Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/af/09d329-7ffe-451b-bc82-2831a4850645/1/Oe6oRlUcbkGblH4NoQfuywBwQZo.mft
File: Oe6oRlUcbkGblH4NoQfuywBwQZo.mft (raw, json)
Hash identifier: xRX8PDkqC9ke4s/kwjpXbv81EDXzpvoaU5WAzxRKWPc=
Subject key identifier: B9:2A:37:CB:26:F3:12:9E:8B:09:AE:84:A8:63:A8:4B:97:81:32:FE
Authority key identifier: 39:EE:A8:46:55:1C:6E:41:9B:94:7E:0D:A1:07:EE:CB:00:70:41:9A
Certificate issuer: /CN=39eea846551c6e419b947e0da107eecb0070419a
Certificate serial: 019681A26426C22AAB4CFD98059209BDC345
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Oe6oRlUcbkGblH4NoQfuywBwQZo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/af/09d329-7ffe-451b-bc82-2831a4850645/1/Oe6oRlUcbkGblH4NoQfuywBwQZo.mft
Manifest number: 1298
Signing time: Tue 29 Apr 2025 13:00:25 +0000
Manifest this update: Tue 29 Apr 2025 13:00:25 +0000
Manifest next update: Wed 30 Apr 2025 13:00:25 +0000
Files and hashes: 1: Oe6oRlUcbkGblH4NoQfuywBwQZo.crl (hash: jlIhzTD4BG3Qgqy5mEqJaCsidfM4WzWDP8oUjGlpuLU=)
2: UR9eQe3KGZ-9c60OTO6AJ5Nv5N4.roa (hash: i7xKIbibG1Wf9vR46/89Xb0uAuY5HlesJatHG5Hh1rk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/af/09d329-7ffe-451b-bc82-2831a4850645/1/Oe6oRlUcbkGblH4NoQfuywBwQZo.crl
rsync://rpki.ripe.net/repository/DEFAULT/af/09d329-7ffe-451b-bc82-2831a4850645/1/Oe6oRlUcbkGblH4NoQfuywBwQZo.mft
rsync://rpki.ripe.net/repository/DEFAULT/Oe6oRlUcbkGblH4NoQfuywBwQZo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 30 Apr 2025 13:00:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:81:a2:64:26:c2:2a:ab:4c:fd:98:05:92:09:bd:c3:45
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=39eea846551c6e419b947e0da107eecb0070419a
Validity
Not Before: Apr 29 13:00:25 2025 GMT
Not After : Apr 30 13:00:25 2025 GMT
Subject: CN=b92a37cb26f3129e8b09ae84a863a84b978132fe
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8b:9c:ec:bd:1b:c1:47:a9:db:a6:a7:7b:f3:e9:
bf:2c:94:e5:8b:90:9c:30:d4:b5:96:f1:72:16:79:
34:db:19:a4:84:2d:8a:bb:cd:6b:bd:f7:e6:67:40:
bd:90:63:fe:73:21:21:a5:7e:79:5f:19:8b:06:1b:
15:18:15:cd:dc:f5:1b:be:a6:86:1e:6d:32:a9:b6:
ee:f9:c4:63:bd:af:39:09:8e:08:cf:ab:c0:3a:25:
b4:18:ec:05:e4:f2:67:b0:d2:88:71:98:07:02:03:
f7:e2:fb:89:8c:fa:28:9b:84:75:0e:fd:fb:52:89:
dd:1c:96:9f:40:07:81:35:32:c6:88:fe:98:6b:d1:
39:fe:35:99:96:f1:d1:56:42:ab:87:48:42:16:bd:
e7:9e:15:2d:77:40:2e:6c:7f:ba:53:c1:ac:c6:94:
15:a5:17:6b:23:e1:e6:ba:f7:2c:3f:b5:16:fd:fd:
90:8f:e2:8b:4c:f5:ef:e4:3f:5e:58:5a:d2:f4:4d:
1e:5d:3b:8f:a9:b9:bf:cb:3a:ba:bc:e7:f0:c6:b1:
97:45:d9:20:74:35:7f:93:00:ff:2a:8a:0d:a4:aa:
38:40:34:5c:a4:46:04:ef:77:e4:a8:a5:9a:ce:40:
b2:6d:2e:2a:3c:f2:70:10:30:d0:1e:7e:ac:0e:5e:
4f:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B9:2A:37:CB:26:F3:12:9E:8B:09:AE:84:A8:63:A8:4B:97:81:32:FE
X509v3 Authority Key Identifier:
keyid:39:EE:A8:46:55:1C:6E:41:9B:94:7E:0D:A1:07:EE:CB:00:70:41:9A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Oe6oRlUcbkGblH4NoQfuywBwQZo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/af/09d329-7ffe-451b-bc82-2831a4850645/1/Oe6oRlUcbkGblH4NoQfuywBwQZo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/af/09d329-7ffe-451b-bc82-2831a4850645/1/Oe6oRlUcbkGblH4NoQfuywBwQZo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
89:f0:bf:89:ed:b3:b6:df:52:ba:f6:7a:07:8e:ab:04:56:21:
b2:d6:f6:98:2f:6d:3b:f8:22:65:6b:44:16:16:1e:48:c5:4a:
b2:ce:a3:bf:bc:d1:8c:7c:6f:c4:7c:fc:c0:9d:f7:75:25:03:
9e:76:eb:cb:45:cb:9a:c7:de:36:d7:82:f0:12:12:f5:d7:4d:
1a:07:ff:56:2c:18:96:19:04:13:b6:dc:12:c0:9d:3b:41:23:
14:8d:dd:f2:d5:94:ba:14:3b:ca:ae:04:1f:e7:54:cf:26:b9:
7a:29:88:3b:93:29:1d:cd:61:5f:09:33:a0:48:c2:1f:7c:77:
64:1e:fd:92:6a:93:34:d5:89:d7:2a:c1:69:6a:56:5e:f4:09:
76:2b:94:e0:c5:8d:5f:b9:23:5a:b5:2a:87:ac:7f:91:70:38:
f9:d9:5a:e9:5a:bb:1f:f8:89:c0:7c:75:7d:ce:16:f0:73:14:
b1:4c:2c:5c:ef:b2:d8:92:10:fd:56:e2:bd:fd:3f:ee:d2:20:
19:1e:7e:28:e1:33:87:e3:7f:60:13:e9:17:c2:7f:42:c6:fb:
ef:d1:59:a6:bf:e8:15:27:11:60:29:c8:05:2b:77:6c:0d:b0:
fe:da:d6:ff:83:c3:67:54:ca:5e:ba:d6:30:1a:bc:01:57:3a:
49:ae:5f:a2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 29 19:54:53 2025 by rpki-client