Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f6/9d6ca2-0dac-4597-80f5-7bd3ab73e172/1/oCuxHQGVV-EvX7brkDg3QhFg0Ak.mft
File: oCuxHQGVV-EvX7brkDg3QhFg0Ak.mft (raw, json)
Hash identifier: UJxI289YttS1jXOSd4S3XHBLEJV9jzpWpDz339lC3cQ=
Subject key identifier: 1F:AD:81:7C:07:C3:CB:89:F7:E7:8E:89:FA:05:6F:96:51:20:EC:B6
Authority key identifier: A0:2B:B1:1D:01:95:57:E1:2F:5F:B6:EB:90:38:37:42:11:60:D0:09
Certificate issuer: /CN=a02bb11d019557e12f5fb6eb903837421160d009
Certificate serial: 01967FB463E0050D2C87BE9E288551B0E41E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/oCuxHQGVV-EvX7brkDg3QhFg0Ak.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f6/9d6ca2-0dac-4597-80f5-7bd3ab73e172/1/oCuxHQGVV-EvX7brkDg3QhFg0Ak.mft
Manifest number: 1514
Signing time: Tue 29 Apr 2025 04:00:50 +0000
Manifest this update: Tue 29 Apr 2025 04:00:50 +0000
Manifest next update: Wed 30 Apr 2025 04:00:50 +0000
Files and hashes: 1: L99cT_8YQtbahh4i-nNP79DcPFA.roa (hash: +5kyh5yoNHZbQN4E1W2qiCARpK6qPNt6G4mi9GI03Hk=)
2: oCuxHQGVV-EvX7brkDg3QhFg0Ak.crl (hash: Gjlr1SxOpO43bRzvo/wBI0Eme8W91bHR92AEAOcMtC4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f6/9d6ca2-0dac-4597-80f5-7bd3ab73e172/1/oCuxHQGVV-EvX7brkDg3QhFg0Ak.crl
rsync://rpki.ripe.net/repository/DEFAULT/f6/9d6ca2-0dac-4597-80f5-7bd3ab73e172/1/oCuxHQGVV-EvX7brkDg3QhFg0Ak.mft
rsync://rpki.ripe.net/repository/DEFAULT/oCuxHQGVV-EvX7brkDg3QhFg0Ak.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 30 Apr 2025 04:00:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:7f:b4:63:e0:05:0d:2c:87:be:9e:28:85:51:b0:e4:1e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a02bb11d019557e12f5fb6eb903837421160d009
Validity
Not Before: Apr 29 04:00:50 2025 GMT
Not After : Apr 30 04:00:50 2025 GMT
Subject: CN=1fad817c07c3cb89f7e78e89fa056f965120ecb6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:08:2d:75:fc:77:34:60:a7:d6:11:1b:6f:4c:
e2:f0:38:f8:69:82:af:3b:30:68:81:00:9f:60:62:
c2:b3:9e:9f:5d:bd:95:5f:70:01:28:75:e1:db:14:
b0:2a:a0:a5:33:8a:15:a9:1b:61:40:de:71:fb:e1:
3c:a6:4f:3b:4f:1e:2e:d7:5b:1d:ab:d5:3d:2a:a4:
81:9f:8f:c9:4c:63:7b:33:14:60:e0:1d:d0:11:31:
5f:fa:6c:d6:8b:71:95:0a:66:11:3b:f2:fa:a0:9a:
41:0a:12:5c:65:61:55:ef:36:1b:a5:cb:11:77:80:
b5:16:9c:b2:2a:5d:8e:88:62:3f:c9:46:a5:e2:47:
6c:e0:77:8e:fd:12:42:7f:09:bb:b2:6b:43:93:5e:
1e:d8:6b:02:15:7c:1c:ee:9a:e3:ad:bb:9f:35:69:
91:22:c9:ed:39:ca:f7:90:d4:68:34:95:3e:ed:05:
8b:12:b3:5e:a5:3f:2c:80:14:e4:ee:7a:0c:6b:8b:
2e:18:4a:44:32:39:99:54:4d:f6:40:58:78:b4:f1:
3e:b5:ca:c7:0a:14:f9:93:b3:da:c4:74:2a:a5:f8:
35:6c:d7:e8:c2:66:22:28:d8:33:aa:55:4b:ed:e8:
a1:bf:70:af:63:f0:14:05:00:6d:a9:4e:db:68:b1:
f0:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1F:AD:81:7C:07:C3:CB:89:F7:E7:8E:89:FA:05:6F:96:51:20:EC:B6
X509v3 Authority Key Identifier:
keyid:A0:2B:B1:1D:01:95:57:E1:2F:5F:B6:EB:90:38:37:42:11:60:D0:09
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/oCuxHQGVV-EvX7brkDg3QhFg0Ak.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/9d6ca2-0dac-4597-80f5-7bd3ab73e172/1/oCuxHQGVV-EvX7brkDg3QhFg0Ak.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/9d6ca2-0dac-4597-80f5-7bd3ab73e172/1/oCuxHQGVV-EvX7brkDg3QhFg0Ak.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
60:d3:c0:71:c6:38:12:22:17:9a:08:32:72:08:43:e1:24:57:
d7:1d:53:78:6d:65:b5:c7:2b:49:a5:b8:41:52:85:70:3d:ab:
11:eb:62:e6:07:29:75:d9:b6:0f:7d:de:07:4a:bc:36:32:5c:
bf:ae:05:a8:29:83:26:b3:ad:81:09:ef:e8:f8:6b:3c:79:5e:
24:60:fe:d7:ae:98:c7:51:c9:85:e4:41:5e:e4:96:76:6e:56:
2c:cb:e8:f0:44:dc:09:e4:fd:1a:72:ad:78:c7:e1:9e:3d:d4:
71:f7:0e:84:1a:47:e9:ec:4a:4c:35:7b:14:9a:86:b7:ad:28:
01:fb:6a:0e:6c:1f:be:5f:6e:88:4b:dc:74:4a:98:33:4c:0a:
80:05:f7:fd:41:88:76:aa:3e:6c:22:dd:9e:98:da:8b:c9:aa:
34:ef:90:72:6a:91:ba:70:7c:9e:4c:49:31:7c:27:7f:9b:ce:
41:9e:af:4d:51:81:17:7d:8e:f9:2d:0d:84:c1:fa:8e:2d:47:
9d:f5:74:70:51:7a:b7:24:0d:54:eb:d4:94:45:5d:9e:ee:a2:
ed:ab:ff:52:22:66:aa:1f:11:de:9c:99:e3:c4:b6:da:c1:3f:
a4:bb:58:09:94:55:76:2c:aa:6b:64:e6:5e:97:c7:80:7f:f0:
52:d8:f9:f7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 29 12:13:32 2025 by rpki-client