Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bc/46358e-54f7-4f4b-a747-f735e3dafd53/1/oNrnZ4o5aWnmNAydy2XN6eMpVUo.mft
File: oNrnZ4o5aWnmNAydy2XN6eMpVUo.mft (raw, json)
Hash identifier: Ja7TsLfkXn0pakBkzmxZLdhy/wHa5ssUcGm8EsqHA4w=
Subject key identifier: B1:D0:F5:5C:38:7E:C4:38:0D:58:1D:9E:C7:3D:99:94:0F:DE:59:F0
Authority key identifier: A0:DA:E7:67:8A:39:69:69:E6:34:0C:9D:CB:65:CD:E9:E3:29:55:4A
Certificate issuer: /CN=a0dae7678a396969e6340c9dcb65cde9e329554a
Certificate serial: 019674F9CD9D337923E8628CEFE12EC1C686
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/oNrnZ4o5aWnmNAydy2XN6eMpVUo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bc/46358e-54f7-4f4b-a747-f735e3dafd53/1/oNrnZ4o5aWnmNAydy2XN6eMpVUo.mft
Manifest number: 0C1D
Signing time: Sun 27 Apr 2025 02:00:50 +0000
Manifest this update: Sun 27 Apr 2025 02:00:50 +0000
Manifest next update: Mon 28 Apr 2025 02:00:50 +0000
Files and hashes: 1: ILIvvSN7jhBNrgAFepnE5fxAfIc.roa (hash: qrswcvi6gW3Bxpx7V6TKM6+tVg0zuZnKPktwjp/YCHs=)
2: S4AYf34wbJr686FuAfXvLLFVW90.roa (hash: QoZkIggV0Rak9NY5B7MD5kJpzqBlOZcHQ7nSTP7ujCU=)
3: jzKy-bNbEooaDReNok2j2yv-pdI.roa (hash: GUiFogVUQmG0/pMsKlem+Qrlz+e50kXxDrB2fF+wH/s=)
4: oNrnZ4o5aWnmNAydy2XN6eMpVUo.crl (hash: RlaeZiztt9oJc/QF0BzoftYZgkdFPjmJ3w2jI2xsWEQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bc/46358e-54f7-4f4b-a747-f735e3dafd53/1/oNrnZ4o5aWnmNAydy2XN6eMpVUo.crl
rsync://rpki.ripe.net/repository/DEFAULT/bc/46358e-54f7-4f4b-a747-f735e3dafd53/1/oNrnZ4o5aWnmNAydy2XN6eMpVUo.mft
rsync://rpki.ripe.net/repository/DEFAULT/oNrnZ4o5aWnmNAydy2XN6eMpVUo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Apr 2025 20:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:74:f9:cd:9d:33:79:23:e8:62:8c:ef:e1:2e:c1:c6:86
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a0dae7678a396969e6340c9dcb65cde9e329554a
Validity
Not Before: Apr 27 02:00:50 2025 GMT
Not After : Apr 28 02:00:50 2025 GMT
Subject: CN=b1d0f55c387ec4380d581d9ec73d99940fde59f0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:e8:33:fc:12:e8:52:94:c3:cd:ac:bf:68:c8:
3f:9d:5d:7c:2b:73:ad:e0:e2:0f:c4:70:cf:ee:13:
5e:b6:13:9a:27:bc:27:8a:08:2a:62:c9:d5:5f:c3:
a7:48:7f:6e:6d:da:f6:78:16:0a:21:87:73:08:3f:
35:78:5f:e4:64:45:de:69:04:20:63:07:26:d7:94:
8a:65:78:16:ae:f1:2f:21:21:d5:5b:c2:5b:30:9c:
3f:77:49:91:74:53:9a:1f:d5:cc:a1:33:ab:89:4a:
a6:17:9e:dd:7c:62:34:39:52:de:b6:34:ee:b5:b8:
fc:d0:fe:e5:8b:92:64:6f:77:7f:bc:e8:76:d8:51:
03:c2:10:6c:91:a3:b4:51:e0:98:08:d3:aa:ce:d6:
e6:79:30:8d:d2:44:ef:fd:59:1d:eb:e2:66:e8:f0:
25:e0:cf:3d:8b:72:83:0d:c2:20:3d:a9:96:37:99:
fb:6b:7d:0e:4e:71:fe:3b:d9:c9:9a:41:99:e9:b1:
7b:47:d5:d6:ec:17:75:4e:4f:b9:ed:a6:c1:66:62:
99:e5:37:c3:b7:a9:ab:91:48:f6:44:93:91:cd:7a:
ac:d4:aa:7b:15:5a:37:fa:8d:72:8e:ee:30:ea:ea:
be:db:f1:0e:b6:23:7d:c4:ff:3b:03:5c:54:d5:36:
93:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B1:D0:F5:5C:38:7E:C4:38:0D:58:1D:9E:C7:3D:99:94:0F:DE:59:F0
X509v3 Authority Key Identifier:
keyid:A0:DA:E7:67:8A:39:69:69:E6:34:0C:9D:CB:65:CD:E9:E3:29:55:4A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/oNrnZ4o5aWnmNAydy2XN6eMpVUo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/46358e-54f7-4f4b-a747-f735e3dafd53/1/oNrnZ4o5aWnmNAydy2XN6eMpVUo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/46358e-54f7-4f4b-a747-f735e3dafd53/1/oNrnZ4o5aWnmNAydy2XN6eMpVUo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
13:30:6e:b3:2a:51:32:9b:33:b5:20:4e:82:ac:f8:06:a0:6b:
5b:ed:b2:f9:ab:63:6c:a7:17:5e:ed:e8:f0:19:8f:0a:6a:37:
1c:9d:3e:b9:85:e5:27:8b:cd:28:0a:76:3d:48:4e:f4:cc:3a:
7b:3f:a5:4a:f1:af:3a:36:c2:8d:60:45:c4:12:55:1e:46:f6:
6c:c1:51:d3:82:2d:ce:32:4c:3f:db:9f:f2:a2:f4:60:16:77:
4e:bb:d7:54:37:0a:e7:d7:79:f2:2c:c1:b3:4b:19:b9:ed:5e:
2a:88:d0:2d:dc:f0:4a:24:8c:8a:f8:dc:9b:a9:8f:c4:b2:fe:
ac:60:01:45:ca:d3:e7:18:a8:0d:d5:9c:fb:c1:f7:c3:78:8d:
de:5c:41:25:18:0d:ec:71:ec:e8:cf:d5:97:36:f3:4d:cc:8a:
f2:83:a3:20:f2:bc:34:40:bf:45:de:a1:59:dd:fd:25:6c:14:
7a:db:04:81:cf:d2:6d:3b:38:2a:d3:80:50:3c:4e:12:bc:b3:
6d:f8:93:fa:88:57:b0:d4:46:b6:11:03:b0:0c:c5:38:f2:b6:
dd:f3:97:c3:3c:da:19:82:43:19:05:ce:a9:e6:3b:b0:54:df:
7b:41:da:d3:0d:7c:30:7c:db:6a:81:ea:a7:39:d8:c7:b0:9d:
3b:10:16:fa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 05:37:35 2025 by rpki-client