Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5a/73a71e-446d-41ff-aabf-d5bc239f6a98/1/OXm0NaPP7-fDOoSyL2AzAJpSJcc.mft
File: OXm0NaPP7-fDOoSyL2AzAJpSJcc.mft (raw, json)
Hash identifier: aUA2IZLOhsf7hyeSwiLfayXLwCmauWnG6NmuQt3kJW4=
Subject key identifier: 08:90:A9:2D:00:EE:AA:7B:B4:EA:9B:7A:F1:F6:EF:61:5D:52:AA:C9
Authority key identifier: 39:79:B4:35:A3:CF:EF:E7:C3:3A:84:B2:2F:60:33:00:9A:52:25:C7
Certificate issuer: /CN=3979b435a3cfefe7c33a84b22f6033009a5225c7
Certificate serial: 01969FACADCD472AA5EF1417D990BC4502DC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OXm0NaPP7-fDOoSyL2AzAJpSJcc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5a/73a71e-446d-41ff-aabf-d5bc239f6a98/1/OXm0NaPP7-fDOoSyL2AzAJpSJcc.mft
Manifest number: 14B5
Signing time: Mon 05 May 2025 09:00:16 +0000
Manifest this update: Mon 05 May 2025 09:00:16 +0000
Manifest next update: Tue 06 May 2025 09:00:16 +0000
Files and hashes: 1: OXm0NaPP7-fDOoSyL2AzAJpSJcc.crl (hash: 3N1RQSgyrwQfqp8X6WDyLl72K6lqK8iWcofG7v8/rPg=)
2: VwXHoptHeR9mWbeRFzNgE273Y_Y.roa (hash: O7PmmfQJftPOiteORNgrKpX/pUfGsXyieeu22jdpW5U=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5a/73a71e-446d-41ff-aabf-d5bc239f6a98/1/OXm0NaPP7-fDOoSyL2AzAJpSJcc.crl
rsync://rpki.ripe.net/repository/DEFAULT/5a/73a71e-446d-41ff-aabf-d5bc239f6a98/1/OXm0NaPP7-fDOoSyL2AzAJpSJcc.mft
rsync://rpki.ripe.net/repository/DEFAULT/OXm0NaPP7-fDOoSyL2AzAJpSJcc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 06 May 2025 09:00:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:9f:ac:ad:cd:47:2a:a5:ef:14:17:d9:90:bc:45:02:dc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3979b435a3cfefe7c33a84b22f6033009a5225c7
Validity
Not Before: May 5 09:00:16 2025 GMT
Not After : May 6 09:00:16 2025 GMT
Subject: CN=0890a92d00eeaa7bb4ea9b7af1f6ef615d52aac9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:8f:c9:ce:2b:84:6b:98:68:77:89:f0:ee:21:
f7:f9:e2:27:08:f2:68:51:75:c6:29:6f:36:36:f7:
a4:d9:a1:db:7d:06:cd:c8:47:85:8c:0f:e5:c0:aa:
39:38:c4:b1:58:23:83:fe:73:01:f6:ae:fc:34:b4:
cb:85:1b:e2:2c:18:9a:d4:99:be:46:45:42:a1:0c:
e3:08:01:a6:ff:95:d8:7b:3a:ca:4b:23:2c:48:6f:
2b:a4:03:aa:5a:ca:6d:b8:71:1e:d8:88:0e:e8:d2:
53:6b:8b:fa:89:0b:07:6d:30:53:05:09:b3:e0:e8:
88:1c:6d:d6:c0:60:4c:a7:a5:38:47:48:23:3e:1c:
90:75:7b:36:9e:9f:dc:78:47:3d:4a:0d:ca:84:f0:
b9:8a:83:3a:75:0c:7b:06:86:9d:3f:6d:37:e4:94:
5a:04:7a:35:64:8b:3c:95:9c:29:75:0a:68:fa:7d:
dd:82:f6:d6:39:73:03:b3:0a:86:a7:8d:9c:47:43:
01:59:e9:cc:c3:ad:e6:df:16:d9:77:71:dd:73:7d:
6e:1a:e4:71:7e:3a:72:79:72:5e:ad:b3:11:4e:66:
c9:a6:d1:b7:11:16:31:8a:23:25:3b:82:98:94:cf:
14:70:32:50:ec:a2:4a:f7:a1:63:20:db:89:30:db:
c2:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
08:90:A9:2D:00:EE:AA:7B:B4:EA:9B:7A:F1:F6:EF:61:5D:52:AA:C9
X509v3 Authority Key Identifier:
keyid:39:79:B4:35:A3:CF:EF:E7:C3:3A:84:B2:2F:60:33:00:9A:52:25:C7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OXm0NaPP7-fDOoSyL2AzAJpSJcc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/73a71e-446d-41ff-aabf-d5bc239f6a98/1/OXm0NaPP7-fDOoSyL2AzAJpSJcc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/73a71e-446d-41ff-aabf-d5bc239f6a98/1/OXm0NaPP7-fDOoSyL2AzAJpSJcc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0d:9b:e8:ef:38:4b:1f:a2:84:3f:60:ad:fc:dd:cd:52:25:d4:
67:2a:75:0f:f4:c7:32:74:dc:11:0d:28:ef:b6:53:7a:b2:8e:
62:fd:2b:b0:3e:89:88:74:62:fa:b6:16:df:e7:ed:ee:df:d5:
c4:fb:9e:d4:6d:0c:5d:0c:fd:13:cf:bb:89:05:cd:d0:56:3c:
a7:fe:37:f7:8d:86:bd:30:9e:a1:79:83:88:39:fc:38:d1:4b:
0b:4f:92:7d:cb:b2:d8:3e:ce:34:41:8c:30:c8:57:64:e8:6b:
f3:0a:a1:a1:ff:be:f9:a2:b8:4a:40:db:28:c5:7f:3d:b2:ed:
75:b0:b7:d7:f8:e7:cf:17:50:ad:47:0f:83:15:8f:60:6a:77:
d0:4d:3e:88:ab:b1:29:77:0b:9f:d4:ee:e7:bd:4c:be:5b:2b:
9c:c6:53:1e:7c:a7:d6:6f:f7:9c:7b:a4:37:50:47:4d:9c:bb:
12:6b:c6:a0:be:6a:aa:9a:60:41:9a:6d:d1:b9:b8:52:3d:f5:
6d:21:3f:d5:46:48:54:61:ae:40:3d:cd:1e:ba:8e:87:af:de:
6a:51:eb:72:55:84:b0:4b:52:b9:4f:ca:1c:e0:f3:50:04:90:
87:5d:ee:80:cf:77:d3:67:da:21:0b:21:91:f1:f5:de:86:a6:
6a:11:c8:cc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 5 19:01:58 2025 by rpki-client