Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/86/dea149-4fb8-4978-a46b-33985db8047a/1/okz5AynEe6NDpmzWXTiDOjV7WVU.mft
File: okz5AynEe6NDpmzWXTiDOjV7WVU.mft (raw, json)
Hash identifier: ncEt0D+STuVT9zZFaKZed29ovQz/1IHHrK9rAp9tJoM=
Subject key identifier: E0:4B:BB:C0:3B:66:D4:1A:95:56:D3:73:7E:5B:CC:55:FE:15:6A:8B
Authority key identifier: A2:4C:F9:03:29:C4:7B:A3:43:A6:6C:D6:5D:38:83:3A:35:7B:59:55
Certificate issuer: /CN=a24cf90329c47ba343a66cd65d38833a357b5955
Certificate serial: 0196C12605AB5B267EF033EDCB23B929DD3D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/okz5AynEe6NDpmzWXTiDOjV7WVU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/86/dea149-4fb8-4978-a46b-33985db8047a/1/okz5AynEe6NDpmzWXTiDOjV7WVU.mft
Manifest number: 1539
Signing time: Sun 11 May 2025 21:00:16 +0000
Manifest this update: Sun 11 May 2025 21:00:16 +0000
Manifest next update: Mon 12 May 2025 21:00:16 +0000
Files and hashes: 1: L_hJzZcxwJZunjzxLQL-YVG1jT0.roa (hash: /H7f2gZdXTvhI8V5NwcetnxeXbpLznW3EXechuUQFz0=)
2: RwOt6V2v9wJzu17DXTZnu1cti-k.roa (hash: pKpNRVrX80xh9DAepdCWEqDAUnRd1u2Llc+QIfnWV/Q=)
3: okz5AynEe6NDpmzWXTiDOjV7WVU.crl (hash: GGtg5HKY7/n6ay1pVWySKueME612vn/1SsPu3r0XuKc=)
4: tDQAlIS1RkP7Hll5jY6GwoLQRHA.roa (hash: ZBp1qrqjsUhmRr1QqJR4LsXUqiXorK/xdRoQ9NS8bh8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/86/dea149-4fb8-4978-a46b-33985db8047a/1/okz5AynEe6NDpmzWXTiDOjV7WVU.crl
rsync://rpki.ripe.net/repository/DEFAULT/86/dea149-4fb8-4978-a46b-33985db8047a/1/okz5AynEe6NDpmzWXTiDOjV7WVU.mft
rsync://rpki.ripe.net/repository/DEFAULT/okz5AynEe6NDpmzWXTiDOjV7WVU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 12 May 2025 21:00:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:c1:26:05:ab:5b:26:7e:f0:33:ed:cb:23:b9:29:dd:3d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a24cf90329c47ba343a66cd65d38833a357b5955
Validity
Not Before: May 11 21:00:16 2025 GMT
Not After : May 12 21:00:16 2025 GMT
Subject: CN=e04bbbc03b66d41a9556d3737e5bcc55fe156a8b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:7e:f5:dc:b3:6b:df:d8:5e:d9:4a:84:2f:92:
9a:12:c7:fa:62:69:f6:4a:c9:46:cf:68:4e:d0:b7:
cf:6b:f2:15:ce:65:7c:d2:5f:94:be:48:9f:08:97:
ae:0a:af:a0:c4:21:1b:34:5d:9e:4b:a9:7e:88:03:
f6:67:a9:09:77:4b:7b:bd:da:eb:93:16:5c:fa:14:
95:e3:3b:04:ab:2d:26:e8:b3:f6:1d:2c:a6:fc:86:
c6:85:1b:3b:ca:ed:21:bf:5f:9e:2c:52:c2:5b:99:
7d:1f:71:5c:3f:5f:dd:af:0b:ea:cb:af:2f:a2:fd:
fa:1f:37:2a:6a:ec:b2:19:fc:1d:b9:1a:4d:bb:d0:
1e:c7:60:e2:65:2e:ad:b3:fe:85:0b:9b:b5:ff:d1:
16:49:27:c2:20:23:18:6b:5e:56:f3:8e:4f:7a:10:
5a:b2:ff:6c:84:15:8d:45:36:65:95:b2:9a:0f:dc:
52:3e:ac:05:10:35:09:c3:c1:a7:8a:f2:50:94:c4:
76:4d:71:fb:84:ad:4d:29:12:4f:89:d7:55:66:a8:
5a:f6:c7:3a:e7:55:7f:e1:bd:12:8f:ea:34:dd:5e:
41:50:d2:4c:36:b8:27:e4:37:68:4c:e8:c3:62:3a:
77:14:6e:eb:fd:6e:ff:70:c4:34:3d:1c:4f:1b:ef:
9c:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E0:4B:BB:C0:3B:66:D4:1A:95:56:D3:73:7E:5B:CC:55:FE:15:6A:8B
X509v3 Authority Key Identifier:
keyid:A2:4C:F9:03:29:C4:7B:A3:43:A6:6C:D6:5D:38:83:3A:35:7B:59:55
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/okz5AynEe6NDpmzWXTiDOjV7WVU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/86/dea149-4fb8-4978-a46b-33985db8047a/1/okz5AynEe6NDpmzWXTiDOjV7WVU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/86/dea149-4fb8-4978-a46b-33985db8047a/1/okz5AynEe6NDpmzWXTiDOjV7WVU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7b:aa:17:e9:6a:98:42:5c:c4:50:0a:20:d9:83:68:7f:74:3b:
3d:6c:e8:c9:66:5a:c5:ed:39:6f:ad:6e:3d:89:1d:2a:6f:4e:
d9:7f:cf:eb:d9:25:b1:85:88:aa:0e:a8:ff:fa:bb:11:b2:7c:
92:70:10:1f:8b:71:e2:1d:41:d7:ea:bc:30:64:39:06:21:26:
e0:c1:98:ed:0e:73:51:75:bf:31:de:5c:40:d9:66:78:85:ce:
ea:78:b8:6e:1a:67:39:2d:15:62:fa:1f:a1:69:59:25:d2:fc:
1c:ed:a3:cc:2d:ef:0d:33:0e:44:b0:9f:63:fd:10:97:7d:93:
53:b2:05:da:54:ec:46:67:70:9d:f6:0c:65:b6:cd:06:9a:31:
49:6d:a8:96:7f:59:0a:f2:46:97:fb:bc:14:e9:26:33:21:e7:
98:43:26:8e:48:34:bc:f4:8c:dd:96:30:f7:88:7c:a0:da:7a:
68:db:29:bc:ac:23:be:09:c1:72:2d:a3:0f:f8:55:14:cb:9a:
cb:af:59:c8:22:bd:55:19:93:b3:ab:d9:ec:1d:3f:ba:69:2f:
40:67:fe:f8:10:85:97:4d:23:50:14:84:bd:59:cc:b7:2b:b5:
49:54:e1:3a:f6:25:5f:32:95:0a:37:7d:7a:b6:fa:91:cd:a6:
49:18:08:ae
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 12 06:59:41 2025 by rpki-client