Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d9/83a77d-9cad-40de-abed-c4d42b7f6270/1/ogAYZIx6-hREZNR7seLLK6eG67E.mft
File: ogAYZIx6-hREZNR7seLLK6eG67E.mft (raw, json)
Hash identifier: YjuSfFkjqBPGTDA/gSnS0ewFYHSde+oT1dnszFcthHU=
Subject key identifier: 9D:62:8B:41:77:D6:9D:3A:A9:D4:05:0D:F1:EC:3F:46:27:D9:58:02
Authority key identifier: A2:00:18:64:8C:7A:FA:14:44:64:D4:7B:B1:E2:CB:2B:A7:86:EB:B1
Certificate issuer: /CN=a20018648c7afa144464d47bb1e2cb2ba786ebb1
Certificate serial: 01967EA170FBA49878CA560E2DDB2A03643A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ogAYZIx6-hREZNR7seLLK6eG67E.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d9/83a77d-9cad-40de-abed-c4d42b7f6270/1/ogAYZIx6-hREZNR7seLLK6eG67E.mft
Manifest number: 021C
Signing time: Mon 28 Apr 2025 23:00:31 +0000
Manifest this update: Mon 28 Apr 2025 23:00:31 +0000
Manifest next update: Tue 29 Apr 2025 23:00:31 +0000
Files and hashes: 1: Hg_LuWwF2PqnDP--QEmiR8s_JMw.roa (hash: pTVkg9vcSnhojGDdhaJdcSnTn9EzuAwvN69LeVjj+eI=)
2: ZyIFjDXNoQmTUrQTfRFil604EkI.roa (hash: w5vJh9LGNygfKftlkH12Umx5kIPwjNAoWDXEhQaobKc=)
3: ogAYZIx6-hREZNR7seLLK6eG67E.crl (hash: njAd9jwTkUHVG4UwTp+afOieYmfvcuDmbXKe4q4d7So=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d9/83a77d-9cad-40de-abed-c4d42b7f6270/1/ogAYZIx6-hREZNR7seLLK6eG67E.crl
rsync://rpki.ripe.net/repository/DEFAULT/d9/83a77d-9cad-40de-abed-c4d42b7f6270/1/ogAYZIx6-hREZNR7seLLK6eG67E.mft
rsync://rpki.ripe.net/repository/DEFAULT/ogAYZIx6-hREZNR7seLLK6eG67E.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 29 Apr 2025 23:00:31 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:7e:a1:70:fb:a4:98:78:ca:56:0e:2d:db:2a:03:64:3a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a20018648c7afa144464d47bb1e2cb2ba786ebb1
Validity
Not Before: Apr 28 23:00:31 2025 GMT
Not After : Apr 29 23:00:31 2025 GMT
Subject: CN=9d628b4177d69d3aa9d4050df1ec3f4627d95802
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:76:7c:4f:b1:d3:db:f3:25:80:a0:a4:0b:a8:
99:8e:8e:d9:ec:26:62:7a:1d:10:3a:a9:cb:bc:cf:
a3:cd:92:5f:0c:d0:cd:2d:8b:f2:65:ff:a0:0c:44:
dc:18:32:09:44:e0:de:b0:60:3e:2e:0a:18:dc:d7:
bd:9e:b2:de:14:99:bc:96:cf:f4:6a:f8:03:02:72:
45:27:3a:66:9e:37:be:85:25:a6:f9:1a:b3:53:36:
82:b9:48:1e:32:8c:fb:5f:03:bd:63:af:44:e7:fd:
eb:c9:79:81:f2:7a:e1:7e:30:e6:3f:65:69:9d:05:
eb:17:a6:78:4e:10:25:1f:a0:d0:70:27:15:8e:5b:
34:2b:7e:9a:48:37:75:c9:42:8b:ec:cf:c6:82:d4:
01:90:93:10:d6:5d:b2:a3:97:3d:db:13:7e:e2:69:
2e:26:c5:24:3a:01:d0:ba:69:63:69:77:a1:a8:7b:
2f:b3:71:3a:f6:b3:11:08:1b:7b:fe:4c:d9:2b:94:
ca:57:39:68:97:80:11:81:e3:3b:38:f3:92:14:55:
62:5b:f7:73:ce:32:b0:2b:c8:08:71:3c:23:0d:73:
91:05:9a:33:4e:65:2e:0d:9b:f8:ff:61:4a:97:98:
c7:d7:53:c2:00:52:f5:75:1e:45:d9:78:ff:26:c5:
c4:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9D:62:8B:41:77:D6:9D:3A:A9:D4:05:0D:F1:EC:3F:46:27:D9:58:02
X509v3 Authority Key Identifier:
keyid:A2:00:18:64:8C:7A:FA:14:44:64:D4:7B:B1:E2:CB:2B:A7:86:EB:B1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ogAYZIx6-hREZNR7seLLK6eG67E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/83a77d-9cad-40de-abed-c4d42b7f6270/1/ogAYZIx6-hREZNR7seLLK6eG67E.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/83a77d-9cad-40de-abed-c4d42b7f6270/1/ogAYZIx6-hREZNR7seLLK6eG67E.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6a:e8:59:5b:4a:cd:3b:d5:ce:b9:a0:b6:06:95:cd:27:4a:cf:
a2:5e:f5:1c:be:01:19:6d:c9:64:3a:89:38:d4:52:bc:90:3a:
4d:0c:e5:ac:3f:6d:02:2f:fd:3e:ee:24:a8:e7:46:45:a4:20:
31:4f:ca:d2:11:17:6e:f7:33:f7:d6:e9:0d:9c:5a:90:a4:b5:
c2:9a:6b:87:f4:4a:b5:75:6c:4c:b7:eb:4f:bd:2d:b9:a9:51:
d4:cc:da:a6:59:13:80:2e:15:8f:51:35:7e:58:a7:ec:eb:08:
a6:90:38:09:f0:5b:62:e4:34:b3:3e:97:53:4e:ca:df:53:c6:
77:e8:16:43:1f:67:e3:6b:05:79:f8:3b:ec:e7:c7:78:16:dd:
9a:dd:18:14:0f:80:a3:fe:18:fe:34:48:35:1c:73:c7:87:b5:
39:28:c9:29:25:58:37:4b:f0:cd:73:dc:61:a2:dc:d8:b1:d6:
4f:db:00:dd:ab:11:8b:81:a0:d6:a8:54:65:83:6e:a3:12:c4:
00:84:0b:c6:d1:c1:46:cc:d6:65:24:cd:55:71:97:c1:1a:42:
db:7c:15:5c:3d:24:a8:d4:ca:35:d7:ba:2f:aa:0e:8e:09:ea:
c3:8e:cd:85:d7:cd:0c:2d:1a:c8:6b:f1:03:76:53:36:c6:ae:
d4:1f:1a:44
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 29 07:47:15 2025 by rpki-client