Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b3/0828e7-1e57-4747-8ea1-36a808f3d14d/1/oU5JkkDOpYhUGn3HTzIckUF0S7Y.mft
File: oU5JkkDOpYhUGn3HTzIckUF0S7Y.mft (raw, json)
Hash identifier: qQfcL645Zd/zg7cb0y0OzsT26FjW4h5WAdaYUaR2/5w=
Subject key identifier: 46:02:21:9B:FC:74:DC:1C:1A:B7:B6:3C:CE:23:39:BD:7A:2B:D3:5A
Authority key identifier: A1:4E:49:92:40:CE:A5:88:54:1A:7D:C7:4F:32:1C:91:41:74:4B:B6
Certificate issuer: /CN=a14e499240cea588541a7dc74f321c9141744bb6
Certificate serial: 019684A3CB8C2BA4D581C273A4DAA154DFCE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/oU5JkkDOpYhUGn3HTzIckUF0S7Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b3/0828e7-1e57-4747-8ea1-36a808f3d14d/1/oU5JkkDOpYhUGn3HTzIckUF0S7Y.mft
Manifest number: 10D6
Signing time: Wed 30 Apr 2025 03:00:49 +0000
Manifest this update: Wed 30 Apr 2025 03:00:49 +0000
Manifest next update: Thu 01 May 2025 03:00:49 +0000
Files and hashes: 1: epViL3MVi9bWXcuzA24cAMVu98I.roa (hash: SrcEH3xgjkVSJRtnVeoxwKETukrMGUr8rXBzqe4u9C8=)
2: oU5JkkDOpYhUGn3HTzIckUF0S7Y.crl (hash: NMRr5teNY+DMkRDgzsHWHxwU7BpNGwwZdGzNxqwUR1g=)
3: t21KiufosQo5FokIl-zuM5q85cQ.roa (hash: ORk8mRTrURZ5LhEnK810DaoqajLoQtqn9GMcGAQKm3A=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b3/0828e7-1e57-4747-8ea1-36a808f3d14d/1/oU5JkkDOpYhUGn3HTzIckUF0S7Y.crl
rsync://rpki.ripe.net/repository/DEFAULT/b3/0828e7-1e57-4747-8ea1-36a808f3d14d/1/oU5JkkDOpYhUGn3HTzIckUF0S7Y.mft
rsync://rpki.ripe.net/repository/DEFAULT/oU5JkkDOpYhUGn3HTzIckUF0S7Y.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 01 May 2025 00:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:84:a3:cb:8c:2b:a4:d5:81:c2:73:a4:da:a1:54:df:ce
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a14e499240cea588541a7dc74f321c9141744bb6
Validity
Not Before: Apr 30 03:00:49 2025 GMT
Not After : May 1 03:00:49 2025 GMT
Subject: CN=4602219bfc74dc1c1ab7b63cce2339bd7a2bd35a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:c0:8f:01:2c:13:e8:65:06:ef:90:7f:90:3b:
88:b7:cd:17:bb:58:80:0d:be:49:0b:54:5a:c0:c0:
be:3c:c0:f7:6b:6b:16:6c:c0:e2:d4:ee:f6:91:d3:
af:9e:cb:a4:82:03:d1:b2:8a:1b:ae:82:1b:d8:9f:
a7:07:17:4f:26:5b:44:29:22:fc:d7:cc:04:4b:32:
d0:1b:f8:d3:27:f5:c8:36:9f:6e:6e:fd:29:d0:d5:
ad:43:a9:f4:aa:65:f3:c5:c2:e7:58:fb:92:d2:28:
26:4d:5d:a7:13:b7:c4:70:1d:d1:86:93:5f:9a:d8:
3a:06:e8:51:34:cd:01:00:b9:1d:0c:79:df:67:42:
2d:22:fd:c3:36:67:f2:f8:3c:5f:ce:3d:cd:6e:38:
8f:5d:9c:19:69:69:16:8e:bb:7d:c3:89:57:92:28:
27:76:36:a5:46:c6:92:d1:4d:8f:1c:7b:48:39:6c:
6a:a6:c9:bb:c4:9f:21:91:18:97:74:fb:89:4f:fb:
49:9b:a4:20:3c:2a:e7:4c:2b:81:eb:b7:d0:20:05:
2c:2f:a4:9f:5e:cf:8a:46:09:10:9a:29:d2:01:b8:
89:8d:0b:ef:db:f6:73:5c:52:48:bd:e0:37:be:e6:
52:57:6a:c2:6f:b6:6c:6d:4c:8a:df:a6:6f:5a:55:
b8:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
46:02:21:9B:FC:74:DC:1C:1A:B7:B6:3C:CE:23:39:BD:7A:2B:D3:5A
X509v3 Authority Key Identifier:
keyid:A1:4E:49:92:40:CE:A5:88:54:1A:7D:C7:4F:32:1C:91:41:74:4B:B6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/oU5JkkDOpYhUGn3HTzIckUF0S7Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b3/0828e7-1e57-4747-8ea1-36a808f3d14d/1/oU5JkkDOpYhUGn3HTzIckUF0S7Y.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b3/0828e7-1e57-4747-8ea1-36a808f3d14d/1/oU5JkkDOpYhUGn3HTzIckUF0S7Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
af:bf:8e:15:39:2c:5b:6e:93:28:00:b1:fe:3d:42:5f:c0:0e:
c7:bb:1d:50:5a:26:de:a9:84:94:77:c7:3d:c8:0e:88:da:1c:
36:b3:bd:5b:a3:af:fc:bc:3c:f8:ac:43:15:0a:1a:1b:40:90:
66:65:ac:c8:fb:d8:a7:0c:9b:a3:4b:f9:04:0f:03:e1:4f:b6:
b7:82:43:ea:55:47:8f:45:4d:ae:7b:b1:8a:4c:42:14:1b:56:
c5:03:19:de:44:aa:bc:dc:51:1b:77:c2:23:19:f8:6e:8a:a2:
db:8b:3e:d1:1e:ae:6d:36:d5:80:fa:6f:fa:90:ca:42:bd:3c:
e6:9f:e3:c7:c5:87:6f:b4:25:54:07:c7:17:72:6b:33:42:1e:
9a:0f:2a:c1:37:da:3a:eb:41:61:41:e6:3e:1d:83:f9:4d:63:
28:aa:b8:f4:08:d9:a0:68:5b:38:5d:ce:f7:21:d6:1a:b9:c8:
41:dd:d4:b8:95:4a:44:69:17:ee:79:f8:e6:5d:76:11:8f:fe:
57:df:c8:70:6f:91:b2:d6:e7:2c:1b:03:e7:f7:08:a5:26:65:
00:d7:0c:be:5e:a5:47:bb:ef:20:97:af:f9:50:13:e1:83:30:
e4:ed:bc:3b:13:cf:e5:c2:78:a7:b8:83:a1:c7:94:57:60:7e:
f6:e2:89:dc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 30 07:36:42 2025 by rpki-client