Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d9/0f18df-26ef-4ec6-8667-7218855646e3/1/mOGPra73Iy0xYYhqy-qKsyPPNXA.mft
File: mOGPra73Iy0xYYhqy-qKsyPPNXA.mft (raw, json)
Hash identifier: 1Tki+odZcJy+aevZZBD1ynBHfhHDTJd+eusAqxekupQ=
Subject key identifier: 9F:6E:7E:AB:5B:CE:38:86:59:B4:15:5D:E6:8D:A1:8C:98:A3:AD:9E
Authority key identifier: 98:E1:8F:AD:AE:F7:23:2D:31:61:88:6A:CB:EA:8A:B3:23:CF:35:70
Certificate issuer: /CN=98e18fadaef7232d3161886acbea8ab323cf3570
Certificate serial: 019672D42D321CC1A00896EE9DDFEE1D8DA7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mOGPra73Iy0xYYhqy-qKsyPPNXA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d9/0f18df-26ef-4ec6-8667-7218855646e3/1/mOGPra73Iy0xYYhqy-qKsyPPNXA.mft
Manifest number: 0260
Signing time: Sat 26 Apr 2025 16:00:29 +0000
Manifest this update: Sat 26 Apr 2025 16:00:29 +0000
Manifest next update: Sun 27 Apr 2025 16:00:29 +0000
Files and hashes: 1: VpkCsO4Sj1kfftcY5G5XJmTJEG0.roa (hash: ETNkYiblCUpkwdU3IL2iumD+BXzDHtOGaGe3dN4NhPg=)
2: erMk5yuryhZB_ZV-dGn9yf-aRpI.roa (hash: g/Q0NWNaVho78aB7txRveS1/ldgfqH8Be/gkNubWJao=)
3: mOGPra73Iy0xYYhqy-qKsyPPNXA.crl (hash: MRANclrDQWhmcfgP6d6A5cinjFw2YCYVm8ZYFg2krzs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d9/0f18df-26ef-4ec6-8667-7218855646e3/1/mOGPra73Iy0xYYhqy-qKsyPPNXA.crl
rsync://rpki.ripe.net/repository/DEFAULT/d9/0f18df-26ef-4ec6-8667-7218855646e3/1/mOGPra73Iy0xYYhqy-qKsyPPNXA.mft
rsync://rpki.ripe.net/repository/DEFAULT/mOGPra73Iy0xYYhqy-qKsyPPNXA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Apr 2025 11:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:72:d4:2d:32:1c:c1:a0:08:96:ee:9d:df:ee:1d:8d:a7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=98e18fadaef7232d3161886acbea8ab323cf3570
Validity
Not Before: Apr 26 16:00:29 2025 GMT
Not After : Apr 27 16:00:29 2025 GMT
Subject: CN=9f6e7eab5bce388659b4155de68da18c98a3ad9e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ed:1a:1a:68:f2:a5:a1:f5:30:40:20:38:91:b5:
67:9b:d4:ac:65:21:d2:1e:5a:54:b6:27:97:5c:c0:
79:14:e3:ec:5a:ec:de:24:8f:01:72:4f:02:a7:40:
45:e9:6a:d6:19:c6:e0:45:da:2b:82:50:ae:15:52:
12:e3:d0:74:a8:8e:f1:2e:6c:27:02:61:c1:d5:b4:
62:1e:b9:ab:11:7b:af:85:7f:62:9b:e6:18:a0:56:
54:ba:d6:1c:a8:ce:16:4b:b7:cc:f5:fb:3c:a4:c7:
c1:1f:b9:ac:c7:93:16:e1:9f:25:ab:ec:43:fa:74:
14:09:fc:7e:aa:a6:6c:88:50:97:d9:f7:73:02:e9:
c2:91:fe:91:b5:7b:f0:f5:11:b6:76:85:22:03:f9:
bd:fb:74:72:a6:02:86:9d:29:bd:6a:df:06:42:7a:
00:00:6b:f3:53:98:5f:d6:12:4d:97:71:e0:62:0f:
50:cf:ad:c2:92:47:6a:e8:e9:fa:bb:a0:b9:0d:8e:
11:8f:2d:bb:f5:7f:4d:aa:95:db:a6:f7:61:7d:f4:
89:6c:e0:4e:d3:79:c3:52:c1:12:ed:53:76:84:46:
78:de:98:3d:22:10:4a:47:4c:4b:71:74:42:2b:fe:
69:3a:b9:15:42:8e:94:e4:69:55:a9:4c:6c:c4:2b:
39:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9F:6E:7E:AB:5B:CE:38:86:59:B4:15:5D:E6:8D:A1:8C:98:A3:AD:9E
X509v3 Authority Key Identifier:
keyid:98:E1:8F:AD:AE:F7:23:2D:31:61:88:6A:CB:EA:8A:B3:23:CF:35:70
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mOGPra73Iy0xYYhqy-qKsyPPNXA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/0f18df-26ef-4ec6-8667-7218855646e3/1/mOGPra73Iy0xYYhqy-qKsyPPNXA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/0f18df-26ef-4ec6-8667-7218855646e3/1/mOGPra73Iy0xYYhqy-qKsyPPNXA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
98:1a:41:32:8f:d0:68:64:e8:d3:cf:8c:49:83:72:2c:2f:ba:
f9:bc:03:87:a3:f5:3b:42:1a:63:7b:7d:e2:ad:bf:61:05:c8:
58:52:98:f0:69:37:f7:3d:46:12:41:8f:fa:3c:52:40:31:ab:
04:bc:fd:91:19:b9:de:45:9a:22:7a:0a:30:d3:18:aa:7a:14:
37:b1:e1:cf:94:f9:b7:5b:7a:d8:f6:96:05:2c:73:53:71:f5:
69:eb:53:f3:53:cf:e6:4d:c2:32:10:3d:a2:80:b2:32:2f:35:
67:30:af:f9:ee:a3:57:e3:fa:9a:c6:48:df:0d:7c:67:a5:c9:
31:80:a9:57:16:29:91:c3:1d:bd:3d:97:0f:41:2b:e7:9f:c7:
22:b5:8a:6e:04:f3:eb:07:b4:bd:22:bf:7c:1a:34:e0:97:52:
ab:d4:31:c8:2f:e2:1e:31:45:ec:6f:56:e2:04:b2:dd:6a:a4:
20:8b:c6:a9:ed:06:71:6b:1d:34:ba:cf:58:1d:81:05:5a:0f:
dd:7f:ad:b9:a7:a5:b8:7e:2f:32:dd:aa:d2:7e:c0:a9:02:5d:
7c:19:41:66:c7:3f:9d:7e:9b:3c:9e:49:4b:0c:0e:38:f4:08:
2b:ff:c2:b2:58:af:43:19:f9:47:53:36:88:ac:c5:e4:88:cd:
fc:c9:2a:0e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 19:06:34 2025 by rpki-client