Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/94/e1fb52-979d-4436-be51-8584bef0b7d5/1/oLalsaFMhtTPtGxOhuzUBmgEzJA.mft
File: oLalsaFMhtTPtGxOhuzUBmgEzJA.mft (raw, json)
Hash identifier: 4NRM3l1T/E93OuN/SUdrPvXMNFozncelE4rmgYD1L10=
Subject key identifier: 1F:90:93:A2:F9:82:61:E8:88:F9:71:C0:EE:BB:C8:35:0F:2F:63:A6
Authority key identifier: A0:B6:A5:B1:A1:4C:86:D4:CF:B4:6C:4E:86:EC:D4:06:68:04:CC:90
Certificate issuer: /CN=a0b6a5b1a14c86d4cfb46c4e86ecd4066804cc90
Certificate serial: 01967C7BF46672E3E386D522E4904BE9BA7D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/oLalsaFMhtTPtGxOhuzUBmgEzJA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/94/e1fb52-979d-4436-be51-8584bef0b7d5/1/oLalsaFMhtTPtGxOhuzUBmgEzJA.mft
Manifest number: 052E
Signing time: Mon 28 Apr 2025 13:00:20 +0000
Manifest this update: Mon 28 Apr 2025 13:00:20 +0000
Manifest next update: Tue 29 Apr 2025 13:00:20 +0000
Files and hashes: 1: MCk_wjcNWplBl8XuQ-Q-tXaOPdg.roa (hash: FrFfJHN2MqG7rUNbBMB2RUeLHgQ0eftZ7IS2VaSzx58=)
2: oLalsaFMhtTPtGxOhuzUBmgEzJA.crl (hash: 5VzE/u02XBavSvlFzdDZXD71fOZYsOY+Y4odhaz2vzw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/94/e1fb52-979d-4436-be51-8584bef0b7d5/1/oLalsaFMhtTPtGxOhuzUBmgEzJA.crl
rsync://rpki.ripe.net/repository/DEFAULT/94/e1fb52-979d-4436-be51-8584bef0b7d5/1/oLalsaFMhtTPtGxOhuzUBmgEzJA.mft
rsync://rpki.ripe.net/repository/DEFAULT/oLalsaFMhtTPtGxOhuzUBmgEzJA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 29 Apr 2025 13:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:7c:7b:f4:66:72:e3:e3:86:d5:22:e4:90:4b:e9:ba:7d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a0b6a5b1a14c86d4cfb46c4e86ecd4066804cc90
Validity
Not Before: Apr 28 13:00:20 2025 GMT
Not After : Apr 29 13:00:20 2025 GMT
Subject: CN=1f9093a2f98261e888f971c0eebbc8350f2f63a6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f1:0b:cf:42:2f:32:6b:f4:4a:54:24:19:77:5d:
d8:bd:35:4d:da:df:ac:5f:41:b3:dc:4f:da:23:7c:
e7:c9:b8:1c:1c:c8:8c:b4:a2:10:12:6a:3b:b0:e5:
7d:6c:79:47:9a:1b:02:d9:15:b7:e7:57:15:cb:1b:
54:16:65:48:74:b0:9c:bc:81:62:52:6b:4f:48:3b:
7a:78:eb:9b:09:80:00:9a:04:ac:e2:95:3f:15:7d:
23:e9:fc:2e:9b:e8:ee:ef:b1:f8:45:78:60:0a:5d:
fa:ec:27:61:2f:be:32:bc:3a:10:b9:9c:39:cc:78:
68:8b:95:94:c2:4a:4e:04:03:7a:90:1f:3b:9e:13:
b4:a3:4d:1f:38:8a:b5:53:b4:02:fa:13:b0:40:0e:
34:9d:02:c3:44:01:9d:c0:06:03:88:56:8c:28:66:
80:86:22:f4:73:0b:e7:72:e9:2a:fd:a6:2f:be:20:
0d:be:26:c6:f3:1f:e6:b8:3d:82:3b:19:dd:4e:23:
82:07:c9:c6:c6:24:b0:0e:42:92:b0:c6:b6:f6:26:
06:92:c3:8d:96:64:6f:1a:c4:e3:52:78:a7:61:d1:
d8:76:bc:2c:96:56:4e:d7:fa:75:5d:be:ea:03:92:
0d:d4:7f:d2:e1:56:9c:54:00:75:b8:ac:a9:f7:83:
6e:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1F:90:93:A2:F9:82:61:E8:88:F9:71:C0:EE:BB:C8:35:0F:2F:63:A6
X509v3 Authority Key Identifier:
keyid:A0:B6:A5:B1:A1:4C:86:D4:CF:B4:6C:4E:86:EC:D4:06:68:04:CC:90
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/oLalsaFMhtTPtGxOhuzUBmgEzJA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/94/e1fb52-979d-4436-be51-8584bef0b7d5/1/oLalsaFMhtTPtGxOhuzUBmgEzJA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/94/e1fb52-979d-4436-be51-8584bef0b7d5/1/oLalsaFMhtTPtGxOhuzUBmgEzJA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
40:ce:78:d2:25:5f:4f:5f:c0:c8:07:82:4a:08:9a:25:ee:98:
3f:c5:04:16:eb:52:52:ae:9f:6f:02:2d:5a:16:90:4b:43:f3:
f0:2e:b8:2b:ff:76:0b:45:42:a2:fa:03:fd:13:35:0d:19:21:
d0:35:3b:d9:67:68:33:45:c6:24:3d:37:c2:6b:4d:e2:b1:ae:
c5:38:97:b1:d3:c6:9b:2a:6f:bd:08:59:22:01:b9:78:6d:94:
01:29:9a:27:c4:e7:be:74:e0:86:11:f1:48:aa:50:25:e6:e5:
1d:46:af:6d:2d:07:a3:f7:37:56:1d:5f:46:09:c0:2f:e6:16:
56:93:2f:05:79:cc:ec:cb:6e:8c:08:4c:30:3b:b5:1a:40:e0:
f2:eb:c4:28:7a:2d:c3:0c:40:0c:2e:a2:e7:02:b8:0c:67:29:
e1:53:c9:bd:65:e7:d0:be:3e:55:be:e0:46:0a:dc:12:79:4a:
2e:36:fd:90:a0:ad:69:8d:3d:64:1c:f1:e6:dc:b4:4b:a2:b2:
8e:1f:38:58:a6:1d:ee:db:1a:60:87:55:fe:a7:81:8f:83:c7:
e5:70:cc:65:85:ed:74:5c:a4:51:d3:29:88:1a:75:94:34:6c:
03:46:6f:65:90:14:14:b1:66:31:f8:d0:09:21:0d:64:4e:0e:
20:a9:f0:94
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 16:08:13 2025 by rpki-client