Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cf/a13a17-6c73-4c78-9752-949dbe9b57fe/1/OqMu4BJm4BjSNlw7uhdy9CQXmsI.mft
File: OqMu4BJm4BjSNlw7uhdy9CQXmsI.mft (raw, json)
Hash identifier: aV+WoxSi71FiyPYYzzCzlQKNJvQbK65wSmkheXB/7mc=
Subject key identifier: 92:C7:6A:B7:B2:A2:8E:8E:3E:ED:7D:DC:75:B5:CE:D3:C0:0B:2F:EE
Authority key identifier: 3A:A3:2E:E0:12:66:E0:18:D2:36:5C:3B:BA:17:72:F4:24:17:9A:C2
Certificate issuer: /CN=3aa32ee01266e018d2365c3bba1772f424179ac2
Certificate serial: 0196771EB2634380AABA9D0608947263538B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OqMu4BJm4BjSNlw7uhdy9CQXmsI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cf/a13a17-6c73-4c78-9752-949dbe9b57fe/1/OqMu4BJm4BjSNlw7uhdy9CQXmsI.mft
Manifest number: 1512
Signing time: Sun 27 Apr 2025 12:00:22 +0000
Manifest this update: Sun 27 Apr 2025 12:00:22 +0000
Manifest next update: Mon 28 Apr 2025 12:00:22 +0000
Files and hashes: 1: OqMu4BJm4BjSNlw7uhdy9CQXmsI.crl (hash: /KXm0im2KeMRB1+3T3kGm8e+T6r467UIefa/vLFq0pk=)
2: gkWQrDSBz4IQ4_XEEVy4Y27yU80.roa (hash: VF6i/0gNwt2tTOONBHG2KH5sytCAkilisQqp9v19k2Y=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cf/a13a17-6c73-4c78-9752-949dbe9b57fe/1/OqMu4BJm4BjSNlw7uhdy9CQXmsI.crl
rsync://rpki.ripe.net/repository/DEFAULT/cf/a13a17-6c73-4c78-9752-949dbe9b57fe/1/OqMu4BJm4BjSNlw7uhdy9CQXmsI.mft
rsync://rpki.ripe.net/repository/DEFAULT/OqMu4BJm4BjSNlw7uhdy9CQXmsI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Apr 2025 07:29:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:77:1e:b2:63:43:80:aa:ba:9d:06:08:94:72:63:53:8b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3aa32ee01266e018d2365c3bba1772f424179ac2
Validity
Not Before: Apr 27 12:00:22 2025 GMT
Not After : Apr 28 12:00:22 2025 GMT
Subject: CN=92c76ab7b2a28e8e3eed7ddc75b5ced3c00b2fee
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:93:1d:76:1b:c4:99:1e:87:a3:99:5e:e4:63:
9c:d9:c9:01:92:12:ec:b1:6d:e4:54:d4:d1:c3:5a:
a6:e3:98:05:89:f5:6a:8f:7f:18:c0:e2:ee:7f:15:
bd:dc:e0:55:4e:26:4e:85:b4:de:7e:26:2d:3e:72:
fd:7c:f3:89:79:f8:5e:6b:80:0e:ba:83:85:6f:8d:
ad:19:b6:cc:a7:1a:12:88:6e:2d:e8:4f:c8:a7:e4:
f1:ee:b7:df:18:24:2e:1a:8f:94:f1:ea:10:4e:c9:
cb:1e:94:71:fd:d0:ef:57:33:0a:36:fc:2f:15:52:
0d:26:19:62:8f:e3:f6:0e:24:e1:74:0d:ee:68:34:
b2:28:03:4d:e1:48:42:0c:d7:db:16:dc:63:67:19:
3e:f1:ff:75:ea:e6:4c:04:08:cf:23:07:3c:f4:41:
2e:d4:81:46:fe:d8:42:da:f6:89:77:3b:14:e7:9d:
35:c6:1a:08:e2:8a:83:35:77:ad:a3:a9:25:1c:63:
11:c9:fc:28:a7:f5:00:90:b9:04:8a:24:31:ee:ab:
d3:3d:3e:42:a6:9a:8b:0c:48:ff:a0:cb:76:f3:6f:
d3:ad:3b:3c:cd:76:ca:bc:52:d8:39:9b:c4:19:4d:
83:f2:37:f9:37:f2:73:2f:31:88:53:ce:6d:3d:18:
c4:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
92:C7:6A:B7:B2:A2:8E:8E:3E:ED:7D:DC:75:B5:CE:D3:C0:0B:2F:EE
X509v3 Authority Key Identifier:
keyid:3A:A3:2E:E0:12:66:E0:18:D2:36:5C:3B:BA:17:72:F4:24:17:9A:C2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OqMu4BJm4BjSNlw7uhdy9CQXmsI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cf/a13a17-6c73-4c78-9752-949dbe9b57fe/1/OqMu4BJm4BjSNlw7uhdy9CQXmsI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cf/a13a17-6c73-4c78-9752-949dbe9b57fe/1/OqMu4BJm4BjSNlw7uhdy9CQXmsI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
35:6e:7c:fe:3d:b1:c2:37:00:1d:ab:c0:9e:3e:43:14:3c:5f:
e6:a7:31:76:ff:c5:70:29:40:56:8b:5f:2b:f9:b8:7d:54:7a:
5d:c1:da:a8:c3:92:c6:6a:4d:c6:1e:43:4e:40:d7:12:be:64:
b6:b5:49:07:b0:6a:d6:5e:8d:ce:7c:e6:91:fb:a5:9c:4d:46:
8b:a6:3f:39:f8:a1:6b:cd:0f:2c:75:f4:dc:18:ee:d6:63:a5:
b6:9f:cd:fd:1d:52:1e:42:8e:24:e9:88:72:70:cd:83:41:f8:
d3:36:a3:8a:9a:d8:35:c4:22:8e:0d:1f:23:bb:59:66:b0:d7:
82:ba:db:08:14:f5:94:4b:4e:7c:28:f3:d9:2b:49:2f:17:af:
66:ec:5f:1e:81:a8:c9:d6:ff:64:d5:52:c6:9a:ae:96:dd:f4:
2f:ab:c3:1d:5d:eb:93:d3:bf:63:c6:2f:ce:a8:ea:28:d5:63:
7c:d8:67:b5:6e:cf:5b:53:f1:2b:c0:a9:a0:90:a7:6f:66:92:
db:e6:3b:75:06:b3:cb:eb:9c:3f:3b:f2:82:54:33:6a:99:08:
2a:4b:d5:ac:63:24:9d:4a:30:c8:4a:1b:8c:37:04:7e:0c:6e:
73:1e:a0:2e:5b:ec:00:d7:0b:4e:22:a5:05:4c:0b:55:b7:5a:
f4:4b:2a:bf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 17:21:05 2025 by rpki-client