Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b0/7a0c7c-f2ca-4aa9-87c5-77f4fd53425e/1/oheIwIqkN9EWXOy9aP2xlaFd-gg.mft
File: oheIwIqkN9EWXOy9aP2xlaFd-gg.mft (raw, json)
Hash identifier: 9crl4JXcY+dIeklFGVxgFsuoQM+oO/5dMvixYZTJ0ak=
Subject key identifier: 32:AE:AD:E7:B7:DB:89:90:C5:10:CF:A5:D9:AD:DF:D0:DB:64:9D:E8
Authority key identifier: A2:17:88:C0:8A:A4:37:D1:16:5C:EC:BD:68:FD:B1:95:A1:5D:FA:08
Certificate issuer: /CN=a21788c08aa437d1165cecbd68fdb195a15dfa08
Certificate serial: 0196760CDC07F27D2D87D39780AF279D73BE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/oheIwIqkN9EWXOy9aP2xlaFd-gg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b0/7a0c7c-f2ca-4aa9-87c5-77f4fd53425e/1/oheIwIqkN9EWXOy9aP2xlaFd-gg.mft
Manifest number: 1512
Signing time: Sun 27 Apr 2025 07:01:16 +0000
Manifest this update: Sun 27 Apr 2025 07:01:16 +0000
Manifest next update: Mon 28 Apr 2025 07:01:16 +0000
Files and hashes: 1: 3hcLMvc25IMPdhmKQEHCMZTqIjs.roa (hash: SEybTz+/cd8wiIccvdujur1jHcT09AAEthIXnDu/BtA=)
2: oheIwIqkN9EWXOy9aP2xlaFd-gg.crl (hash: qkZ5QCnmAPAwbgcBzjJAa4AvZvGqgBiuJmmaoKDCG+I=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b0/7a0c7c-f2ca-4aa9-87c5-77f4fd53425e/1/oheIwIqkN9EWXOy9aP2xlaFd-gg.crl
rsync://rpki.ripe.net/repository/DEFAULT/b0/7a0c7c-f2ca-4aa9-87c5-77f4fd53425e/1/oheIwIqkN9EWXOy9aP2xlaFd-gg.mft
rsync://rpki.ripe.net/repository/DEFAULT/oheIwIqkN9EWXOy9aP2xlaFd-gg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Apr 2025 05:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:76:0c:dc:07:f2:7d:2d:87:d3:97:80:af:27:9d:73:be
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a21788c08aa437d1165cecbd68fdb195a15dfa08
Validity
Not Before: Apr 27 07:01:16 2025 GMT
Not After : Apr 28 07:01:16 2025 GMT
Subject: CN=32aeade7b7db8990c510cfa5d9addfd0db649de8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:96:30:53:34:5d:05:5a:12:ff:25:a2:7b:1d:
ba:98:44:07:cf:df:01:7d:de:94:f3:9f:94:63:c8:
ee:8a:e7:ef:ae:e6:aa:c5:da:f3:51:2c:e9:97:87:
3c:f7:d1:cb:72:56:11:b2:94:1a:c1:c6:49:28:16:
2e:51:03:31:44:6c:e3:68:de:2f:29:f9:ce:3f:8b:
b9:88:77:c0:55:d2:d5:41:1a:08:2f:e7:57:33:5c:
ef:a8:c8:69:65:fe:70:ae:46:f1:7d:8a:c5:32:9d:
78:49:ea:40:3f:99:6e:56:ea:8d:44:d9:6e:16:12:
bf:34:60:e8:f9:2b:86:d0:f2:ce:89:35:4d:02:4f:
5e:7f:fc:11:53:50:df:03:f7:1c:4f:23:97:19:5d:
11:da:18:c9:c2:5d:43:59:09:e8:1e:88:5e:d5:10:
03:14:5e:c1:27:d3:b7:34:47:62:b8:34:03:06:d7:
42:a4:5f:30:83:8f:17:d2:92:44:aa:7f:35:7c:17:
5d:44:95:08:00:7f:3b:9b:68:3a:3b:8d:60:1e:75:
31:bd:46:8f:86:ff:d2:e0:ad:ad:10:3a:ef:67:a1:
d6:a4:4d:c8:5e:5a:9e:7f:1a:61:1b:9a:da:42:f9:
d3:c2:63:63:73:3b:2a:3c:3f:86:61:3a:76:1c:2c:
27:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
32:AE:AD:E7:B7:DB:89:90:C5:10:CF:A5:D9:AD:DF:D0:DB:64:9D:E8
X509v3 Authority Key Identifier:
keyid:A2:17:88:C0:8A:A4:37:D1:16:5C:EC:BD:68:FD:B1:95:A1:5D:FA:08
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/oheIwIqkN9EWXOy9aP2xlaFd-gg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/7a0c7c-f2ca-4aa9-87c5-77f4fd53425e/1/oheIwIqkN9EWXOy9aP2xlaFd-gg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/7a0c7c-f2ca-4aa9-87c5-77f4fd53425e/1/oheIwIqkN9EWXOy9aP2xlaFd-gg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3f:3b:42:4c:a3:a3:e0:18:3e:1b:a1:86:8c:f9:47:e4:5e:8f:
4b:66:53:df:8f:3d:fe:3b:de:80:cf:44:b5:5c:6f:54:52:9b:
fa:a4:78:52:47:02:8c:cc:d5:58:a6:a9:d4:50:21:3b:b3:7e:
64:10:f5:37:82:a1:af:10:ac:34:cc:5d:90:5b:5c:3e:c0:14:
e2:7b:60:95:7d:60:62:9c:81:e6:ec:a2:bd:5b:c4:0b:87:42:
81:b7:4a:82:51:0b:33:cb:28:3a:56:e1:ce:74:97:d3:84:01:
0a:6a:b7:4f:3b:fd:a7:7f:db:a7:fb:79:aa:23:d8:0b:c4:98:
aa:5d:52:f3:1b:f3:f1:de:30:48:f3:0b:90:b4:80:f6:ea:c2:
c7:9f:0d:f5:46:61:6a:b6:2b:27:3b:8f:c7:5e:91:f6:53:fb:
db:9f:06:dc:a3:43:76:68:d4:8a:82:b7:36:e8:7f:67:b9:b6:
b9:a3:6e:50:62:44:b0:23:0e:4d:fe:db:50:8f:e2:c4:14:01:
5e:51:76:82:38:6b:29:bf:b4:e1:10:4b:9a:11:a7:b1:5c:cb:
b0:94:cc:90:11:c6:5b:ad:11:ea:84:46:1c:ca:ce:9b:49:c4:
8e:d2:c1:b8:d8:69:33:d2:76:ca:5e:d4:4f:27:02:fd:89:e9:
0e:c2:ae:a4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 12:53:01 2025 by rpki-client