Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/95/c4d7b0-6ebf-4cac-a8ad-fe3e318cae9c/1/r2Okes26jsHNhdTXnzazW2mOX4k.mft
File: r2Okes26jsHNhdTXnzazW2mOX4k.mft (raw, json)
Hash identifier: Wy0417WnuzUrgA1Op5rzLQlIVjRzeAGcVp4q9VzoCZ0=
Subject key identifier: EE:01:0A:EB:EE:90:4E:7B:7E:4D:EB:B9:31:43:14:F6:EE:F4:86:0F
Authority key identifier: AF:63:A4:7A:CD:BA:8E:C1:CD:85:D4:D7:9F:36:B3:5B:69:8E:5F:89
Certificate issuer: /CN=af63a47acdba8ec1cd85d4d79f36b35b698e5f89
Certificate serial: 019690031827FB189944B16ACDA689D25705
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/r2Okes26jsHNhdTXnzazW2mOX4k.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/95/c4d7b0-6ebf-4cac-a8ad-fe3e318cae9c/1/r2Okes26jsHNhdTXnzazW2mOX4k.mft
Manifest number: 151D
Signing time: Fri 02 May 2025 08:00:43 +0000
Manifest this update: Fri 02 May 2025 08:00:43 +0000
Manifest next update: Sat 03 May 2025 08:00:43 +0000
Files and hashes: 1: YXk4VQ9w2ydeFfWUpTPAL38DI14.roa (hash: 63k2DxSPaDP/x2Jl3oeCNKnb4PXDg6/RYTgk7tLrZPw=)
2: r2Okes26jsHNhdTXnzazW2mOX4k.crl (hash: z767/cPtAdF1mU26CjPCaTiBThQqLMzvEmsMP2tdLq0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/95/c4d7b0-6ebf-4cac-a8ad-fe3e318cae9c/1/r2Okes26jsHNhdTXnzazW2mOX4k.crl
rsync://rpki.ripe.net/repository/DEFAULT/95/c4d7b0-6ebf-4cac-a8ad-fe3e318cae9c/1/r2Okes26jsHNhdTXnzazW2mOX4k.mft
rsync://rpki.ripe.net/repository/DEFAULT/r2Okes26jsHNhdTXnzazW2mOX4k.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 03 May 2025 01:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:90:03:18:27:fb:18:99:44:b1:6a:cd:a6:89:d2:57:05
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=af63a47acdba8ec1cd85d4d79f36b35b698e5f89
Validity
Not Before: May 2 08:00:43 2025 GMT
Not After : May 3 08:00:43 2025 GMT
Subject: CN=ee010aebee904e7b7e4debb9314314f6eef4860f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:92:51:df:05:ad:a4:b3:b1:17:09:d6:27:68:f3:
d2:c8:ca:8d:72:82:4c:30:c7:22:e0:ff:66:11:29:
88:69:c0:06:e9:e7:ba:15:ef:b3:b4:c9:62:6e:e4:
05:69:82:7d:ff:a0:95:f3:c0:d4:37:04:96:54:af:
d4:b7:ee:8f:43:23:98:cf:e1:87:99:22:42:b2:b0:
62:c7:62:2a:19:e6:6d:f3:89:a7:ec:26:b6:97:38:
d6:f2:01:a5:32:08:19:e5:cf:59:2c:6e:e4:7b:b2:
35:0f:f9:9a:a9:64:2e:34:2d:2d:da:14:c5:16:d3:
9f:c9:af:be:f2:7a:13:ab:45:8b:7a:23:60:b6:ca:
4f:92:a5:65:6c:a6:9e:1b:f3:27:b9:68:b9:c4:69:
96:cc:e0:70:8a:ea:e2:bd:4d:52:ec:9c:94:cb:9d:
7c:a0:19:d4:cc:ba:06:7a:de:6d:76:b9:d0:8b:d6:
93:ab:52:dd:65:93:fe:21:f5:c1:be:a8:40:b9:90:
42:fb:6f:32:33:59:cb:cd:fc:79:6c:88:b5:a0:be:
d5:08:65:9c:25:0f:3a:aa:b6:5f:28:57:9d:fa:89:
47:94:7e:04:26:9f:0d:49:2a:a1:df:6f:47:57:48:
43:0f:05:04:3f:b7:2a:73:d6:bc:f6:4d:b6:7d:03:
62:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EE:01:0A:EB:EE:90:4E:7B:7E:4D:EB:B9:31:43:14:F6:EE:F4:86:0F
X509v3 Authority Key Identifier:
keyid:AF:63:A4:7A:CD:BA:8E:C1:CD:85:D4:D7:9F:36:B3:5B:69:8E:5F:89
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/r2Okes26jsHNhdTXnzazW2mOX4k.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/95/c4d7b0-6ebf-4cac-a8ad-fe3e318cae9c/1/r2Okes26jsHNhdTXnzazW2mOX4k.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/95/c4d7b0-6ebf-4cac-a8ad-fe3e318cae9c/1/r2Okes26jsHNhdTXnzazW2mOX4k.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b5:7b:d7:0a:92:48:3b:1d:48:a8:22:45:13:40:a2:c3:80:62:
a2:9b:b7:e0:2b:fb:36:b9:da:64:58:de:30:57:e3:41:1d:b5:
46:3d:0c:cf:08:24:b6:dd:7c:3f:d9:d9:59:ba:12:66:0c:78:
f8:b2:78:c8:8b:3f:60:e1:20:a4:ab:4b:f6:63:44:f9:c3:87:
9e:4e:b2:ba:e9:37:b3:cf:5d:a5:be:6a:8e:48:a7:42:51:74:
d6:20:b6:8e:83:9f:bd:d3:58:37:57:5f:77:3a:a5:ed:7c:34:
85:1a:eb:4e:9f:61:1a:96:cd:e5:09:55:f7:bb:9f:af:3b:30:
27:4b:0d:7f:dc:41:76:0a:62:60:04:10:21:bf:b5:36:eb:64:
df:ad:21:fe:14:33:33:0d:2e:26:b2:22:8b:3a:57:6b:56:8d:
3d:ff:c4:6d:fc:43:29:bb:6a:bd:94:20:19:7c:53:93:ae:3a:
18:e6:e0:78:21:9c:bf:52:a5:c7:f4:c3:7a:ce:8e:6f:f5:cd:
ea:65:2e:b4:f3:7e:3c:bc:f0:a3:e5:9d:dd:af:39:a4:3d:60:
a6:7c:7a:2d:53:1a:e3:97:75:68:2f:2e:80:99:4a:1f:a1:1f:
3d:14:bf:48:4f:c8:84:74:78:46:47:c1:88:55:7b:f1:27:ed:
48:24:0e:b3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 2 12:03:14 2025 by rpki-client