Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6a/c38797-d7fa-4a57-9f83-a16a34c46f30/1/OIeaeKWKSFzNiXDwQy2489dxcls.mft
File: OIeaeKWKSFzNiXDwQy2489dxcls.mft (raw, json)
Hash identifier: jQqSTKhxG7YA1J/R25WjSx1Skscy2GO51zhaCTxg+hw=
Subject key identifier: 2D:C2:59:6D:96:FB:0C:28:E1:69:7D:60:B0:66:A6:49:D8:42:A7:FC
Authority key identifier: 38:87:9A:78:A5:8A:48:5C:CD:89:70:F0:43:2D:B8:F3:D7:71:72:5B
Certificate issuer: /CN=38879a78a58a485ccd8970f0432db8f3d771725b
Certificate serial: 0196BA1182D0B147430A7812059FA34F1ADA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OIeaeKWKSFzNiXDwQy2489dxcls.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6a/c38797-d7fa-4a57-9f83-a16a34c46f30/1/OIeaeKWKSFzNiXDwQy2489dxcls.mft
Manifest number: 1533
Signing time: Sat 10 May 2025 12:00:31 +0000
Manifest this update: Sat 10 May 2025 12:00:31 +0000
Manifest next update: Sun 11 May 2025 12:00:31 +0000
Files and hashes: 1: OIeaeKWKSFzNiXDwQy2489dxcls.crl (hash: 3J6Auu9LYGUtmJ1IRBWp5VjVPznlW3WI6LOCuLgtszM=)
2: aJF-_eUqR8Yma02F31ybPienJuY.roa (hash: duGwNDtPKrkB5Se3luyctTXBg25/A0K/ZPMK4FyGebo=)
3: xj83lBqnCiYenkchlr_-eEoB-30.roa (hash: rDaj6xDIGI3i5anidMQG7nyOyM3UPZwMFnNZdzH+C5s=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6a/c38797-d7fa-4a57-9f83-a16a34c46f30/1/OIeaeKWKSFzNiXDwQy2489dxcls.crl
rsync://rpki.ripe.net/repository/DEFAULT/6a/c38797-d7fa-4a57-9f83-a16a34c46f30/1/OIeaeKWKSFzNiXDwQy2489dxcls.mft
rsync://rpki.ripe.net/repository/DEFAULT/OIeaeKWKSFzNiXDwQy2489dxcls.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 11 May 2025 12:00:31 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:ba:11:82:d0:b1:47:43:0a:78:12:05:9f:a3:4f:1a:da
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=38879a78a58a485ccd8970f0432db8f3d771725b
Validity
Not Before: May 10 12:00:31 2025 GMT
Not After : May 11 12:00:31 2025 GMT
Subject: CN=2dc2596d96fb0c28e1697d60b066a649d842a7fc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:d8:92:c9:13:83:9f:f1:d7:78:14:f0:4e:2f:
58:31:75:81:22:50:6f:09:89:af:52:6a:74:3e:8c:
26:df:8b:e1:aa:b9:0c:a7:89:a7:74:38:ed:68:ff:
d2:da:80:91:32:83:c0:0f:9d:01:b1:fb:13:3b:f3:
d8:02:60:9e:1c:4d:5a:53:13:3e:11:ad:92:9b:38:
29:15:cb:ad:c2:46:a9:6e:60:d3:96:6a:f5:17:8d:
5f:de:cf:95:8f:49:e2:c5:75:64:56:57:ed:9a:0a:
8a:34:ec:87:14:66:8b:34:c2:47:bc:f0:bf:d2:20:
99:7d:2d:36:87:c3:d3:5b:1e:cb:2f:9d:45:0a:4a:
0b:92:83:b0:2b:f3:95:71:27:65:ed:0d:dc:b6:7f:
c9:f1:9d:c3:3b:21:f7:24:f7:c1:1c:43:66:0c:e5:
56:d9:86:09:55:6d:8b:73:13:05:c2:02:a8:dd:96:
1e:83:e8:bc:33:1a:97:14:1a:0a:1e:2b:2f:80:96:
f6:f7:16:a9:f5:b9:8d:d4:9f:71:2a:9a:00:5e:29:
58:13:1b:14:5e:fa:9f:22:6d:46:fc:04:d5:88:85:
4d:23:2d:aa:34:25:c1:62:e2:d5:30:27:4a:59:9c:
4d:63:3d:b7:c2:5f:46:1d:79:2a:9a:e1:0a:8b:8e:
43:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2D:C2:59:6D:96:FB:0C:28:E1:69:7D:60:B0:66:A6:49:D8:42:A7:FC
X509v3 Authority Key Identifier:
keyid:38:87:9A:78:A5:8A:48:5C:CD:89:70:F0:43:2D:B8:F3:D7:71:72:5B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OIeaeKWKSFzNiXDwQy2489dxcls.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/c38797-d7fa-4a57-9f83-a16a34c46f30/1/OIeaeKWKSFzNiXDwQy2489dxcls.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/c38797-d7fa-4a57-9f83-a16a34c46f30/1/OIeaeKWKSFzNiXDwQy2489dxcls.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
63:95:51:73:94:f6:f6:28:8f:5e:08:dc:91:2f:22:20:89:7e:
58:fd:c0:a5:10:ec:a4:bc:c9:42:c7:af:26:7b:56:5d:e5:3c:
2b:55:9f:43:3d:17:13:01:69:41:b4:e7:a9:ef:84:a8:08:90:
28:db:9b:fb:37:4f:0d:34:fd:be:57:8d:58:da:34:09:49:f4:
5f:51:b2:ef:06:36:c1:08:00:a4:01:b3:66:88:bc:7b:d8:b2:
f0:fa:07:e7:a0:b4:83:f3:7d:1d:ed:13:43:1b:ce:5a:a7:99:
97:fc:58:af:2e:29:47:48:53:5a:51:04:95:3b:47:64:f0:28:
d4:59:ad:e3:61:fc:fd:bc:33:89:79:f4:1d:17:1c:bc:7c:73:
e4:e5:0b:10:0a:e6:46:8f:1a:40:15:d8:d9:7e:87:82:41:57:
68:d4:01:ae:ca:06:43:6c:50:b6:cb:15:1a:f5:0b:99:e3:4d:
c6:ed:4f:23:b5:ca:9a:5d:75:47:70:e8:1f:02:5c:75:cd:68:
79:11:35:d4:87:1d:48:64:ed:a1:49:25:d6:c9:07:d7:9b:3d:
14:b3:73:60:b2:5c:fe:8e:33:1d:44:7a:fa:2a:c9:ce:73:e4:
28:79:bf:0a:0a:00:f4:da:3e:dd:d3:1b:e2:3b:83:fb:c5:49:
4a:d1:42:89
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 10 16:55:42 2025 by rpki-client