Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/52/3eaeb4-fb99-4993-8122-e45350414ddf/1/OXBHadCH2f6PeQplVctPvvzSTTg.mft
File: OXBHadCH2f6PeQplVctPvvzSTTg.mft (raw, json)
Hash identifier: h7v3X25yBEZN0yrD6lKVgv2NJ9dusLS0CubT4h/OU5E=
Subject key identifier: 6C:4E:2F:22:DE:4A:DA:D1:0A:2D:17:F3:89:7B:A4:D0:78:DD:3C:C0
Authority key identifier: 39:70:47:69:D0:87:D9:FE:8F:79:0A:65:55:CB:4F:BE:FC:D2:4D:38
Certificate issuer: /CN=39704769d087d9fe8f790a6555cb4fbefcd24d38
Certificate serial: 0196BE5CACB3BE239D254F9B7616C0AEF4D2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OXBHadCH2f6PeQplVctPvvzSTTg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/52/3eaeb4-fb99-4993-8122-e45350414ddf/1/OXBHadCH2f6PeQplVctPvvzSTTg.mft
Manifest number: 01E6
Signing time: Sun 11 May 2025 08:01:06 +0000
Manifest this update: Sun 11 May 2025 08:01:06 +0000
Manifest next update: Mon 12 May 2025 08:01:06 +0000
Files and hashes: 1: GvH_ld4kbG2WgWcG2cx_5y70SCI.roa (hash: aThEESBkBgawQBBj+8NWP1oT0rEWoC0jxTnO1rDLqhk=)
2: OXBHadCH2f6PeQplVctPvvzSTTg.crl (hash: rWveAotLqySDImVzwknykYSwq70jKLxqsysBfX0UAw4=)
3: qg4rCavoAEstd_gdiifZJ2l134s.roa (hash: zv8J2KuDAwQOB6a6izYV8dRbqPViGL374uqqVPG9O1k=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/52/3eaeb4-fb99-4993-8122-e45350414ddf/1/OXBHadCH2f6PeQplVctPvvzSTTg.crl
rsync://rpki.ripe.net/repository/DEFAULT/52/3eaeb4-fb99-4993-8122-e45350414ddf/1/OXBHadCH2f6PeQplVctPvvzSTTg.mft
rsync://rpki.ripe.net/repository/DEFAULT/OXBHadCH2f6PeQplVctPvvzSTTg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 12 May 2025 07:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:be:5c:ac:b3:be:23:9d:25:4f:9b:76:16:c0:ae:f4:d2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=39704769d087d9fe8f790a6555cb4fbefcd24d38
Validity
Not Before: May 11 08:01:06 2025 GMT
Not After : May 12 08:01:06 2025 GMT
Subject: CN=6c4e2f22de4adad10a2d17f3897ba4d078dd3cc0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e6:0f:74:9c:4c:c6:41:ac:c8:60:79:2e:8e:36:
b5:c7:ca:43:e7:fb:8e:4b:bb:d6:31:1e:91:ef:d3:
2b:34:35:70:2b:e5:d2:01:63:11:d9:a6:72:59:aa:
b2:cd:5d:65:1d:1f:77:77:a5:d7:93:1f:08:51:9d:
a0:ff:c2:fb:1d:d8:0f:96:ca:3f:38:0e:30:4c:20:
e0:59:48:fb:4f:af:20:7e:dd:9b:34:8e:5a:2a:bf:
a6:f0:67:da:5d:3d:5c:40:3c:42:4a:90:cc:cb:15:
11:72:c8:1a:a1:43:1e:0e:85:14:bd:65:0d:75:2c:
53:bb:78:cf:36:df:b8:57:a0:a1:92:d9:c0:83:40:
7e:c0:76:a0:a3:af:36:91:09:58:c3:fd:f3:03:7b:
07:52:db:63:9a:b1:17:a8:10:e1:9c:60:db:b5:42:
45:e6:d3:a6:38:88:42:17:93:22:d0:43:1c:d1:4d:
60:9c:8d:79:43:38:31:5d:1c:f8:d2:55:d7:0a:97:
69:cc:fb:de:3e:2c:88:ce:62:cb:b3:7d:92:29:58:
cb:f9:48:5b:ab:1d:55:8f:58:5d:1c:b1:c1:2c:45:
97:48:23:34:56:c2:42:12:f5:e0:77:db:0b:3a:4f:
98:df:c6:0b:e6:81:16:76:5f:20:78:95:94:77:ab:
56:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6C:4E:2F:22:DE:4A:DA:D1:0A:2D:17:F3:89:7B:A4:D0:78:DD:3C:C0
X509v3 Authority Key Identifier:
keyid:39:70:47:69:D0:87:D9:FE:8F:79:0A:65:55:CB:4F:BE:FC:D2:4D:38
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OXBHadCH2f6PeQplVctPvvzSTTg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/52/3eaeb4-fb99-4993-8122-e45350414ddf/1/OXBHadCH2f6PeQplVctPvvzSTTg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/52/3eaeb4-fb99-4993-8122-e45350414ddf/1/OXBHadCH2f6PeQplVctPvvzSTTg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4d:80:01:23:50:ed:8b:28:5a:4c:b7:77:6d:3f:a8:c2:b4:82:
d6:c8:19:ac:be:72:2b:7d:cf:0c:e6:e7:1b:44:4a:19:98:53:
88:32:58:0a:0e:91:78:dc:a1:19:b9:06:39:c5:ea:ae:38:78:
cd:3a:a0:20:ab:0e:ca:4e:61:31:23:d8:93:a1:64:67:32:01:
97:8f:08:70:92:22:cb:c3:b1:de:ec:29:de:b1:57:08:7f:40:
13:94:f0:fc:df:fa:a8:64:2a:b4:b4:88:ba:c6:3f:69:a1:00:
85:02:cd:b0:15:16:5d:1b:eb:df:8d:59:18:f3:c9:ae:61:27:
bd:29:b4:66:1b:a1:9e:a2:4c:12:9d:bf:ef:4b:d1:16:4f:21:
76:be:dc:16:0b:2c:11:91:ee:93:43:52:78:b4:06:d0:1b:59:
f9:aa:c7:79:b5:20:f4:28:f8:79:b6:cd:d6:e9:bc:fd:5b:44:
09:ea:9e:5b:86:97:f7:b1:1e:21:b8:c9:2c:f4:1b:52:96:3f:
69:d0:26:ac:db:6c:6d:e9:41:06:79:2b:4e:6d:0b:57:b0:0f:
58:2f:a8:de:3b:18:73:1e:ad:9f:11:4b:e5:cc:18:21:b9:f8:
48:c5:7a:5b:29:28:82:f1:bd:1a:2a:43:8b:86:7e:cb:bf:fa:
54:98:83:f2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 11 15:20:13 2025 by rpki-client