Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4e/00816a-eedf-4190-bc33-3a02a242f444/1/OCUoqxzRttxzwLCbZ9Pn41hPNj0.mft
File: OCUoqxzRttxzwLCbZ9Pn41hPNj0.mft (raw, json)
Hash identifier: EbfsNoDTK1S1TbC3W7qFtDTMs4BN8ZjmZ93ukbuojHs=
Subject key identifier: 4A:D0:79:96:E7:B6:33:A7:E2:E5:56:88:88:48:7A:84:25:86:D6:84
Authority key identifier: 38:25:28:AB:1C:D1:B6:DC:73:C0:B0:9B:67:D3:E7:E3:58:4F:36:3D
Certificate issuer: /CN=382528ab1cd1b6dc73c0b09b67d3e7e3584f363d
Certificate serial: 01967C0E14D16736F6C1FC07D4B86D1471C7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OCUoqxzRttxzwLCbZ9Pn41hPNj0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4e/00816a-eedf-4190-bc33-3a02a242f444/1/OCUoqxzRttxzwLCbZ9Pn41hPNj0.mft
Manifest number: 1514
Signing time: Mon 28 Apr 2025 11:00:19 +0000
Manifest this update: Mon 28 Apr 2025 11:00:19 +0000
Manifest next update: Tue 29 Apr 2025 11:00:19 +0000
Files and hashes: 1: OCUoqxzRttxzwLCbZ9Pn41hPNj0.crl (hash: RpYvDtFZC7WpOIJoYKmkXxKRa69SO0N3sKhnT/YD73k=)
2: Q4SQTvELqYETYT6vjRCA2iGLGgc.roa (hash: tzC8sef+XSgDXhot9EyLUIit2vwD1a0sRJU8Ks3S1wY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4e/00816a-eedf-4190-bc33-3a02a242f444/1/OCUoqxzRttxzwLCbZ9Pn41hPNj0.crl
rsync://rpki.ripe.net/repository/DEFAULT/4e/00816a-eedf-4190-bc33-3a02a242f444/1/OCUoqxzRttxzwLCbZ9Pn41hPNj0.mft
rsync://rpki.ripe.net/repository/DEFAULT/OCUoqxzRttxzwLCbZ9Pn41hPNj0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 29 Apr 2025 11:00:19 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:7c:0e:14:d1:67:36:f6:c1:fc:07:d4:b8:6d:14:71:c7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=382528ab1cd1b6dc73c0b09b67d3e7e3584f363d
Validity
Not Before: Apr 28 11:00:19 2025 GMT
Not After : Apr 29 11:00:19 2025 GMT
Subject: CN=4ad07996e7b633a7e2e5568888487a842586d684
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:c3:44:f6:24:3a:c8:e2:bd:57:cc:8c:7d:1d:
5e:c9:bd:ae:1d:d9:42:32:a4:67:71:71:e1:b6:33:
25:87:ad:21:14:9b:41:24:5d:9f:ec:2a:8a:63:48:
b2:23:10:88:18:81:96:9f:2e:e5:8a:d5:19:c1:b1:
a5:a4:60:7a:56:b0:21:cc:b5:bd:82:7c:23:4c:5b:
8c:5a:3f:37:04:28:3a:d9:3b:28:cd:ea:e6:01:e0:
1c:23:df:f4:e3:48:0d:2c:00:e6:af:47:07:a4:14:
9c:dc:1e:16:93:38:d6:7d:02:79:5d:bd:c6:e3:9f:
3f:ed:2b:f8:30:61:2b:56:7c:9a:df:1c:8a:31:f5:
e9:53:2e:03:65:6b:46:f3:be:e5:c6:65:1b:86:2d:
b9:c5:f4:0a:d7:f1:ef:90:66:36:c3:4a:f1:c5:27:
3a:d3:12:47:c6:ed:71:fc:c4:6b:48:9c:20:2c:b5:
e3:5c:ed:59:a6:f1:e1:f5:7c:1e:42:dd:62:28:bc:
30:e6:51:ce:81:44:38:ed:47:09:ba:87:11:42:82:
89:ca:71:67:bc:6d:43:57:60:54:28:56:c2:cb:42:
cf:48:d1:c7:82:4c:52:58:d8:72:a5:3e:c4:cb:4a:
71:38:31:0f:83:fc:6b:8e:f8:78:e6:fe:ba:9f:5c:
d6:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4A:D0:79:96:E7:B6:33:A7:E2:E5:56:88:88:48:7A:84:25:86:D6:84
X509v3 Authority Key Identifier:
keyid:38:25:28:AB:1C:D1:B6:DC:73:C0:B0:9B:67:D3:E7:E3:58:4F:36:3D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OCUoqxzRttxzwLCbZ9Pn41hPNj0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/00816a-eedf-4190-bc33-3a02a242f444/1/OCUoqxzRttxzwLCbZ9Pn41hPNj0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/00816a-eedf-4190-bc33-3a02a242f444/1/OCUoqxzRttxzwLCbZ9Pn41hPNj0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b6:7b:05:33:5b:51:1d:ff:98:60:c7:03:ce:01:27:4f:85:16:
16:4b:3b:02:06:0d:7e:af:7c:23:ed:3a:4d:3c:97:0d:c1:76:
0a:8e:1b:b8:ff:7f:60:eb:e9:33:2f:b1:61:c7:ef:8d:14:0b:
70:f3:fe:01:b0:4f:82:e9:6a:fa:a7:07:02:84:43:30:fd:69:
9d:5a:90:89:56:a2:82:7d:ae:67:c4:9f:4a:24:9b:3d:2c:f8:
0a:fc:39:ce:11:92:b4:ba:54:56:22:5b:d4:b5:c7:66:67:cd:
0a:f4:4e:4e:a6:1a:74:e9:ff:73:0b:89:ed:dd:71:c8:99:7a:
dc:d5:6f:c3:67:f4:2c:ff:9b:bf:1f:43:94:a3:c5:0d:70:55:
c5:13:4f:d1:1b:1c:8f:7e:8a:fc:60:e9:ff:9c:8f:d6:35:8a:
03:e7:a3:89:ea:2b:65:f4:6e:a9:46:00:76:67:90:c5:6b:b5:
f6:96:5f:73:0e:19:5c:05:aa:8f:25:c9:46:30:90:cf:3c:d9:
57:1d:ff:f2:84:92:4b:a3:f7:fe:ad:f5:a6:d4:b6:f4:d4:7b:
fd:2f:7e:c5:fa:ba:22:5f:30:32:cf:79:6e:fb:85:eb:a7:e8:
49:1f:82:08:75:e1:b3:37:e0:3e:83:ca:bb:c3:79:f1:fd:49:
6d:c5:e8:01
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 19:59:38 2025 by rpki-client