Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/07/1bfdf7-a19f-418e-89c7-db3f22705dd6/1/Oexx3D1ozej5B3069mdRwp_O6kw.mft
File: Oexx3D1ozej5B3069mdRwp_O6kw.mft (raw, json)
Hash identifier: u2d5yRfyA9Y+p6jvQ6wK6Qyj6Ruyru1jMY7/w7FkZRk=
Subject key identifier: DB:7E:7A:21:48:CF:3B:16:20:6E:AE:E4:30:98:56:CD:9E:8E:12:57
Authority key identifier: 39:EC:71:DC:3D:68:CD:E8:F9:07:7D:3A:F6:67:51:C2:9F:CE:EA:4C
Certificate issuer: /CN=39ec71dc3d68cde8f9077d3af66751c29fceea4c
Certificate serial: 0196B3D89A66228373CEEE8B29A514113704
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Oexx3D1ozej5B3069mdRwp_O6kw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/07/1bfdf7-a19f-418e-89c7-db3f22705dd6/1/Oexx3D1ozej5B3069mdRwp_O6kw.mft
Manifest number: 0889
Signing time: Fri 09 May 2025 07:00:39 +0000
Manifest this update: Fri 09 May 2025 07:00:39 +0000
Manifest next update: Sat 10 May 2025 07:00:39 +0000
Files and hashes: 1: 5MBvIRiYFms3iGBeHF3RQe9ll34.roa (hash: ZOt4HY8JzWPIwKbCM0yXoS+siw4USQmatYhxT9gEU9M=)
2: Oexx3D1ozej5B3069mdRwp_O6kw.crl (hash: Yy2tmyfUmte7UeHuguLtLI/HENHRho8Cc6HwPZw2LuM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/07/1bfdf7-a19f-418e-89c7-db3f22705dd6/1/Oexx3D1ozej5B3069mdRwp_O6kw.crl
rsync://rpki.ripe.net/repository/DEFAULT/07/1bfdf7-a19f-418e-89c7-db3f22705dd6/1/Oexx3D1ozej5B3069mdRwp_O6kw.mft
rsync://rpki.ripe.net/repository/DEFAULT/Oexx3D1ozej5B3069mdRwp_O6kw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 10 May 2025 01:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:b3:d8:9a:66:22:83:73:ce:ee:8b:29:a5:14:11:37:04
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=39ec71dc3d68cde8f9077d3af66751c29fceea4c
Validity
Not Before: May 9 07:00:39 2025 GMT
Not After : May 10 07:00:39 2025 GMT
Subject: CN=db7e7a2148cf3b16206eaee4309856cd9e8e1257
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:51:55:58:48:a5:3f:71:12:d2:da:ae:df:e2:
e6:7d:8e:bb:ae:26:5b:3d:47:e1:cf:32:a3:f4:22:
6f:ab:ad:a2:49:12:e1:0d:d0:9b:1d:76:cf:a6:a1:
36:93:f3:20:7b:85:43:e2:9f:50:2f:88:b3:aa:a2:
0b:d1:c9:55:d9:89:d6:b9:6f:23:d0:39:a4:62:d9:
97:68:95:36:86:15:77:79:98:10:fa:5e:1e:e5:f2:
e4:c2:8e:af:8a:fc:cf:a9:c2:7f:3f:d4:34:a4:9c:
3f:31:b8:6e:6a:d6:5d:79:9c:59:d9:84:fc:67:51:
dc:55:df:5a:c2:64:5e:6a:97:ea:67:df:36:d5:9f:
e5:30:ac:62:30:bd:3b:09:47:21:6c:c3:b5:13:83:
ba:1d:71:93:4d:f0:7f:29:7c:df:0a:d1:f3:e2:bf:
c2:a0:5b:a8:a4:50:1b:01:39:e6:ca:c9:b2:9d:83:
36:af:50:fc:b6:f6:40:43:40:8e:3e:a9:59:c6:2a:
5d:cb:82:56:4b:2e:2e:cd:b9:ac:67:a4:89:6c:2b:
96:6d:58:3d:90:5e:2a:85:38:dd:03:3d:73:49:19:
51:01:c6:25:e7:86:0f:52:d2:12:12:9a:a7:2e:82:
7f:76:2e:1b:33:ca:f1:5f:4b:20:2f:9e:78:3c:1d:
a7:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DB:7E:7A:21:48:CF:3B:16:20:6E:AE:E4:30:98:56:CD:9E:8E:12:57
X509v3 Authority Key Identifier:
keyid:39:EC:71:DC:3D:68:CD:E8:F9:07:7D:3A:F6:67:51:C2:9F:CE:EA:4C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Oexx3D1ozej5B3069mdRwp_O6kw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/07/1bfdf7-a19f-418e-89c7-db3f22705dd6/1/Oexx3D1ozej5B3069mdRwp_O6kw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/07/1bfdf7-a19f-418e-89c7-db3f22705dd6/1/Oexx3D1ozej5B3069mdRwp_O6kw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
87:00:32:d4:b5:67:63:00:fd:7e:5b:31:d8:4f:07:07:fb:a6:
e9:8b:ad:05:8b:31:9d:fc:12:38:99:4d:9c:a7:c3:ca:b7:11:
d1:ba:a3:9b:26:01:52:0b:f4:4c:11:2b:bc:18:af:66:8e:56:
f8:e3:3c:c2:a2:83:2a:67:39:48:d0:11:4b:3a:34:f3:08:7b:
13:81:5e:70:98:92:3a:cd:da:15:af:69:43:7c:85:8a:ee:db:
be:1e:c7:b7:98:2e:3d:aa:4c:d1:a4:e5:a4:7e:0a:a5:c1:61:
86:17:5c:01:61:c5:9b:fd:f5:3e:1e:89:8e:74:48:a8:bd:61:
86:64:43:e3:b2:10:3e:de:b9:0f:63:96:b1:19:1f:6a:7a:e0:
c2:48:d6:fa:46:81:11:cf:51:84:dc:6f:5d:4c:16:2e:e4:6f:
f0:eb:3d:5d:36:21:1a:3f:a6:3b:ae:cc:64:6c:06:4f:d9:71:
1b:4a:a9:20:c2:e9:30:97:7f:a2:4e:0b:ce:59:f3:d7:db:2c:
ec:dc:be:23:93:84:2f:52:9f:25:13:45:54:c6:c8:40:79:ed:
30:b3:ed:39:a6:2c:59:86:0f:b8:76:c5:ef:bf:2c:03:03:14:
73:c2:65:7b:e8:88:8a:87:6f:8d:39:b4:d9:d0:af:2d:8a:6c:
cd:4a:46:aa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 9 11:13:05 2025 by rpki-client