Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fe/edbf44-3732-44ff-a944-e21974a294ba/1/oaLWN8sKzPhyH0PiZs4hP47d0mo.mft
File: oaLWN8sKzPhyH0PiZs4hP47d0mo.mft (raw, json)
Hash identifier: oF28xpA3M6KenXTVbXwpC/QSBdFY7ehbefO5EyExxBE=
Subject key identifier: AA:DF:B3:8D:F8:AE:46:DC:10:19:7A:3D:DF:44:DF:38:C9:84:9F:24
Authority key identifier: A1:A2:D6:37:CB:0A:CC:F8:72:1F:43:E2:66:CE:21:3F:8E:DD:D2:6A
Certificate issuer: /CN=a1a2d637cb0accf8721f43e266ce213f8eddd26a
Certificate serial: 0196767AA1EACEE2C8D676663630A0DF1E98
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/oaLWN8sKzPhyH0PiZs4hP47d0mo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fe/edbf44-3732-44ff-a944-e21974a294ba/1/oaLWN8sKzPhyH0PiZs4hP47d0mo.mft
Manifest number: 1516
Signing time: Sun 27 Apr 2025 09:01:10 +0000
Manifest this update: Sun 27 Apr 2025 09:01:10 +0000
Manifest next update: Mon 28 Apr 2025 09:01:10 +0000
Files and hashes: 1: 4VXryZNlGszOvVCrHsnCqJ1trsE.roa (hash: k+VFLGrGtXyTFaFbYpVCIVsEOX3gC2kjUfFrAgtlCzk=)
2: EzrvXLF-MmLybEmZJ2eW2xEONHs.roa (hash: RF6Dl/sCu3vkVuvkH1yCtoGTVf/6WBZmKUrbuif2lko=)
3: oaLWN8sKzPhyH0PiZs4hP47d0mo.crl (hash: XJT52SQbglj8x5pCKcquk53ch0J3L56Opby/nWETmAQ=)
4: ruIwqLknbql4jBEA51u8Ov6Q1Tk.roa (hash: Z0E5RF1yfzZZiEr9zy9z5xXvvb8+Wc07OPz1Qm4MGWM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fe/edbf44-3732-44ff-a944-e21974a294ba/1/oaLWN8sKzPhyH0PiZs4hP47d0mo.crl
rsync://rpki.ripe.net/repository/DEFAULT/fe/edbf44-3732-44ff-a944-e21974a294ba/1/oaLWN8sKzPhyH0PiZs4hP47d0mo.mft
rsync://rpki.ripe.net/repository/DEFAULT/oaLWN8sKzPhyH0PiZs4hP47d0mo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Apr 2025 05:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:76:7a:a1:ea:ce:e2:c8:d6:76:66:36:30:a0:df:1e:98
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a1a2d637cb0accf8721f43e266ce213f8eddd26a
Validity
Not Before: Apr 27 09:01:10 2025 GMT
Not After : Apr 28 09:01:10 2025 GMT
Subject: CN=aadfb38df8ae46dc10197a3ddf44df38c9849f24
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:86:6b:39:b7:d1:3d:36:a5:90:17:75:69:cf:
5b:ef:5d:30:4d:35:32:1d:79:96:d9:d4:c6:0b:3f:
b9:8c:f5:e8:a1:25:74:14:64:06:af:fe:5b:9d:00:
ea:31:1d:c6:d2:56:10:1e:f9:80:59:d2:ec:3b:76:
12:f8:cb:6c:1c:57:eb:c6:50:90:cb:20:a3:c9:d8:
65:c8:fe:8b:ac:b5:21:7a:bc:84:1c:b0:bb:97:1f:
7f:1c:1a:55:03:17:35:84:81:a4:03:4e:8e:75:ea:
eb:ba:35:7e:96:a3:53:fb:45:82:19:29:77:82:51:
09:b2:0b:82:63:f9:c2:28:e5:19:36:63:e3:f7:65:
41:65:d8:20:ca:f3:c1:91:ac:da:2e:4d:bb:4b:df:
9c:55:e7:31:21:19:2c:be:75:75:f4:4e:63:93:93:
0b:95:bf:09:bf:3d:a7:bd:ad:78:9f:9f:9c:ea:02:
2c:32:23:3a:29:ce:c8:a5:3e:aa:87:7f:5f:a4:76:
7c:c1:38:6a:c8:41:01:4b:a9:01:4d:79:7a:bf:f9:
72:3f:15:e9:6d:96:8b:bd:bc:bc:d6:8d:d1:e0:cf:
5c:24:6d:19:7f:d6:5c:14:e2:5f:55:8c:b1:de:32:
6e:93:53:d5:70:ff:35:9a:56:d3:b2:b7:fd:25:9d:
98:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AA:DF:B3:8D:F8:AE:46:DC:10:19:7A:3D:DF:44:DF:38:C9:84:9F:24
X509v3 Authority Key Identifier:
keyid:A1:A2:D6:37:CB:0A:CC:F8:72:1F:43:E2:66:CE:21:3F:8E:DD:D2:6A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/oaLWN8sKzPhyH0PiZs4hP47d0mo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/edbf44-3732-44ff-a944-e21974a294ba/1/oaLWN8sKzPhyH0PiZs4hP47d0mo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/edbf44-3732-44ff-a944-e21974a294ba/1/oaLWN8sKzPhyH0PiZs4hP47d0mo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
af:88:fb:f6:fe:40:9e:8b:40:9f:14:93:0a:f9:e3:a3:67:88:
5c:c4:92:7c:66:6d:c4:04:21:7e:3a:70:3c:ac:c2:04:31:ff:
95:c4:5a:e7:35:74:2a:dc:35:55:07:26:ad:f6:e7:70:ab:25:
2d:76:41:6e:1c:74:01:99:c0:21:de:df:e4:ce:1c:3a:47:30:
b5:17:5b:9e:1c:5d:df:8b:6d:60:92:09:14:97:5a:67:75:8b:
ee:c3:d7:de:34:12:83:6d:b4:22:19:ea:45:cd:c8:74:d0:12:
ad:4a:b2:be:48:20:d9:68:92:e3:04:44:d2:48:f2:c6:c0:44:
3d:44:d7:f9:43:0b:f4:7b:8a:04:34:04:29:a5:3d:31:28:00:
f8:fa:4c:29:63:cf:a0:75:72:01:c1:aa:c9:ed:5d:ec:5e:a9:
de:78:64:92:f8:93:cb:06:9a:58:b1:ef:6b:51:c1:a0:a6:79:
17:54:47:1c:70:d9:ce:ce:3e:c0:f3:75:37:fa:69:cd:95:da:
39:28:8d:07:97:a7:f6:fb:a2:c3:8c:90:8d:39:9e:84:38:7e:
c9:db:aa:9c:ef:37:24:5a:92:69:de:dd:39:b1:e9:93:8e:8b:
ef:6d:cc:a8:ac:af:6d:0c:18:04:76:89:8f:07:f5:ed:a4:b0:
59:03:bd:e5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 12:17:19 2025 by rpki-client