Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6c/d27da2-2754-4d7b-af90-6e02af0a4994/1/oJN1JVd8sq8bKFyWQx29YA9Xy-g.mft
File: oJN1JVd8sq8bKFyWQx29YA9Xy-g.mft (raw, json)
Hash identifier: IxNtzh+CGE+WpP9PC6dokJcV4bp2Nfl6abdBiY8YFoA=
Subject key identifier: 26:EB:3B:12:C2:7D:4D:52:AE:5E:42:32:24:43:2C:1B:99:C9:B3:12
Authority key identifier: A0:93:75:25:57:7C:B2:AF:1B:28:5C:96:43:1D:BD:60:0F:57:CB:E8
Certificate issuer: /CN=a0937525577cb2af1b285c96431dbd600f57cbe8
Certificate serial: 01968022068DC65F6A1F743E70D7DAA3EAD4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/oJN1JVd8sq8bKFyWQx29YA9Xy-g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6c/d27da2-2754-4d7b-af90-6e02af0a4994/1/oJN1JVd8sq8bKFyWQx29YA9Xy-g.mft
Manifest number: 1160
Signing time: Tue 29 Apr 2025 06:00:35 +0000
Manifest this update: Tue 29 Apr 2025 06:00:35 +0000
Manifest next update: Wed 30 Apr 2025 06:00:35 +0000
Files and hashes: 1: cGnnbkiVLX_2V8eckMDBKTSh5es.roa (hash: 17Bbtx++8vEIOl6usyCHj+Kebb1Ac8VgiDnBmWVz9UM=)
2: oJN1JVd8sq8bKFyWQx29YA9Xy-g.crl (hash: fjsSYfninojO5Vhoqn7mdkB2qjPrTYoqXls8og3viLw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6c/d27da2-2754-4d7b-af90-6e02af0a4994/1/oJN1JVd8sq8bKFyWQx29YA9Xy-g.crl
rsync://rpki.ripe.net/repository/DEFAULT/6c/d27da2-2754-4d7b-af90-6e02af0a4994/1/oJN1JVd8sq8bKFyWQx29YA9Xy-g.mft
rsync://rpki.ripe.net/repository/DEFAULT/oJN1JVd8sq8bKFyWQx29YA9Xy-g.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 30 Apr 2025 06:00:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:80:22:06:8d:c6:5f:6a:1f:74:3e:70:d7:da:a3:ea:d4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a0937525577cb2af1b285c96431dbd600f57cbe8
Validity
Not Before: Apr 29 06:00:35 2025 GMT
Not After : Apr 30 06:00:35 2025 GMT
Subject: CN=26eb3b12c27d4d52ae5e423224432c1b99c9b312
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:b3:c8:a9:8d:b7:99:7e:04:be:48:69:74:9e:
99:d2:20:02:6a:2f:f6:2e:7d:68:c9:dd:9e:79:f5:
49:8d:cc:95:53:0f:b2:ae:64:98:84:9a:6e:c4:53:
a3:32:6a:58:51:c1:52:cd:5e:e6:da:29:83:20:cb:
d2:f0:05:de:74:a9:8f:fa:04:25:8a:13:76:60:62:
26:cc:10:8b:b5:90:cc:11:7a:81:c2:ed:ff:08:c9:
bc:cd:9d:c1:d5:4d:ee:2e:3a:4e:68:52:79:c1:ee:
c5:fa:11:47:8e:6f:df:00:1c:63:5a:ab:59:fa:53:
dc:10:54:cf:02:a1:bb:0e:a1:29:a9:3c:6b:79:e6:
45:6b:e8:06:cf:07:b1:2e:70:92:b8:e4:92:e7:c9:
6b:18:e0:a3:74:03:60:f3:9f:74:d9:11:e6:06:47:
18:65:1a:a8:cf:4c:43:f6:cb:63:44:8a:c3:e3:29:
b2:af:ff:95:23:7d:9b:d3:9c:6e:c1:f0:3f:e2:5b:
e8:b3:7e:ea:b2:52:57:2d:0c:4a:29:10:6e:64:b3:
b4:60:48:30:47:65:65:e0:9f:5a:f6:30:02:5e:a7:
6c:06:76:a0:f4:ea:cd:45:54:a0:54:45:da:f9:86:
f5:b3:d1:3a:e1:10:4d:27:60:3a:17:6c:f8:9e:34:
3e:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
26:EB:3B:12:C2:7D:4D:52:AE:5E:42:32:24:43:2C:1B:99:C9:B3:12
X509v3 Authority Key Identifier:
keyid:A0:93:75:25:57:7C:B2:AF:1B:28:5C:96:43:1D:BD:60:0F:57:CB:E8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/oJN1JVd8sq8bKFyWQx29YA9Xy-g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6c/d27da2-2754-4d7b-af90-6e02af0a4994/1/oJN1JVd8sq8bKFyWQx29YA9Xy-g.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6c/d27da2-2754-4d7b-af90-6e02af0a4994/1/oJN1JVd8sq8bKFyWQx29YA9Xy-g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8f:b7:22:c1:1d:f8:ab:87:76:ee:04:db:dc:d6:ff:72:e0:55:
7d:ef:ca:08:6a:11:e9:fb:44:0a:81:03:5e:99:c4:f7:39:0c:
06:d4:00:1a:34:17:d2:45:f0:f1:f7:23:d8:e1:6d:2e:f9:1a:
3f:29:84:43:03:4c:8a:34:15:4c:42:4b:a6:25:21:88:7e:c1:
a0:d0:00:6d:11:bb:ed:4e:e9:b0:0c:08:fa:07:e6:6d:d1:05:
46:7d:02:b8:99:13:f5:f9:23:9e:5b:34:ba:45:a6:70:86:31:
11:49:d8:e0:2e:bf:77:b4:62:06:56:43:ba:dc:8f:b6:fc:cd:
fc:45:cb:fd:ea:7f:54:b7:4c:d5:92:d5:6a:f8:12:a3:4d:44:
14:89:1f:ce:86:be:42:7e:e3:51:73:d8:dc:4c:14:2d:03:ee:
1a:7b:4e:76:9d:81:d5:98:38:c0:37:43:05:1f:66:f1:80:e2:
a7:42:d2:66:08:ff:72:a4:06:06:19:54:61:5a:e2:2f:57:2c:
ad:7b:93:65:7d:9c:3e:fa:bf:b4:ea:62:fc:3b:fc:a6:a2:11:
19:f5:86:d0:0d:f3:a2:09:c8:5a:5a:90:b0:f9:52:8e:5e:77:
7c:23:1e:6c:26:ae:23:5e:68:c0:90:4d:aa:f8:3c:e7:b6:58:
5d:4f:d6:eb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 29 12:11:33 2025 by rpki-client