Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a6/76b1d3-4fd9-46cf-83e6-20c4dc1e4a77/1/mOszws77XaNGB7ALUAXkS3VSSh8.mft
File: mOszws77XaNGB7ALUAXkS3VSSh8.mft (raw, json)
Hash identifier: qXajKTmYo+jXWu5f3C/TO3rjd2X9KeJSOOkkLcl8HhE=
Subject key identifier: 15:C1:C1:51:42:8D:85:C6:44:2E:22:4A:DB:5F:C9:E8:00:96:64:6E
Authority key identifier: 98:EB:33:C2:CE:FB:5D:A3:46:07:B0:0B:50:05:E4:4B:75:52:4A:1F
Certificate issuer: /CN=98eb33c2cefb5da34607b00b5005e44b75524a1f
Certificate serial: 01967F45ED8730BEF73897F2CBC3E1EE758E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mOszws77XaNGB7ALUAXkS3VSSh8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a6/76b1d3-4fd9-46cf-83e6-20c4dc1e4a77/1/mOszws77XaNGB7ALUAXkS3VSSh8.mft
Manifest number: 0DAF
Signing time: Tue 29 Apr 2025 02:00:11 +0000
Manifest this update: Tue 29 Apr 2025 02:00:11 +0000
Manifest next update: Wed 30 Apr 2025 02:00:11 +0000
Files and hashes: 1: FGRnxc9C3d9faJa4e9X6S4cHjFA.roa (hash: d5SgFAeT21YMWMJqdCASd/9NKR53dDrqmG/NUaV6X8s=)
2: mOszws77XaNGB7ALUAXkS3VSSh8.crl (hash: Bhz/nHgB446lCUzykW/qdrclSrtigS7vSQQOeXns5rI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a6/76b1d3-4fd9-46cf-83e6-20c4dc1e4a77/1/mOszws77XaNGB7ALUAXkS3VSSh8.crl
rsync://rpki.ripe.net/repository/DEFAULT/a6/76b1d3-4fd9-46cf-83e6-20c4dc1e4a77/1/mOszws77XaNGB7ALUAXkS3VSSh8.mft
rsync://rpki.ripe.net/repository/DEFAULT/mOszws77XaNGB7ALUAXkS3VSSh8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 30 Apr 2025 00:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:7f:45:ed:87:30:be:f7:38:97:f2:cb:c3:e1:ee:75:8e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=98eb33c2cefb5da34607b00b5005e44b75524a1f
Validity
Not Before: Apr 29 02:00:11 2025 GMT
Not After : Apr 30 02:00:11 2025 GMT
Subject: CN=15c1c151428d85c6442e224adb5fc9e80096646e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:fd:50:cb:44:91:93:bc:5f:17:a1:73:1c:09:
f0:8d:59:c5:6f:ad:86:15:23:ec:fd:9e:71:52:0a:
fd:65:8f:09:5b:44:69:bc:85:32:90:4c:2f:8c:fb:
f2:06:54:54:b1:57:7b:a5:97:11:82:dc:02:8d:55:
08:5d:fb:c6:b8:3a:14:78:64:3b:e0:2f:92:66:23:
2d:dd:af:97:75:d1:2e:f9:cf:c4:5c:ab:9e:d7:a9:
e7:f4:d9:30:54:24:f6:a2:79:71:ba:00:c1:d0:f8:
91:f4:88:f3:1f:39:c5:b0:06:40:aa:09:c1:8b:c5:
fb:57:36:99:e5:52:dd:c9:f1:b3:7e:c1:51:d9:72:
4a:6d:03:43:69:87:81:1a:47:b1:ee:fc:ac:a3:36:
62:8e:9e:2d:de:ce:fc:73:73:08:93:da:80:dc:8b:
f9:0c:10:4a:6c:8e:5c:89:dd:e0:4f:dd:bc:2d:95:
09:c4:d9:35:a4:5c:cf:c1:55:c0:63:23:11:75:be:
f5:7a:10:79:16:43:bb:e9:0a:23:30:09:27:f7:08:
3e:8e:ab:f1:c4:bc:ef:a2:b7:da:51:ba:92:39:e2:
a2:6a:5b:83:8f:35:04:ef:5c:aa:0e:ee:0d:62:7c:
5d:06:9c:47:55:3b:3f:ce:96:5f:c1:53:bd:eb:13:
83:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
15:C1:C1:51:42:8D:85:C6:44:2E:22:4A:DB:5F:C9:E8:00:96:64:6E
X509v3 Authority Key Identifier:
keyid:98:EB:33:C2:CE:FB:5D:A3:46:07:B0:0B:50:05:E4:4B:75:52:4A:1F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mOszws77XaNGB7ALUAXkS3VSSh8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a6/76b1d3-4fd9-46cf-83e6-20c4dc1e4a77/1/mOszws77XaNGB7ALUAXkS3VSSh8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a6/76b1d3-4fd9-46cf-83e6-20c4dc1e4a77/1/mOszws77XaNGB7ALUAXkS3VSSh8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
16:d9:ba:27:ac:58:f4:95:14:47:f1:4e:a5:fe:5e:16:07:56:
dc:e9:15:86:51:eb:62:18:7f:a6:26:66:cf:84:72:c7:1a:8f:
09:02:91:81:40:c9:c3:28:65:4e:86:75:1e:d3:b5:3b:fb:26:
8d:ac:f7:5f:cc:a2:82:32:f0:88:1c:15:63:74:18:77:da:5a:
82:99:78:f8:9d:92:72:6a:a7:dc:f0:9b:01:2b:58:62:df:08:
8c:fe:3c:3a:07:b7:94:c4:e2:b0:e9:2f:d7:4d:a2:3c:0f:cc:
0e:89:41:43:d1:90:25:3b:57:62:ae:81:1c:73:f0:2f:72:77:
4f:81:6f:90:39:49:1d:fb:b5:e3:8a:0c:1f:54:9f:86:4c:8c:
2d:9a:8c:c4:4e:94:a5:0c:11:72:db:0d:45:8a:0c:d0:d8:0e:
5a:86:0c:d9:84:7d:e8:20:48:4b:0b:64:8c:97:44:e1:30:e8:
2d:29:fd:a2:dd:ea:07:5a:41:33:9f:2b:3d:23:f9:77:71:8f:
f2:fb:47:35:b0:46:ed:4f:8c:d2:6e:a4:dc:7a:b6:79:f4:fc:
88:c5:e8:7c:30:7e:64:58:23:f2:ed:90:d0:b9:3a:cf:9f:8c:
1b:4e:59:d2:11:a4:03:03:cb:fb:5f:40:a7:37:ff:0a:c1:b8:
e5:f3:dd:84
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 29 09:09:14 2025 by rpki-client