Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/98/4923e9-4764-411c-8596-9f4429f3381e/1/Oc5MCr4nhdRqVXGFIXA3BCO1xZo.mft
File: Oc5MCr4nhdRqVXGFIXA3BCO1xZo.mft (raw, json)
Hash identifier: 1CAB4UB6G3xgDreYpYro9BBkSvAMW873TkvgKp+T7Jk=
Subject key identifier: 32:D3:36:87:14:2E:ED:D3:7D:21:27:A5:2C:4A:D0:BC:DD:2F:E4:E5
Authority key identifier: 39:CE:4C:0A:BE:27:85:D4:6A:55:71:85:21:70:37:04:23:B5:C5:9A
Certificate issuer: /CN=39ce4c0abe2785d46a5571852170370423b5c59a
Certificate serial: 0196B36A6EE33A76E772629D81820AB795E8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Oc5MCr4nhdRqVXGFIXA3BCO1xZo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/98/4923e9-4764-411c-8596-9f4429f3381e/1/Oc5MCr4nhdRqVXGFIXA3BCO1xZo.mft
Manifest number: 0D5D
Signing time: Fri 09 May 2025 05:00:18 +0000
Manifest this update: Fri 09 May 2025 05:00:18 +0000
Manifest next update: Sat 10 May 2025 05:00:18 +0000
Files and hashes: 1: 1C8ZLPGb7cs83tfkfpBebyBiX7w.roa (hash: tZDyBN3FPva2cn/hbdxMAaSyUjVLmEX+ROsYp3y9P/E=)
2: 2V2wgHU2PI3brwoPOMDaDc7IkC4.roa (hash: 5qFS24zNGXVe6S2Vcqz/MzGu4AiLpsxGOww3SFLkJW8=)
3: Oc5MCr4nhdRqVXGFIXA3BCO1xZo.crl (hash: nA/asku0mqhQ+053cH7bDX9OOKqDu5COgdECWi5qeyE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/98/4923e9-4764-411c-8596-9f4429f3381e/1/Oc5MCr4nhdRqVXGFIXA3BCO1xZo.crl
rsync://rpki.ripe.net/repository/DEFAULT/98/4923e9-4764-411c-8596-9f4429f3381e/1/Oc5MCr4nhdRqVXGFIXA3BCO1xZo.mft
rsync://rpki.ripe.net/repository/DEFAULT/Oc5MCr4nhdRqVXGFIXA3BCO1xZo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 10 May 2025 05:00:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:b3:6a:6e:e3:3a:76:e7:72:62:9d:81:82:0a:b7:95:e8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=39ce4c0abe2785d46a5571852170370423b5c59a
Validity
Not Before: May 9 05:00:18 2025 GMT
Not After : May 10 05:00:18 2025 GMT
Subject: CN=32d33687142eedd37d2127a52c4ad0bcdd2fe4e5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:7e:cf:02:68:9f:a1:f6:7a:b1:bf:1a:f0:81:
83:22:7f:10:c0:44:39:3a:49:33:05:7b:ff:d0:0b:
10:a0:be:6b:7a:cd:c1:09:77:2f:96:c8:06:db:32:
48:c8:5b:0a:26:c2:59:21:8b:4b:83:13:6e:c5:51:
eb:06:ed:68:b7:1d:06:af:6d:e5:11:0f:4d:c7:f6:
85:26:38:80:ea:13:3f:81:fa:d6:13:67:e7:dc:80:
6c:ac:c6:e8:58:7b:9d:e9:3c:67:24:3d:18:82:04:
01:b9:78:ce:2e:ba:38:62:a0:2d:a7:26:b3:ed:dd:
95:19:b2:ee:47:08:b7:9d:ab:2b:35:d8:54:1f:96:
ce:b3:6b:0f:c6:df:db:a0:28:68:80:5c:8e:a3:7b:
32:b6:f9:42:31:57:4a:df:4e:3d:66:10:c9:45:aa:
d7:60:63:8d:fb:36:a9:e7:1c:dc:e4:13:e5:ab:83:
b5:3b:3a:3f:6c:48:3c:f4:cf:94:2f:21:91:62:0c:
b3:2d:a3:25:c5:b1:9e:ff:fe:9c:be:9c:8f:46:c5:
31:a9:96:ee:4c:ba:5b:bc:a8:dc:25:d7:d2:d1:25:
57:1f:cb:72:7f:91:b6:50:27:a7:cb:75:df:ef:88:
4e:27:fc:de:50:63:78:af:31:81:b8:ea:44:63:8f:
93:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
32:D3:36:87:14:2E:ED:D3:7D:21:27:A5:2C:4A:D0:BC:DD:2F:E4:E5
X509v3 Authority Key Identifier:
keyid:39:CE:4C:0A:BE:27:85:D4:6A:55:71:85:21:70:37:04:23:B5:C5:9A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Oc5MCr4nhdRqVXGFIXA3BCO1xZo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/98/4923e9-4764-411c-8596-9f4429f3381e/1/Oc5MCr4nhdRqVXGFIXA3BCO1xZo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/98/4923e9-4764-411c-8596-9f4429f3381e/1/Oc5MCr4nhdRqVXGFIXA3BCO1xZo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
34:bc:a8:da:6c:91:55:5c:95:65:72:a7:09:a2:07:03:cb:fa:
53:92:57:a4:04:01:e2:b3:50:4c:20:ce:88:d8:f5:e6:d4:11:
60:e0:46:fa:2a:1f:81:aa:55:5b:0e:96:e2:d1:d3:b8:02:dd:
57:72:e6:f9:cc:8f:e7:a2:de:0c:70:88:d5:36:0e:b3:ac:fd:
e7:9f:b0:75:91:ca:25:ca:5a:ee:17:ea:38:cd:10:ed:63:c7:
b5:7a:4d:2a:cf:27:30:7c:fa:26:7b:ce:21:aa:03:2c:bf:57:
bb:9a:36:51:84:25:00:c6:90:35:cf:d1:40:da:e7:f8:76:1d:
99:60:5f:64:84:8e:ac:c3:a6:81:96:cb:9e:a3:9d:f0:46:15:
27:bb:57:6f:6c:ec:a7:14:a7:f6:0c:38:fb:6e:89:3e:32:82:
e2:de:38:39:3b:e7:e2:c3:06:fc:33:6c:65:ea:dc:23:54:74:
88:a0:c8:d6:81:5e:cb:55:04:11:dc:cd:ea:f0:df:ff:a6:bd:
a8:d5:03:70:39:e8:1f:f6:c9:2d:91:4d:46:0f:d9:d0:5f:4d:
de:46:e3:d8:0f:11:86:3d:89:98:9f:7a:b8:18:3c:56:5f:d2:
af:42:5f:2b:32:3b:32:82:9e:ce:9e:31:85:53:ea:e6:00:dd:
2a:9a:58:3b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 9 12:00:19 2025 by rpki-client