Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cc/c98b87-1857-44bd-8b0c-78d833e4146a/1/oUEfVodbTLeljO5stgfuJRy9-YA.mft
File: oUEfVodbTLeljO5stgfuJRy9-YA.mft (raw, json)
Hash identifier: umDYJFn8Ec6C5PKVZRWe9bBcvEb9nyekRvzvZ+5wZRA=
Subject key identifier: B6:9B:CB:54:12:C8:52:F3:B3:96:80:03:D6:BE:5C:D6:29:D9:2F:0C
Authority key identifier: A1:41:1F:56:87:5B:4C:B7:A5:8C:EE:6C:B6:07:EE:25:1C:BD:F9:80
Certificate issuer: /CN=a1411f56875b4cb7a58cee6cb607ee251cbdf980
Certificate serial: 019680220CA950FB77A109639F0C647FD412
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/oUEfVodbTLeljO5stgfuJRy9-YA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cc/c98b87-1857-44bd-8b0c-78d833e4146a/1/oUEfVodbTLeljO5stgfuJRy9-YA.mft
Manifest number: 0A5A
Signing time: Tue 29 Apr 2025 06:00:37 +0000
Manifest this update: Tue 29 Apr 2025 06:00:37 +0000
Manifest next update: Wed 30 Apr 2025 06:00:37 +0000
Files and hashes: 1: 6uRuEC7JoCUPPlfzfq6SUK7xUvo.roa (hash: zYNo9c9drvS3wANkMRjjuuNlAVle3l3m/ueKMaH/pb4=)
2: oUEfVodbTLeljO5stgfuJRy9-YA.crl (hash: lnnpc2qRjeZJhMlS84xFnIbZEYMNSLdLOnFitUoicWI=)
3: xwYkLak0tseV-cTQ1ic58KIpdCM.roa (hash: wf8j4jNXQvlA5zsVKqv6eAbllDMh+Scu3BghD9yeir8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cc/c98b87-1857-44bd-8b0c-78d833e4146a/1/oUEfVodbTLeljO5stgfuJRy9-YA.crl
rsync://rpki.ripe.net/repository/DEFAULT/cc/c98b87-1857-44bd-8b0c-78d833e4146a/1/oUEfVodbTLeljO5stgfuJRy9-YA.mft
rsync://rpki.ripe.net/repository/DEFAULT/oUEfVodbTLeljO5stgfuJRy9-YA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 30 Apr 2025 06:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:80:22:0c:a9:50:fb:77:a1:09:63:9f:0c:64:7f:d4:12
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a1411f56875b4cb7a58cee6cb607ee251cbdf980
Validity
Not Before: Apr 29 06:00:37 2025 GMT
Not After : Apr 30 06:00:37 2025 GMT
Subject: CN=b69bcb5412c852f3b3968003d6be5cd629d92f0c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:88:4a:c7:2d:62:eb:d2:fb:c2:32:fc:8a:19:
0d:81:aa:2a:e6:e0:ca:e9:d4:7a:30:32:d8:97:3b:
8e:eb:b9:e7:43:10:47:20:98:70:e2:c3:ea:b4:06:
d8:e2:ff:3b:9f:c8:f5:0a:d8:d1:a5:09:60:65:da:
34:e9:8f:86:20:8c:03:cb:dc:dd:af:78:f3:91:9c:
94:05:e5:bd:ab:b8:74:5e:4c:3a:43:fb:4a:85:03:
a8:e8:ae:4b:88:a7:68:5a:db:01:6a:34:02:78:4b:
de:9a:11:0e:71:84:5b:5e:95:ff:88:04:7a:e7:ec:
be:56:a9:5d:4f:e5:54:ff:59:58:03:9f:6d:af:19:
1f:76:f5:94:9c:18:ad:fe:94:84:86:07:05:43:85:
07:a3:76:b1:59:3e:b1:99:d3:eb:e7:78:44:61:f5:
76:f0:d8:b5:f4:b8:a5:cc:ad:33:2c:40:d2:f8:70:
8f:af:7d:c8:e5:75:72:86:5d:11:3b:23:ab:41:28:
22:c2:44:7e:82:e5:e7:b5:71:9c:9b:79:1a:14:56:
df:58:22:d6:ad:86:97:f8:e6:c8:69:d2:fe:e1:be:
d3:1f:e1:87:a7:1e:71:1e:ac:f2:d7:7d:52:db:1b:
90:71:49:f1:c1:ea:56:c6:a5:ed:72:a0:47:3b:64:
db:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B6:9B:CB:54:12:C8:52:F3:B3:96:80:03:D6:BE:5C:D6:29:D9:2F:0C
X509v3 Authority Key Identifier:
keyid:A1:41:1F:56:87:5B:4C:B7:A5:8C:EE:6C:B6:07:EE:25:1C:BD:F9:80
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/oUEfVodbTLeljO5stgfuJRy9-YA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/c98b87-1857-44bd-8b0c-78d833e4146a/1/oUEfVodbTLeljO5stgfuJRy9-YA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/c98b87-1857-44bd-8b0c-78d833e4146a/1/oUEfVodbTLeljO5stgfuJRy9-YA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
33:94:f3:c2:7b:ce:59:99:5d:7c:32:38:2d:52:3f:f0:a7:83:
0e:db:51:bf:4c:13:06:65:a5:11:c5:df:b9:02:d6:00:48:51:
78:97:c0:b1:fd:2b:6f:9c:e7:b9:3a:54:f2:c9:f8:ae:37:db:
bf:5d:d5:c7:97:a4:c4:5a:3a:9b:7e:96:0a:5e:b4:c8:cf:4f:
3b:01:7b:cc:2d:a4:9e:aa:91:8b:ac:2e:1b:66:45:df:b4:a1:
0a:5b:9e:63:c5:c2:71:04:cd:70:1b:72:ff:2d:e6:56:5b:9d:
45:b2:cf:ee:bb:dd:3a:21:17:e2:ef:9a:40:88:e3:93:77:d6:
f4:13:d5:2b:94:5c:2b:89:e8:a3:76:03:1d:33:d0:41:d1:2a:
36:1d:d0:ab:72:ab:46:44:5d:26:0b:dd:de:c4:fd:d9:8f:bb:
29:9d:e2:45:97:bc:39:d2:8b:79:6c:4c:4c:da:0a:4a:22:82:
e7:48:61:86:60:13:20:90:e1:a4:03:a7:48:5d:52:da:79:d6:
fc:f0:aa:aa:6f:1c:22:47:8f:03:5c:f3:51:9f:23:3b:f2:e6:
44:18:de:a8:ed:cd:4f:71:f2:d6:63:d8:d6:f2:53:f5:63:cc:
97:b4:72:ad:85:a0:77:b2:7e:7e:10:c8:9d:e4:4f:d7:4d:6f:
62:cf:a7:b9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 29 14:33:51 2025 by rpki-client