Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d0/ef9221-c354-4e67-a32f-84e596a3c121/1/OeQFnlGefK0FNr1U2RvJeHVkTNs.mft
File: OeQFnlGefK0FNr1U2RvJeHVkTNs.mft (raw, json)
Hash identifier: oHWV6lU/3StYE+j/a7oDuR0xASguAKkzicoec82Txo8=
Subject key identifier: EA:EB:61:76:71:DD:A3:0F:C4:2D:0C:AB:2E:21:92:94:3B:BD:44:3D
Authority key identifier: 39:E4:05:9E:51:9E:7C:AD:05:36:BD:54:D9:1B:C9:78:75:64:4C:DB
Certificate issuer: /CN=39e4059e519e7cad0536bd54d91bc97875644cdb
Certificate serial: 0196764310DED35CA0294772A728D7E5C2A0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OeQFnlGefK0FNr1U2RvJeHVkTNs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d0/ef9221-c354-4e67-a32f-84e596a3c121/1/OeQFnlGefK0FNr1U2RvJeHVkTNs.mft
Manifest number: 149F
Signing time: Sun 27 Apr 2025 08:00:28 +0000
Manifest this update: Sun 27 Apr 2025 08:00:28 +0000
Manifest next update: Mon 28 Apr 2025 08:00:28 +0000
Files and hashes: 1: OeQFnlGefK0FNr1U2RvJeHVkTNs.crl (hash: UHqLG7QW/DrGv3lPl+Ygp/1baY/X9SJopkYc0Q4NDEQ=)
2: Wrm4Xo5M6Od7VmecTT8hFIZ3qpU.roa (hash: VMyIfns1xRX3nJc0aO+48RkMt038/NfSu9JKR70iYqE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d0/ef9221-c354-4e67-a32f-84e596a3c121/1/OeQFnlGefK0FNr1U2RvJeHVkTNs.crl
rsync://rpki.ripe.net/repository/DEFAULT/d0/ef9221-c354-4e67-a32f-84e596a3c121/1/OeQFnlGefK0FNr1U2RvJeHVkTNs.mft
rsync://rpki.ripe.net/repository/DEFAULT/OeQFnlGefK0FNr1U2RvJeHVkTNs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Apr 2025 05:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:76:43:10:de:d3:5c:a0:29:47:72:a7:28:d7:e5:c2:a0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=39e4059e519e7cad0536bd54d91bc97875644cdb
Validity
Not Before: Apr 27 08:00:28 2025 GMT
Not After : Apr 28 08:00:28 2025 GMT
Subject: CN=eaeb617671dda30fc42d0cab2e2192943bbd443d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:4d:7d:4c:11:1d:e0:6a:94:53:cf:e7:21:f1:
36:76:00:50:ae:b1:f8:93:ca:06:10:7f:ca:92:5b:
89:f6:be:06:f5:c5:9f:b4:8d:90:60:57:a1:b2:63:
c8:b4:86:f5:20:e1:a4:66:de:66:fd:9d:33:bc:81:
4c:ce:33:d6:46:44:13:20:6d:05:81:e4:f0:79:c3:
65:dc:5d:48:7a:c2:5b:05:c5:06:d8:ce:9e:1b:67:
40:cb:6e:34:7f:3c:ea:c1:ba:2c:3f:d4:cf:9e:06:
5e:07:88:04:7a:df:1d:b5:fb:41:cf:62:9e:dc:28:
37:33:b0:0e:22:91:df:51:9c:bf:8c:b1:eb:d8:91:
b4:56:2e:35:7c:11:aa:c9:a0:64:34:4b:a8:33:0d:
b0:49:dd:bc:cf:b3:1a:dd:86:67:86:ae:42:bc:17:
ed:0b:ec:94:78:4e:80:4e:f5:a3:d0:11:55:21:ce:
16:1a:1b:86:98:b6:70:ef:30:50:63:4a:1d:91:02:
45:15:5f:73:1d:fa:7c:b4:51:46:ab:af:46:98:e5:
fa:4f:fe:ac:9c:14:df:d4:fe:b6:8f:27:83:f0:9a:
93:ee:9f:79:3d:85:6c:79:99:05:f1:71:b4:c2:9c:
a5:3f:f3:06:98:85:b5:92:4d:c2:fc:ab:73:73:82:
49:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EA:EB:61:76:71:DD:A3:0F:C4:2D:0C:AB:2E:21:92:94:3B:BD:44:3D
X509v3 Authority Key Identifier:
keyid:39:E4:05:9E:51:9E:7C:AD:05:36:BD:54:D9:1B:C9:78:75:64:4C:DB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OeQFnlGefK0FNr1U2RvJeHVkTNs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/ef9221-c354-4e67-a32f-84e596a3c121/1/OeQFnlGefK0FNr1U2RvJeHVkTNs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/ef9221-c354-4e67-a32f-84e596a3c121/1/OeQFnlGefK0FNr1U2RvJeHVkTNs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
44:e7:48:82:88:c8:0c:89:7e:4f:13:c1:db:0f:9d:a3:4d:e6:
29:0f:8c:c3:af:ce:5c:9a:82:26:05:f6:f6:0b:af:01:07:d0:
41:19:af:25:a4:85:7c:25:4f:fe:7a:2d:37:96:99:fe:b5:10:
66:43:c1:f1:ab:72:f2:88:c3:b3:fa:03:cd:a0:f7:38:f2:f0:
06:38:2a:9d:a7:f5:87:95:2d:e3:e0:c8:92:b1:1a:d7:00:04:
7a:93:3d:f6:d4:93:17:1a:1d:c9:e3:ff:b5:42:6c:45:d2:87:
b5:dc:60:fe:22:45:80:63:fc:7e:f6:5f:03:ee:01:7b:66:90:
fd:8d:01:6b:bc:86:7c:e5:61:0e:e2:40:e0:a5:36:13:66:e3:
e1:2f:c6:fe:92:3f:e6:bd:12:d0:0f:6e:9e:c8:94:b9:eb:e4:
cd:98:94:85:a4:31:c5:56:d2:4f:c2:70:a1:5e:45:b9:14:ee:
34:69:3e:63:a4:80:01:19:0f:1c:ce:84:9b:e1:94:bc:17:73:
6f:e6:33:61:49:fc:d5:d1:4a:5c:41:18:30:ad:f3:9b:92:6e:
69:4d:42:70:9c:bc:57:f2:8e:e7:5c:1e:0a:3f:79:9d:7f:f8:
50:d3:33:77:70:7a:9e:14:73:8a:8a:b8:e0:c1:0e:70:b6:a1:
59:ce:e5:65
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 12:52:11 2025 by rpki-client