Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/86/c4210e-90de-4eca-8206-5537d85d2bd0/1/oLsXGJY93ZEot2_T2CE6FWXvhW0.mft
File: oLsXGJY93ZEot2_T2CE6FWXvhW0.mft (raw, json)
Hash identifier: gOeOlESvizp/5238mqbUGE5EOMXm3NmSYmwBzv2Y6Q4=
Subject key identifier: 45:CA:37:8D:AC:37:53:B5:C7:09:1B:97:4C:FA:7B:1F:B5:49:F9:AA
Authority key identifier: A0:BB:17:18:96:3D:DD:91:28:B7:6F:D3:D8:21:3A:15:65:EF:85:6D
Certificate issuer: /CN=a0bb1718963ddd9128b76fd3d8213a1565ef856d
Certificate serial: 0196808FA6C1DC87B012076376D2E96BD7D8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/oLsXGJY93ZEot2_T2CE6FWXvhW0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/86/c4210e-90de-4eca-8206-5537d85d2bd0/1/oLsXGJY93ZEot2_T2CE6FWXvhW0.mft
Manifest number: 1513
Signing time: Tue 29 Apr 2025 08:00:20 +0000
Manifest this update: Tue 29 Apr 2025 08:00:20 +0000
Manifest next update: Wed 30 Apr 2025 08:00:20 +0000
Files and hashes: 1: 3AKmduEBocJ2JnN0jXYWS-8GbOY.roa (hash: iBJD1wTxS+O8/2QNKHhH8F14y6hfViRbWeFBsKe3/pI=)
2: kIIfJ-bgIB8FEHmlLuoBBuJNtKA.roa (hash: d5x0f5Yxm3xcFQXy2bPoyZU9c7+8Vyq9PQskQziwEEU=)
3: oLsXGJY93ZEot2_T2CE6FWXvhW0.crl (hash: miUBvR9sgn73qhHzWT8lp3bttnr6jwDjkp5igl4n6Dw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/86/c4210e-90de-4eca-8206-5537d85d2bd0/1/oLsXGJY93ZEot2_T2CE6FWXvhW0.crl
rsync://rpki.ripe.net/repository/DEFAULT/86/c4210e-90de-4eca-8206-5537d85d2bd0/1/oLsXGJY93ZEot2_T2CE6FWXvhW0.mft
rsync://rpki.ripe.net/repository/DEFAULT/oLsXGJY93ZEot2_T2CE6FWXvhW0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 30 Apr 2025 08:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:80:8f:a6:c1:dc:87:b0:12:07:63:76:d2:e9:6b:d7:d8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a0bb1718963ddd9128b76fd3d8213a1565ef856d
Validity
Not Before: Apr 29 08:00:20 2025 GMT
Not After : Apr 30 08:00:20 2025 GMT
Subject: CN=45ca378dac3753b5c7091b974cfa7b1fb549f9aa
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:a3:d0:75:d8:5c:e5:c9:12:3d:2c:93:25:93:
80:8a:1e:36:19:53:e0:81:2b:b8:09:ae:b0:47:1a:
bb:2a:23:0f:97:2c:f7:bf:14:d6:10:b9:75:a0:fe:
83:84:6c:e4:44:ae:51:35:c8:45:96:18:7b:11:8e:
10:ec:98:98:69:af:c5:0c:16:d2:cb:91:89:a3:59:
c2:23:70:29:51:ab:a9:2b:a0:f7:11:dd:0c:e8:c8:
e0:a5:54:fa:66:9e:ba:90:e6:cb:36:a9:cd:67:72:
ce:1d:ce:9c:15:2b:5d:a4:b3:28:14:3a:66:b5:4b:
23:b7:ce:2b:ad:a8:49:b2:4a:98:86:ed:91:79:44:
ab:70:fb:60:6e:be:76:29:4d:fe:70:4d:b0:44:44:
d1:49:24:29:66:49:70:46:fa:4b:70:63:7b:47:d9:
f0:d8:d7:d9:d5:19:09:cd:b6:ca:2d:a8:94:bb:c5:
85:f5:d5:31:15:c0:ab:92:e1:12:03:0f:fb:44:47:
aa:cd:39:8c:c4:16:f0:c5:cb:5c:c4:97:3d:23:a9:
ad:7a:41:b7:fe:6e:39:4f:54:cc:c4:97:08:f7:fe:
0c:84:a2:49:03:84:68:3f:72:64:27:02:46:e3:b4:
fa:88:d4:ca:7b:fa:dc:88:b0:4c:62:30:dd:be:c1:
40:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
45:CA:37:8D:AC:37:53:B5:C7:09:1B:97:4C:FA:7B:1F:B5:49:F9:AA
X509v3 Authority Key Identifier:
keyid:A0:BB:17:18:96:3D:DD:91:28:B7:6F:D3:D8:21:3A:15:65:EF:85:6D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/oLsXGJY93ZEot2_T2CE6FWXvhW0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/86/c4210e-90de-4eca-8206-5537d85d2bd0/1/oLsXGJY93ZEot2_T2CE6FWXvhW0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/86/c4210e-90de-4eca-8206-5537d85d2bd0/1/oLsXGJY93ZEot2_T2CE6FWXvhW0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
95:29:f8:5e:19:33:81:8f:2b:71:07:e2:87:30:78:63:fc:fe:
5c:9b:ae:96:3a:11:0b:8a:0c:65:fe:46:de:30:cd:a6:30:a5:
3c:1c:81:f6:b9:25:5f:b3:8d:c7:0d:06:c9:bf:63:3d:60:54:
d8:b2:b1:9b:2d:62:80:ad:2e:24:2b:49:ea:9e:f9:a2:a7:24:
94:40:64:e8:c7:a0:65:33:2c:0c:49:b9:e8:ad:6d:45:5b:dd:
7d:0d:10:ec:29:a0:02:68:6b:66:ad:28:cf:08:85:21:1c:96:
c6:a9:ce:65:25:92:49:75:aa:55:21:ef:9e:ad:0f:4d:2f:7e:
be:95:c1:3c:2f:f6:88:e7:af:36:0a:c9:1c:3b:6a:f3:da:a4:
cd:01:78:55:f5:6b:22:17:30:00:7a:49:d8:72:58:11:90:0c:
79:e4:cf:50:1d:f3:c4:59:22:b7:31:71:48:41:fe:a9:ff:57:
f1:bc:cd:d4:3f:f2:cc:ce:4d:bb:f4:5e:72:0a:7d:60:a9:5d:
91:66:14:42:cc:9a:a5:5b:50:03:0f:d8:ba:37:d6:bd:09:3e:
09:1a:e0:8e:75:fb:ba:1e:59:1f:a0:66:51:5e:ae:f7:57:0c:
53:a2:c8:39:e6:25:37:bd:79:bb:2c:c1:e2:a5:ca:6c:92:1e:
cf:d4:53:90
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 29 11:11:23 2025 by rpki-client