Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/45/dd0189-7969-4fd5-9747-28bdabca70cb/1/OUiGnOVLnTsvPjmu4snI6xnLWw8.mft
File: OUiGnOVLnTsvPjmu4snI6xnLWw8.mft (raw, json)
Hash identifier: OyZf8EdTXNGqtFXgcwKLm1QN28oiEhgJh/j0u+NYFu8=
Subject key identifier: D9:8B:CB:23:FC:B5:E2:75:16:D5:FA:7F:76:35:12:68:18:AF:4E:C0
Authority key identifier: 39:48:86:9C:E5:4B:9D:3B:2F:3E:39:AE:E2:C9:C8:EB:19:CB:5B:0F
Certificate issuer: /CN=3948869ce54b9d3b2f3e39aee2c9c8eb19cb5b0f
Certificate serial: 0196C5A852CF3CD5521C3501CAF0C6B35C75
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OUiGnOVLnTsvPjmu4snI6xnLWw8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/45/dd0189-7969-4fd5-9747-28bdabca70cb/1/OUiGnOVLnTsvPjmu4snI6xnLWw8.mft
Manifest number: 1538
Signing time: Mon 12 May 2025 18:01:04 +0000
Manifest this update: Mon 12 May 2025 18:01:04 +0000
Manifest next update: Tue 13 May 2025 18:01:04 +0000
Files and hashes: 1: Jxs0meMKDCLBz_dVByd3J3wLTdc.roa (hash: ZCvr3TtSBPIKAQupwsVmwJ8f7SSejV5g4WH6kmkpM1s=)
2: OUiGnOVLnTsvPjmu4snI6xnLWw8.crl (hash: VOaZiBcuyHqhOE9xvGSfINiBQVH3qxhwWS2cdvbFsFg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/45/dd0189-7969-4fd5-9747-28bdabca70cb/1/OUiGnOVLnTsvPjmu4snI6xnLWw8.crl
rsync://rpki.ripe.net/repository/DEFAULT/45/dd0189-7969-4fd5-9747-28bdabca70cb/1/OUiGnOVLnTsvPjmu4snI6xnLWw8.mft
rsync://rpki.ripe.net/repository/DEFAULT/OUiGnOVLnTsvPjmu4snI6xnLWw8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 13 May 2025 14:31:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:c5:a8:52:cf:3c:d5:52:1c:35:01:ca:f0:c6:b3:5c:75
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3948869ce54b9d3b2f3e39aee2c9c8eb19cb5b0f
Validity
Not Before: May 12 18:01:04 2025 GMT
Not After : May 13 18:01:04 2025 GMT
Subject: CN=d98bcb23fcb5e27516d5fa7f7635126818af4ec0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:f3:28:cc:4c:95:7d:35:0f:4e:ed:7b:4e:16:
58:16:4c:3b:ae:50:88:57:fb:82:4d:5a:96:a7:23:
3b:6d:af:c2:24:c1:2d:81:bf:ee:1a:8a:92:e6:c6:
da:00:7b:0c:a9:80:7d:c3:d0:ec:c3:f7:05:59:26:
b7:68:94:99:f1:3e:35:be:c1:22:f8:09:f7:12:dd:
51:00:f0:9b:e6:a5:bc:99:46:6a:02:30:cb:a4:7d:
10:20:06:f1:4e:17:66:1a:74:a0:59:69:7d:bd:e6:
43:7b:56:ba:7a:ec:57:a1:02:d2:8d:15:43:da:71:
e2:09:90:d9:bd:fb:22:ee:9c:66:fc:d1:f7:b9:ab:
fc:60:9f:1e:08:b5:e8:47:2a:c7:85:2d:47:e6:54:
6f:cc:4a:55:44:b4:05:81:dc:e6:04:e2:d5:83:a9:
06:a0:d8:b2:fb:3a:c5:1d:4f:97:d1:8b:13:ef:a6:
37:52:b1:3c:3f:c5:fd:79:60:97:41:9c:e4:2f:fe:
4d:eb:05:ae:8e:28:1f:fc:b4:80:f5:c3:65:df:3b:
c3:6e:bd:74:a1:3f:cd:a5:29:71:5d:80:5a:b4:d0:
c0:6b:41:64:b9:43:9e:63:59:6e:40:77:c0:ea:7b:
11:e4:f4:06:da:44:a5:80:e0:7f:00:d9:d9:c4:07:
6c:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D9:8B:CB:23:FC:B5:E2:75:16:D5:FA:7F:76:35:12:68:18:AF:4E:C0
X509v3 Authority Key Identifier:
keyid:39:48:86:9C:E5:4B:9D:3B:2F:3E:39:AE:E2:C9:C8:EB:19:CB:5B:0F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OUiGnOVLnTsvPjmu4snI6xnLWw8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/45/dd0189-7969-4fd5-9747-28bdabca70cb/1/OUiGnOVLnTsvPjmu4snI6xnLWw8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/45/dd0189-7969-4fd5-9747-28bdabca70cb/1/OUiGnOVLnTsvPjmu4snI6xnLWw8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
94:82:d6:22:13:d2:8a:d6:f7:eb:d3:fe:69:f2:21:8a:c4:75:
1d:cb:d5:43:41:c6:86:7c:e8:fd:59:84:34:5d:e8:e4:b9:9a:
f2:45:44:7a:ef:56:f7:e5:f2:4c:ab:65:dc:f2:8c:b7:6d:21:
bc:16:17:fc:56:20:c8:83:04:6e:b5:19:80:36:78:d7:60:ba:
17:c2:91:15:74:81:be:54:89:8c:ef:16:a7:6c:57:40:52:d5:
e8:ed:cb:7a:a2:8a:b4:63:67:6e:1f:78:8c:db:e2:20:ed:71:
39:c8:8e:4e:09:2c:56:d8:35:1c:9f:1f:be:ca:01:3b:77:d1:
33:81:47:91:d9:c5:42:50:80:b2:c4:14:67:b0:1f:3d:92:8e:
7d:e8:77:fe:22:a2:cb:11:9a:45:29:f0:da:a4:88:8a:d6:d8:
32:5c:61:6d:50:74:6c:1f:f3:b5:ba:09:dd:9c:bf:e6:1c:c0:
7a:5d:40:54:56:d4:e0:67:66:2e:9d:34:18:86:97:17:da:c3:
30:3b:4f:b8:ff:b3:99:0a:82:be:26:20:a1:72:3d:81:d5:90:
5a:b3:ea:59:75:c5:93:66:83:45:27:27:15:4a:3f:4a:56:39:
44:51:80:42:d8:be:5e:12:0e:40:8f:2b:65:8f:d9:67:3c:8c:
4e:52:54:82
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 12 22:52:27 2025 by rpki-client