Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c4/2d7609-2142-4a03-b11e-1148fde7aef7/1/oKbWsIdGH97GpbnVLSmDLY8pnIc.mft
File: oKbWsIdGH97GpbnVLSmDLY8pnIc.mft (raw, json)
Hash identifier: zBWr3ZSvxSmucZCMrbLeITQ8vcOLH5VIjPAvKlssKPc=
Subject key identifier: 6F:AD:E3:5E:DC:EF:AA:02:BA:26:8D:50:8F:5B:8C:D7:A7:B5:6C:C3
Authority key identifier: A0:A6:D6:B0:87:46:1F:DE:C6:A5:B9:D5:2D:29:83:2D:8F:29:9C:87
Certificate issuer: /CN=a0a6d6b087461fdec6a5b9d52d29832d8f299c87
Certificate serial: 019677558BA78595450457C56268F2E62BAA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/oKbWsIdGH97GpbnVLSmDLY8pnIc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c4/2d7609-2142-4a03-b11e-1148fde7aef7/1/oKbWsIdGH97GpbnVLSmDLY8pnIc.mft
Manifest number: 1511
Signing time: Sun 27 Apr 2025 13:00:17 +0000
Manifest this update: Sun 27 Apr 2025 13:00:17 +0000
Manifest next update: Mon 28 Apr 2025 13:00:17 +0000
Files and hashes: 1: ABSwg5iM7lDSwpBpbSUM-jWDkxQ.roa (hash: DOO9GA+T1exZrXJnaC8HcR8le9oe4m7a+sJjxpyxjOg=)
2: GJYCLN0ib9ODqjC_4u9aKGjHiAs.roa (hash: AqwhbZ6NQ3s8EvVMwRFSwmoYz6Yquuk8Hi4hrgtZv3M=)
3: oKbWsIdGH97GpbnVLSmDLY8pnIc.crl (hash: LKi1c3xzwIJ9/HXi8ky9tIORUD+TCRuQUPfIRn0Dj/c=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c4/2d7609-2142-4a03-b11e-1148fde7aef7/1/oKbWsIdGH97GpbnVLSmDLY8pnIc.crl
rsync://rpki.ripe.net/repository/DEFAULT/c4/2d7609-2142-4a03-b11e-1148fde7aef7/1/oKbWsIdGH97GpbnVLSmDLY8pnIc.mft
rsync://rpki.ripe.net/repository/DEFAULT/oKbWsIdGH97GpbnVLSmDLY8pnIc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Apr 2025 13:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:77:55:8b:a7:85:95:45:04:57:c5:62:68:f2:e6:2b:aa
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a0a6d6b087461fdec6a5b9d52d29832d8f299c87
Validity
Not Before: Apr 27 13:00:17 2025 GMT
Not After : Apr 28 13:00:17 2025 GMT
Subject: CN=6fade35edcefaa02ba268d508f5b8cd7a7b56cc3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:fd:e8:ca:e1:0e:cb:1d:10:6e:6d:1e:f2:8b:
8b:5b:0e:f9:e6:1d:a0:7c:fa:90:d8:94:e6:71:3f:
43:ed:ae:61:35:a8:e3:08:48:ab:5c:fa:88:f4:b5:
04:f6:e5:de:a1:50:3d:c3:93:74:71:de:7d:0a:9b:
70:64:f4:aa:dd:20:99:f9:87:98:12:60:80:09:c5:
b7:a4:82:83:74:2f:27:0c:dd:66:c8:63:1f:ed:2d:
0e:40:53:51:83:4c:8f:87:d1:cb:5e:90:8d:78:1c:
0a:d8:e9:54:87:8a:c9:77:91:1e:e5:cf:54:25:4a:
35:a0:07:72:e6:f7:e2:4a:a0:97:02:3f:c0:35:f1:
c3:3c:60:cc:16:b0:b1:52:c5:4f:8a:9a:7d:82:7c:
cc:08:f0:40:29:24:23:c5:c3:d6:11:04:d0:e9:27:
b7:77:f9:ee:37:5b:65:8c:29:ef:98:8b:4f:8a:28:
08:56:28:8c:73:ea:2f:f5:8f:d1:c1:04:ec:d7:3a:
ad:42:33:c8:75:e9:99:61:ac:3d:40:f5:10:78:12:
49:2b:7a:0c:34:8a:71:fe:7b:b6:94:62:17:44:20:
98:77:7e:80:37:e3:10:d3:37:d6:7f:5c:d3:aa:d6:
af:7a:90:f5:79:b6:c5:05:cc:c6:c3:22:fa:60:e0:
26:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6F:AD:E3:5E:DC:EF:AA:02:BA:26:8D:50:8F:5B:8C:D7:A7:B5:6C:C3
X509v3 Authority Key Identifier:
keyid:A0:A6:D6:B0:87:46:1F:DE:C6:A5:B9:D5:2D:29:83:2D:8F:29:9C:87
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/oKbWsIdGH97GpbnVLSmDLY8pnIc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c4/2d7609-2142-4a03-b11e-1148fde7aef7/1/oKbWsIdGH97GpbnVLSmDLY8pnIc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c4/2d7609-2142-4a03-b11e-1148fde7aef7/1/oKbWsIdGH97GpbnVLSmDLY8pnIc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
34:4f:d6:b3:11:26:37:00:1f:9e:2c:a1:6f:8e:24:c7:92:35:
94:50:b3:8b:4a:e8:34:15:e9:3e:3c:9e:b1:93:01:9a:71:af:
c1:52:31:be:1d:eb:0a:11:0f:ee:a8:5f:c4:66:75:ef:46:a5:
a7:7d:a9:2c:3b:58:4f:d3:9a:4c:0d:1c:68:2a:37:fb:95:f8:
87:c0:f1:09:0d:40:10:65:c5:0b:68:f7:13:ed:37:c3:84:1d:
2f:c1:e8:06:6c:88:50:ea:22:46:91:fe:01:d9:af:d0:62:e8:
81:64:6c:84:5f:48:0c:65:8f:99:b8:8b:ba:f6:38:83:6c:60:
5b:69:de:c8:31:82:28:a6:aa:16:bd:d0:8d:ed:9c:40:2e:f6:
bb:b9:12:d8:ed:c2:29:b6:5c:cd:95:b5:ec:9d:0d:1a:78:3a:
5b:9c:a2:f3:ed:7f:57:c3:53:7d:0c:9c:8c:3a:31:a9:cf:25:
8f:6a:a7:6b:68:74:bb:4a:57:3f:f6:86:5c:7c:db:d6:f2:a5:
db:28:c8:56:9c:fe:a8:3c:7d:a0:71:05:d2:8c:de:37:92:37:
be:db:3d:55:44:18:95:f6:d9:94:18:99:8d:82:60:ca:07:c7:
c2:d8:01:9a:6f:d0:08:6a:52:32:d0:d2:f8:79:a0:e0:49:f2:
e0:e0:79:c7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 19:26:57 2025 by rpki-client