Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c7/74aa3a-473d-4fb5-9038-81d1304faf76/1/ojguLlS2Dx9o-FyYTaGmljHFLKg.mft
File: ojguLlS2Dx9o-FyYTaGmljHFLKg.mft (raw, json)
Hash identifier: F+sQvXYqImheNEKhL5pJc5LpfZIgp1f1Zv0NjjiKrEI=
Subject key identifier: 65:07:1B:CB:49:E6:58:3F:E9:D1:20:BD:B4:B1:E1:D6:B9:76:F1:16
Authority key identifier: A2:38:2E:2E:54:B6:0F:1F:68:F8:5C:98:4D:A1:A6:96:31:C5:2C:A8
Certificate issuer: /CN=a2382e2e54b60f1f68f85c984da1a69631c52ca8
Certificate serial: 0196741E7C1494616715E962E9523A0DEEBF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ojguLlS2Dx9o-FyYTaGmljHFLKg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c7/74aa3a-473d-4fb5-9038-81d1304faf76/1/ojguLlS2Dx9o-FyYTaGmljHFLKg.mft
Manifest number: 01BE
Signing time: Sat 26 Apr 2025 22:01:16 +0000
Manifest this update: Sat 26 Apr 2025 22:01:16 +0000
Manifest next update: Sun 27 Apr 2025 22:01:16 +0000
Files and hashes: 1: ojguLlS2Dx9o-FyYTaGmljHFLKg.crl (hash: 5Tau/BCA7BGk0io+mxm9E3DdxCckDOKn4XD8oVGwrCs=)
2: tgYGsGAPJ3naxRJ-JjQBKL1Vj7c.roa (hash: cPWgxwQyZuH/gL73No34Pn5M4vHlmORZov0bMnwx4CM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c7/74aa3a-473d-4fb5-9038-81d1304faf76/1/ojguLlS2Dx9o-FyYTaGmljHFLKg.crl
rsync://rpki.ripe.net/repository/DEFAULT/c7/74aa3a-473d-4fb5-9038-81d1304faf76/1/ojguLlS2Dx9o-FyYTaGmljHFLKg.mft
rsync://rpki.ripe.net/repository/DEFAULT/ojguLlS2Dx9o-FyYTaGmljHFLKg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Apr 2025 20:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:74:1e:7c:14:94:61:67:15:e9:62:e9:52:3a:0d:ee:bf
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a2382e2e54b60f1f68f85c984da1a69631c52ca8
Validity
Not Before: Apr 26 22:01:16 2025 GMT
Not After : Apr 27 22:01:16 2025 GMT
Subject: CN=65071bcb49e6583fe9d120bdb4b1e1d6b976f116
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:85:c7:a6:f4:06:f0:0a:88:1d:ce:99:1c:9b:
d2:c8:f2:e3:6a:8f:ae:f4:56:2b:5d:d3:bd:ba:e6:
f7:6e:05:41:14:78:7c:84:25:40:d4:fe:84:3b:b9:
a6:ab:47:d5:4c:92:32:4e:bc:c9:b8:a0:85:ec:10:
15:92:c3:d7:02:33:95:9d:99:49:ee:e9:73:82:6e:
e0:65:54:43:40:9e:8c:12:fb:f0:b0:76:7a:14:89:
3d:d2:84:5e:4e:15:16:1a:3e:bb:bd:16:17:3d:88:
c7:95:f0:e4:af:d7:ce:5d:89:5f:2b:c4:3e:2b:c5:
84:4b:b3:1c:48:2f:69:9a:d4:d5:d7:7b:96:4c:bb:
3a:e8:00:fb:d2:97:89:8f:0b:dd:09:3a:29:77:d7:
70:16:21:43:13:03:73:7d:69:91:c8:17:f9:cc:1c:
1a:40:3b:ff:70:ef:6a:42:e9:1e:05:3f:23:b3:05:
73:2b:5f:82:5a:ba:6d:bf:f4:58:50:d4:c1:da:57:
33:6d:62:bf:6b:a5:b2:68:ee:59:b5:d3:c6:44:f2:
e5:7a:54:3b:18:db:b7:f1:e1:df:4e:de:6f:26:d4:
fd:f8:d9:c3:ef:64:89:09:30:9a:8f:dc:2f:29:0d:
da:58:8d:60:84:df:36:ee:c4:92:6a:17:bf:e6:0f:
55:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
65:07:1B:CB:49:E6:58:3F:E9:D1:20:BD:B4:B1:E1:D6:B9:76:F1:16
X509v3 Authority Key Identifier:
keyid:A2:38:2E:2E:54:B6:0F:1F:68:F8:5C:98:4D:A1:A6:96:31:C5:2C:A8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ojguLlS2Dx9o-FyYTaGmljHFLKg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/74aa3a-473d-4fb5-9038-81d1304faf76/1/ojguLlS2Dx9o-FyYTaGmljHFLKg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/74aa3a-473d-4fb5-9038-81d1304faf76/1/ojguLlS2Dx9o-FyYTaGmljHFLKg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2f:5c:c1:24:0d:f4:29:23:05:cb:a6:01:f5:74:a4:eb:ce:71:
57:02:82:8f:fc:7a:26:49:90:95:5b:17:dd:98:f2:37:38:9d:
31:8f:e2:16:a8:dc:07:b1:04:bb:33:b1:7d:20:64:de:54:f1:
2c:53:49:ca:cb:12:97:77:e0:37:f6:b0:7b:e6:b5:7a:49:56:
b7:62:f1:bb:5e:0e:9a:59:a2:59:a8:cf:af:4c:f4:cc:74:b9:
d1:95:ce:5b:ae:21:0e:29:cf:e6:15:43:76:af:f6:dd:42:76:
34:9a:40:3b:8a:46:5e:71:7a:d2:72:3d:bd:6f:ea:5a:98:c5:
64:42:30:f0:13:6c:c7:d4:09:5a:ed:57:67:de:4f:8d:e3:98:
87:64:eb:aa:32:c6:ca:cf:1e:1d:8d:46:ab:d3:45:da:0c:d6:
91:d5:89:7d:5c:33:b7:91:d6:f5:df:5e:e0:e5:1d:40:ac:14:
22:c5:8f:d0:d4:ed:c7:bf:98:78:6c:ad:d4:4a:a1:bb:ef:5f:
61:4c:84:8a:38:ae:b4:e6:a7:f3:4c:4f:7c:94:49:b6:93:5b:
bc:00:48:ab:67:97:50:c9:3e:f7:16:97:c8:23:f3:fe:56:3e:
b5:82:07:59:a1:dd:ee:87:08:db:54:46:40:a9:df:ba:a2:9c:
a1:da:d8:30
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 05:47:19 2025 by rpki-client