Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1c/4560e9-7173-429c-b6f1-5f4a15cb9054/1/oOBJ0AuoQh5MRalISSlFx4_Z4W0.mft
File: oOBJ0AuoQh5MRalISSlFx4_Z4W0.mft (raw, json)
Hash identifier: /4bJ4ZWVDey2aQC9B1CrsrB/vQ1TiJZcnFQcJGumgzs=
Subject key identifier: 96:E4:37:9F:05:8C:92:E8:7F:DF:52:C2:40:EB:A7:AC:F3:A8:9C:BE
Authority key identifier: A0:E0:49:D0:0B:A8:42:1E:4C:45:A9:48:49:29:45:C7:8F:D9:E1:6D
Certificate issuer: /CN=a0e049d00ba8421e4c45a948492945c78fd9e16d
Certificate serial: 0196BBFFAD83AE19A329E77DF03DABFF1C99
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/oOBJ0AuoQh5MRalISSlFx4_Z4W0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1c/4560e9-7173-429c-b6f1-5f4a15cb9054/1/oOBJ0AuoQh5MRalISSlFx4_Z4W0.mft
Manifest number: 1531
Signing time: Sat 10 May 2025 21:00:17 +0000
Manifest this update: Sat 10 May 2025 21:00:17 +0000
Manifest next update: Sun 11 May 2025 21:00:17 +0000
Files and hashes: 1: 1WhGgkr3JY5zEMoTpLWWw0HSqUE.roa (hash: iFLoTBcfXjLN91W8rDzjN3Un9O78u0pd8+4HdguEcmg=)
2: kY1a0BACd1_TYMv9GQ8E9K8p7qU.roa (hash: YxOrzROBL63q/PQ0W9//5oVoP7okiooDJdhlfo33RWM=)
3: oOBJ0AuoQh5MRalISSlFx4_Z4W0.crl (hash: QaN/ziE0y/FvqGhv2jfVbCzGgWP77SBuGXixvxHypu8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1c/4560e9-7173-429c-b6f1-5f4a15cb9054/1/oOBJ0AuoQh5MRalISSlFx4_Z4W0.crl
rsync://rpki.ripe.net/repository/DEFAULT/1c/4560e9-7173-429c-b6f1-5f4a15cb9054/1/oOBJ0AuoQh5MRalISSlFx4_Z4W0.mft
rsync://rpki.ripe.net/repository/DEFAULT/oOBJ0AuoQh5MRalISSlFx4_Z4W0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 11 May 2025 21:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:bb:ff:ad:83:ae:19:a3:29:e7:7d:f0:3d:ab:ff:1c:99
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a0e049d00ba8421e4c45a948492945c78fd9e16d
Validity
Not Before: May 10 21:00:17 2025 GMT
Not After : May 11 21:00:17 2025 GMT
Subject: CN=96e4379f058c92e87fdf52c240eba7acf3a89cbe
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:91:fc:bd:a0:a7:1f:4b:68:29:08:ab:26:35:4c:
82:c7:fb:48:63:d9:98:5f:67:5e:49:d3:64:07:b1:
d9:21:9f:41:98:aa:e7:cb:89:5c:9c:bb:11:ae:84:
6b:0f:68:92:34:86:4a:d9:31:57:df:8b:1f:94:f0:
d9:00:ed:b0:ba:39:cd:44:e4:f9:5c:75:81:11:3c:
fc:28:12:63:87:96:1d:fa:f7:a9:fa:a5:71:2f:3b:
57:59:c0:26:10:1e:4a:71:16:d9:36:87:96:86:0d:
eb:ef:04:47:2a:24:f5:c5:24:2e:b9:50:74:4f:d6:
ed:c8:8a:6e:d9:ae:90:5f:d8:eb:7e:dd:17:44:0f:
d5:f2:8c:6f:4b:60:21:34:79:d3:2a:58:77:a7:e9:
6f:8d:8d:fd:35:df:03:9b:60:0c:c0:e1:10:57:27:
b0:74:ef:6b:2c:46:21:22:e6:32:89:c9:d1:b5:02:
89:b8:6e:b2:de:ee:f1:62:4b:1d:b6:72:57:40:15:
34:dd:2e:7b:19:a1:22:3c:c8:6a:60:36:77:0d:8f:
2e:26:ff:4d:9e:1c:74:c0:cc:5b:7b:23:a7:cc:f0:
74:b3:00:4d:88:83:2b:6d:40:8c:26:50:59:88:38:
70:57:29:63:b7:df:c7:e9:0d:a4:7d:e3:1c:34:21:
4d:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
96:E4:37:9F:05:8C:92:E8:7F:DF:52:C2:40:EB:A7:AC:F3:A8:9C:BE
X509v3 Authority Key Identifier:
keyid:A0:E0:49:D0:0B:A8:42:1E:4C:45:A9:48:49:29:45:C7:8F:D9:E1:6D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/oOBJ0AuoQh5MRalISSlFx4_Z4W0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/4560e9-7173-429c-b6f1-5f4a15cb9054/1/oOBJ0AuoQh5MRalISSlFx4_Z4W0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/4560e9-7173-429c-b6f1-5f4a15cb9054/1/oOBJ0AuoQh5MRalISSlFx4_Z4W0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
27:51:4c:8e:30:6e:ad:09:3c:36:40:e8:fe:77:df:74:0b:86:
50:c1:04:c9:9b:7b:7e:ce:0e:76:dc:7d:fc:bc:c2:b6:f2:14:
96:54:30:dc:5c:64:08:3c:d8:ce:05:09:6a:7c:63:88:e4:73:
b7:48:9b:88:95:50:cc:ad:8c:a4:c9:96:ee:26:b4:ee:f4:d9:
76:2d:4e:a3:f2:6e:a2:ec:b7:71:d2:15:de:69:2f:cd:c1:43:
91:84:42:dd:33:d5:90:ae:35:cd:7a:bb:d8:f0:32:49:64:84:
c5:02:a7:87:48:a1:f2:07:09:89:f1:e1:04:fb:36:b3:bb:57:
a8:63:ba:7d:22:5a:c0:88:f5:85:2c:4b:b3:8b:70:92:f8:60:
5d:9d:7b:d5:89:f7:3b:17:55:29:aa:55:19:79:ce:30:ec:3d:
a8:b4:8a:1d:32:ea:37:e4:d5:72:e3:97:44:e3:54:36:66:2b:
91:3d:ca:63:23:8c:10:d8:81:f6:82:c8:ea:19:a3:1d:9b:86:
e2:d0:41:fc:a8:8c:80:90:24:61:ad:e1:cb:a4:3e:04:bc:04:
ca:34:3c:42:b8:84:be:dc:fe:51:57:a0:8a:01:3b:9e:75:32:
61:b5:d0:6d:44:0b:5f:08:b1:80:dc:47:14:e9:be:2e:fe:c0:
6a:47:89:4c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 11 06:21:49 2025 by rpki-client