Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4b/f32454-3ef9-4412-8570-5cf43d35908e/1/OEgrEyC5gPRtbkBP59WL2xHVD9M.mft
File: OEgrEyC5gPRtbkBP59WL2xHVD9M.mft (raw, json)
Hash identifier: HILzEeB2lVPDTGQV1gXbTapz9vd9PqxaCSk1SQ5HQfQ=
Subject key identifier: 93:3C:E1:A7:D4:F0:03:CE:80:37:68:79:EB:A8:BF:2F:B6:FA:3C:19
Authority key identifier: 38:48:2B:13:20:B9:80:F4:6D:6E:40:4F:E7:D5:8B:DB:11:D5:0F:D3
Certificate issuer: /CN=38482b1320b980f46d6e404fe7d58bdb11d50fd3
Certificate serial: 019681D9823BF3DC71A4892596E063EC4706
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OEgrEyC5gPRtbkBP59WL2xHVD9M.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4b/f32454-3ef9-4412-8570-5cf43d35908e/1/OEgrEyC5gPRtbkBP59WL2xHVD9M.mft
Manifest number: 1517
Signing time: Tue 29 Apr 2025 14:00:37 +0000
Manifest this update: Tue 29 Apr 2025 14:00:37 +0000
Manifest next update: Wed 30 Apr 2025 14:00:37 +0000
Files and hashes: 1: 8cUHkHeMSC76fH99pPRKCG6K4As.roa (hash: 55nCWREAZoiaySk5Kp1IWRogrctw38RXeb5qRSfBuwo=)
2: OEgrEyC5gPRtbkBP59WL2xHVD9M.crl (hash: n44PHInJ/KTqCGYPPup7TcEndMCTwzjb0TEhrk4fyHs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4b/f32454-3ef9-4412-8570-5cf43d35908e/1/OEgrEyC5gPRtbkBP59WL2xHVD9M.crl
rsync://rpki.ripe.net/repository/DEFAULT/4b/f32454-3ef9-4412-8570-5cf43d35908e/1/OEgrEyC5gPRtbkBP59WL2xHVD9M.mft
rsync://rpki.ripe.net/repository/DEFAULT/OEgrEyC5gPRtbkBP59WL2xHVD9M.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 30 Apr 2025 14:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:81:d9:82:3b:f3:dc:71:a4:89:25:96:e0:63:ec:47:06
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=38482b1320b980f46d6e404fe7d58bdb11d50fd3
Validity
Not Before: Apr 29 14:00:37 2025 GMT
Not After : Apr 30 14:00:37 2025 GMT
Subject: CN=933ce1a7d4f003ce80376879eba8bf2fb6fa3c19
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:58:c7:ce:20:b5:e9:dc:b5:20:ba:30:f7:cf:
78:dd:ac:c4:79:ae:22:41:09:67:5c:cb:67:b4:64:
8a:09:79:4c:9a:46:1f:cc:7e:e3:34:b9:fe:19:00:
ac:9d:e0:0b:7b:f3:b9:6f:ff:19:50:ba:4a:f7:a7:
9d:28:1d:2a:d8:41:2c:d4:24:24:92:07:c2:95:f9:
8f:d4:b0:4d:a4:77:52:53:92:4f:be:99:ff:11:8e:
f1:9d:4d:38:80:52:2b:e4:0f:9f:87:56:13:e3:0a:
39:53:1d:bd:3f:13:17:ee:89:46:08:7c:85:93:cb:
a6:8e:af:3c:0b:09:23:7b:ea:6f:28:c8:27:5f:fe:
46:24:07:a1:f4:00:ec:2c:24:1d:b4:23:fd:de:a9:
45:a4:64:7a:20:fb:b8:04:51:3c:48:91:82:24:84:
70:ca:9f:6f:e7:8f:f7:06:9f:0f:01:38:b6:b5:b1:
cc:94:cf:58:ef:99:b3:14:2a:e2:b7:69:5f:44:76:
0b:7c:cc:78:d2:d1:93:e7:6a:9c:f0:57:be:1a:be:
27:40:f4:68:df:bf:bf:de:9e:d2:25:ef:ff:42:61:
d8:ea:00:0d:23:34:41:b7:e2:ea:25:12:41:6a:2c:
94:74:9f:c3:75:e5:5e:4d:67:d8:dd:b7:fe:8e:d3:
8b:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
93:3C:E1:A7:D4:F0:03:CE:80:37:68:79:EB:A8:BF:2F:B6:FA:3C:19
X509v3 Authority Key Identifier:
keyid:38:48:2B:13:20:B9:80:F4:6D:6E:40:4F:E7:D5:8B:DB:11:D5:0F:D3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OEgrEyC5gPRtbkBP59WL2xHVD9M.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4b/f32454-3ef9-4412-8570-5cf43d35908e/1/OEgrEyC5gPRtbkBP59WL2xHVD9M.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4b/f32454-3ef9-4412-8570-5cf43d35908e/1/OEgrEyC5gPRtbkBP59WL2xHVD9M.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
73:1a:f5:e1:38:5d:37:7d:9f:16:a6:e3:96:d2:90:56:2c:4a:
d5:8e:27:d3:3f:c0:ca:8d:72:22:74:81:0b:ca:e4:2b:bc:1e:
2a:07:4b:8a:08:80:4d:72:f6:2e:0f:50:64:cb:c5:21:4f:47:
d0:23:5b:db:ad:37:92:b3:0f:32:52:74:24:15:0b:1a:3e:e2:
55:66:d5:b9:5c:f0:85:88:61:c7:82:08:41:b1:09:dd:9b:83:
5a:96:a2:a2:b5:28:16:2a:cc:73:53:64:24:7f:33:2d:bb:8a:
77:f8:a6:52:e2:a9:8e:f3:f1:08:d1:2e:73:28:c8:c4:b8:34:
51:90:1a:71:7d:3e:18:a9:d3:e2:49:d8:79:42:67:1d:3b:4f:
49:f8:86:30:89:98:90:09:79:b9:2c:5d:f6:ee:00:e0:b9:4b:
6f:82:a5:c2:0d:69:5c:21:0b:e1:dc:5d:62:dd:50:2d:2f:93:
cb:64:dc:88:05:63:dd:ee:d4:e3:b2:19:dd:d3:85:9f:b5:5a:
79:d2:52:84:24:c7:0e:5a:c3:39:4b:f7:50:db:3e:f0:57:d4:
89:2b:df:90:9b:13:26:69:4a:cd:dd:21:c8:11:44:7b:34:cb:
d4:df:f6:c6:6d:06:ad:f8:52:30:17:aa:96:22:6f:a7:dc:fb:
66:01:34:1c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 29 20:19:03 2025 by rpki-client