Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6a/c38797-d7fa-4a57-9f83-a16a34c46f30/1/OIeaeKWKSFzNiXDwQy2489dxcls.mft
File: OIeaeKWKSFzNiXDwQy2489dxcls.mft (raw, json)
Hash identifier: cegjpn9P/QTivOEMwlO+ImQgfvaCEcyUXr877ztxZHk=
Subject key identifier: F4:BA:92:AC:D7:18:20:EC:32:2C:70:91:0B:5A:CA:02:36:4B:13:69
Authority key identifier: 38:87:9A:78:A5:8A:48:5C:CD:89:70:F0:43:2D:B8:F3:D7:71:72:5B
Certificate issuer: /CN=38879a78a58a485ccd8970f0432db8f3d771725b
Certificate serial: 01968210A2886C13B85BF71C20F22D6E09BE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OIeaeKWKSFzNiXDwQy2489dxcls.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6a/c38797-d7fa-4a57-9f83-a16a34c46f30/1/OIeaeKWKSFzNiXDwQy2489dxcls.mft
Manifest number: 1516
Signing time: Tue 29 Apr 2025 15:00:50 +0000
Manifest this update: Tue 29 Apr 2025 15:00:50 +0000
Manifest next update: Wed 30 Apr 2025 15:00:50 +0000
Files and hashes: 1: OIeaeKWKSFzNiXDwQy2489dxcls.crl (hash: 2JbzO9/mYxzVIMpE96HPe7dDSNdYuCucoH60Cca8LG0=)
2: aJF-_eUqR8Yma02F31ybPienJuY.roa (hash: duGwNDtPKrkB5Se3luyctTXBg25/A0K/ZPMK4FyGebo=)
3: xj83lBqnCiYenkchlr_-eEoB-30.roa (hash: rDaj6xDIGI3i5anidMQG7nyOyM3UPZwMFnNZdzH+C5s=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6a/c38797-d7fa-4a57-9f83-a16a34c46f30/1/OIeaeKWKSFzNiXDwQy2489dxcls.crl
rsync://rpki.ripe.net/repository/DEFAULT/6a/c38797-d7fa-4a57-9f83-a16a34c46f30/1/OIeaeKWKSFzNiXDwQy2489dxcls.mft
rsync://rpki.ripe.net/repository/DEFAULT/OIeaeKWKSFzNiXDwQy2489dxcls.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 30 Apr 2025 15:00:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:82:10:a2:88:6c:13:b8:5b:f7:1c:20:f2:2d:6e:09:be
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=38879a78a58a485ccd8970f0432db8f3d771725b
Validity
Not Before: Apr 29 15:00:50 2025 GMT
Not After : Apr 30 15:00:50 2025 GMT
Subject: CN=f4ba92acd71820ec322c70910b5aca02364b1369
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:de:8d:2b:37:ce:9b:97:b3:f0:8f:07:65:93:cf:
f0:ba:5d:51:06:8a:20:7b:ed:3d:ac:31:d8:5c:4a:
31:a5:95:93:24:de:04:a0:35:e6:c7:08:f9:39:66:
df:f3:be:09:fa:0b:37:d6:7b:59:25:6a:06:14:1d:
1e:5c:b1:ac:2e:b2:77:35:4f:e7:22:ee:45:35:94:
54:3d:5d:87:9c:cc:d7:32:f9:f5:47:c7:f0:60:80:
76:ed:09:06:37:bd:3e:c5:12:7c:f9:92:34:71:ba:
d7:75:64:7a:97:6f:44:95:3c:75:cf:97:3f:ca:29:
05:60:e9:1d:0e:a2:5a:e5:80:6e:22:05:0d:cf:4a:
51:9b:e3:71:11:53:62:bc:94:12:4a:cc:53:79:26:
f5:6e:11:3d:3b:e5:70:21:74:70:27:ac:58:10:f7:
b1:df:ba:8e:cb:08:60:90:c4:08:7b:a3:bf:7a:eb:
cc:fb:37:a2:04:96:c6:de:fc:db:17:9b:24:fb:3f:
a0:6f:ff:35:8b:8d:2f:a4:68:26:e7:4e:70:3c:3c:
84:7b:94:25:95:88:a0:24:30:13:ac:5f:e8:5e:b6:
21:86:8c:9e:d4:b1:94:85:2e:ab:01:b7:da:20:6e:
9f:04:12:24:9e:f6:d8:f3:4f:df:f8:73:67:b6:d2:
04:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F4:BA:92:AC:D7:18:20:EC:32:2C:70:91:0B:5A:CA:02:36:4B:13:69
X509v3 Authority Key Identifier:
keyid:38:87:9A:78:A5:8A:48:5C:CD:89:70:F0:43:2D:B8:F3:D7:71:72:5B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OIeaeKWKSFzNiXDwQy2489dxcls.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/c38797-d7fa-4a57-9f83-a16a34c46f30/1/OIeaeKWKSFzNiXDwQy2489dxcls.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/c38797-d7fa-4a57-9f83-a16a34c46f30/1/OIeaeKWKSFzNiXDwQy2489dxcls.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a2:88:30:21:c9:3a:9b:7e:25:da:d0:3f:6b:b8:d4:10:f9:ba:
14:09:49:c5:38:55:d3:5b:3a:7c:82:f1:9c:b2:f3:42:f6:6e:
48:5e:62:e7:9e:12:56:8e:5a:37:0c:3f:e4:a9:a3:e5:b7:70:
f1:0d:7d:14:3d:5e:44:47:aa:15:64:c6:f1:bf:57:29:8f:af:
0a:ce:b9:82:91:9d:d2:f7:ae:b2:be:33:21:86:2f:76:0f:35:
ce:d7:3c:df:05:d3:52:25:49:03:97:e2:84:f6:29:b5:a7:68:
62:cf:7f:c3:4c:d2:d8:d3:a5:91:41:ac:bc:e3:a7:71:71:9f:
62:22:eb:de:3b:4a:03:d2:22:27:67:27:ad:20:82:79:de:5a:
67:85:3a:b4:b6:05:48:a9:a6:25:52:24:2a:89:26:21:fb:d7:
8d:f1:b4:e3:58:73:85:8b:d4:12:23:e8:d7:cf:42:02:67:4f:
95:7b:36:a3:64:57:f4:24:52:e1:74:88:2b:39:1d:1f:f9:d5:
f5:aa:b3:6a:24:4a:c0:22:fa:97:99:c6:f0:54:1e:98:a4:53:
22:dc:c3:9e:3c:f4:32:19:cb:bb:fd:27:86:f6:5d:1e:16:51:
be:8d:45:61:99:42:06:fa:69:b4:ca:56:fc:1a:84:9d:4d:7f:
e4:df:8a:8e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 30 00:05:17 2025 by rpki-client