Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/45/dd0189-7969-4fd5-9747-28bdabca70cb/1/OUiGnOVLnTsvPjmu4snI6xnLWw8.mft
File: OUiGnOVLnTsvPjmu4snI6xnLWw8.mft (raw, json)
Hash identifier: MuppW4PgcoP+OjZl/71sfV/0z4T8O+JAzPEo+ablrG0=
Subject key identifier: E4:58:23:AF:02:12:72:F8:28:BC:1C:EB:C1:22:D0:AD:86:22:A9:90
Authority key identifier: 39:48:86:9C:E5:4B:9D:3B:2F:3E:39:AE:E2:C9:C8:EB:19:CB:5B:0F
Certificate issuer: /CN=3948869ce54b9d3b2f3e39aee2c9c8eb19cb5b0f
Certificate serial: 019687DBE1E14D02AABEF4D51E8456D8626D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OUiGnOVLnTsvPjmu4snI6xnLWw8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/45/dd0189-7969-4fd5-9747-28bdabca70cb/1/OUiGnOVLnTsvPjmu4snI6xnLWw8.mft
Manifest number: 1518
Signing time: Wed 30 Apr 2025 18:00:56 +0000
Manifest this update: Wed 30 Apr 2025 18:00:56 +0000
Manifest next update: Thu 01 May 2025 18:00:56 +0000
Files and hashes: 1: Jxs0meMKDCLBz_dVByd3J3wLTdc.roa (hash: ZCvr3TtSBPIKAQupwsVmwJ8f7SSejV5g4WH6kmkpM1s=)
2: OUiGnOVLnTsvPjmu4snI6xnLWw8.crl (hash: HtUjKUqSY7jYvanMr/iJuOM82mLFIk8htFwZ1OM9oaA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/45/dd0189-7969-4fd5-9747-28bdabca70cb/1/OUiGnOVLnTsvPjmu4snI6xnLWw8.crl
rsync://rpki.ripe.net/repository/DEFAULT/45/dd0189-7969-4fd5-9747-28bdabca70cb/1/OUiGnOVLnTsvPjmu4snI6xnLWw8.mft
rsync://rpki.ripe.net/repository/DEFAULT/OUiGnOVLnTsvPjmu4snI6xnLWw8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 01 May 2025 18:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:87:db:e1:e1:4d:02:aa:be:f4:d5:1e:84:56:d8:62:6d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3948869ce54b9d3b2f3e39aee2c9c8eb19cb5b0f
Validity
Not Before: Apr 30 18:00:56 2025 GMT
Not After : May 1 18:00:56 2025 GMT
Subject: CN=e45823af021272f828bc1cebc122d0ad8622a990
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:ae:73:2c:ec:fe:4e:f5:27:37:a9:a9:ff:c5:
70:d5:4b:da:e7:49:a3:fc:23:d3:bd:bc:d0:3d:ec:
74:21:26:77:46:b0:c7:51:8f:33:8e:05:1b:d2:93:
16:4d:94:cc:a2:1c:de:04:8d:ad:38:12:de:4f:c2:
40:fd:d0:21:b7:1b:5e:3c:93:d7:1c:0e:11:7e:32:
dc:1d:ac:54:ff:49:3b:cd:ae:92:19:95:66:8e:c9:
77:8a:21:9f:d5:f3:d1:1b:28:cc:c8:96:d3:f7:f7:
a2:6e:11:2f:58:80:45:b9:9b:e3:66:04:17:3f:9c:
1c:1d:3d:dd:9b:aa:4f:84:69:8a:24:3b:b6:18:5e:
11:4a:7d:dd:e0:f8:6b:23:a2:e7:0d:fc:e0:17:ef:
bf:70:40:d8:42:9b:63:31:de:9d:8a:61:61:e9:82:
43:f4:df:f4:d0:b2:5a:b0:29:dd:5f:fe:96:32:28:
4d:f9:56:47:02:b8:df:0c:93:42:63:40:82:a2:44:
15:77:11:1c:04:2d:42:e8:31:31:cc:14:19:23:17:
93:1b:0c:51:f3:82:e9:ee:3e:d7:a2:da:fd:d9:20:
e0:b9:02:09:03:72:35:81:d2:92:d6:f9:f6:18:53:
77:2f:20:e5:99:4a:f0:9d:be:1e:81:c6:be:ba:85:
40:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E4:58:23:AF:02:12:72:F8:28:BC:1C:EB:C1:22:D0:AD:86:22:A9:90
X509v3 Authority Key Identifier:
keyid:39:48:86:9C:E5:4B:9D:3B:2F:3E:39:AE:E2:C9:C8:EB:19:CB:5B:0F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OUiGnOVLnTsvPjmu4snI6xnLWw8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/45/dd0189-7969-4fd5-9747-28bdabca70cb/1/OUiGnOVLnTsvPjmu4snI6xnLWw8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/45/dd0189-7969-4fd5-9747-28bdabca70cb/1/OUiGnOVLnTsvPjmu4snI6xnLWw8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1e:85:16:3b:e8:6e:cd:4a:c7:01:12:ed:cc:b7:45:ee:86:75:
c3:10:30:7a:cf:15:df:41:2f:f5:ff:00:e0:6c:03:dd:c5:41:
d2:99:06:8b:84:88:7c:7f:12:22:94:17:b4:a4:e6:72:ee:a1:
cd:65:cb:f4:48:25:7c:de:31:a1:72:15:b1:ba:f5:e9:3e:85:
51:69:71:0d:0f:0e:e3:81:9c:32:8b:ea:bb:e5:f6:e0:eb:d0:
e9:e6:cd:52:9b:59:16:02:47:f3:de:d3:f7:4b:e7:55:95:fb:
7f:a1:80:ae:3c:a2:81:b8:0b:c9:64:ed:97:f7:39:a1:85:67:
5f:ef:e1:5b:03:4a:71:86:b6:92:16:e1:40:6f:90:7e:8b:b3:
df:8f:cc:c5:44:8b:29:89:86:d6:97:cf:f2:cd:ae:92:c0:9d:
70:60:aa:d8:7e:d9:7c:d2:78:80:08:71:c5:5e:6c:a8:aa:75:
b3:3a:dc:2f:5e:8a:0d:d6:5b:df:3e:a3:dd:df:47:cf:1d:4e:
b0:af:80:f7:5b:5b:c3:1b:64:90:f4:a8:fe:09:31:7f:d4:bd:
db:e9:a3:04:be:bf:50:01:b7:5a:dd:da:6e:16:f9:ae:42:80:
c6:22:77:f2:a3:7f:31:2c:92:80:d9:e7:59:87:04:55:f3:ec:
5a:93:bb:a9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 1 05:01:09 2025 by rpki-client