Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/54/98b2f5-75e1-4245-976d-0150c94f940d/1/OuvyLoZEQlX994owxMsLLZHlt1c.mft
File: OuvyLoZEQlX994owxMsLLZHlt1c.mft (raw, json)
Hash identifier: uklcKjG4EheYGogg/PqcexrzHHQeAA0hoOuy77JaFNA=
Subject key identifier: 2F:47:96:65:8B:D9:56:11:45:DE:CE:61:D9:F9:48:98:21:A9:09:5D
Authority key identifier: 3A:EB:F2:2E:86:44:42:55:FD:F7:8A:30:C4:CB:0B:2D:91:E5:B7:57
Certificate issuer: /CN=3aebf22e86444255fdf78a30c4cb0b2d91e5b757
Certificate serial: 019673E72AA99207EF66A53DAED4C8DD0F4E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OuvyLoZEQlX994owxMsLLZHlt1c.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/54/98b2f5-75e1-4245-976d-0150c94f940d/1/OuvyLoZEQlX994owxMsLLZHlt1c.mft
Manifest number: 14A0
Signing time: Sat 26 Apr 2025 21:00:51 +0000
Manifest this update: Sat 26 Apr 2025 21:00:51 +0000
Manifest next update: Sun 27 Apr 2025 21:00:51 +0000
Files and hashes: 1: OuvyLoZEQlX994owxMsLLZHlt1c.crl (hash: 0/Tpzlo1EKml0AGKDdEOGL8KqHq9Eb1GWsxBVh5OSzM=)
2: XGOc6Yta1j7sUM6Fv0ZGp6ykvs4.roa (hash: c3SifmbdW15nfuTRwIPceqNmWNmz6mVEc9pu384Gaco=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/54/98b2f5-75e1-4245-976d-0150c94f940d/1/OuvyLoZEQlX994owxMsLLZHlt1c.crl
rsync://rpki.ripe.net/repository/DEFAULT/54/98b2f5-75e1-4245-976d-0150c94f940d/1/OuvyLoZEQlX994owxMsLLZHlt1c.mft
rsync://rpki.ripe.net/repository/DEFAULT/OuvyLoZEQlX994owxMsLLZHlt1c.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Apr 2025 20:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:73:e7:2a:a9:92:07:ef:66:a5:3d:ae:d4:c8:dd:0f:4e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3aebf22e86444255fdf78a30c4cb0b2d91e5b757
Validity
Not Before: Apr 26 21:00:51 2025 GMT
Not After : Apr 27 21:00:51 2025 GMT
Subject: CN=2f4796658bd9561145dece61d9f9489821a9095d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:54:0a:26:30:18:a2:ad:fb:e1:49:aa:86:09:
89:f5:94:62:f9:43:62:b9:bd:19:7b:2f:a2:08:7b:
6e:da:5f:49:b5:45:78:50:a9:02:a0:6f:d4:a9:9b:
d7:55:ee:e8:50:8a:2a:cc:86:31:75:b9:f2:e5:16:
7b:38:83:32:71:6a:ac:d7:fe:60:b8:71:01:f5:01:
dd:41:c1:0c:6c:34:f3:df:b1:88:c3:3b:0d:db:28:
33:fc:52:ef:f9:d7:76:93:ea:ca:d6:6d:3b:32:60:
33:fe:95:a0:20:9c:65:1b:2a:79:e5:24:41:dc:f0:
43:51:cb:50:f1:f8:dd:88:4f:49:dd:ce:20:7c:36:
89:b2:87:d4:e2:8a:22:af:0b:67:37:d9:c6:40:15:
4b:38:2c:b1:7e:5f:cb:05:c1:41:8a:25:58:0e:74:
42:4e:d7:af:4a:b6:c7:a7:45:75:15:96:20:b8:ca:
30:f2:0d:7e:6c:fd:36:ac:91:8b:59:6e:d2:0d:1f:
63:5c:c9:03:be:78:7c:03:75:29:db:07:02:b5:86:
fa:88:00:fd:fd:42:66:c4:e2:8f:08:85:eb:34:8a:
d9:c4:da:3c:5b:ea:a7:26:86:30:b5:3f:2c:3c:e7:
c8:8d:e7:4c:80:a0:2a:93:bb:57:7b:85:8f:86:e7:
5c:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2F:47:96:65:8B:D9:56:11:45:DE:CE:61:D9:F9:48:98:21:A9:09:5D
X509v3 Authority Key Identifier:
keyid:3A:EB:F2:2E:86:44:42:55:FD:F7:8A:30:C4:CB:0B:2D:91:E5:B7:57
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OuvyLoZEQlX994owxMsLLZHlt1c.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/54/98b2f5-75e1-4245-976d-0150c94f940d/1/OuvyLoZEQlX994owxMsLLZHlt1c.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/54/98b2f5-75e1-4245-976d-0150c94f940d/1/OuvyLoZEQlX994owxMsLLZHlt1c.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
37:a0:87:d5:aa:eb:b7:b9:b4:eb:b7:38:43:76:d0:30:de:fe:
36:69:ed:30:df:32:d2:2e:c7:3e:cc:1d:cf:f7:cd:fe:fc:3e:
bf:c5:a0:df:26:10:e4:68:fd:c4:fd:10:60:93:dc:73:81:77:
27:6f:bd:34:24:36:d5:7c:d5:3a:eb:b4:6e:32:4b:35:77:1c:
43:4b:1e:94:34:3e:2e:c5:36:5b:df:d0:cc:f0:5b:b4:62:93:
2e:83:70:58:5b:92:f7:43:c9:10:be:6d:14:ee:f5:3e:57:88:
f2:46:24:9e:d0:c0:b4:69:6e:e7:29:ac:89:20:60:32:44:81:
7b:4a:87:73:a8:df:28:bf:94:b1:b7:aa:b2:fd:15:1c:df:7c:
91:97:22:a6:3e:2d:29:77:7f:77:82:24:07:e8:f2:73:c7:7e:
e7:ee:86:8e:fc:25:eb:0e:43:42:07:8c:7b:5c:75:ac:26:88:
7c:6d:33:7b:15:2d:87:27:b4:7f:5b:88:74:36:c4:4f:a3:0e:
e8:ad:dc:af:00:c6:be:2e:d4:5a:d9:53:2d:f0:e0:9c:08:13:
9d:13:02:90:b3:6e:c4:b4:63:e8:5b:37:72:af:75:5c:12:3a:
0a:6a:f9:49:ea:6a:39:37:20:01:6d:1a:b7:67:f5:4d:0b:2c:
38:f4:d9:ef
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 05:49:45 2025 by rpki-client