Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3a/1e9694-c285-4ccf-943b-c2b7cff0661c/1/oYRAnlwYO7zDFTX0x-7keCzWe-M.mft
File: oYRAnlwYO7zDFTX0x-7keCzWe-M.mft (raw, json)
Hash identifier: G7FWARCJoJc+44TOP5dytUk/XIVnWd1csaQOg17Kb4E=
Subject key identifier: 17:82:93:05:3A:99:51:E8:47:60:0E:D6:26:4A:21:32:24:98:B7:5A
Authority key identifier: A1:84:40:9E:5C:18:3B:BC:C3:15:35:F4:C7:EE:E4:78:2C:D6:7B:E3
Certificate issuer: /CN=a184409e5c183bbcc31535f4c7eee4782cd67be3
Certificate serial: 0196AFFBF7175D6B97C31410B3164C7D1ED6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/oYRAnlwYO7zDFTX0x-7keCzWe-M.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3a/1e9694-c285-4ccf-943b-c2b7cff0661c/1/oYRAnlwYO7zDFTX0x-7keCzWe-M.mft
Manifest number: 1155
Signing time: Thu 08 May 2025 13:00:47 +0000
Manifest this update: Thu 08 May 2025 13:00:47 +0000
Manifest next update: Fri 09 May 2025 13:00:47 +0000
Files and hashes: 1: PHcuyK5Isl-tObyHXesNd9QiRP0.roa (hash: rHdHpG4qGbN9ifhvJU1UvmMnc7kX+7rc9pla/vN3kgc=)
2: oYRAnlwYO7zDFTX0x-7keCzWe-M.crl (hash: 1AsDicmiDUJ49zUkq6IXHd/e2kK1ZL3GT4rjdo7Exus=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3a/1e9694-c285-4ccf-943b-c2b7cff0661c/1/oYRAnlwYO7zDFTX0x-7keCzWe-M.crl
rsync://rpki.ripe.net/repository/DEFAULT/3a/1e9694-c285-4ccf-943b-c2b7cff0661c/1/oYRAnlwYO7zDFTX0x-7keCzWe-M.mft
rsync://rpki.ripe.net/repository/DEFAULT/oYRAnlwYO7zDFTX0x-7keCzWe-M.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 09 May 2025 13:00:47 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:af:fb:f7:17:5d:6b:97:c3:14:10:b3:16:4c:7d:1e:d6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a184409e5c183bbcc31535f4c7eee4782cd67be3
Validity
Not Before: May 8 13:00:47 2025 GMT
Not After : May 9 13:00:47 2025 GMT
Subject: CN=178293053a9951e847600ed6264a21322498b75a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:88:cf:ae:3d:e8:03:08:6c:f6:d9:1a:2c:ef:1d:
23:d4:69:af:04:56:cb:ed:57:c7:34:c4:78:66:4f:
a5:8d:87:14:6c:7d:a5:97:95:20:ba:48:7c:61:c3:
b1:ed:19:4e:5d:3a:39:49:ee:79:e6:3a:63:5b:30:
f6:3a:7b:bc:6f:17:3b:4a:e8:c2:f9:c4:26:ee:15:
17:6a:04:5b:07:c7:1c:50:34:01:bc:ae:9e:91:26:
e5:29:1e:07:5c:bb:5f:98:45:c7:26:ec:ef:f0:10:
91:a6:db:49:90:45:59:8e:75:be:42:09:48:d7:97:
f0:f3:d3:5c:a1:bd:95:97:34:68:b8:73:3b:2f:4e:
d6:1c:0b:c2:1b:b8:b9:6e:fe:18:e2:1b:11:cc:55:
7b:15:dc:e7:2c:ad:46:d7:00:c7:eb:8b:24:10:f3:
80:7c:6d:c9:ed:7b:6e:a5:ff:15:c7:0d:49:17:d9:
d5:50:c8:be:c9:41:af:85:83:0a:e3:cc:3b:b5:27:
58:e1:f8:69:b3:03:63:94:fd:46:72:87:63:dc:20:
97:fc:a6:41:36:aa:c7:56:ee:71:a9:c1:8b:d3:f7:
b3:1a:f6:11:2f:e4:0f:5a:a6:71:99:04:72:f7:a9:
cd:da:e6:aa:e7:05:d4:58:99:5e:8c:fd:7b:0d:e9:
68:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
17:82:93:05:3A:99:51:E8:47:60:0E:D6:26:4A:21:32:24:98:B7:5A
X509v3 Authority Key Identifier:
keyid:A1:84:40:9E:5C:18:3B:BC:C3:15:35:F4:C7:EE:E4:78:2C:D6:7B:E3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/oYRAnlwYO7zDFTX0x-7keCzWe-M.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3a/1e9694-c285-4ccf-943b-c2b7cff0661c/1/oYRAnlwYO7zDFTX0x-7keCzWe-M.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3a/1e9694-c285-4ccf-943b-c2b7cff0661c/1/oYRAnlwYO7zDFTX0x-7keCzWe-M.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4c:c8:31:c9:63:06:a2:7b:a9:1a:5b:4d:f0:71:49:a5:e0:af:
e8:de:37:8c:87:73:ab:86:e7:75:f0:11:c9:45:39:69:73:14:
46:99:b0:83:13:ee:e3:18:69:c6:60:48:05:89:bf:f3:7e:c5:
ad:76:c2:55:0a:40:85:dd:ec:11:d8:69:81:e3:9f:0e:e9:6e:
21:f1:9f:b5:07:3d:96:32:3a:8d:f8:b1:1a:b7:91:18:a7:ab:
a9:ac:05:54:65:2c:32:f2:bf:09:db:0e:77:77:47:05:32:7b:
ff:de:a9:81:c5:97:8c:0e:50:29:83:bf:cd:ed:42:dc:2e:33:
a7:11:36:02:62:f8:04:80:f0:35:88:b2:f4:5c:eb:21:f1:5d:
b2:47:0e:76:17:1c:32:f9:40:2f:8b:9c:84:f8:d7:62:9a:64:
49:ee:32:48:ae:8f:f7:f6:2a:c6:7c:e6:00:bd:d7:44:66:58:
eb:5e:a6:b5:40:cb:37:d6:ca:db:3d:91:18:80:f8:05:67:fc:
3b:dd:3c:db:4a:51:6d:f1:94:1f:4e:8d:6f:3d:52:6c:28:e5:
2d:ff:81:a8:a6:4d:55:a2:c0:c3:b1:09:8e:6e:5c:82:da:6a:
ff:25:99:e8:65:58:8a:d2:e1:47:45:24:09:fb:27:f7:a7:b3:
0e:04:e5:f4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 8 20:38:05 2025 by rpki-client