Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5c/a37f9c-1e6a-4665-a0e2-fe31100d081f/1/OxRinHZc4axPaIlW47kPatjEtYI.mft
File: OxRinHZc4axPaIlW47kPatjEtYI.mft (raw, json)
Hash identifier: e/qWQwj4llCFi+f50QlTHig5CcWImrlhwynSPLCziW8=
Subject key identifier: 10:DF:72:A4:EB:90:61:2A:33:80:7C:5F:86:CA:61:E3:FF:12:74:E0
Authority key identifier: 3B:14:62:9C:76:5C:E1:AC:4F:68:89:56:E3:B9:0F:6A:D8:C4:B5:82
Certificate issuer: /CN=3b14629c765ce1ac4f688956e3b90f6ad8c4b582
Certificate serial: 0196C3F0A8EA9358F079E0769EA24B10F645
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OxRinHZc4axPaIlW47kPatjEtYI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5c/a37f9c-1e6a-4665-a0e2-fe31100d081f/1/OxRinHZc4axPaIlW47kPatjEtYI.mft
Manifest number: 14CB
Signing time: Mon 12 May 2025 10:00:51 +0000
Manifest this update: Mon 12 May 2025 10:00:51 +0000
Manifest next update: Tue 13 May 2025 10:00:51 +0000
Files and hashes: 1: C_zGKKe9EmjFWVKBb9utgZ7LvBo.roa (hash: DBtQlC6QblgPpVW+sAN+YH267kvW3kiRyXFujtkor/8=)
2: OxRinHZc4axPaIlW47kPatjEtYI.crl (hash: qGR4uf8I+M3ff/h1otQ1Y2O0kLIH9Z5zzhy9zXyMuL8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5c/a37f9c-1e6a-4665-a0e2-fe31100d081f/1/OxRinHZc4axPaIlW47kPatjEtYI.crl
rsync://rpki.ripe.net/repository/DEFAULT/5c/a37f9c-1e6a-4665-a0e2-fe31100d081f/1/OxRinHZc4axPaIlW47kPatjEtYI.mft
rsync://rpki.ripe.net/repository/DEFAULT/OxRinHZc4axPaIlW47kPatjEtYI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 13 May 2025 10:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:c3:f0:a8:ea:93:58:f0:79:e0:76:9e:a2:4b:10:f6:45
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3b14629c765ce1ac4f688956e3b90f6ad8c4b582
Validity
Not Before: May 12 10:00:51 2025 GMT
Not After : May 13 10:00:51 2025 GMT
Subject: CN=10df72a4eb90612a33807c5f86ca61e3ff1274e0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dc:80:7e:a4:d5:a6:20:ae:9e:14:f5:5c:0e:3b:
83:24:65:83:8d:68:db:27:fa:6f:20:48:d2:e9:b2:
34:ef:84:22:86:4e:65:6d:33:c1:3e:d0:1b:87:69:
6c:f4:59:ab:7d:5e:93:67:e6:16:52:a0:fa:16:70:
45:d3:53:25:e4:23:48:c2:0f:b8:17:40:e7:2c:7c:
ff:cd:fb:fa:e1:d3:a3:26:f7:47:33:f9:11:30:6b:
8f:bc:5a:81:6c:97:12:c2:a2:4e:70:59:e4:3a:7b:
bb:23:de:99:27:b4:25:86:36:a1:74:dd:bf:2c:ee:
ff:3a:4f:c7:71:92:19:9c:a4:66:b2:38:5c:8a:9f:
cc:2a:e2:17:d5:ff:57:7d:06:30:49:37:bd:0b:79:
00:e5:66:22:b4:82:34:1d:cf:f5:a1:2d:79:8b:f3:
d0:9a:e8:71:84:11:b6:9b:57:3b:62:c3:b8:e2:46:
69:bb:02:1f:73:7c:5b:9a:b3:0f:42:56:a1:70:b5:
bd:0c:54:61:32:fd:80:de:9b:bc:c5:8a:eb:b9:2e:
17:0e:e8:d2:b7:1d:04:99:ab:81:1e:4a:41:56:3e:
d6:9d:3e:d4:ad:f1:50:92:53:6e:46:05:25:c2:a3:
0e:04:f8:14:7b:51:5e:67:67:88:8a:44:60:66:11:
ab:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
10:DF:72:A4:EB:90:61:2A:33:80:7C:5F:86:CA:61:E3:FF:12:74:E0
X509v3 Authority Key Identifier:
keyid:3B:14:62:9C:76:5C:E1:AC:4F:68:89:56:E3:B9:0F:6A:D8:C4:B5:82
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OxRinHZc4axPaIlW47kPatjEtYI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5c/a37f9c-1e6a-4665-a0e2-fe31100d081f/1/OxRinHZc4axPaIlW47kPatjEtYI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5c/a37f9c-1e6a-4665-a0e2-fe31100d081f/1/OxRinHZc4axPaIlW47kPatjEtYI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1a:76:de:87:49:b7:96:58:e2:99:b3:cd:11:83:1f:ad:b4:19:
2a:b3:80:38:ad:4b:a8:51:83:1f:79:f8:11:01:3e:d2:56:1b:
a9:55:83:18:31:1c:14:a0:d7:c1:2b:13:57:fe:91:8d:2c:2e:
32:f6:f4:d5:d3:e3:34:a5:31:f4:07:01:9c:66:95:c9:9f:ff:
b5:01:09:71:1e:40:b0:3c:18:a4:20:cf:80:60:c6:51:2d:b1:
7c:9c:4f:7f:fe:1d:cd:8a:6e:23:08:be:d7:ff:f8:01:0f:e8:
9f:4b:d4:9e:4f:21:4b:a3:78:b1:50:d2:69:99:86:bc:44:a5:
19:d4:79:7d:10:0e:d0:f3:83:c7:fb:bb:f7:7a:a7:79:f7:b0:
e4:85:5d:53:1e:14:f9:3d:40:16:3a:d2:d1:4d:d4:8b:e5:ad:
35:ba:06:2f:d0:cf:e9:d3:39:79:c2:85:86:fc:8c:9e:2a:5e:
f7:6c:a5:9e:59:be:ee:8f:79:1b:b1:03:14:85:cd:a4:93:ee:
47:57:3e:da:10:c0:74:ec:88:2d:47:24:0b:d1:fe:7c:94:60:
77:1d:01:01:cf:1d:8a:ac:08:c1:c0:7a:49:52:51:9d:2e:bb:
fc:f5:af:51:97:78:6a:ac:dc:d7:28:1d:c0:c3:4a:6d:87:59:
43:85:2f:20
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 12 13:46:53 2025 by rpki-client