Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ee/dffbc8-b149-46b4-bbb8-31ea2094b557/1/OIN-SKr1mLyrVKX8iuQ7F74lQik.mft
File: OIN-SKr1mLyrVKX8iuQ7F74lQik.mft (raw, json)
Hash identifier: gGKxt519DB81t02pGidQ0/2CQiN5wMypejqoomJ3rmM=
Subject key identifier: 52:34:1E:63:79:DB:39:52:6F:2C:62:A3:D4:EE:B3:15:06:AE:4D:57
Authority key identifier: 38:83:7E:48:AA:F5:98:BC:AB:54:A5:FC:8A:E4:3B:17:BE:25:42:29
Certificate issuer: /CN=38837e48aaf598bcab54a5fc8ae43b17be254229
Certificate serial: 01968021B39DBEBC12C5B3E537D967369400
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OIN-SKr1mLyrVKX8iuQ7F74lQik.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ee/dffbc8-b149-46b4-bbb8-31ea2094b557/1/OIN-SKr1mLyrVKX8iuQ7F74lQik.mft
Manifest number: 0B92
Signing time: Tue 29 Apr 2025 06:00:14 +0000
Manifest this update: Tue 29 Apr 2025 06:00:14 +0000
Manifest next update: Wed 30 Apr 2025 06:00:14 +0000
Files and hashes: 1: Mbpk8QVkIW5FKgYutE5nhEuorhg.roa (hash: XJAfJvP6njUJvUjL+QeRVdBXhasJwe6UWIW0OOiZ2es=)
2: OIN-SKr1mLyrVKX8iuQ7F74lQik.crl (hash: P3ApkQAppDhvQCYbys0RZHbkyJjjzOcU268oxIBVsY4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ee/dffbc8-b149-46b4-bbb8-31ea2094b557/1/OIN-SKr1mLyrVKX8iuQ7F74lQik.crl
rsync://rpki.ripe.net/repository/DEFAULT/ee/dffbc8-b149-46b4-bbb8-31ea2094b557/1/OIN-SKr1mLyrVKX8iuQ7F74lQik.mft
rsync://rpki.ripe.net/repository/DEFAULT/OIN-SKr1mLyrVKX8iuQ7F74lQik.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 30 Apr 2025 06:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:80:21:b3:9d:be:bc:12:c5:b3:e5:37:d9:67:36:94:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=38837e48aaf598bcab54a5fc8ae43b17be254229
Validity
Not Before: Apr 29 06:00:14 2025 GMT
Not After : Apr 30 06:00:14 2025 GMT
Subject: CN=52341e6379db39526f2c62a3d4eeb31506ae4d57
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:60:91:9d:21:58:98:df:6a:7f:79:f3:2c:ce:
17:cd:ae:bc:47:3b:0d:7b:47:6a:71:a2:43:a1:74:
d5:8b:13:e0:a5:a3:00:8b:d0:f9:1e:38:98:c3:c9:
1e:24:00:a3:ef:3f:cc:8c:cc:3a:63:49:f9:4d:fc:
2e:c2:fb:26:b3:ab:77:01:20:10:d2:15:25:e5:20:
e6:3f:9b:30:67:48:0e:31:2c:18:71:e6:ae:33:34:
84:ab:4b:0f:84:2a:18:da:01:6c:61:f3:28:19:fe:
8b:f6:8c:52:d3:80:96:19:37:d7:74:f3:e7:f5:ac:
e5:96:53:f7:51:d2:72:e7:34:a2:ca:d5:86:ea:45:
f1:ee:37:02:1b:fe:08:2b:ce:e7:5e:9f:5f:02:8c:
b8:28:85:cf:9e:c3:7c:0d:f5:49:44:23:ef:b9:32:
30:69:05:00:c3:c7:d0:99:5d:26:10:7e:88:91:d5:
c0:d8:51:95:be:ba:57:30:04:60:b3:4c:ad:4d:b2:
41:3b:c7:3d:32:c5:a9:23:8f:bd:b4:5a:9a:bc:30:
cd:6e:94:ca:87:61:eb:14:58:24:f1:93:6d:8b:94:
53:45:a1:8d:b2:0e:ef:8e:0e:dd:bf:af:15:ee:54:
c4:e6:8a:39:95:8e:b0:0e:57:c0:07:cd:0c:5a:5c:
68:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
52:34:1E:63:79:DB:39:52:6F:2C:62:A3:D4:EE:B3:15:06:AE:4D:57
X509v3 Authority Key Identifier:
keyid:38:83:7E:48:AA:F5:98:BC:AB:54:A5:FC:8A:E4:3B:17:BE:25:42:29
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OIN-SKr1mLyrVKX8iuQ7F74lQik.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ee/dffbc8-b149-46b4-bbb8-31ea2094b557/1/OIN-SKr1mLyrVKX8iuQ7F74lQik.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ee/dffbc8-b149-46b4-bbb8-31ea2094b557/1/OIN-SKr1mLyrVKX8iuQ7F74lQik.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a2:0e:b2:32:a4:a5:02:46:7b:76:05:b1:51:92:20:fe:2e:03:
ea:14:95:42:8c:eb:3d:58:fd:d6:fd:27:0c:55:7d:1c:b4:c0:
6e:b3:3c:2e:07:cd:56:e3:ca:8f:ba:41:35:fb:57:14:f5:38:
54:43:32:0f:17:50:83:45:b2:4f:55:b0:bb:ed:85:b1:99:3d:
5f:02:21:1b:20:f0:3b:e2:74:cd:d5:f4:84:13:27:fe:18:bd:
9d:cd:d8:26:30:02:f8:60:06:29:27:37:0f:ba:31:09:85:ca:
d7:19:ca:4d:54:ca:7e:95:2c:27:1c:89:ea:49:18:9d:60:8e:
40:fc:1e:89:28:de:04:e6:d8:05:cc:19:7e:cc:4c:28:14:50:
de:24:6d:59:d8:51:29:63:b1:8c:0d:ec:37:b8:38:56:65:ba:
4f:ce:d6:d5:49:6a:98:51:e3:38:b7:00:f4:c5:bb:bd:00:60:
bf:72:bb:af:e3:92:77:fc:44:f3:7b:4c:7b:6a:ea:ff:e7:93:
6a:8a:f7:68:33:68:fd:32:7c:d7:1d:85:c4:cc:fb:72:16:a5:
83:a9:7e:de:0d:b2:34:5e:8d:ff:80:e8:1e:5e:57:a1:85:fa:
b0:0c:de:b3:31:9d:c1:c5:06:a5:d5:64:6a:04:36:b2:05:dc:
64:3b:22:d9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 29 13:29:41 2025 by rpki-client