Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8d/94a6b8-39d3-4f79-ae25-a95511ba4d46/1/OAgwRPtsQ7_61f1UsH0sx8ANG9M.mft
File: OAgwRPtsQ7_61f1UsH0sx8ANG9M.mft (raw, json)
Hash identifier: iMqay9/LX6AHRtMm5uJLDmHCyXc9QttESSyPIb2UJ5M=
Subject key identifier: 4D:69:2A:54:C1:D6:9A:79:D7:6F:73:90:01:B7:5E:6E:68:52:D0:B4
Authority key identifier: 38:08:30:44:FB:6C:43:BF:FA:D5:FD:54:B0:7D:2C:C7:C0:0D:1B:D3
Certificate issuer: /CN=38083044fb6c43bffad5fd54b07d2cc7c00d1bd3
Certificate serial: 01969E9A43C9DB133B1B51B32E7198751963
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OAgwRPtsQ7_61f1UsH0sx8ANG9M.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8d/94a6b8-39d3-4f79-ae25-a95511ba4d46/1/OAgwRPtsQ7_61f1UsH0sx8ANG9M.mft
Manifest number: 059B
Signing time: Mon 05 May 2025 04:00:32 +0000
Manifest this update: Mon 05 May 2025 04:00:32 +0000
Manifest next update: Tue 06 May 2025 04:00:32 +0000
Files and hashes: 1: 96NgLEHRtKxUiimE9cBg6xhscpQ.roa (hash: mk1oEXhjeJbAg6bVncPiZm7XaZ/iA+I0QEGuQUH1ZeM=)
2: OAgwRPtsQ7_61f1UsH0sx8ANG9M.crl (hash: MurLv1I3YtOv/f/d9MQFpgIVl2v3psQYKitA9lRn7bY=)
3: auApMcvT0ghtABN_47-F8XLxrNw.roa (hash: XofAinsDeuW+LGI1qiG7UWKXoZIw8N+n+gNQOT5w3Kk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8d/94a6b8-39d3-4f79-ae25-a95511ba4d46/1/OAgwRPtsQ7_61f1UsH0sx8ANG9M.crl
rsync://rpki.ripe.net/repository/DEFAULT/8d/94a6b8-39d3-4f79-ae25-a95511ba4d46/1/OAgwRPtsQ7_61f1UsH0sx8ANG9M.mft
rsync://rpki.ripe.net/repository/DEFAULT/OAgwRPtsQ7_61f1UsH0sx8ANG9M.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 06 May 2025 04:00:32 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:9e:9a:43:c9:db:13:3b:1b:51:b3:2e:71:98:75:19:63
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=38083044fb6c43bffad5fd54b07d2cc7c00d1bd3
Validity
Not Before: May 5 04:00:32 2025 GMT
Not After : May 6 04:00:32 2025 GMT
Subject: CN=4d692a54c1d69a79d76f739001b75e6e6852d0b4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:60:bb:77:07:50:c8:8d:4d:38:a1:f2:6a:be:
a3:46:0e:df:ee:e0:7f:d5:18:11:d2:35:cb:8c:c1:
f6:75:34:b5:2c:c1:8e:9c:1a:56:4e:18:46:2f:45:
77:03:3a:91:1c:24:65:d3:71:3c:a5:e0:a1:cc:bd:
a3:b1:5a:b5:b7:5a:ee:0f:cc:1e:bf:af:bd:ec:1a:
2c:6b:6f:60:24:d0:48:aa:12:61:0c:99:b5:24:39:
9a:9e:90:55:0e:b9:64:21:45:2a:7b:e1:4e:67:63:
1c:f4:4f:8d:6e:53:4f:f9:39:80:eb:3f:2a:69:ea:
cf:82:26:30:2d:6b:10:f5:b3:c2:7c:6c:d8:5d:f8:
1a:dd:7b:6f:7c:71:0f:d8:75:78:ef:69:b0:bf:01:
37:59:80:03:a7:40:f8:35:20:f5:68:62:a8:d7:2e:
27:0f:4c:5e:c2:36:21:ae:da:c7:7a:e3:e9:8d:72:
a2:da:99:9b:f2:91:83:c1:52:39:69:e1:f0:4f:6a:
4b:0d:70:de:69:ee:55:a1:87:bd:e4:e6:8c:c2:d3:
d3:aa:d3:ad:3b:10:ba:3f:63:ed:9f:ae:94:ce:fb:
83:aa:de:c6:52:0a:5e:80:6d:da:68:f2:a5:8c:6a:
a7:73:a7:37:8b:7f:19:b3:7e:c0:d6:2c:69:32:b7:
04:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4D:69:2A:54:C1:D6:9A:79:D7:6F:73:90:01:B7:5E:6E:68:52:D0:B4
X509v3 Authority Key Identifier:
keyid:38:08:30:44:FB:6C:43:BF:FA:D5:FD:54:B0:7D:2C:C7:C0:0D:1B:D3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OAgwRPtsQ7_61f1UsH0sx8ANG9M.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8d/94a6b8-39d3-4f79-ae25-a95511ba4d46/1/OAgwRPtsQ7_61f1UsH0sx8ANG9M.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8d/94a6b8-39d3-4f79-ae25-a95511ba4d46/1/OAgwRPtsQ7_61f1UsH0sx8ANG9M.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
17:88:e6:6d:7f:33:f4:02:d6:07:22:b5:d6:7c:d5:32:cf:dd:
9d:71:2e:1b:06:8b:f4:9a:56:40:69:47:46:9e:d9:f5:d8:cf:
c5:f4:ec:38:44:af:f1:a5:3e:b5:40:14:3b:8f:95:11:84:07:
53:b1:8e:4a:0b:9e:e1:b8:72:61:17:53:7a:7a:bf:25:ee:ec:
99:85:7b:b5:56:46:45:52:ab:c8:c9:e6:6f:0a:c2:bb:4a:66:
ee:4d:74:41:e9:bb:2a:29:e9:2f:20:1f:8b:78:75:b3:af:8b:
19:31:6b:f2:52:4c:36:aa:bd:a9:67:6d:f7:9e:13:64:b6:cc:
d4:3c:22:3e:93:38:bb:b0:1f:41:f8:2b:05:af:bf:86:7b:5c:
9d:22:55:86:c0:17:c3:35:58:28:15:7d:4c:70:1b:52:e0:e4:
c8:ee:b1:73:74:0c:cc:1a:03:5d:0c:b3:43:2f:03:43:ec:6c:
ff:25:8c:ef:c5:88:e0:7d:31:e4:49:47:2b:ea:be:c2:4c:4c:
5b:20:d6:51:43:52:eb:2d:d0:2e:a3:38:36:29:96:28:82:14:
84:8b:a0:54:0f:10:e1:e0:27:05:08:e8:db:e7:e1:6f:a7:72:
ac:5f:60:be:8a:d5:0e:19:60:19:5c:25:a8:d7:fa:c1:fb:95:
ed:9c:02:fd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 5 14:19:18 2025 by rpki-client