Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/33/01eafc-d65a-4a77-ba73-f2c48faf7f3d/1/OUKesL2HA74uXwrMwoG_IhYEsM4.mft
File: OUKesL2HA74uXwrMwoG_IhYEsM4.mft (raw, json)
Hash identifier: WKNhhdEObMxQDEVZNGCYCoHG0m/b4s7pcUCboWl8AAI=
Subject key identifier: BE:80:90:37:0B:E5:D3:C5:73:CB:D6:74:14:8E:C5:52:66:C3:AE:1C
Authority key identifier: 39:42:9E:B0:BD:87:03:BE:2E:5F:0A:CC:C2:81:BF:22:16:04:B0:CE
Certificate issuer: /CN=39429eb0bd8703be2e5f0accc281bf221604b0ce
Certificate serial: 0196A68A6B00B60408A1FD0A1E614811FF1C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OUKesL2HA74uXwrMwoG_IhYEsM4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/33/01eafc-d65a-4a77-ba73-f2c48faf7f3d/1/OUKesL2HA74uXwrMwoG_IhYEsM4.mft
Manifest number: 0644
Signing time: Tue 06 May 2025 17:00:11 +0000
Manifest this update: Tue 06 May 2025 17:00:11 +0000
Manifest next update: Wed 07 May 2025 17:00:11 +0000
Files and hashes: 1: AspvYduc_Jb9y8GXYBDLcC-_8EE.roa (hash: ensOUkmx91RQ9/R5jlP5oQpNE74zuacX+6PWKXjdOOE=)
2: OUKesL2HA74uXwrMwoG_IhYEsM4.crl (hash: An91xSJMB+db7UVVqj6HD4tZKptyZWSWvFVnuDafTYU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/33/01eafc-d65a-4a77-ba73-f2c48faf7f3d/1/OUKesL2HA74uXwrMwoG_IhYEsM4.crl
rsync://rpki.ripe.net/repository/DEFAULT/33/01eafc-d65a-4a77-ba73-f2c48faf7f3d/1/OUKesL2HA74uXwrMwoG_IhYEsM4.mft
rsync://rpki.ripe.net/repository/DEFAULT/OUKesL2HA74uXwrMwoG_IhYEsM4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 07 May 2025 16:14:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:a6:8a:6b:00:b6:04:08:a1:fd:0a:1e:61:48:11:ff:1c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=39429eb0bd8703be2e5f0accc281bf221604b0ce
Validity
Not Before: May 6 17:00:11 2025 GMT
Not After : May 7 17:00:11 2025 GMT
Subject: CN=be8090370be5d3c573cbd674148ec55266c3ae1c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:7a:43:16:60:d7:43:d0:f7:0c:ce:89:da:a6:
4c:53:a4:ee:05:33:d8:ec:87:66:83:9a:04:82:0d:
3b:26:14:c2:6f:dd:d1:79:47:90:72:6a:73:09:22:
81:30:4f:99:53:44:42:e6:e6:86:23:7c:0b:05:5c:
18:94:52:54:e0:e9:fc:cb:be:94:35:6a:72:e5:fb:
8a:91:67:29:4c:35:b7:a8:9a:82:49:e1:4d:89:6e:
70:2c:3f:45:5b:c3:56:5a:8d:db:be:2f:13:a7:54:
96:83:b2:29:31:98:4c:c1:50:dd:76:f5:ff:35:9f:
ed:4b:5f:0d:09:87:61:8a:18:77:11:60:08:f8:ca:
6b:68:6c:93:ac:b7:77:da:9e:af:2b:24:7a:6b:3d:
fa:fa:40:8f:37:8d:33:af:ae:ee:7b:c7:27:7b:2c:
14:37:6c:2c:b5:05:4c:d2:15:c3:96:f6:1b:f7:eb:
6f:7d:e2:8c:fa:75:14:0b:33:52:b4:80:dd:36:bf:
43:8d:d0:82:2b:64:23:8e:2e:c0:77:3f:13:d7:d5:
b3:52:5a:52:f1:d7:0a:1b:7b:00:33:5f:dc:83:20:
0d:41:82:a0:d0:17:23:60:07:ce:66:bd:80:00:74:
04:56:97:60:fa:e6:e7:00:34:53:ca:43:ac:74:e7:
86:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BE:80:90:37:0B:E5:D3:C5:73:CB:D6:74:14:8E:C5:52:66:C3:AE:1C
X509v3 Authority Key Identifier:
keyid:39:42:9E:B0:BD:87:03:BE:2E:5F:0A:CC:C2:81:BF:22:16:04:B0:CE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OUKesL2HA74uXwrMwoG_IhYEsM4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/33/01eafc-d65a-4a77-ba73-f2c48faf7f3d/1/OUKesL2HA74uXwrMwoG_IhYEsM4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/33/01eafc-d65a-4a77-ba73-f2c48faf7f3d/1/OUKesL2HA74uXwrMwoG_IhYEsM4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6e:e0:8c:08:17:fa:eb:24:5b:a5:24:28:9c:eb:db:79:a8:e5:
a2:3a:e1:e1:cc:42:b6:36:6c:ed:ca:36:85:a3:97:24:90:92:
fc:ac:b0:bd:27:7f:5a:f3:be:93:29:f6:53:82:4b:8b:2f:1a:
5b:18:cc:5f:0f:43:1c:67:1e:dd:42:24:f4:06:08:7a:a3:a0:
98:a3:f9:9c:70:c6:6a:e7:b8:e3:7a:f4:aa:59:a2:13:8f:f8:
8c:5c:c4:a0:c2:cf:85:77:a4:5d:bc:15:13:15:15:0e:fe:43:
2d:e8:02:d3:ab:b2:42:20:45:15:e5:28:04:2e:97:e3:70:f7:
1c:f9:fe:c3:37:9c:fd:4d:20:bc:b5:47:00:bf:1d:73:d5:81:
8b:c9:09:20:65:86:f4:02:a7:22:89:b7:7d:20:e8:c3:5a:ce:
7e:2e:c1:f5:51:47:41:f9:39:94:b9:61:e4:ca:03:70:c1:c7:
61:c6:d3:52:30:82:6a:f3:c6:ac:ec:e4:34:00:f6:4e:33:b6:
30:25:b6:0d:4b:2b:86:89:e8:ef:aa:68:e6:d5:de:5c:47:23:
ce:26:20:17:a5:07:ec:b5:f8:71:ae:77:10:2f:8e:70:b2:c6:
25:c4:39:92:ae:f5:60:48:7b:b7:ba:ce:a1:8e:6f:e9:69:24:
86:3b:2c:d8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 7 00:53:54 2025 by rpki-client