Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2e/eeeb85-29d4-46bb-b3f6-ac3b6a4567ba/1/oZxkOUagWTlzVUINc7xF8U2ip2s.mft
File: oZxkOUagWTlzVUINc7xF8U2ip2s.mft (raw, json)
Hash identifier: lU7EQ/XK2pOWfqicsNorHXslArAj6cAPTRJHRLZ+tvs=
Subject key identifier: 98:D2:2D:EB:F6:06:31:82:4C:7E:4D:9C:8C:15:1A:43:9E:FB:69:15
Authority key identifier: A1:9C:64:39:46:A0:59:39:73:55:42:0D:73:BC:45:F1:4D:A2:A7:6B
Certificate issuer: /CN=a19c643946a059397355420d73bc45f14da2a76b
Certificate serial: 01969DF5B5CAC119A80C9562B7220C6B169B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/oZxkOUagWTlzVUINc7xF8U2ip2s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2e/eeeb85-29d4-46bb-b3f6-ac3b6a4567ba/1/oZxkOUagWTlzVUINc7xF8U2ip2s.mft
Manifest number: 148B
Signing time: Mon 05 May 2025 01:00:47 +0000
Manifest this update: Mon 05 May 2025 01:00:47 +0000
Manifest next update: Tue 06 May 2025 01:00:47 +0000
Files and hashes: 1: ID7EJVgdGpnmyne0NupoGtnpzek.roa (hash: ZeCQXddR8S6+kjzcEpoW2z9l/rn9G5gRDRbTRJiZ+0o=)
2: oZxkOUagWTlzVUINc7xF8U2ip2s.crl (hash: ppS6q4F8BMJo/vPpfqcJxsAXKx3fHFH1nBRXxefFqRo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2e/eeeb85-29d4-46bb-b3f6-ac3b6a4567ba/1/oZxkOUagWTlzVUINc7xF8U2ip2s.crl
rsync://rpki.ripe.net/repository/DEFAULT/2e/eeeb85-29d4-46bb-b3f6-ac3b6a4567ba/1/oZxkOUagWTlzVUINc7xF8U2ip2s.mft
rsync://rpki.ripe.net/repository/DEFAULT/oZxkOUagWTlzVUINc7xF8U2ip2s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 05 May 2025 22:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:9d:f5:b5:ca:c1:19:a8:0c:95:62:b7:22:0c:6b:16:9b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a19c643946a059397355420d73bc45f14da2a76b
Validity
Not Before: May 5 01:00:47 2025 GMT
Not After : May 6 01:00:47 2025 GMT
Subject: CN=98d22debf60631824c7e4d9c8c151a439efb6915
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:d5:99:72:10:d9:fe:f4:ae:31:ad:85:5a:b4:
3c:6c:bb:5b:e6:39:01:bb:b2:44:ff:a8:42:27:bc:
df:e7:2b:3e:6f:12:4d:65:ab:fe:e2:1c:69:8a:db:
04:60:09:0d:ee:7e:3f:54:63:a7:71:af:71:97:29:
10:0b:27:cc:e3:7b:9a:75:d4:6b:29:a7:3d:57:58:
5c:ad:17:ed:64:58:75:5a:12:69:39:79:1c:81:f5:
c2:09:52:ea:96:93:02:87:29:87:a4:14:f8:ed:2d:
91:17:7c:f1:f9:77:9f:82:fb:fa:c9:9b:e0:df:b3:
ee:ea:27:21:90:43:e4:3c:c1:a0:1f:2e:3b:9b:aa:
ee:de:25:52:ae:2f:13:ae:00:c1:d5:7d:3a:35:f5:
30:d7:c9:92:57:d3:a7:4c:ce:c0:c8:3f:11:99:01:
80:fc:89:6c:dc:9a:f4:22:50:40:0a:17:ed:d8:95:
dd:b3:40:7b:72:4f:52:bb:70:47:14:5e:f3:c8:52:
71:c4:be:8b:93:45:04:26:33:c2:87:ae:d5:43:27:
0a:35:40:29:57:fe:99:e9:18:a2:f5:55:13:3c:41:
12:ca:e4:ff:ab:e3:67:04:34:a3:c1:55:34:8b:57:
a8:78:0b:d8:5e:0c:fc:02:a7:32:7e:52:82:fc:6d:
a1:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
98:D2:2D:EB:F6:06:31:82:4C:7E:4D:9C:8C:15:1A:43:9E:FB:69:15
X509v3 Authority Key Identifier:
keyid:A1:9C:64:39:46:A0:59:39:73:55:42:0D:73:BC:45:F1:4D:A2:A7:6B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/oZxkOUagWTlzVUINc7xF8U2ip2s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2e/eeeb85-29d4-46bb-b3f6-ac3b6a4567ba/1/oZxkOUagWTlzVUINc7xF8U2ip2s.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2e/eeeb85-29d4-46bb-b3f6-ac3b6a4567ba/1/oZxkOUagWTlzVUINc7xF8U2ip2s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
72:3e:ce:2b:ec:38:af:f1:dd:84:34:0d:32:cb:8f:06:77:50:
79:ad:bd:c6:06:52:13:ae:58:87:64:da:10:4e:bc:60:c2:f6:
43:f4:95:74:f9:0a:ea:10:37:5e:42:57:92:89:f2:53:ce:fc:
de:f0:df:3f:94:c4:4f:d3:74:b2:f1:78:6f:e5:71:34:c8:8d:
db:de:28:ac:4b:27:38:88:7b:a4:84:78:ac:4c:a7:5b:6b:5b:
20:c5:3c:49:d3:07:6d:69:ae:bc:d9:b6:73:39:59:d3:6d:66:
44:0c:ce:f2:8a:0f:7a:49:0c:bd:2b:af:8d:d9:0a:33:5b:4e:
3d:3d:29:14:1e:d2:34:11:db:f6:f1:4d:74:e4:f4:07:6f:c7:
30:1f:88:6c:ee:9e:7c:7c:53:d1:c2:79:46:1f:a8:62:f2:9e:
49:07:8d:27:e7:14:49:56:43:33:71:63:3b:80:7f:ca:f5:36:
2c:29:e7:d8:d1:e2:7b:8b:84:d3:06:5f:f1:0a:56:e3:c6:21:
a3:4f:62:33:7a:14:e0:d5:de:77:e2:5f:7d:54:83:72:e0:1a:
38:e4:27:13:bf:c2:5c:91:98:20:10:2b:98:41:32:63:9c:da:
d0:fe:18:b8:5a:6a:fd:12:cd:2e:15:1d:ef:02:3c:e8:db:aa:
f5:b0:9a:33
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 5 08:03:11 2025 by rpki-client