Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/91/b45d79-a4d7-4460-bfe7-bbea2918e102/1/ogiOBtVTz_KT0nf012w6cQvYsvc.mft
File: ogiOBtVTz_KT0nf012w6cQvYsvc.mft (raw, json)
Hash identifier: MQ5fRuTsRb0WrEug4mLsINTEkMHHwkNJ3+FNl9VxwG8=
Subject key identifier: 90:D4:D9:7E:BF:93:76:F6:AC:E8:38:DB:3E:6A:55:E9:EF:61:93:77
Authority key identifier: A2:08:8E:06:D5:53:CF:F2:93:D2:77:F4:D7:6C:3A:71:0B:D8:B2:F7
Certificate issuer: /CN=a2088e06d553cff293d277f4d76c3a710bd8b2f7
Certificate serial: 019675D53446C30C3823F5CCDA5459E198FF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ogiOBtVTz_KT0nf012w6cQvYsvc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/91/b45d79-a4d7-4460-bfe7-bbea2918e102/1/ogiOBtVTz_KT0nf012w6cQvYsvc.mft
Manifest number: 1555
Signing time: Sun 27 Apr 2025 06:00:28 +0000
Manifest this update: Sun 27 Apr 2025 06:00:28 +0000
Manifest next update: Mon 28 Apr 2025 06:00:28 +0000
Files and hashes: 1: 4en9va8jCZNwuV4bW7NKxVamz54.roa (hash: sNZVLTVL9KoD1p+QjvV2CcAfu43CsFx04jNm3+y7/uc=)
2: _vsjWI5yfirlYBEQFo7GYfCcJuY.roa (hash: cWFUVNFFAdcN3FLLUOZOmGlMNCedYLfmkMjDFDAXLTg=)
3: edWAVfkKeL_p4SOqKwWgAG9qG9o.roa (hash: eesAWNHbi/a4/dOuceKDaMTobB00ZxoBZJAUv+VOUbI=)
4: ogiOBtVTz_KT0nf012w6cQvYsvc.crl (hash: NHAog/DJvvCAWly1fyAm0bqAElVH8SpDuO4nnP9xOAQ=)
5: pbIiqJaS1EGbniEbzOhuiaxLoYs.roa (hash: WUDrXqNFVweqXZgj8CONFBSXhspu+0e8gEJSRHtVtqA=)
6: qp4i_eZ6J2UOG69HPGVB6kmhFng.roa (hash: XVzQsRuZhQ9NpMeiK4lLd7vR0Edi82kUpYpVa1/GB40=)
7: tCLfNgix4tP_V8A6nMeJydQuNF4.roa (hash: l1RWT6JrhQfnPs1IttMvpunkYT6LyNsJ3Z9oTTd5L40=)
8: v-Zyc-8gXfCAs8hhOf7JEov0XFQ.roa (hash: 6+ea9BVfVupiKipjKzEQYkv6CJOZM8C0elI+moY54XI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/91/b45d79-a4d7-4460-bfe7-bbea2918e102/1/ogiOBtVTz_KT0nf012w6cQvYsvc.crl
rsync://rpki.ripe.net/repository/DEFAULT/91/b45d79-a4d7-4460-bfe7-bbea2918e102/1/ogiOBtVTz_KT0nf012w6cQvYsvc.mft
rsync://rpki.ripe.net/repository/DEFAULT/ogiOBtVTz_KT0nf012w6cQvYsvc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Apr 2025 05:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:75:d5:34:46:c3:0c:38:23:f5:cc:da:54:59:e1:98:ff
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a2088e06d553cff293d277f4d76c3a710bd8b2f7
Validity
Not Before: Apr 27 06:00:28 2025 GMT
Not After : Apr 28 06:00:28 2025 GMT
Subject: CN=90d4d97ebf9376f6ace838db3e6a55e9ef619377
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:d3:33:05:0f:9e:84:48:e1:75:f1:ef:52:10:
b2:9e:b5:36:b5:e1:bb:3d:3a:89:ad:42:71:43:e2:
98:2e:78:11:2c:c4:ed:f3:26:7b:f6:26:bd:c3:09:
84:24:ce:d2:0b:67:33:67:85:44:e3:90:8b:6e:cd:
0a:b9:8e:5d:63:1d:de:9e:21:2e:d4:04:01:55:3e:
81:b5:ac:18:6d:4f:bc:96:d5:b0:35:84:8d:f9:f2:
b3:50:06:3d:9b:56:cf:19:3e:d9:3f:4f:e7:54:3f:
2f:9f:01:cd:30:4b:ca:5e:d6:29:1c:35:5d:52:07:
31:20:95:61:9a:cb:9d:1b:36:0e:59:f6:fc:82:32:
81:58:cd:df:9e:0f:59:82:38:d7:2c:85:da:bc:2f:
6e:56:08:ce:f0:d5:44:1b:9f:16:73:e9:93:e7:2c:
b1:f0:90:bc:de:1b:24:ff:36:f5:b4:7b:c1:2b:98:
67:c0:80:52:3b:18:7c:ac:f3:29:9a:b8:3f:3b:bf:
94:5c:54:d5:29:df:ff:5a:36:ba:58:83:a4:86:69:
a1:c0:4a:95:79:74:01:34:d6:9f:ba:ae:7b:a1:cf:
9a:60:30:b5:6a:3a:a1:ed:3a:91:d0:82:38:7d:57:
b4:09:75:93:53:b5:8a:54:38:60:b8:1f:1a:b0:7a:
c4:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
90:D4:D9:7E:BF:93:76:F6:AC:E8:38:DB:3E:6A:55:E9:EF:61:93:77
X509v3 Authority Key Identifier:
keyid:A2:08:8E:06:D5:53:CF:F2:93:D2:77:F4:D7:6C:3A:71:0B:D8:B2:F7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ogiOBtVTz_KT0nf012w6cQvYsvc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/91/b45d79-a4d7-4460-bfe7-bbea2918e102/1/ogiOBtVTz_KT0nf012w6cQvYsvc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/91/b45d79-a4d7-4460-bfe7-bbea2918e102/1/ogiOBtVTz_KT0nf012w6cQvYsvc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
97:01:7e:cd:04:51:ea:8b:67:27:6a:31:e1:61:6e:8b:a0:c2:
cb:a5:97:83:a0:37:db:5d:0f:54:8d:c6:cd:66:3a:61:34:c0:
62:70:d5:ba:68:4d:a0:ae:36:69:de:ea:be:a9:23:63:d6:05:
ee:3e:af:ce:81:d7:3b:55:62:ff:6a:d6:ea:94:f7:8e:4d:55:
ca:bb:7a:58:5a:35:97:c6:20:97:c7:8a:be:af:46:9b:36:1f:
ce:8a:7a:9c:38:7e:be:17:c3:ac:70:aa:83:07:be:ea:b0:22:
c1:5b:38:c7:69:a1:52:f7:69:d2:1b:3c:11:d2:cd:c7:3d:b5:
bb:c4:b0:f5:02:43:dd:71:63:ca:6a:03:17:53:61:37:2e:7b:
de:53:ec:6e:df:1c:98:31:8f:08:36:71:f1:7b:a1:77:93:0d:
89:e8:89:5f:da:ee:2a:4f:c1:31:20:31:cc:e6:5b:13:2c:bd:
a1:f4:1c:40:c8:93:d6:e8:e0:f8:65:5d:cd:18:20:8f:14:c3:
c9:a7:9d:a3:82:d1:a9:53:fa:3d:2f:89:29:d2:9e:ad:0f:be:
a8:e4:47:f8:65:a5:78:11:c8:72:ea:5e:63:f1:fe:52:4c:d8:
78:8d:3b:92:cd:09:2d:4d:4e:d4:cf:64:10:a6:d1:cc:90:af:
01:53:3c:77
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 09:16:12 2025 by rpki-client