Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5a/73a71e-446d-41ff-aabf-d5bc239f6a98/1/OXm0NaPP7-fDOoSyL2AzAJpSJcc.mft
File: OXm0NaPP7-fDOoSyL2AzAJpSJcc.mft (raw, json)
Hash identifier: l8+PJDhAmWPfAMibVnGRMSOgZfdPSfry5pnBrdlpoP8=
Subject key identifier: 98:DB:F3:3E:8B:D8:FB:82:1E:0D:F0:AC:0A:EC:E2:DE:0B:8B:7C:73
Authority key identifier: 39:79:B4:35:A3:CF:EF:E7:C3:3A:84:B2:2F:60:33:00:9A:52:25:C7
Certificate issuer: /CN=3979b435a3cfefe7c33a84b22f6033009a5225c7
Certificate serial: 0196771F14A508AA3C9F4B289222C3C24D3D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OXm0NaPP7-fDOoSyL2AzAJpSJcc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5a/73a71e-446d-41ff-aabf-d5bc239f6a98/1/OXm0NaPP7-fDOoSyL2AzAJpSJcc.mft
Manifest number: 14A0
Signing time: Sun 27 Apr 2025 12:00:47 +0000
Manifest this update: Sun 27 Apr 2025 12:00:47 +0000
Manifest next update: Mon 28 Apr 2025 12:00:47 +0000
Files and hashes: 1: OXm0NaPP7-fDOoSyL2AzAJpSJcc.crl (hash: I1yhjodQ8nnEr1kNQ+p7zuNhUiPLLcquQAXxt5EOdSQ=)
2: VwXHoptHeR9mWbeRFzNgE273Y_Y.roa (hash: O7PmmfQJftPOiteORNgrKpX/pUfGsXyieeu22jdpW5U=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5a/73a71e-446d-41ff-aabf-d5bc239f6a98/1/OXm0NaPP7-fDOoSyL2AzAJpSJcc.crl
rsync://rpki.ripe.net/repository/DEFAULT/5a/73a71e-446d-41ff-aabf-d5bc239f6a98/1/OXm0NaPP7-fDOoSyL2AzAJpSJcc.mft
rsync://rpki.ripe.net/repository/DEFAULT/OXm0NaPP7-fDOoSyL2AzAJpSJcc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Apr 2025 05:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:77:1f:14:a5:08:aa:3c:9f:4b:28:92:22:c3:c2:4d:3d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3979b435a3cfefe7c33a84b22f6033009a5225c7
Validity
Not Before: Apr 27 12:00:47 2025 GMT
Not After : Apr 28 12:00:47 2025 GMT
Subject: CN=98dbf33e8bd8fb821e0df0ac0aece2de0b8b7c73
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:6c:54:a0:a1:2e:41:62:19:23:6a:fd:17:04:
eb:54:47:73:df:47:2a:01:80:a8:ef:71:19:c4:4f:
70:58:33:46:20:55:a7:8d:72:d9:e5:81:6b:a2:c4:
10:cd:3d:a3:bc:22:c3:71:5a:d3:e4:76:f2:86:31:
2f:c3:1a:cf:7c:5e:89:7e:c8:18:97:26:74:50:84:
25:44:6c:4c:66:68:ec:11:17:f9:a1:97:cf:5c:a6:
a1:5f:88:b5:6b:92:03:43:63:88:6b:db:58:83:9b:
dd:e1:7c:22:0f:3f:0b:ff:ec:d9:65:bc:15:e7:75:
cb:ee:b3:0c:95:da:40:91:76:d0:5e:6c:14:71:31:
9d:79:62:d4:21:fb:0a:eb:b6:76:93:e7:f7:0e:3e:
61:65:bb:d3:68:d3:db:69:e2:12:a9:b5:7e:4b:94:
45:46:f8:cd:9e:f5:79:bf:a5:ef:f4:bc:a4:b3:5c:
4d:77:56:df:a7:df:3b:44:f8:9a:5a:cf:89:21:a8:
aa:68:ee:30:15:a7:e3:d4:86:67:d7:f2:f6:55:e8:
1f:76:30:b1:9c:75:25:d1:58:d0:ed:d3:c1:db:ff:
f0:2a:40:fe:7e:24:04:93:7d:b2:59:8e:28:c8:27:
32:d2:9a:81:54:b4:fa:8d:0f:70:7a:7e:56:cb:4b:
16:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
98:DB:F3:3E:8B:D8:FB:82:1E:0D:F0:AC:0A:EC:E2:DE:0B:8B:7C:73
X509v3 Authority Key Identifier:
keyid:39:79:B4:35:A3:CF:EF:E7:C3:3A:84:B2:2F:60:33:00:9A:52:25:C7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OXm0NaPP7-fDOoSyL2AzAJpSJcc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/73a71e-446d-41ff-aabf-d5bc239f6a98/1/OXm0NaPP7-fDOoSyL2AzAJpSJcc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/73a71e-446d-41ff-aabf-d5bc239f6a98/1/OXm0NaPP7-fDOoSyL2AzAJpSJcc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
77:fe:e1:fe:1b:a0:f9:06:31:f7:05:2a:2e:0b:b6:ee:13:04:
ea:33:64:48:2f:51:f8:11:60:1c:35:53:0b:7a:db:c4:c5:a9:
89:88:b0:34:ca:53:2e:d5:78:b8:35:74:22:f2:78:97:44:00:
4a:ee:89:b4:9d:06:ea:0b:7c:04:d2:04:43:ca:d2:c0:ff:fd:
86:b7:f6:8d:b9:04:1a:b5:52:16:0f:a5:e7:3c:5f:66:c6:56:
37:d7:71:43:2c:47:1b:0c:ca:06:4e:4a:3d:27:1c:33:62:3a:
a3:59:00:34:5e:c9:62:8c:24:45:b2:48:01:1d:a3:8e:88:e4:
7c:39:32:54:58:e7:d6:e0:8c:50:0e:00:f3:26:8f:92:a9:eb:
8a:01:31:6a:9a:b9:a3:aa:b7:d1:50:e1:b0:27:6a:f9:88:6a:
e9:3a:85:49:99:41:49:03:34:d6:45:e4:74:bc:b2:ce:57:cd:
28:8b:e4:e5:d2:58:49:26:0c:e5:20:82:84:f7:bb:84:92:7b:
54:d3:4f:72:8c:cb:5c:f7:df:3c:56:d9:07:6d:e8:4d:06:46:
30:c2:c1:2f:e1:51:12:e6:56:b7:09:c8:ed:77:de:3c:a0:c7:
49:79:c7:be:d0:24:65:a6:93:a0:f5:5c:fb:5c:3c:09:ce:24:
ce:ae:27:4a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 13:42:59 2025 by rpki-client