Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/68/120e32-793c-4e23-9dd8-4a75a14121bf/1/oRlmxatOoGc8xBx4bgd4OUuL2s8.mft
File: oRlmxatOoGc8xBx4bgd4OUuL2s8.mft (raw, json)
Hash identifier: Qx6+pYlkz8IPJuCS0QbPFmbv9Gau8tEzWVfr5aGa1Bc=
Subject key identifier: 4A:06:AB:5A:3D:79:7D:05:1A:03:4D:8B:29:42:7E:65:AE:5F:0E:C6
Authority key identifier: A1:19:66:C5:AB:4E:A0:67:3C:C4:1C:78:6E:07:78:39:4B:8B:DA:CF
Certificate issuer: /CN=a11966c5ab4ea0673cc41c786e0778394b8bdacf
Certificate serial: 0196839189E8395C5868896B1DAB2BF4A9DB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/oRlmxatOoGc8xBx4bgd4OUuL2s8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/68/120e32-793c-4e23-9dd8-4a75a14121bf/1/oRlmxatOoGc8xBx4bgd4OUuL2s8.mft
Manifest number: 1518
Signing time: Tue 29 Apr 2025 22:01:15 +0000
Manifest this update: Tue 29 Apr 2025 22:01:15 +0000
Manifest next update: Wed 30 Apr 2025 22:01:15 +0000
Files and hashes: 1: oRlmxatOoGc8xBx4bgd4OUuL2s8.crl (hash: 4gzcqpsKZNLBPP1V+c2Rprd8mUnyBcF+2jOo5rTVp/Q=)
2: qPThmJkS6FxAgaSTFhSE99KManI.roa (hash: Do8CZ36UGaGoT9RKraM+Tjl00O5s0+cXk4PDU/3dbE4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/68/120e32-793c-4e23-9dd8-4a75a14121bf/1/oRlmxatOoGc8xBx4bgd4OUuL2s8.crl
rsync://rpki.ripe.net/repository/DEFAULT/68/120e32-793c-4e23-9dd8-4a75a14121bf/1/oRlmxatOoGc8xBx4bgd4OUuL2s8.mft
rsync://rpki.ripe.net/repository/DEFAULT/oRlmxatOoGc8xBx4bgd4OUuL2s8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 30 Apr 2025 22:01:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:83:91:89:e8:39:5c:58:68:89:6b:1d:ab:2b:f4:a9:db
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a11966c5ab4ea0673cc41c786e0778394b8bdacf
Validity
Not Before: Apr 29 22:01:15 2025 GMT
Not After : Apr 30 22:01:15 2025 GMT
Subject: CN=4a06ab5a3d797d051a034d8b29427e65ae5f0ec6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:c4:95:b1:c9:18:c1:f0:f2:8b:b8:6d:ce:27:
55:3f:bd:c0:aa:92:7a:ad:35:d5:51:72:51:51:b3:
2c:90:46:43:89:ec:a5:1e:4d:69:4d:be:38:68:35:
67:e9:73:a0:59:f5:2e:c7:0b:86:9b:8e:1c:51:7a:
72:3e:54:c0:fe:28:a6:87:76:50:bd:6d:a0:2c:6d:
93:d1:b6:ec:cb:12:9b:ef:f0:ca:35:bf:c2:f3:6c:
30:93:cc:1c:19:23:45:ac:63:0f:d4:45:c0:ee:4a:
65:f2:f3:5e:bf:0c:17:80:bf:0d:3a:d6:e3:e5:5b:
89:eb:43:9a:fc:8a:b3:03:0a:5e:15:1f:6f:a0:da:
92:59:ac:e4:40:13:43:6c:e8:d8:78:7f:65:98:2c:
6a:e6:ee:87:44:d9:33:c2:49:4d:96:e8:b2:7d:71:
e4:da:3a:ee:c6:65:2c:74:7c:34:66:39:17:83:a1:
14:10:07:2a:d3:a3:98:65:95:52:97:6e:76:3e:f9:
23:06:b1:77:70:13:a7:91:1f:f3:d7:d4:97:92:cb:
d8:90:b7:a6:36:44:5c:0b:dc:45:76:c4:af:30:e1:
cd:f5:4b:cb:e9:b2:cb:aa:45:29:41:0b:41:75:6b:
16:ed:c1:80:8c:25:21:50:3f:f4:1e:2c:dd:fc:c4:
06:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4A:06:AB:5A:3D:79:7D:05:1A:03:4D:8B:29:42:7E:65:AE:5F:0E:C6
X509v3 Authority Key Identifier:
keyid:A1:19:66:C5:AB:4E:A0:67:3C:C4:1C:78:6E:07:78:39:4B:8B:DA:CF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/oRlmxatOoGc8xBx4bgd4OUuL2s8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/68/120e32-793c-4e23-9dd8-4a75a14121bf/1/oRlmxatOoGc8xBx4bgd4OUuL2s8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/68/120e32-793c-4e23-9dd8-4a75a14121bf/1/oRlmxatOoGc8xBx4bgd4OUuL2s8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5a:8e:66:40:b4:b7:cd:32:f5:4a:3b:b7:a6:fb:bc:f2:11:c8:
40:ea:c5:55:69:9a:33:79:8c:d3:c1:52:99:b1:7e:c9:a5:97:
e2:3a:f8:43:e1:21:5e:f6:3a:97:64:45:9f:6f:79:08:ad:2f:
39:74:62:d7:b6:0d:10:3e:bc:8f:1e:40:17:55:1f:a0:f5:49:
6f:14:7b:d4:c1:f9:1d:46:a7:9c:8a:42:d7:83:6a:c2:21:45:
61:93:6b:a2:cc:ef:f0:6b:75:b5:1c:ec:0b:22:11:67:a6:ad:
df:45:ff:5a:86:58:b1:5e:44:10:5f:80:1a:cc:2c:ca:a5:e8:
05:d9:b0:b4:67:5f:be:82:a0:71:ab:35:d9:65:11:d5:d1:5f:
00:38:8f:74:df:79:66:f9:c2:72:25:66:73:ba:5d:d5:6f:22:
04:2a:07:5e:e6:1e:ab:d6:ae:fd:fb:a8:46:2b:09:b1:2e:a6:
ce:16:70:70:54:25:f5:ad:e3:e7:99:6f:4b:b3:e6:c1:75:12:
d3:5d:9c:d8:ad:00:e2:24:5e:35:74:5e:fd:41:d4:79:b6:59:
70:35:f2:1c:8d:7e:e3:7f:53:4f:c9:b9:c0:f7:b7:63:53:0c:
6c:4e:2f:13:6b:05:ed:dd:02:4a:cf:b7:12:4f:67:42:5a:c8:
1f:0d:dc:39
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 30 04:42:13 2025 by rpki-client