Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bf/5e177f-5f5f-4214-a811-fcf105fd204c/1/OaRgOyRbHSCEnfiPFu43DMC0OQ0.mft
File: OaRgOyRbHSCEnfiPFu43DMC0OQ0.mft (raw, json)
Hash identifier: yaj2zUURRSRS+5CVjza520lgp1ceIHRw/IHLTGHLL7Y=
Subject key identifier: 6A:A1:97:09:2A:2C:15:D1:FD:AE:70:B3:C4:B4:12:93:FE:84:73:59
Authority key identifier: 39:A4:60:3B:24:5B:1D:20:84:9D:F8:8F:16:EE:37:0C:C0:B4:39:0D
Certificate issuer: /CN=39a4603b245b1d20849df88f16ee370cc0b4390d
Certificate serial: 0196778D101D81CF54E41FCB0C6B371E4D95
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OaRgOyRbHSCEnfiPFu43DMC0OQ0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bf/5e177f-5f5f-4214-a811-fcf105fd204c/1/OaRgOyRbHSCEnfiPFu43DMC0OQ0.mft
Manifest number: FE
Signing time: Sun 27 Apr 2025 14:00:55 +0000
Manifest this update: Sun 27 Apr 2025 14:00:55 +0000
Manifest next update: Mon 28 Apr 2025 14:00:55 +0000
Files and hashes: 1: HAUk0L8nWB16tKZ41rvifWUUlnM.roa (hash: z7P8z3hdUqv0dJQpV8Dg51dK3XAE9P4Hf5LV3YuSIpA=)
2: OaRgOyRbHSCEnfiPFu43DMC0OQ0.crl (hash: swn/oaGldGf0jEt1e7fbn6ZvcH7S7t41zNEs/6AbIns=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bf/5e177f-5f5f-4214-a811-fcf105fd204c/1/OaRgOyRbHSCEnfiPFu43DMC0OQ0.crl
rsync://rpki.ripe.net/repository/DEFAULT/bf/5e177f-5f5f-4214-a811-fcf105fd204c/1/OaRgOyRbHSCEnfiPFu43DMC0OQ0.mft
rsync://rpki.ripe.net/repository/DEFAULT/OaRgOyRbHSCEnfiPFu43DMC0OQ0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Apr 2025 07:29:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:77:8d:10:1d:81:cf:54:e4:1f:cb:0c:6b:37:1e:4d:95
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=39a4603b245b1d20849df88f16ee370cc0b4390d
Validity
Not Before: Apr 27 14:00:55 2025 GMT
Not After : Apr 28 14:00:55 2025 GMT
Subject: CN=6aa197092a2c15d1fdae70b3c4b41293fe847359
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:7e:f7:e8:8e:f8:d8:50:18:ba:4b:ae:76:4a:
7f:98:7f:fe:bc:8f:59:6e:66:48:bd:2d:07:f1:5a:
80:25:77:fe:29:c0:12:52:19:6d:85:72:b5:95:ca:
c6:cc:8c:18:cd:9e:5f:97:c9:c8:53:03:80:52:37:
1b:7d:d8:59:0e:75:af:4a:bd:c6:e5:e6:58:81:af:
a2:02:0a:0b:0c:68:fd:0a:51:48:63:22:f3:e4:b6:
af:47:64:1e:7b:34:9c:fa:22:63:10:14:b3:f9:17:
1e:fb:70:d0:ca:70:1e:bb:2b:1f:0f:1a:95:93:ca:
cd:b8:7c:7d:61:46:62:b9:d9:99:97:5b:46:55:77:
26:77:78:ff:de:eb:d6:cc:26:13:3a:97:b9:4d:be:
25:3a:99:4f:ec:5b:2a:e6:21:e9:a9:58:0a:e6:e1:
fb:a1:cb:21:bb:aa:10:34:24:fe:37:df:84:c8:cf:
68:ec:ff:da:a8:a6:69:2e:02:1d:b4:f1:b5:2a:84:
81:69:10:e9:7a:e6:20:07:77:c9:13:14:bd:c3:3d:
9b:80:84:84:49:58:52:2a:f2:af:ee:33:1e:8a:42:
ef:90:70:7f:00:d5:bd:71:fe:b1:8e:4a:fb:69:73:
f3:78:25:c6:63:bc:42:92:d5:89:ef:5b:f0:7a:1f:
21:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6A:A1:97:09:2A:2C:15:D1:FD:AE:70:B3:C4:B4:12:93:FE:84:73:59
X509v3 Authority Key Identifier:
keyid:39:A4:60:3B:24:5B:1D:20:84:9D:F8:8F:16:EE:37:0C:C0:B4:39:0D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OaRgOyRbHSCEnfiPFu43DMC0OQ0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/5e177f-5f5f-4214-a811-fcf105fd204c/1/OaRgOyRbHSCEnfiPFu43DMC0OQ0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/5e177f-5f5f-4214-a811-fcf105fd204c/1/OaRgOyRbHSCEnfiPFu43DMC0OQ0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
80:25:80:d0:35:e2:08:59:17:d8:0f:78:a9:3c:ef:39:68:d5:
be:1d:9b:4b:3c:37:2c:aa:6d:68:31:a1:bd:97:d6:3e:f7:1d:
b9:f9:0d:96:d1:b5:32:53:29:fb:72:7a:f5:89:06:50:ed:c4:
2b:4e:f9:39:26:d0:c8:56:3e:4e:31:c0:f8:d0:a4:34:55:10:
6b:55:dd:d7:11:91:cf:e3:b4:cc:d8:58:6d:0a:9b:af:87:c8:
74:b5:e4:6b:ce:db:ff:fd:91:7a:c5:55:f5:49:3b:54:82:94:
5e:23:db:e1:ce:9c:c1:f1:aa:b5:05:8b:34:8d:87:a9:a6:33:
74:a5:34:91:01:e1:ac:36:fb:09:5f:d3:f7:89:ac:6f:94:06:
43:81:3f:47:32:f9:e4:54:aa:66:bc:7c:07:cc:1e:42:bd:8b:
c4:f4:bf:70:fe:ff:0c:86:8b:c8:89:60:15:b9:2d:bc:1f:cc:
19:6c:cb:01:29:70:98:ba:1c:76:ab:8e:ab:42:19:42:9a:07:
81:77:d0:bb:0e:15:b5:da:3f:90:eb:7e:3f:ae:3f:80:fd:6a:
e8:b0:8e:12:0c:99:ce:0e:3d:e8:28:b9:99:4b:ec:a0:cd:26:
ea:a9:63:79:42:b8:3a:17:85:19:88:e3:25:e7:90:1c:e9:47:
83:a2:3c:b8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 17:44:56 2025 by rpki-client