Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1a/2b70f0-4da3-4b45-a95d-48a20e6e5d8b/1/oWRtP5B1jYo3Q_FV9iv__xu2Nmo.mft
File: oWRtP5B1jYo3Q_FV9iv__xu2Nmo.mft (raw, json)
Hash identifier: N3NfvD9IgAJUoCEfBIbzgYS9MxXPWDm7ZSGSwJL96ks=
Subject key identifier: 18:AD:6E:46:F0:2F:4C:B9:00:8D:53:4D:5E:7D:8C:2A:B8:D1:BD:FB
Authority key identifier: A1:64:6D:3F:90:75:8D:8A:37:43:F1:55:F6:2B:FF:FF:1B:B6:36:6A
Certificate issuer: /CN=a1646d3f90758d8a3743f155f62bffff1bb6366a
Certificate serial: 0196A5E60B89F98B2B641D2DC1491799B9B4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/oWRtP5B1jYo3Q_FV9iv__xu2Nmo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1a/2b70f0-4da3-4b45-a95d-48a20e6e5d8b/1/oWRtP5B1jYo3Q_FV9iv__xu2Nmo.mft
Manifest number: 0DC1
Signing time: Tue 06 May 2025 14:00:38 +0000
Manifest this update: Tue 06 May 2025 14:00:38 +0000
Manifest next update: Wed 07 May 2025 14:00:38 +0000
Files and hashes: 1: 3MZjImGng2_TJgQfxQEXoUtKWiw.roa (hash: lYzKLS8Ppt5gW8YVgI20GBdeqEZoir6MkSHCqmVcyNA=)
2: WZV7tmEIwHJ8ehut-K9kROGJKis.roa (hash: RzP35ulZieWZd2YmyELJo1q+OtM5JfjqnRYO4ysXTzo=)
3: oWRtP5B1jYo3Q_FV9iv__xu2Nmo.crl (hash: il7altNi0UAhJ29pNxbX0PRZ+qAeURBrNzmMlLpqZ8Y=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1a/2b70f0-4da3-4b45-a95d-48a20e6e5d8b/1/oWRtP5B1jYo3Q_FV9iv__xu2Nmo.crl
rsync://rpki.ripe.net/repository/DEFAULT/1a/2b70f0-4da3-4b45-a95d-48a20e6e5d8b/1/oWRtP5B1jYo3Q_FV9iv__xu2Nmo.mft
rsync://rpki.ripe.net/repository/DEFAULT/oWRtP5B1jYo3Q_FV9iv__xu2Nmo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 07 May 2025 14:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:a5:e6:0b:89:f9:8b:2b:64:1d:2d:c1:49:17:99:b9:b4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a1646d3f90758d8a3743f155f62bffff1bb6366a
Validity
Not Before: May 6 14:00:38 2025 GMT
Not After : May 7 14:00:38 2025 GMT
Subject: CN=18ad6e46f02f4cb9008d534d5e7d8c2ab8d1bdfb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:4d:40:aa:46:07:d7:4d:27:77:88:e3:9a:27:
96:38:5b:69:04:b9:ec:55:7b:30:90:5c:b7:46:c7:
15:ee:7c:8e:39:75:1a:6f:36:a7:13:e5:68:b6:85:
19:cd:14:78:38:c5:79:b5:cd:7a:5f:f8:b2:d6:a0:
f7:98:7f:7a:f8:36:37:bb:a4:d8:0a:fd:26:64:a1:
ed:01:8c:80:90:87:87:eb:f4:70:43:8c:96:d7:5b:
4b:2e:7b:d8:e1:de:89:7e:93:26:44:c8:7b:49:c1:
65:2c:76:08:33:76:94:84:bb:a0:9a:d5:a7:01:7c:
5e:5d:29:1d:5a:a1:26:e1:7a:27:ca:3a:fb:8f:5d:
4e:27:5e:61:64:d9:df:dd:20:77:da:71:32:e6:e3:
18:66:01:d0:7a:d0:fd:87:c2:05:b4:f6:cb:61:f1:
4a:e0:bd:d7:80:4b:8c:dc:4a:cd:50:27:6b:22:80:
d0:4f:af:0e:b5:f8:4b:95:60:29:ae:3a:7f:32:b1:
20:e3:aa:25:b4:60:b7:77:ba:d3:bb:dc:3e:8e:b7:
ac:60:28:fd:34:d0:d4:70:86:65:02:ac:5b:11:73:
09:3f:50:48:17:ac:b9:68:c5:59:92:a3:18:2f:5e:
3f:70:a1:ff:2f:95:88:d6:fe:a2:f4:ff:5c:c0:32:
67:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
18:AD:6E:46:F0:2F:4C:B9:00:8D:53:4D:5E:7D:8C:2A:B8:D1:BD:FB
X509v3 Authority Key Identifier:
keyid:A1:64:6D:3F:90:75:8D:8A:37:43:F1:55:F6:2B:FF:FF:1B:B6:36:6A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/oWRtP5B1jYo3Q_FV9iv__xu2Nmo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1a/2b70f0-4da3-4b45-a95d-48a20e6e5d8b/1/oWRtP5B1jYo3Q_FV9iv__xu2Nmo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1a/2b70f0-4da3-4b45-a95d-48a20e6e5d8b/1/oWRtP5B1jYo3Q_FV9iv__xu2Nmo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
90:af:b4:2a:25:53:5f:ad:e5:6c:6f:01:06:6c:84:98:d9:eb:
c2:4d:9d:39:ba:bf:ef:b9:27:b3:ff:05:8b:e3:29:e1:1d:40:
5c:e1:76:f3:f0:3e:af:12:c6:f3:44:62:62:4d:0f:c1:a2:73:
b4:bc:ae:5a:93:91:60:5b:62:10:d5:b3:55:03:cd:2b:51:51:
1d:9f:91:5a:d1:4f:a1:77:95:03:f5:e7:a6:30:c2:df:64:44:
be:02:95:a5:2d:16:30:90:f3:c4:2b:43:20:a8:fa:27:6f:ff:
81:27:ae:cd:8d:da:7b:0e:62:2a:b5:74:f0:35:ba:14:28:83:
0d:0b:a0:01:f3:63:3b:ab:20:e0:82:2c:31:24:17:e3:77:c7:
76:50:d5:a2:f3:91:7a:65:3d:89:66:4c:d8:6b:e5:5b:02:fe:
94:63:4f:2f:d4:77:e3:d7:7d:61:bd:30:b8:75:cf:f1:27:4f:
75:b8:65:9d:ef:09:9a:a5:70:d0:19:32:87:a8:f7:ee:01:92:
e0:76:5e:07:7b:33:56:d0:cc:f0:86:68:11:4c:e2:39:5a:63:
ae:dd:da:63:c9:d3:93:57:7b:e6:44:7e:e6:af:e8:13:2c:27:
8b:6b:2e:84:4e:65:bb:81:d3:1d:b3:f8:3d:69:0b:7d:31:84:
b2:58:b3:66
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 6 22:34:32 2025 by rpki-client