Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6c/51a60c-cf63-443d-9e02-04dd56f70fe3/1/Oeh-8DzxcaQLor7InmiLudOCWHM.mft
File: Oeh-8DzxcaQLor7InmiLudOCWHM.mft (raw, json)
Hash identifier: h+yupsKJLXAxZbFrzSQdQikELovO9Z5UmZENcA0W3hw=
Subject key identifier: 2F:94:CE:63:FB:4C:EE:23:F5:D3:F2:53:3A:5F:E3:12:43:1F:03:D1
Authority key identifier: 39:E8:7E:F0:3C:F1:71:A4:0B:A2:BE:C8:9E:68:8B:B9:D3:82:58:73
Certificate issuer: /CN=39e87ef03cf171a40ba2bec89e688bb9d3825873
Certificate serial: 0196A2ADA4B5288C939474165490B64D9407
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Oeh-8DzxcaQLor7InmiLudOCWHM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6c/51a60c-cf63-443d-9e02-04dd56f70fe3/1/Oeh-8DzxcaQLor7InmiLudOCWHM.mft
Manifest number: 1524
Signing time: Mon 05 May 2025 23:00:10 +0000
Manifest this update: Mon 05 May 2025 23:00:10 +0000
Manifest next update: Tue 06 May 2025 23:00:10 +0000
Files and hashes: 1: Oeh-8DzxcaQLor7InmiLudOCWHM.crl (hash: FGZxQ4t6P+e0q7xNUOXw6KTCflJa2DG9HwQsqnX8SZY=)
2: n5SYr_9AWl7ry045zaGcqL0nDKk.roa (hash: T+InoEanLxjmmolVeMM0w1zQ5q4vdK0ebBhDTbrVjAU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6c/51a60c-cf63-443d-9e02-04dd56f70fe3/1/Oeh-8DzxcaQLor7InmiLudOCWHM.crl
rsync://rpki.ripe.net/repository/DEFAULT/6c/51a60c-cf63-443d-9e02-04dd56f70fe3/1/Oeh-8DzxcaQLor7InmiLudOCWHM.mft
rsync://rpki.ripe.net/repository/DEFAULT/Oeh-8DzxcaQLor7InmiLudOCWHM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 06 May 2025 23:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:a2:ad:a4:b5:28:8c:93:94:74:16:54:90:b6:4d:94:07
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=39e87ef03cf171a40ba2bec89e688bb9d3825873
Validity
Not Before: May 5 23:00:10 2025 GMT
Not After : May 6 23:00:10 2025 GMT
Subject: CN=2f94ce63fb4cee23f5d3f2533a5fe312431f03d1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:f1:0f:02:67:87:2f:28:19:cd:04:d6:03:76:
cf:31:fe:2a:e8:29:f9:7c:7f:d8:f5:dc:0e:27:cd:
84:ed:4a:f2:98:b8:3b:fd:16:f4:25:83:e2:3d:e3:
27:c1:e9:ea:7f:12:d0:6d:6f:79:29:46:ac:7e:9a:
62:2b:98:4f:a4:71:6a:c8:da:68:a1:e1:23:b0:9b:
e6:4f:9f:80:15:25:5c:4e:1c:70:af:44:ff:fc:89:
cf:96:35:c6:8c:05:49:be:60:5a:57:43:a9:78:5d:
be:15:a3:72:dc:49:c7:e5:93:bb:87:48:51:57:e6:
54:73:c6:f3:be:90:b6:26:3d:9e:60:8e:1e:d1:83:
14:af:fa:16:5e:66:9c:da:80:fa:76:d1:3c:b8:ce:
b6:a9:74:c6:bc:62:f9:f5:92:2f:b5:b5:72:e3:39:
87:07:03:43:6d:1a:ff:b7:50:97:e8:79:51:84:26:
d8:5c:54:8f:58:cf:4a:b7:77:0f:d0:f1:0c:79:5f:
d9:18:59:bc:ad:b6:a4:7c:d0:01:c9:ed:3d:f4:c6:
9c:02:cd:0d:73:7c:40:57:e9:0d:a4:af:62:51:9f:
8b:45:c6:c8:7c:1b:fc:49:82:9d:79:1b:e7:46:e0:
f7:32:a8:7b:6b:1e:ac:1b:2d:e0:33:b9:f8:c2:53:
39:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2F:94:CE:63:FB:4C:EE:23:F5:D3:F2:53:3A:5F:E3:12:43:1F:03:D1
X509v3 Authority Key Identifier:
keyid:39:E8:7E:F0:3C:F1:71:A4:0B:A2:BE:C8:9E:68:8B:B9:D3:82:58:73
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Oeh-8DzxcaQLor7InmiLudOCWHM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6c/51a60c-cf63-443d-9e02-04dd56f70fe3/1/Oeh-8DzxcaQLor7InmiLudOCWHM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6c/51a60c-cf63-443d-9e02-04dd56f70fe3/1/Oeh-8DzxcaQLor7InmiLudOCWHM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
77:75:ec:4e:b4:7c:13:c1:31:65:c8:e8:ce:ad:40:a5:e6:31:
55:29:4c:01:e4:29:db:13:9e:a0:33:b1:55:65:9c:9d:d9:56:
2b:fc:13:b9:fb:e6:88:16:12:ab:76:56:aa:fb:89:c5:e4:42:
de:26:6a:d3:ab:e6:e6:c1:7f:2d:83:6e:8e:6a:44:80:48:93:
2f:95:27:56:a2:9e:77:15:f2:5e:54:fc:c6:5e:6e:b5:8b:6c:
6f:1e:7e:32:e5:96:08:89:ae:fe:74:8d:87:a3:06:6f:45:08:
d5:72:4f:7a:f7:51:fa:0d:2a:2c:56:1e:1b:49:ca:61:cb:ea:
0a:4a:40:2a:b6:2b:31:eb:c8:c0:0d:42:73:7c:2f:f8:a8:9d:
63:b2:95:cb:d6:b9:91:c3:54:d7:55:ae:15:49:fd:d8:ea:64:
ba:5d:7a:29:fc:38:5a:e7:92:50:5c:24:28:a8:c6:7b:1c:b5:
78:7f:9a:b8:a6:82:dd:0c:c5:3f:c9:63:19:f9:62:6b:a9:1d:
69:04:e9:7f:3e:7c:5b:07:7f:bf:7c:fd:19:1c:0e:f5:00:4e:
5e:52:cc:c7:74:16:31:ac:04:11:b4:68:76:6e:65:f9:e9:41:
5a:45:67:36:7f:cd:e1:ea:e4:31:2c:91:0f:d2:a3:f8:ce:13:
b3:75:ec:a3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 6 06:38:19 2025 by rpki-client