Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/93/f6cfd7-a228-4591-9ef5-5f4b87ada4b5/1/oxkPbv156nMz-bzNhaBDUtkVsjk.mft
File: oxkPbv156nMz-bzNhaBDUtkVsjk.mft (raw, json)
Hash identifier: eZwJ1xv8iA/6rZqigGdZLpt8IBEcp07JA0GtAen2QS0=
Subject key identifier: F2:BE:76:9B:22:39:C6:AD:52:49:41:6E:D3:99:05:B4:92:64:29:30
Authority key identifier: A3:19:0F:6E:FD:79:EA:73:33:F9:BC:CD:85:A0:43:52:D9:15:B2:39
Certificate issuer: /CN=a3190f6efd79ea7333f9bccd85a04352d915b239
Certificate serial: 0196C20265CA84E41177192BE4C4FEB0A090
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/oxkPbv156nMz-bzNhaBDUtkVsjk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/93/f6cfd7-a228-4591-9ef5-5f4b87ada4b5/1/oxkPbv156nMz-bzNhaBDUtkVsjk.mft
Manifest number: 1439
Signing time: Mon 12 May 2025 01:00:59 +0000
Manifest this update: Mon 12 May 2025 01:00:59 +0000
Manifest next update: Tue 13 May 2025 01:00:59 +0000
Files and hashes: 1: KExUk0ZqXQL8EgosDUsfpJpTUyg.roa (hash: Sz5tU52c4zqN1bHM/ntPj4qPbpRJB4wKgoKZm0ClNu8=)
2: aIdDcKIPSrdTWAm8Itr83nsLcD0.roa (hash: UkSPTJ6SY0So9wqyoQ355LtxgU1FlK7CRcCejA7q0Vc=)
3: oxkPbv156nMz-bzNhaBDUtkVsjk.crl (hash: OjMOESHdHOc2C0DJOjkRYtOtIoGCeG4oQTlSzUrAQ9I=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/93/f6cfd7-a228-4591-9ef5-5f4b87ada4b5/1/oxkPbv156nMz-bzNhaBDUtkVsjk.crl
rsync://rpki.ripe.net/repository/DEFAULT/93/f6cfd7-a228-4591-9ef5-5f4b87ada4b5/1/oxkPbv156nMz-bzNhaBDUtkVsjk.mft
rsync://rpki.ripe.net/repository/DEFAULT/oxkPbv156nMz-bzNhaBDUtkVsjk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 13 May 2025 01:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:c2:02:65:ca:84:e4:11:77:19:2b:e4:c4:fe:b0:a0:90
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a3190f6efd79ea7333f9bccd85a04352d915b239
Validity
Not Before: May 12 01:00:59 2025 GMT
Not After : May 13 01:00:59 2025 GMT
Subject: CN=f2be769b2239c6ad5249416ed39905b492642930
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:92:cf:eb:db:c2:f9:33:32:06:94:21:4e:3d:ce:
61:e1:e5:5c:96:33:a7:39:10:18:f3:c2:35:78:b9:
0d:b5:aa:2b:98:1a:87:f7:2d:d3:4b:51:f3:06:59:
de:e2:88:10:23:bf:b8:53:9a:b6:d6:e1:73:f5:c0:
5a:4d:75:c4:45:71:bc:55:fc:9e:81:3a:92:52:ee:
2e:2e:49:04:9b:da:d7:c1:d9:de:ec:52:d5:89:04:
88:0f:28:c8:31:30:8f:85:33:9d:a8:52:6e:8f:ae:
c7:cf:53:e3:3b:8f:b7:a8:df:55:0f:2e:3b:74:b5:
85:31:09:de:f4:24:01:2a:1f:02:66:2a:0b:44:d6:
32:27:7d:45:ce:0f:b1:40:01:df:e4:30:0b:83:f5:
f2:3e:17:c0:a0:c3:b0:6e:3c:66:bd:c6:da:28:38:
3c:45:66:b3:13:98:d3:dc:27:88:2c:5a:6d:2f:4b:
70:10:93:21:2c:a8:96:13:e0:28:53:1b:53:0a:8c:
7c:9b:8c:1e:dc:2a:d2:29:0b:f9:0a:94:5c:ac:ee:
c8:93:82:e0:61:08:ee:b7:d0:74:2a:5a:d6:3d:0c:
20:38:4a:8e:7a:36:22:f4:d4:2e:eb:66:72:9e:44:
32:42:71:ca:95:16:80:dc:5e:f0:91:2d:42:8e:90:
e3:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F2:BE:76:9B:22:39:C6:AD:52:49:41:6E:D3:99:05:B4:92:64:29:30
X509v3 Authority Key Identifier:
keyid:A3:19:0F:6E:FD:79:EA:73:33:F9:BC:CD:85:A0:43:52:D9:15:B2:39
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/oxkPbv156nMz-bzNhaBDUtkVsjk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/93/f6cfd7-a228-4591-9ef5-5f4b87ada4b5/1/oxkPbv156nMz-bzNhaBDUtkVsjk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/93/f6cfd7-a228-4591-9ef5-5f4b87ada4b5/1/oxkPbv156nMz-bzNhaBDUtkVsjk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
c2:08:2b:b8:b1:7a:f3:dc:62:8b:6c:3a:ad:3e:ac:17:25:fd:
bd:db:98:c5:6f:49:03:4e:24:1e:74:00:9e:6b:4d:a3:a4:7f:
1a:1a:4c:6b:16:fe:9b:ba:70:fb:3c:d5:97:09:02:d8:54:03:
15:93:0c:c1:a5:43:ce:f2:ce:bd:37:75:72:ab:e0:1a:f3:6f:
92:f8:9c:61:40:28:28:39:a0:c0:5c:2c:c1:41:1e:fa:52:7d:
22:de:1a:68:d3:5a:1d:98:b7:df:e8:5e:3c:d3:d9:db:65:d5:
f4:d3:fa:e8:e3:f4:0a:08:01:aa:25:c5:7e:5c:8e:84:47:71:
f9:d7:d7:20:e7:1a:61:02:48:d8:0d:98:90:c2:c2:3d:03:ec:
35:4b:33:2f:85:12:4f:dc:86:2e:8c:23:e0:95:44:73:44:12:
6a:20:d8:23:40:03:b6:4f:fc:e7:72:ca:9f:83:2d:eb:41:40:
aa:7f:e4:6e:32:92:a1:f4:da:3b:d7:c6:c0:ca:77:8b:60:97:
e6:93:34:3d:3b:bb:d9:18:20:3b:01:53:4a:e5:03:41:e8:9d:
b6:5a:a3:2e:7a:e5:55:02:4c:6e:1b:5b:75:7f:22:55:91:92:
44:49:89:aa:e1:d9:46:6c:84:ac:7a:81:c6:c2:cd:ce:ba:46:
d3:60:0f:0e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 12 05:00:23 2025 by rpki-client