Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4d/55ea3e-d7e2-430c-af8a-c321840c1faa/1/OI6WKEDNMWjdLqOW_mgSdiiurCc.mft
File: OI6WKEDNMWjdLqOW_mgSdiiurCc.mft (raw, json)
Hash identifier: nXX1wLTUAZ8e4S2PxklNjLjgkRovvAlYZXUNlIU8Gjo=
Subject key identifier: 7E:C3:E5:4E:D8:93:AC:5E:18:E2:A1:30:7F:93:54:83:41:C0:34:26
Authority key identifier: 38:8E:96:28:40:CD:31:68:DD:2E:A3:96:FE:68:12:76:28:AE:AC:27
Certificate issuer: /CN=388e962840cd3168dd2ea396fe68127628aeac27
Certificate serial: 0196730B44238401FC083AECE0B6172ED5D2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OI6WKEDNMWjdLqOW_mgSdiiurCc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4d/55ea3e-d7e2-430c-af8a-c321840c1faa/1/OI6WKEDNMWjdLqOW_mgSdiiurCc.mft
Manifest number: 1141
Signing time: Sat 26 Apr 2025 17:00:40 +0000
Manifest this update: Sat 26 Apr 2025 17:00:40 +0000
Manifest next update: Sun 27 Apr 2025 17:00:40 +0000
Files and hashes: 1: OI6WKEDNMWjdLqOW_mgSdiiurCc.crl (hash: oBmv7F7Hh3wfBc5H5Rl0ngo8e5Z097/sHJxr8laao1I=)
2: SkpuG1SShh_Tu0tEsS_zldokzRY.roa (hash: dFYDpE1wahaZPqcUFRinjMxK5eBFUvf/eJm1l8owCY8=)
3: wx1b7wSo3IENdo5aRxstuEb6e_8.roa (hash: Pjk1ZSdAEd1vWaEOWohydmZmcsdRJu6/0hd4TtAw+OQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4d/55ea3e-d7e2-430c-af8a-c321840c1faa/1/OI6WKEDNMWjdLqOW_mgSdiiurCc.crl
rsync://rpki.ripe.net/repository/DEFAULT/4d/55ea3e-d7e2-430c-af8a-c321840c1faa/1/OI6WKEDNMWjdLqOW_mgSdiiurCc.mft
rsync://rpki.ripe.net/repository/DEFAULT/OI6WKEDNMWjdLqOW_mgSdiiurCc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Apr 2025 11:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:73:0b:44:23:84:01:fc:08:3a:ec:e0:b6:17:2e:d5:d2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=388e962840cd3168dd2ea396fe68127628aeac27
Validity
Not Before: Apr 26 17:00:40 2025 GMT
Not After : Apr 27 17:00:40 2025 GMT
Subject: CN=7ec3e54ed893ac5e18e2a1307f93548341c03426
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:58:f1:72:37:3a:5d:3f:e7:37:42:fa:f3:8a:
43:c9:f8:db:2c:b4:32:eb:8a:0a:55:45:a6:52:cc:
88:b5:f0:fa:a3:b9:f9:01:20:95:a7:97:4c:cd:67:
34:e9:cc:d0:b1:a5:be:b5:7f:74:44:6f:c9:9f:bc:
30:92:77:48:27:74:26:fe:b5:57:8a:eb:cb:72:a3:
c0:3b:af:cc:fd:2e:7d:01:d3:a7:ed:a9:97:bb:78:
5e:50:e9:0e:ba:14:f0:40:84:2a:1c:ee:e2:c7:94:
cd:dc:0d:ef:d9:04:df:2f:f8:4d:28:94:db:71:92:
7b:e7:4a:77:2a:85:92:c2:9c:aa:8d:c4:11:57:f3:
40:13:79:87:11:71:9b:93:e1:9e:d7:be:74:96:42:
b3:77:63:d3:12:03:ac:b2:af:94:dd:df:0d:e7:53:
f1:5d:bf:66:d9:05:61:7c:33:33:15:67:ff:92:5b:
24:5f:4e:07:3b:13:79:ad:00:85:bc:19:17:24:2d:
9a:bd:dc:2f:0f:90:77:3e:9c:ca:97:80:18:b5:bb:
4b:e5:9d:06:4e:5c:fb:f7:95:dd:93:5f:b6:30:d4:
ec:f2:42:50:41:b6:9d:7d:71:7c:89:ad:08:47:23:
8f:37:7a:15:01:43:c4:0f:24:18:ff:5e:fc:92:76:
ca:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7E:C3:E5:4E:D8:93:AC:5E:18:E2:A1:30:7F:93:54:83:41:C0:34:26
X509v3 Authority Key Identifier:
keyid:38:8E:96:28:40:CD:31:68:DD:2E:A3:96:FE:68:12:76:28:AE:AC:27
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OI6WKEDNMWjdLqOW_mgSdiiurCc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/55ea3e-d7e2-430c-af8a-c321840c1faa/1/OI6WKEDNMWjdLqOW_mgSdiiurCc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/55ea3e-d7e2-430c-af8a-c321840c1faa/1/OI6WKEDNMWjdLqOW_mgSdiiurCc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
25:ed:bb:ce:33:53:f3:7d:e8:e1:a8:6f:23:72:c9:2d:f8:bf:
88:84:bf:41:1f:9d:f4:c1:3d:08:27:86:db:7d:58:d7:f5:88:
b2:59:e0:9b:a4:76:fe:8a:93:40:f8:d3:fe:60:e3:0d:d0:1c:
94:0a:ff:05:7f:1e:1b:fa:bf:62:df:4e:be:fd:12:a5:ba:63:
7a:be:3a:15:fe:39:59:d4:5a:29:2e:83:64:b1:06:8c:5a:0e:
18:0b:c7:68:d5:4d:9e:99:65:4e:4a:71:c2:18:b0:1d:e2:7d:
c7:ea:fb:08:ac:91:7f:80:ce:4f:30:e0:df:82:cc:5f:c7:1f:
19:ee:d4:5c:6e:73:92:09:4f:ab:4f:79:d9:2a:8e:c6:98:55:
da:64:fe:e4:e3:75:cd:00:58:06:fc:ba:ae:4d:dc:2c:c1:7d:
60:a8:f5:29:77:73:f0:69:7f:30:f2:75:4f:46:0a:c1:a7:6d:
15:a2:77:1b:0e:12:22:15:af:35:a0:5b:b6:63:83:82:50:2f:
7e:c0:6c:16:fd:2e:83:62:7b:94:e6:4b:c2:e0:9a:16:9b:02:
ec:60:50:29:bd:fc:be:0a:61:0b:41:21:a5:27:86:92:f0:56:
91:8c:a2:cf:ea:3a:f4:3b:70:d5:58:4f:11:6e:e9:48:85:88:
c9:c7:33:bc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 19:01:45 2025 by rpki-client