Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/49/8e6f08-30f0-46dd-a7a1-a9c384128d42/1/oOOBtudsuVIOjY9Wd27KD-F2zEA.mft
File: oOOBtudsuVIOjY9Wd27KD-F2zEA.mft (raw, json)
Hash identifier: KEJJX4yMgcojVeXN941l2p0W5yGThnvdmmyqD6R+IE4=
Subject key identifier: D6:A4:E4:BA:27:94:3E:69:2E:F6:93:9B:45:B6:F0:89:A4:97:5B:0C
Authority key identifier: A0:E3:81:B6:E7:6C:B9:52:0E:8D:8F:56:77:6E:CA:0F:E1:76:CC:40
Certificate issuer: /CN=a0e381b6e76cb9520e8d8f56776eca0fe176cc40
Certificate serial: 0196BE25340C0CE9091F426B09FF9AF28361
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/oOOBtudsuVIOjY9Wd27KD-F2zEA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/49/8e6f08-30f0-46dd-a7a1-a9c384128d42/1/oOOBtudsuVIOjY9Wd27KD-F2zEA.mft
Manifest number: 1542
Signing time: Sun 11 May 2025 07:00:31 +0000
Manifest this update: Sun 11 May 2025 07:00:31 +0000
Manifest next update: Mon 12 May 2025 07:00:31 +0000
Files and hashes: 1: 95FzUOf19GAUgH-NNap3guhoYwc.roa (hash: xIP1fB6Qn9UTZZo8HocsS+GRzZb3S08GTszP5U7/+78=)
2: EFk1lNXwEBcRAFhoClA443_i5HA.roa (hash: xLW6nYf20kTwvvd9EPpkcVtHN4fslrZstANOcysv2Fs=)
3: MuDm6qOBJ8xkrh2L926I8rpU5do.roa (hash: LGlkBx/kOBt10H9SsN38yJ3HGznA6mZgmUvmJ/8iHgA=)
4: oOOBtudsuVIOjY9Wd27KD-F2zEA.crl (hash: TJtSYDcC9iivajS6Enp6ZKVVo+cgvI88HHah8EZMEvQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/49/8e6f08-30f0-46dd-a7a1-a9c384128d42/1/oOOBtudsuVIOjY9Wd27KD-F2zEA.crl
rsync://rpki.ripe.net/repository/DEFAULT/49/8e6f08-30f0-46dd-a7a1-a9c384128d42/1/oOOBtudsuVIOjY9Wd27KD-F2zEA.mft
rsync://rpki.ripe.net/repository/DEFAULT/oOOBtudsuVIOjY9Wd27KD-F2zEA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 12 May 2025 07:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:be:25:34:0c:0c:e9:09:1f:42:6b:09:ff:9a:f2:83:61
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a0e381b6e76cb9520e8d8f56776eca0fe176cc40
Validity
Not Before: May 11 07:00:31 2025 GMT
Not After : May 12 07:00:31 2025 GMT
Subject: CN=d6a4e4ba27943e692ef6939b45b6f089a4975b0c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:77:95:d4:2e:c9:90:73:03:f1:45:76:a4:39:
3f:17:2b:e6:bb:76:22:3f:5a:7a:b1:9d:cb:4c:68:
97:49:7f:a6:fa:ac:7e:0b:e6:fe:a7:6b:64:18:b4:
49:d4:d4:ab:4c:72:c9:55:37:1b:5c:36:f7:cf:a7:
76:9b:02:a6:04:b6:f1:73:75:8d:c5:71:20:36:0d:
64:45:9e:a8:80:27:99:46:a0:4d:6f:2c:0d:81:fb:
66:15:6a:61:d0:cc:b8:ab:37:ee:01:a3:ba:b2:8f:
e2:91:9c:4d:22:f8:b2:dd:30:48:13:4e:e4:b8:0d:
e1:af:d7:fe:87:31:dd:f5:3a:63:23:89:28:d9:a0:
01:e0:0c:c2:2c:69:62:62:0e:1a:bb:19:2e:a8:98:
c0:07:c8:fa:fd:a2:23:6b:6a:a1:1d:5f:52:d9:0e:
93:f6:8c:4d:c9:e0:b5:04:7e:55:01:04:c3:41:35:
8e:4d:c0:6b:ed:d0:a2:a4:3e:2a:b5:a7:4d:d9:82:
f7:67:65:b3:8f:5c:50:10:e2:f2:38:94:78:74:c7:
81:7e:45:f6:bb:65:22:dc:60:f9:50:d7:4f:39:dc:
e4:0b:d1:56:28:46:51:7b:6d:e0:1c:28:b1:a9:45:
9d:01:40:b8:ea:4a:50:65:03:5e:75:60:c8:53:c6:
96:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D6:A4:E4:BA:27:94:3E:69:2E:F6:93:9B:45:B6:F0:89:A4:97:5B:0C
X509v3 Authority Key Identifier:
keyid:A0:E3:81:B6:E7:6C:B9:52:0E:8D:8F:56:77:6E:CA:0F:E1:76:CC:40
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/oOOBtudsuVIOjY9Wd27KD-F2zEA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/49/8e6f08-30f0-46dd-a7a1-a9c384128d42/1/oOOBtudsuVIOjY9Wd27KD-F2zEA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/49/8e6f08-30f0-46dd-a7a1-a9c384128d42/1/oOOBtudsuVIOjY9Wd27KD-F2zEA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3c:9c:19:93:da:de:43:14:f4:2c:54:9b:75:88:3e:91:e5:89:
e6:42:0b:1d:08:13:2e:32:1f:bc:ff:37:4c:ee:b6:d8:35:1f:
5b:4f:c5:aa:1f:e9:aa:a2:d5:72:71:85:5a:e6:f3:cc:82:4c:
80:91:60:cc:3a:40:83:03:fb:e8:9c:b4:4b:bc:d4:c2:ac:cf:
a6:fd:72:20:39:44:5b:be:b6:a3:76:2f:cd:1a:53:d0:db:16:
68:79:6a:18:d1:5b:9a:8b:b5:0e:63:ee:92:ba:69:73:3c:b3:
04:6d:be:39:bc:09:35:d2:31:c7:54:96:9f:7c:69:4f:6c:9c:
03:93:b4:c4:1e:96:f5:32:04:84:d4:b8:5f:d5:bf:98:d2:bb:
e9:ca:35:fd:b9:31:d8:5b:45:c1:a8:06:3f:b3:19:c2:55:77:
4b:5c:d3:88:b3:06:a2:1f:f4:c3:7b:ba:f4:b1:cb:6b:b3:59:
51:45:e6:84:a2:27:ea:4b:35:db:c5:05:f7:86:7a:af:38:34:
f7:86:df:a9:8c:da:59:63:46:b5:b5:83:19:c8:7d:79:36:b8:
06:31:48:46:83:bc:2a:ce:52:6d:6e:67:78:20:ed:36:6c:30:
74:25:4f:ae:f5:2f:00:15:70:51:0c:f4:85:f6:17:c4:fa:41:
4e:a5:99:80
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 11 15:26:37 2025 by rpki-client