Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/38/2dab18-7bb7-4aa1-98ad-27c9d9114238/1/oaVb8oiHU-RGdbYd2jA5TZAVbAo.mft
File: oaVb8oiHU-RGdbYd2jA5TZAVbAo.mft (raw, json)
Hash identifier: 1ex+ShhSFSLQhj+iOKk/xDa71iyDe36DGV2sgQs6bjM=
Subject key identifier: 15:10:9A:27:A7:D4:3F:32:1C:13:D5:05:EF:7B:E0:2B:39:79:29:88
Authority key identifier: A1:A5:5B:F2:88:87:53:E4:46:75:B6:1D:DA:30:39:4D:90:15:6C:0A
Certificate issuer: /CN=a1a55bf2888753e44675b61dda30394d90156c0a
Certificate serial: 0196B822D935747CFE9D0524C6A39C85D04B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/oaVb8oiHU-RGdbYd2jA5TZAVbAo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/38/2dab18-7bb7-4aa1-98ad-27c9d9114238/1/oaVb8oiHU-RGdbYd2jA5TZAVbAo.mft
Manifest number: 0476
Signing time: Sat 10 May 2025 03:00:13 +0000
Manifest this update: Sat 10 May 2025 03:00:13 +0000
Manifest next update: Sun 11 May 2025 03:00:13 +0000
Files and hashes: 1: RAu0fNtqwivhpDFk4ehwbUssHTc.roa (hash: ASO7jKRNvxEqEpBOo5wevxzSp2tNnkfm3RRt0ZwZtAw=)
2: oaVb8oiHU-RGdbYd2jA5TZAVbAo.crl (hash: 7gQgCovQ0hLxhX+FjFNXPvV402UOGD0tuk2hUrrHEXs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/38/2dab18-7bb7-4aa1-98ad-27c9d9114238/1/oaVb8oiHU-RGdbYd2jA5TZAVbAo.crl
rsync://rpki.ripe.net/repository/DEFAULT/38/2dab18-7bb7-4aa1-98ad-27c9d9114238/1/oaVb8oiHU-RGdbYd2jA5TZAVbAo.mft
rsync://rpki.ripe.net/repository/DEFAULT/oaVb8oiHU-RGdbYd2jA5TZAVbAo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 11 May 2025 03:00:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:b8:22:d9:35:74:7c:fe:9d:05:24:c6:a3:9c:85:d0:4b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a1a55bf2888753e44675b61dda30394d90156c0a
Validity
Not Before: May 10 03:00:13 2025 GMT
Not After : May 11 03:00:13 2025 GMT
Subject: CN=15109a27a7d43f321c13d505ef7be02b39792988
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:cf:a4:03:9e:0a:f7:e0:38:9f:23:af:76:79:
9d:d0:dd:f6:3c:80:f4:ce:c7:0f:30:5f:e1:98:9b:
0c:f3:99:cb:a8:16:34:e9:ec:c4:2d:98:af:90:f8:
1b:53:95:83:b9:67:3a:77:15:ea:b4:49:3a:09:02:
08:6c:d2:f9:f2:54:cd:fb:26:cb:cd:df:60:9d:26:
aa:b8:59:c4:19:5d:59:00:6c:1e:f4:7d:d1:a7:de:
33:7e:50:81:ab:22:fe:cb:d4:67:60:37:b5:86:68:
0f:9d:84:de:cb:86:de:92:74:39:c4:de:63:88:3b:
9c:37:3d:ec:26:d9:09:75:58:8b:49:1f:8d:27:3a:
e2:5f:6f:0d:40:33:d4:16:2d:ef:cb:69:0f:0e:af:
c8:27:da:36:01:ac:33:7d:a4:5f:4b:1b:1c:dd:79:
7e:42:a2:50:d2:2a:4e:44:fe:c3:2d:a6:9f:c8:fe:
79:64:de:e0:3e:0b:aa:fa:c6:d8:0d:39:5c:4b:cd:
9a:78:c4:31:8f:b2:bf:3b:a8:8d:33:79:da:3f:97:
d0:98:e7:4c:8a:fa:70:81:c4:e7:f4:19:a3:e4:44:
2c:bb:4f:b3:fc:95:55:7a:eb:9f:05:a3:84:24:42:
db:7f:9d:c8:28:e3:83:15:b9:bd:32:60:48:c2:29:
85:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
15:10:9A:27:A7:D4:3F:32:1C:13:D5:05:EF:7B:E0:2B:39:79:29:88
X509v3 Authority Key Identifier:
keyid:A1:A5:5B:F2:88:87:53:E4:46:75:B6:1D:DA:30:39:4D:90:15:6C:0A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/oaVb8oiHU-RGdbYd2jA5TZAVbAo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/38/2dab18-7bb7-4aa1-98ad-27c9d9114238/1/oaVb8oiHU-RGdbYd2jA5TZAVbAo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/38/2dab18-7bb7-4aa1-98ad-27c9d9114238/1/oaVb8oiHU-RGdbYd2jA5TZAVbAo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
34:71:2f:d0:cc:6d:b0:d7:b0:65:e7:f5:26:b5:69:09:6c:d5:
98:d9:9d:fa:55:89:eb:95:0c:f9:21:59:a8:14:25:f0:64:a9:
66:e5:2d:0e:a4:62:fc:a4:10:c0:c4:19:24:7a:23:9b:9a:71:
49:a1:6c:91:fe:63:2d:e0:52:df:fd:fc:2b:7c:09:78:a2:85:
6e:f0:8e:fd:3d:58:98:f9:92:a7:c6:7a:ed:dd:af:1a:5e:63:
d8:90:48:cb:37:d2:98:48:d3:70:c9:6b:9f:cb:e7:b3:ad:d8:
f5:1d:e3:00:5e:2d:5d:60:d6:53:3b:67:a0:8a:49:dd:31:9a:
d5:1d:63:5d:e6:70:99:fa:9b:54:57:8c:bd:2c:83:9f:1a:c9:
24:b0:10:0c:0c:6e:74:f6:2c:34:76:9f:f8:37:c9:09:33:97:
19:83:b6:d4:04:2e:46:41:0e:58:ef:42:c6:3c:6a:71:57:2f:
0e:ef:41:fa:6a:0f:8e:93:02:59:85:79:ef:f2:59:bd:3f:05:
09:64:88:3f:bb:c1:dc:1b:9f:97:93:ec:e0:04:4c:87:7e:82:
2e:0c:09:0b:37:0c:ca:90:5d:51:f6:a4:00:e9:52:47:48:43:
f1:8e:f8:4e:e5:1d:79:64:43:7d:4a:8f:e4:6f:6c:5a:13:d8:
ac:14:40:e3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 10 07:40:50 2025 by rpki-client