Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/23/e9f313-cd68-4fb5-bb8d-7396d8b640ad/1/oAtCYEs_jp5bcvIyk4mvGP-9ILg.mft
File: oAtCYEs_jp5bcvIyk4mvGP-9ILg.mft (raw, json)
Hash identifier: WiDFrQHYbmbQ7U2asY81YM8K0Qu5NOYNB50qEJA7djM=
Subject key identifier: E4:F2:90:12:C0:44:7D:CE:48:DB:11:90:AC:93:45:CD:B4:82:02:16
Authority key identifier: A0:0B:42:60:4B:3F:8E:9E:5B:72:F2:32:93:89:AF:18:FF:BD:20:B8
Certificate issuer: /CN=a00b42604b3f8e9e5b72f2329389af18ffbd20b8
Certificate serial: 01969ED16A3F9C9DEA550EDB1E3358E16F15
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/oAtCYEs_jp5bcvIyk4mvGP-9ILg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/23/e9f313-cd68-4fb5-bb8d-7396d8b640ad/1/oAtCYEs_jp5bcvIyk4mvGP-9ILg.mft
Manifest number: 1525
Signing time: Mon 05 May 2025 05:00:46 +0000
Manifest this update: Mon 05 May 2025 05:00:46 +0000
Manifest next update: Tue 06 May 2025 05:00:46 +0000
Files and hashes: 1: 2OFA6f1DjHXZMhryh5jA0oQbPrI.roa (hash: 4LohZFyvURnINNqOgIllTWqy2TcXQvTUTxllcCyXfjc=)
2: oAtCYEs_jp5bcvIyk4mvGP-9ILg.crl (hash: NX9FvOTEjNuWAMh0WTnLxmc9D1nWUik0FcYkeF1V3Eo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/23/e9f313-cd68-4fb5-bb8d-7396d8b640ad/1/oAtCYEs_jp5bcvIyk4mvGP-9ILg.crl
rsync://rpki.ripe.net/repository/DEFAULT/23/e9f313-cd68-4fb5-bb8d-7396d8b640ad/1/oAtCYEs_jp5bcvIyk4mvGP-9ILg.mft
rsync://rpki.ripe.net/repository/DEFAULT/oAtCYEs_jp5bcvIyk4mvGP-9ILg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 06 May 2025 05:00:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:9e:d1:6a:3f:9c:9d:ea:55:0e:db:1e:33:58:e1:6f:15
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a00b42604b3f8e9e5b72f2329389af18ffbd20b8
Validity
Not Before: May 5 05:00:46 2025 GMT
Not After : May 6 05:00:46 2025 GMT
Subject: CN=e4f29012c0447dce48db1190ac9345cdb4820216
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:d8:93:0d:0e:a4:a8:fe:0c:2e:3c:24:d1:93:
1a:87:d3:b2:07:74:9d:94:fe:72:f5:8a:3f:b7:25:
12:3c:6e:20:4d:41:3b:66:7c:a0:5e:53:cd:17:f4:
1f:7e:30:08:27:b1:27:1e:0e:76:9e:e4:4c:ab:8d:
b5:97:ee:e8:a2:a2:cb:a2:74:e8:d8:d8:92:7c:90:
8a:8e:39:19:87:0c:e5:f6:2e:cb:bd:97:59:35:15:
ba:1a:3f:de:7e:f3:c6:c1:7c:6c:31:1a:07:17:2a:
5b:37:2f:e8:48:ac:21:61:16:10:33:2e:bb:9f:1e:
13:03:f9:99:bf:e9:83:e5:de:56:2a:f4:b1:04:e5:
18:f3:16:3c:55:25:f4:de:dd:70:0e:d9:40:d1:a7:
40:26:56:68:d3:db:91:71:74:1d:12:87:33:04:c6:
45:a9:9a:6d:f9:76:0c:42:3c:bb:f4:b1:7d:28:41:
f0:8d:b6:4c:74:fe:74:b6:96:66:11:4b:c9:c2:15:
30:b2:fa:97:b6:1e:8f:ba:80:f2:0a:6f:0b:fb:f5:
51:36:bb:77:32:41:c4:80:51:c6:cb:0f:c9:85:93:
e7:5c:1c:6f:37:c2:ff:ec:26:a7:c0:0e:e7:df:ba:
91:44:b4:1d:f0:1d:b1:6f:90:84:59:30:d2:ad:5d:
b0:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E4:F2:90:12:C0:44:7D:CE:48:DB:11:90:AC:93:45:CD:B4:82:02:16
X509v3 Authority Key Identifier:
keyid:A0:0B:42:60:4B:3F:8E:9E:5B:72:F2:32:93:89:AF:18:FF:BD:20:B8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/oAtCYEs_jp5bcvIyk4mvGP-9ILg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/23/e9f313-cd68-4fb5-bb8d-7396d8b640ad/1/oAtCYEs_jp5bcvIyk4mvGP-9ILg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/23/e9f313-cd68-4fb5-bb8d-7396d8b640ad/1/oAtCYEs_jp5bcvIyk4mvGP-9ILg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
85:23:a0:35:d6:9e:4e:8d:7d:dc:26:12:27:cd:46:68:df:35:
37:ab:9e:07:c4:be:8c:3d:23:39:7a:55:e5:c7:c7:f1:1c:cd:
da:65:df:49:da:0f:08:12:cd:ab:8f:2b:20:8d:a3:26:12:bb:
8f:48:ae:8f:db:95:1c:97:90:a0:58:bc:30:d8:86:8b:f9:88:
e7:d2:da:20:6a:bd:95:73:7e:9c:72:f9:ff:9a:47:1f:df:2b:
6e:ae:f7:0e:7f:4d:5c:f8:34:27:18:5e:ad:df:ce:de:0d:72:
fa:6a:cb:7e:7d:66:a3:06:4a:96:8d:f9:2d:ec:b9:0d:6b:bb:
c8:f1:65:e3:9f:59:9e:42:34:23:f6:a6:bc:80:62:16:ed:2b:
4e:f8:52:23:bc:ec:23:b8:57:9d:1d:22:47:a3:83:a8:e3:80:
1b:46:09:4b:f6:35:01:11:e4:da:4a:cf:34:32:d9:58:cd:81:
cb:b3:13:47:a4:b4:3a:56:3d:c9:6f:7c:5e:e8:ee:7b:8a:fc:
f9:08:42:9e:f0:37:23:45:aa:90:a9:10:e3:1e:6e:02:a1:4f:
ff:73:4d:18:86:ce:cb:7f:4a:c2:81:c6:fb:77:78:cf:28:36:
ca:10:75:c0:f4:4a:04:ce:cd:fe:8c:1f:15:7d:63:c5:b4:80:
98:bf:f5:db
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 5 13:05:17 2025 by rpki-client