8VA0.roa (hash: NbXxBP1wpUJzGfc6WpWH6JS4IiG1rIjC9o+D9ASG5hQ=)
2: oED5aPpS5ssv5lcQlwD6B0wZC4U.crl (hash: Sav+vZz8MeU4eeMb48buxHmcyy8VMHVi05f36WmTu/U=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3d/895502-4e14-4963-a305-3b6b0a5555ef/1/oED5aPpS5ssv5lcQlwD6B0wZC4U.crl
rsync://rpki.ripe.net/repository/DEFAULT/3d/895502-4e14-4963-a305-3b6b0a5555ef/1/oED5aPpS5ssv5lcQlwD6B0wZC4U.mft
rsync://rpki.ripe.net/repository/DEFAULT/oED5aPpS5ssv5lcQlwD6B0wZC4U.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 30 Apr 2025 05:00:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:7f:eb:13:43:16:9e:18:3f:74:6f:9e:fc:61:b3:67:12
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a040f968fa52e6cb2fe657109700fa074c190b85
Validity
Not Before: Apr 29 05:00:34 2025 GMT
Not After : Apr 30 05:00:34 2025 GMT
Subject: CN=1eeb4631fad956aefe9ea07a4425b539cba24f2e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f6:e3:68:0d:dc:9f:58:6b:4e:39:3e:e1:ff:6f:
10:13:a8:5c:e8:4d:1c:a0:e5:3d:52:f2:ec:ed:c7:
ca:a6:07:f1:a7:55:4c:8f:cd:7f:a6:2d:16:4a:ba:
55:75:54:da:d0:0e:3b:6a:61:59:13:3c:c8:c7:69:
08:6a:58:1b:b1:43:a6:8a:ea:78:7e:79:f1:03:ca:
79:28:dc:93:65:36:47:80:a2:bd:bf:40:ff:52:8a:
d2:28:34:80:01:2c:27:25:d7:10:9e:36:25:72:ac:
76:50:f0:fe:1a:18:4b:16:ec:44:7b:08:ef:b8:80:
aa:03:a6:ec:15:7c:1c:c9:30:f1:37:32:79:c5:38:
9c:ec:79:88:2f:64:ab:05:3f:3e:74:da:f9:08:0c:
c6:79:6c:ec:76:12:ba:17:39:97:56:9b:65:18:55:
a2:90:43:fe:57:79:40:ad:b5:57:4e:c9:4e:73:e6:
13:ee:b0:06:0d:0e:64:44:db:a8:c5:cd:fa:7a:5a:
1c:95:75:a1:84:68:28:ce:a3:e5:2d:ae:db:5c:cc:
68:a4:49:13:7c:1b:8e:9e:e7:1d:f5:4b:59:5f:8b:
32:29:2b:c4:3c:06:e2:a1:a5:67:80:2e:79:f9:8a:
f3:d2:78:92:99:57:05:20:cf:bf:70:30:8d:f1:1c:
1b:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1E:EB:46:31:FA:D9:56:AE:FE:9E:A0:7A:44:25:B5:39:CB:A2:4F:2E
X509v3 Authority Key Identifier:
keyid:A0:40:F9:68:FA:52:E6:CB:2F:E6:57:10:97:00:FA:07:4C:19:0B:85
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/oED5aPpS5ssv5lcQlwD6B0wZC4U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3d/895502-4e14-4963-a305-3b6b0a5555ef/1/oED5aPpS5ssv5lcQlwD6B0wZC4U.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3d/895502-4e14-4963-a305-3b6b0a5555ef/1/oED5aPpS5ssv5lcQlwD6B0wZC4U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9a:70:58:02:65:26:d0:a0:d6:74:bb:11:c0:a3:55:65:23:19:
eb:9a:15:3c:7e:52:f4:d8:e5:f0:f7:42:e6:06:8c:d2:2d:05:
70:e1:a0:56:91:9a:99:02:fa:09:3b:7b:e7:ef:6e:a6:31:e7:
11:64:98:84:eb:68:8d:cf:ca:75:64:82:05:64:e2:11:e5:7e:
5c:39:64:e1:c9:76:61:b4:d1:b9:cb:78:94:36:0b:6a:fd:c8:
f9:ed:de:ed:95:5c:1f:a1:44:9b:3a:c4:53:b9:1d:ca:4c:a3:
30:b7:b8:f9:a3:2f:08:31:8a:0f:da:b5:af:b7:f3:76:38:75:
9a:38:f8:36:75:23:a5:04:4b:ec:94:32:13:e1:8c:6a:94:8a:
48:a3:05:2b:6c:8f:91:b1:8b:06:f1:8b:d6:f5:1f:a0:bd:f6:
50:78:8a:fa:ba:c9:44:8f:dd:70:3c:a6:4a:1b:49:3d:cb:59:
cb:98:52:08:ad:25:41:82:cb:42:5a:6c:02:ba:62:a2:70:2c:
0a:2e:a0:40:7a:c2:87:31:2e:25:7e:03:11:fb:4d:cb:e8:bd:
42:e9:65:9f:6b:30:1d:48:e9:f4:61:d2:54:e9:8c:3f:80:2a:
d6:81:77:d8:05:cc:3c:9b:43:12:fa:97:de:dd:84:59:8f:db:
51:f9:ab:22
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 29 10:53:42 2025 by rpki-client