Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f8/3e8dcc-a764-44be-b507-9b3dd417c308/1/oFa0I4Othizmo3StLKbTbCVNx7E.mft
File: oFa0I4Othizmo3StLKbTbCVNx7E.mft (raw, json)
Hash identifier: jGWrFB9IpCift++P02Qy1YJIYUpjse9LDGzlDzj/qWg=
Subject key identifier: E6:98:A0:A2:01:5D:8C:33:3D:B1:D6:9D:6A:6F:72:FA:21:66:80:2B
Authority key identifier: A0:56:B4:23:83:AD:86:2C:E6:A3:74:AD:2C:A6:D3:6C:25:4D:C7:B1
Certificate issuer: /CN=a056b42383ad862ce6a374ad2ca6d36c254dc7b1
Certificate serial: 01967530A8594C5089744785C1E16A1AB89D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/oFa0I4Othizmo3StLKbTbCVNx7E.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f8/3e8dcc-a764-44be-b507-9b3dd417c308/1/oFa0I4Othizmo3StLKbTbCVNx7E.mft
Manifest number: 1433
Signing time: Sun 27 Apr 2025 03:00:45 +0000
Manifest this update: Sun 27 Apr 2025 03:00:45 +0000
Manifest next update: Mon 28 Apr 2025 03:00:45 +0000
Files and hashes: 1: 4GMh7fIw13Bz3DUcceuO2FBtK6M.roa (hash: E9IDQ7QjcqjZJIn5bDeaHNVCqS2wv2WqYXLU0FEPSXU=)
2: XJGEpCzB4loh5ef0k98ZvXtkA5A.roa (hash: ln2eCgW4Lb0/Z2WnRMYRLGIC+qtaz3YxPhhlJZ12csI=)
3: oFa0I4Othizmo3StLKbTbCVNx7E.crl (hash: QUFyEQYbhPPJ8odWKbkBDSQItO7w9RmnG70QFRB6U4Q=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f8/3e8dcc-a764-44be-b507-9b3dd417c308/1/oFa0I4Othizmo3StLKbTbCVNx7E.crl
rsync://rpki.ripe.net/repository/DEFAULT/f8/3e8dcc-a764-44be-b507-9b3dd417c308/1/oFa0I4Othizmo3StLKbTbCVNx7E.mft
rsync://rpki.ripe.net/repository/DEFAULT/oFa0I4Othizmo3StLKbTbCVNx7E.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Apr 2025 03:00:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:75:30:a8:59:4c:50:89:74:47:85:c1:e1:6a:1a:b8:9d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a056b42383ad862ce6a374ad2ca6d36c254dc7b1
Validity
Not Before: Apr 27 03:00:45 2025 GMT
Not After : Apr 28 03:00:45 2025 GMT
Subject: CN=e698a0a2015d8c333db1d69d6a6f72fa2166802b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:c7:a9:d9:e3:22:fe:ab:e5:dc:42:df:a7:49:
cb:d6:91:73:cd:56:0c:93:46:50:56:b0:af:05:85:
0d:9a:19:e7:02:9f:3d:6a:09:e7:04:b2:97:8d:86:
a5:69:2c:0a:5c:25:5a:d5:8a:0a:6e:8b:fd:2f:49:
f1:05:03:e5:08:8a:8c:26:10:33:bd:e2:94:63:61:
26:6f:e4:2b:75:9b:4c:f4:8b:3e:b1:fb:03:1a:89:
e1:fc:41:b6:bd:74:57:4e:84:8a:30:be:ac:cb:9a:
c4:53:af:28:4b:5a:18:df:44:57:2a:6b:db:82:c6:
f8:c1:83:f5:88:4a:38:4f:b3:da:97:4f:ba:1b:a6:
3d:21:2a:a9:ce:57:e3:8a:46:e0:86:5f:4f:8a:fc:
58:c6:2a:91:22:d3:56:26:9f:fe:de:fd:f6:75:ec:
49:a1:47:ff:eb:10:78:28:8a:ee:45:ae:b7:57:89:
a6:f6:bf:b4:dc:c8:ed:0f:13:e7:12:19:e1:a9:1a:
85:60:ea:51:d3:20:54:69:6a:61:f6:ee:cd:05:f8:
23:1a:83:7e:9c:f7:dc:c7:b8:c5:6f:48:9e:24:89:
67:8e:5b:e1:54:21:2c:5f:af:4f:5f:c9:d3:d8:16:
f3:2a:d0:25:ba:86:49:ef:43:84:61:56:19:38:69:
2c:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E6:98:A0:A2:01:5D:8C:33:3D:B1:D6:9D:6A:6F:72:FA:21:66:80:2B
X509v3 Authority Key Identifier:
keyid:A0:56:B4:23:83:AD:86:2C:E6:A3:74:AD:2C:A6:D3:6C:25:4D:C7:B1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/oFa0I4Othizmo3StLKbTbCVNx7E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/3e8dcc-a764-44be-b507-9b3dd417c308/1/oFa0I4Othizmo3StLKbTbCVNx7E.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/3e8dcc-a764-44be-b507-9b3dd417c308/1/oFa0I4Othizmo3StLKbTbCVNx7E.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
bb:50:2a:a9:70:6d:d2:d7:3c:08:e6:1a:c0:ec:3d:95:fb:65:
ba:3b:22:03:ec:fc:d8:eb:28:9f:0b:d1:aa:e9:ca:c7:dc:51:
8d:99:6f:2b:94:59:9a:86:19:1a:09:af:4e:ea:7c:34:69:e6:
ba:46:ee:e2:d0:00:8a:a8:fd:fd:ad:70:83:02:9c:02:da:87:
a8:c5:67:ca:8b:f0:bd:06:b6:93:cd:06:9a:38:ec:de:27:4e:
18:6a:59:e3:24:dc:6a:e4:0f:9d:d0:de:84:79:8e:14:ec:82:
e4:e2:f5:ca:99:38:c0:2a:7f:87:dd:da:7c:ce:6e:c9:f4:a5:
51:e3:37:d7:bf:f8:6d:bf:a9:64:b5:2f:b6:c9:58:8e:35:7a:
fd:a7:c4:38:66:4c:c3:2f:90:68:2e:71:ac:48:d9:83:46:0e:
d8:49:d9:dc:69:48:58:34:e3:82:5d:18:34:ff:f8:99:a5:4d:
0b:d6:00:0f:22:f2:08:0a:db:56:6a:eb:6e:f5:02:15:b4:8b:
d9:08:c2:61:25:c7:98:23:7b:d3:d7:93:61:e6:34:5d:fa:cb:
ca:6b:a2:15:a0:f0:5e:2e:3c:a7:57:28:21:b9:66:aa:6a:a5:
15:ed:85:a5:c4:9c:dd:34:36:fb:03:0b:a8:54:f2:64:ff:55:
37:b5:a6:9b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 11:23:03 2025 by rpki-client