Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d4/fb9215-d1d1-47c2-ac81-84712c9f3464/1/OgQpta7KyDZFRL9iP5TxY6_c5WE.mft
File: OgQpta7KyDZFRL9iP5TxY6_c5WE.mft (raw, json)
Hash identifier: bj+h0x0A/TS3U5CAYf2naK5XOZnv5Ezo5OVWZfVs1rs=
Subject key identifier: 7A:7E:80:63:8E:10:74:AC:46:F0:73:A5:65:76:C4:6B:79:84:F7:B5
Authority key identifier: 3A:04:29:B5:AE:CA:C8:36:45:44:BF:62:3F:94:F1:63:AF:DC:E5:61
Certificate issuer: /CN=3a0429b5aecac8364544bf623f94f163afdce561
Certificate serial: 0196729D8E93D57CC5D6F8DB28F94195F61E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OgQpta7KyDZFRL9iP5TxY6_c5WE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d4/fb9215-d1d1-47c2-ac81-84712c9f3464/1/OgQpta7KyDZFRL9iP5TxY6_c5WE.mft
Manifest number: 073A
Signing time: Sat 26 Apr 2025 15:00:50 +0000
Manifest this update: Sat 26 Apr 2025 15:00:50 +0000
Manifest next update: Sun 27 Apr 2025 15:00:50 +0000
Files and hashes: 1: OgQpta7KyDZFRL9iP5TxY6_c5WE.crl (hash: aRImtMFYootGv1HazMtYssuZ/ZHgn/At9dGQTA4GbEE=)
2: QLu-t4-kWwjTWD2HUVQ3JUjA93E.roa (hash: wwPcnLN7UsFWJVqWb0xH9PzsYRh1MZUdzN16ZynKLqU=)
3: X9-z3qhXpej4BCNHXlOlwIoxiSI.roa (hash: +XeMFApgKN+wHjuGvI8Wb1xE1s+7UuhIUkYxW35SfdA=)
4: hwkpF7GCiN1Fi1Bf-G_kcCT7lXg.roa (hash: owUDYc5hXMNAaSpXWFyOh6YRLado21xVEXGeqVIdneY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d4/fb9215-d1d1-47c2-ac81-84712c9f3464/1/OgQpta7KyDZFRL9iP5TxY6_c5WE.crl
rsync://rpki.ripe.net/repository/DEFAULT/d4/fb9215-d1d1-47c2-ac81-84712c9f3464/1/OgQpta7KyDZFRL9iP5TxY6_c5WE.mft
rsync://rpki.ripe.net/repository/DEFAULT/OgQpta7KyDZFRL9iP5TxY6_c5WE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Apr 2025 11:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:72:9d:8e:93:d5:7c:c5:d6:f8:db:28:f9:41:95:f6:1e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3a0429b5aecac8364544bf623f94f163afdce561
Validity
Not Before: Apr 26 15:00:50 2025 GMT
Not After : Apr 27 15:00:50 2025 GMT
Subject: CN=7a7e80638e1074ac46f073a56576c46b7984f7b5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:6e:e3:5a:7b:b7:8e:8a:18:13:8d:33:74:be:
26:f2:cf:df:de:ad:80:52:a3:c4:38:04:7e:72:3d:
ab:aa:3e:c2:74:4a:a3:bc:e1:2c:7b:15:6b:28:a6:
50:4c:81:6e:3b:90:f2:8f:cf:04:ac:3d:6c:81:ed:
d5:e2:01:60:cc:81:24:de:46:2e:f9:e8:28:75:9b:
ac:8a:0d:23:05:aa:4a:57:a5:11:5c:09:cc:b9:7f:
b8:1d:89:67:74:dd:0b:64:0f:9e:0e:f2:4e:e1:9f:
c8:ec:78:5b:8a:9f:65:a2:b2:e7:9b:a2:b1:23:19:
1a:35:81:e0:00:b1:5a:5e:71:29:29:49:09:24:46:
ab:b6:13:8a:20:55:8d:7e:ee:d9:ec:f8:2d:a1:02:
53:13:33:2f:e9:0b:97:84:ff:ff:8b:c9:e9:54:df:
6a:9e:ee:7e:22:42:37:16:ec:4c:f1:12:4d:29:55:
f1:87:5d:86:9a:bc:94:ca:e1:6d:e4:64:6b:4c:ec:
75:a3:37:50:6f:4b:fd:1d:62:37:99:ea:4d:82:c5:
26:3f:33:8d:a6:e6:3e:1f:aa:b9:ad:91:8c:1e:be:
cf:2a:6b:19:f7:51:e7:2f:2c:71:3a:0f:69:a6:6b:
bb:fe:32:eb:ee:26:2e:23:c5:5d:02:6f:a1:b9:72:
ff:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7A:7E:80:63:8E:10:74:AC:46:F0:73:A5:65:76:C4:6B:79:84:F7:B5
X509v3 Authority Key Identifier:
keyid:3A:04:29:B5:AE:CA:C8:36:45:44:BF:62:3F:94:F1:63:AF:DC:E5:61
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OgQpta7KyDZFRL9iP5TxY6_c5WE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/fb9215-d1d1-47c2-ac81-84712c9f3464/1/OgQpta7KyDZFRL9iP5TxY6_c5WE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/fb9215-d1d1-47c2-ac81-84712c9f3464/1/OgQpta7KyDZFRL9iP5TxY6_c5WE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6a:00:95:26:31:49:49:67:93:ae:21:d2:40:c9:4b:68:af:a4:
08:b9:d3:f1:16:2a:e5:1a:91:36:ca:be:ac:c4:e1:1b:7c:3d:
64:51:eb:d1:a7:71:75:df:2f:1d:94:2d:c4:35:7b:b7:8c:62:
54:7d:a7:5f:34:6c:4d:84:b1:66:b1:33:f3:cd:59:07:7c:68:
b3:ab:9d:95:bc:1c:4b:3c:9c:0b:88:5e:e6:0f:c8:a9:ff:bc:
23:bc:5b:91:f9:c6:92:9b:69:ff:7f:92:26:a2:9e:93:f7:77:
1c:9d:f5:32:95:38:7b:2a:55:c7:2f:cc:1f:78:a9:b3:1d:25:
7a:cf:b1:bb:f5:e6:90:2b:c6:40:3e:00:bb:8b:59:e6:ec:1a:
25:7c:5a:dd:b5:7f:32:5a:54:f0:b0:eb:45:01:f6:3d:98:40:
b2:bb:18:06:81:6a:e0:7c:81:6e:19:28:f4:b9:34:62:62:f5:
24:b7:3f:df:a6:3c:30:19:36:8d:b5:c1:17:ae:9d:a2:51:92:
a2:24:f6:5f:89:ed:5b:72:5b:7c:2b:d9:93:fb:e7:e5:27:5d:
cd:fa:1f:5a:84:69:b8:15:2f:35:d2:63:e1:f5:51:0b:8c:e4:
05:75:20:dd:ac:54:be:f8:fd:40:3d:4b:05:4e:c5:00:76:70:
4d:c6:97:91
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 19:01:58 2025 by rpki-client