Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/75/b640a6-7ecd-420b-86ed-86d194ae8a71/1/oaLRWp2N_ezej-awwYBNCp7i5ig.mft
File: oaLRWp2N_ezej-awwYBNCp7i5ig.mft (raw, json)
Hash identifier: iWq1hGhHTXY3pL1FG7q65OY4BowtroMGLhxOHYISSYk=
Subject key identifier: 63:7B:2F:FD:37:56:F4:AC:D5:F5:B2:1B:AB:7A:6B:46:CA:A0:B6:3A
Authority key identifier: A1:A2:D1:5A:9D:8D:FD:EC:DE:8F:E6:B0:C1:80:4D:0A:9E:E2:E6:28
Certificate issuer: /CN=a1a2d15a9d8dfdecde8fe6b0c1804d0a9ee2e628
Certificate serial: 0196A01ACEFBAD72B04AA747E18E2A25FEBA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/oaLRWp2N_ezej-awwYBNCp7i5ig.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/75/b640a6-7ecd-420b-86ed-86d194ae8a71/1/oaLRWp2N_ezej-awwYBNCp7i5ig.mft
Manifest number: 0FBF
Signing time: Mon 05 May 2025 11:00:33 +0000
Manifest this update: Mon 05 May 2025 11:00:33 +0000
Manifest next update: Tue 06 May 2025 11:00:33 +0000
Files and hashes: 1: g8PGSyPYHcwtTKtN52pgkwL2VLw.roa (hash: d/0R1T8TL/elS7S9V2dPYN7wq40xN73ObdYQKEckxT4=)
2: oaLRWp2N_ezej-awwYBNCp7i5ig.crl (hash: /7bQ8yAF41Jk4pMXg/6gHwd+qC36dRbVOCSFede+FI0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/75/b640a6-7ecd-420b-86ed-86d194ae8a71/1/oaLRWp2N_ezej-awwYBNCp7i5ig.crl
rsync://rpki.ripe.net/repository/DEFAULT/75/b640a6-7ecd-420b-86ed-86d194ae8a71/1/oaLRWp2N_ezej-awwYBNCp7i5ig.mft
rsync://rpki.ripe.net/repository/DEFAULT/oaLRWp2N_ezej-awwYBNCp7i5ig.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 06 May 2025 10:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:a0:1a:ce:fb:ad:72:b0:4a:a7:47:e1:8e:2a:25:fe:ba
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a1a2d15a9d8dfdecde8fe6b0c1804d0a9ee2e628
Validity
Not Before: May 5 11:00:33 2025 GMT
Not After : May 6 11:00:33 2025 GMT
Subject: CN=637b2ffd3756f4acd5f5b21bab7a6b46caa0b63a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:98:04:d1:63:01:9f:e0:51:52:11:03:6b:1b:
1f:69:0c:b4:e9:ed:26:87:8c:92:ed:5e:d5:68:84:
74:d6:83:a6:bd:94:1c:24:3a:f2:53:73:33:b8:fd:
76:7b:54:db:8a:03:38:b0:57:01:f6:ab:e8:b1:d9:
c8:57:9c:25:62:51:0a:01:5a:a0:11:10:61:1f:33:
9c:c4:2f:00:a1:97:98:1f:cd:e3:23:57:7d:61:13:
39:61:0d:63:08:12:11:40:fd:31:71:d8:71:f7:aa:
e1:44:87:9f:9c:12:a6:cc:d6:d7:9e:86:90:ad:3d:
6e:c0:e4:a7:07:50:68:eb:7b:bc:1b:e4:a2:9a:6c:
67:83:ae:88:4c:f9:2b:de:33:b9:af:bc:31:e6:de:
99:9d:8f:b1:23:4b:19:d6:a3:1d:ff:97:33:71:ec:
55:bc:56:9c:94:82:97:06:bf:7b:5a:3d:1c:82:44:
0e:85:9e:72:4f:34:79:48:7b:43:7c:b0:a5:42:52:
b1:51:e6:52:a6:92:d3:43:b7:66:f2:7b:d0:19:54:
9c:73:68:81:34:5a:a9:9a:a3:63:69:5a:64:23:39:
70:41:e0:ca:1e:1e:12:39:d7:06:e3:26:5f:fc:ec:
0f:2f:e0:d7:8a:af:61:ee:e4:3b:a7:9a:cb:f4:60:
aa:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
63:7B:2F:FD:37:56:F4:AC:D5:F5:B2:1B:AB:7A:6B:46:CA:A0:B6:3A
X509v3 Authority Key Identifier:
keyid:A1:A2:D1:5A:9D:8D:FD:EC:DE:8F:E6:B0:C1:80:4D:0A:9E:E2:E6:28
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/oaLRWp2N_ezej-awwYBNCp7i5ig.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/75/b640a6-7ecd-420b-86ed-86d194ae8a71/1/oaLRWp2N_ezej-awwYBNCp7i5ig.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/75/b640a6-7ecd-420b-86ed-86d194ae8a71/1/oaLRWp2N_ezej-awwYBNCp7i5ig.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1b:d9:31:52:07:f7:10:a1:a6:55:6d:ec:15:76:5d:7f:42:e2:
67:c3:35:47:04:7b:8f:6c:a9:05:61:8f:68:86:a2:c2:af:ff:
fe:a0:ad:b2:e2:3b:5d:09:d8:59:b7:a5:ec:bf:4e:eb:7c:00:
00:36:36:43:f2:ca:4e:0c:c5:86:25:1c:3a:36:1a:bc:d7:fd:
7b:3d:3d:35:13:e5:8f:ec:28:08:33:e2:74:40:4b:ed:42:6b:
8a:c7:69:8e:92:1e:27:54:1a:d1:4b:cb:82:6a:8a:4c:8e:60:
0c:41:5a:17:82:d4:80:de:b9:e4:27:41:5c:d9:ad:1d:00:86:
30:05:0d:bb:82:5d:93:5e:4b:d0:02:18:3c:14:12:29:77:b2:
f7:74:45:50:08:77:12:b8:2f:25:61:d6:57:d6:09:40:66:8b:
da:80:fd:ba:a9:67:87:1e:4f:d9:bc:f6:13:ab:d5:6d:b0:8f:
46:63:5f:ea:7b:57:44:37:fa:c3:a0:4e:f5:b9:a3:2e:ab:4b:
db:ce:58:ac:80:b7:5f:8a:38:3e:92:4b:04:49:7a:69:27:00:
14:39:57:7a:3f:4c:52:15:22:b2:c0:0c:59:f2:84:14:8d:5a:
aa:d4:23:af:37:f0:44:3f:e2:2b:99:b9:8e:75:ee:28:8e:04:
4f:24:bf:e3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 5 18:44:58 2025 by rpki-client