Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b3/0f3d8a-a430-4b27-8f95-ee178578dcb5/1/oynU0nVy71pqbb7NeS7vmM6QcW0.mft
File: oynU0nVy71pqbb7NeS7vmM6QcW0.mft (raw, json)
Hash identifier: o4Ig99bKYqw55shjWTv8JVRh+fSDpssTHTsLBYQmsx4=
Subject key identifier: C6:77:B2:FA:43:18:2C:CB:D4:B9:C2:26:F0:8A:79:40:B8:DC:AC:F1
Authority key identifier: A3:29:D4:D2:75:72:EF:5A:6A:6D:BE:CD:79:2E:EF:98:CE:90:71:6D
Certificate issuer: /CN=a329d4d27572ef5a6a6dbecd792eef98ce90716d
Certificate serial: 019682B545EA9B26239B27B5BD281B5E664F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/oynU0nVy71pqbb7NeS7vmM6QcW0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b3/0f3d8a-a430-4b27-8f95-ee178578dcb5/1/oynU0nVy71pqbb7NeS7vmM6QcW0.mft
Manifest number: 1517
Signing time: Tue 29 Apr 2025 18:00:40 +0000
Manifest this update: Tue 29 Apr 2025 18:00:40 +0000
Manifest next update: Wed 30 Apr 2025 18:00:40 +0000
Files and hashes: 1: blse6v5EH2fVrElwGZmlrK99XJk.roa (hash: otAVsYT9s6hCs6g9uAr3ovy061yRH8/KdKxwyyD5qvk=)
2: oynU0nVy71pqbb7NeS7vmM6QcW0.crl (hash: mNVo2zGMQWCxvwBHLUoXql+6Wnd+FmHoXCqSCZFyuW8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b3/0f3d8a-a430-4b27-8f95-ee178578dcb5/1/oynU0nVy71pqbb7NeS7vmM6QcW0.crl
rsync://rpki.ripe.net/repository/DEFAULT/b3/0f3d8a-a430-4b27-8f95-ee178578dcb5/1/oynU0nVy71pqbb7NeS7vmM6QcW0.mft
rsync://rpki.ripe.net/repository/DEFAULT/oynU0nVy71pqbb7NeS7vmM6QcW0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 30 Apr 2025 15:02:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:82:b5:45:ea:9b:26:23:9b:27:b5:bd:28:1b:5e:66:4f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a329d4d27572ef5a6a6dbecd792eef98ce90716d
Validity
Not Before: Apr 29 18:00:40 2025 GMT
Not After : Apr 30 18:00:40 2025 GMT
Subject: CN=c677b2fa43182ccbd4b9c226f08a7940b8dcacf1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:84:de:ae:49:53:ce:c8:03:2d:b3:e3:5c:45:de:
cf:ac:23:7f:e7:8d:47:99:d7:b0:5d:29:7c:05:df:
6b:2f:39:b2:59:76:79:f7:56:43:f9:6b:d5:f0:a1:
ff:b7:4e:e5:07:2f:3f:cb:7a:cd:e7:01:4e:83:74:
7c:a3:6e:10:53:31:0a:a1:ed:42:4e:a8:29:2e:03:
ae:20:87:47:16:6d:97:c9:33:4f:47:4b:8d:89:db:
7c:e8:ec:6c:a9:06:45:62:57:3d:ab:5e:54:18:68:
ad:ca:1f:e3:18:ca:50:d9:11:25:95:f1:2e:58:44:
89:96:a6:47:bd:6c:ac:3f:7a:41:51:24:e0:dc:6e:
0a:91:1f:74:d2:23:0b:e7:b1:cf:47:90:5e:9d:7d:
d8:96:1e:1d:ae:15:8d:bf:3e:61:0e:fe:07:77:0e:
ba:cc:bc:c1:98:92:a3:15:2d:d0:73:e2:f7:51:85:
b6:60:95:b7:ea:4a:a8:ab:11:45:b2:d3:fb:7b:d5:
94:bd:68:63:d9:f0:15:98:17:64:aa:59:70:94:41:
82:d6:f4:5a:a8:fd:e0:8d:a1:42:34:48:66:12:af:
5f:64:fb:17:3b:3c:9f:84:ee:4c:6f:bf:e0:05:c6:
d9:29:45:c4:a1:9c:72:e7:5d:58:5b:49:22:6e:27:
88:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C6:77:B2:FA:43:18:2C:CB:D4:B9:C2:26:F0:8A:79:40:B8:DC:AC:F1
X509v3 Authority Key Identifier:
keyid:A3:29:D4:D2:75:72:EF:5A:6A:6D:BE:CD:79:2E:EF:98:CE:90:71:6D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/oynU0nVy71pqbb7NeS7vmM6QcW0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b3/0f3d8a-a430-4b27-8f95-ee178578dcb5/1/oynU0nVy71pqbb7NeS7vmM6QcW0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b3/0f3d8a-a430-4b27-8f95-ee178578dcb5/1/oynU0nVy71pqbb7NeS7vmM6QcW0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
93:ee:c6:6f:27:d6:8a:0c:80:64:7e:fa:c0:1b:4b:6e:28:56:
d1:ca:a3:7c:70:78:09:15:67:07:34:7b:cc:e5:e8:f5:56:ab:
90:32:71:5a:47:b8:39:36:95:a2:b5:8c:02:eb:a5:14:99:6e:
26:0d:67:ae:2c:60:2a:fc:e1:14:e4:67:fe:9e:6f:04:7e:b9:
5b:cd:3b:8f:f6:4c:c3:83:ac:57:76:fd:fb:cb:a9:a1:c8:b2:
c6:61:2b:38:fd:25:5b:11:22:fd:d0:0c:bc:b9:3b:2e:a1:bd:
14:66:4f:85:7d:e6:eb:c5:b7:6f:8e:98:3d:90:97:16:55:d7:
bc:40:19:21:e2:30:b1:94:14:ef:5f:a8:5d:0e:7c:65:5b:9a:
63:9e:fe:7b:06:c4:4b:a4:93:89:de:b2:b0:47:68:40:4e:d7:
e6:82:fd:3a:13:a3:80:3a:eb:a9:8e:7f:70:8c:56:8b:c3:06:
8b:aa:46:3d:c6:26:03:33:fb:2e:28:6a:cd:a9:b1:ce:05:ca:
49:b9:96:37:3f:38:eb:53:24:db:fe:7e:54:e4:11:87:02:97:
ae:92:19:db:f3:fd:80:b8:32:2c:0e:e9:03:44:f2:79:5c:35:
18:fa:88:e8:d7:48:86:da:54:12:26:49:bd:85:3a:6c:ca:48:
5d:de:8b:24
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 30 00:07:22 2025 by rpki-client