Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/eb/b8ed2d-3545-4599-97e5-1523803fadaf/1/oYFk2ZYaFtLv93P1Angh6dK9N0A.mft
File: oYFk2ZYaFtLv93P1Angh6dK9N0A.mft (raw, json)
Hash identifier: pkxT9tFTFUlfOCbNsF7zU6Yhj+TRI2OVTc0U14TxKxU=
Subject key identifier: 8C:31:F8:A9:4B:35:44:F4:72:FE:8B:45:CF:D7:72:A8:EF:2D:23:39
Authority key identifier: A1:81:64:D9:96:1A:16:D2:EF:F7:73:F5:02:78:21:E9:D2:BD:37:40
Certificate issuer: /CN=a18164d9961a16d2eff773f5027821e9d2bd3740
Certificate serial: 019680C6B5A50F8AEA1CDB7F25998FA6D8F3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/oYFk2ZYaFtLv93P1Angh6dK9N0A.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/eb/b8ed2d-3545-4599-97e5-1523803fadaf/1/oYFk2ZYaFtLv93P1Angh6dK9N0A.mft
Manifest number: 0727
Signing time: Tue 29 Apr 2025 09:00:28 +0000
Manifest this update: Tue 29 Apr 2025 09:00:28 +0000
Manifest next update: Wed 30 Apr 2025 09:00:28 +0000
Files and hashes: 1: KGkiu_v0VLQmN7S0ksdeT71QkrU.roa (hash: JLkvT5B6nB370rTNimZvN5bMsuGtWZVcc7r812WnkMQ=)
2: KNUQ7DDU2baaPPVNDmRvLm-9Uqw.roa (hash: y7ygx++W/kXlD3JbB4xfsy1iAiffOMC9/nRL3EOds2U=)
3: oYFk2ZYaFtLv93P1Angh6dK9N0A.crl (hash: /fH0Xv6+J4374AWQP6x2culhGHCXfCMtHCElO2GMud8=)
4: qPIbjSN2yzTtuHjuLt4WE39NKes.roa (hash: tATEM+JFA1bxRwxg9JQmVMVUQWh9DxygoWoynUU65ks=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/eb/b8ed2d-3545-4599-97e5-1523803fadaf/1/oYFk2ZYaFtLv93P1Angh6dK9N0A.crl
rsync://rpki.ripe.net/repository/DEFAULT/eb/b8ed2d-3545-4599-97e5-1523803fadaf/1/oYFk2ZYaFtLv93P1Angh6dK9N0A.mft
rsync://rpki.ripe.net/repository/DEFAULT/oYFk2ZYaFtLv93P1Angh6dK9N0A.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 30 Apr 2025 08:46:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:80:c6:b5:a5:0f:8a:ea:1c:db:7f:25:99:8f:a6:d8:f3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a18164d9961a16d2eff773f5027821e9d2bd3740
Validity
Not Before: Apr 29 09:00:28 2025 GMT
Not After : Apr 30 09:00:28 2025 GMT
Subject: CN=8c31f8a94b3544f472fe8b45cfd772a8ef2d2339
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:1e:86:44:01:62:90:8c:c0:c0:83:82:6b:9e:
ef:e8:ab:00:b3:f8:0d:a6:b8:24:1d:4f:b1:67:79:
63:ac:f9:2f:ee:4a:4b:82:ee:ff:eb:56:6c:3a:da:
8e:79:2c:a6:9b:f7:c1:66:44:9a:b2:4f:ec:23:b3:
0c:2a:20:10:0a:03:3b:c1:ca:e0:fd:1e:8f:3f:57:
62:c5:55:37:b1:e3:49:78:3a:69:cb:fd:42:83:f4:
f7:12:42:f0:1d:cc:4c:14:54:4b:8a:6d:d4:a6:9c:
2d:09:cf:8f:d6:55:c5:64:a0:74:1f:9b:14:73:16:
e1:51:32:98:d0:2b:55:65:e0:1b:cc:aa:aa:13:33:
e4:9a:88:fe:95:27:e9:f5:22:1b:d5:3a:86:d6:24:
e0:20:3e:4b:9e:08:51:bd:82:3a:59:4d:79:bb:fd:
bd:1b:c5:d5:23:e3:90:e1:b9:44:34:99:f8:a5:0b:
19:4e:c8:94:9c:bf:1f:ca:d0:31:7e:40:92:f6:b1:
e1:d8:cf:11:1c:8f:6a:ec:8e:c0:4a:88:b1:3c:ca:
53:f5:8d:0b:e3:32:ef:2c:b9:9f:1c:6e:ed:0f:95:
81:2b:c3:0e:9f:c2:d8:e9:45:4b:36:79:ec:1c:45:
9c:9f:44:1b:2e:de:12:7d:a2:68:0c:d3:63:2e:16:
7b:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8C:31:F8:A9:4B:35:44:F4:72:FE:8B:45:CF:D7:72:A8:EF:2D:23:39
X509v3 Authority Key Identifier:
keyid:A1:81:64:D9:96:1A:16:D2:EF:F7:73:F5:02:78:21:E9:D2:BD:37:40
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/oYFk2ZYaFtLv93P1Angh6dK9N0A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/b8ed2d-3545-4599-97e5-1523803fadaf/1/oYFk2ZYaFtLv93P1Angh6dK9N0A.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/b8ed2d-3545-4599-97e5-1523803fadaf/1/oYFk2ZYaFtLv93P1Angh6dK9N0A.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
14:36:d2:d6:d6:e3:4e:be:b1:1f:4c:54:b5:c6:5d:bb:d2:71:
64:ad:ce:cb:5b:33:7b:3f:9c:25:9a:09:73:aa:04:00:a3:43:
a7:c5:a8:e4:b0:13:71:f7:71:9c:d8:8b:7e:47:5f:1d:32:4a:
e9:fe:b6:87:86:e1:ed:74:c9:2b:e6:d2:5e:e2:2c:73:07:ca:
41:17:33:80:f0:dd:36:01:08:e1:85:f5:c6:87:9e:21:c9:6f:
3b:4e:82:32:6f:ae:c7:a7:48:81:e0:aa:9b:c5:56:95:74:4e:
e2:83:f0:39:98:da:94:f7:47:7d:37:f7:09:ec:43:6d:ab:8d:
ec:5d:94:63:45:5b:59:ac:0d:bf:c7:47:f7:75:7f:69:a1:5b:
31:99:2d:c5:0f:3f:79:91:c4:0e:e7:2a:34:9b:ad:41:3a:0b:
5a:53:14:1c:b9:ac:3c:d3:4c:bc:db:60:20:85:f3:ff:14:a6:
b9:4e:0d:56:56:9b:79:cb:e0:3c:f8:7c:fe:b9:c2:9a:54:ca:
af:35:ed:73:1a:6e:81:eb:99:fc:40:ab:75:62:7d:d0:22:e2:
73:7f:0e:40:3d:21:94:56:b8:e9:18:a5:db:ba:7c:a6:59:87:
41:1b:26:02:68:fd:24:ed:94:70:9e:a9:5d:21:2b:36:58:f5:
61:60:e3:1e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 29 11:25:28 2025 by rpki-client