Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9c/71a97c-35f4-4f21-a43a-7396e42b1830/1/oY8C1evJ6LlSGvcTKxLLa7ZWk8Y.mft
File: oY8C1evJ6LlSGvcTKxLLa7ZWk8Y.mft (raw, json)
Hash identifier: umv3/uMtDdXX3egu+g7hbb6Xo1rS8dFfQsJ83xHzwOo=
Subject key identifier: 0C:4B:9A:00:44:B0:8E:B5:74:95:8C:28:E0:D8:18:A1:B8:A5:9C:D6
Authority key identifier: A1:8F:02:D5:EB:C9:E8:B9:52:1A:F7:13:2B:12:CB:6B:B6:56:93:C6
Certificate issuer: /CN=a18f02d5ebc9e8b9521af7132b12cb6bb65693c6
Certificate serial: 0196CC17B518AAF1FFF846D15027FCEEF486
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/oY8C1evJ6LlSGvcTKxLLa7ZWk8Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9c/71a97c-35f4-4f21-a43a-7396e42b1830/1/oY8C1evJ6LlSGvcTKxLLa7ZWk8Y.mft
Manifest number: 14
Signing time: Wed 14 May 2025 00:00:27 +0000
Manifest this update: Wed 14 May 2025 00:00:27 +0000
Manifest next update: Thu 15 May 2025 00:00:27 +0000
Files and hashes: 1: WcOI3xTree4feiB1aUEElS0psWg.roa (hash: aiHJErdFTntBFa2VGlw5qxOEBnPaXQitP2e0+IPbQn4=)
2: oY8C1evJ6LlSGvcTKxLLa7ZWk8Y.crl (hash: gKs4PTCZgNOU/fxy8f8PTvDkcyzv/YURVp5JQouPDvA=)
3: rJhQc64vZyQK9s6luNANsgKcie4.roa (hash: Wbhd0vQIHlwhZqfDUEHqh+EPALpqB/xJq31v2DZm/Wc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9c/71a97c-35f4-4f21-a43a-7396e42b1830/1/oY8C1evJ6LlSGvcTKxLLa7ZWk8Y.crl
rsync://rpki.ripe.net/repository/DEFAULT/9c/71a97c-35f4-4f21-a43a-7396e42b1830/1/oY8C1evJ6LlSGvcTKxLLa7ZWk8Y.mft
rsync://rpki.ripe.net/repository/DEFAULT/oY8C1evJ6LlSGvcTKxLLa7ZWk8Y.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 14 May 2025 22:19:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:cc:17:b5:18:aa:f1:ff:f8:46:d1:50:27:fc:ee:f4:86
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a18f02d5ebc9e8b9521af7132b12cb6bb65693c6
Validity
Not Before: May 14 00:00:27 2025 GMT
Not After : May 15 00:00:27 2025 GMT
Subject: CN=0c4b9a0044b08eb574958c28e0d818a1b8a59cd6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f7:cc:af:78:79:c6:8d:7a:fe:8c:b1:e4:e5:6f:
ec:ef:fb:8a:82:51:bd:d6:f3:09:5a:22:0f:05:3f:
ef:95:98:03:af:f5:33:2d:c8:fd:2e:9c:13:b7:4f:
8e:7b:2f:03:03:aa:05:8c:6f:0f:8c:a4:6d:87:a3:
07:a4:68:2a:4f:f3:38:fb:0c:b0:cc:46:c9:6c:46:
5f:96:e1:e0:ff:0f:a4:e5:76:34:7b:5e:00:2b:e0:
6a:93:d7:b9:f0:ae:21:60:df:eb:06:50:6e:9c:b1:
5d:51:2d:95:de:5c:e6:28:40:71:9a:95:ef:cb:c6:
32:cf:85:9f:9e:73:aa:7d:4c:80:ef:d7:7d:da:4a:
38:c2:46:c0:ba:b4:fe:4e:9f:7f:5a:58:3b:f8:71:
d1:79:20:ad:c8:34:7f:96:c2:ec:8c:6d:16:67:ed:
a1:db:13:73:16:2c:0b:66:2d:f7:8f:c5:d7:cc:71:
c4:fb:0a:ba:87:65:d2:f2:58:a1:3f:54:73:aa:4f:
21:c7:f2:39:e2:16:05:74:b4:40:a4:d2:09:df:f5:
72:5a:9a:ae:bf:fb:c8:27:e4:b2:32:12:6f:67:bb:
1d:dc:6b:ae:cf:49:2f:66:3c:96:e8:67:3d:59:13:
9f:d6:54:05:54:cd:cf:96:da:a8:b2:b9:ff:45:ff:
15:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0C:4B:9A:00:44:B0:8E:B5:74:95:8C:28:E0:D8:18:A1:B8:A5:9C:D6
X509v3 Authority Key Identifier:
keyid:A1:8F:02:D5:EB:C9:E8:B9:52:1A:F7:13:2B:12:CB:6B:B6:56:93:C6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/oY8C1evJ6LlSGvcTKxLLa7ZWk8Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9c/71a97c-35f4-4f21-a43a-7396e42b1830/1/oY8C1evJ6LlSGvcTKxLLa7ZWk8Y.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9c/71a97c-35f4-4f21-a43a-7396e42b1830/1/oY8C1evJ6LlSGvcTKxLLa7ZWk8Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
95:93:9b:57:f4:2a:df:64:0d:a5:d9:83:28:cf:75:a0:11:e5:
9b:ab:55:f6:84:84:57:54:6a:d8:91:cf:66:96:d2:b9:97:49:
fa:72:2e:4d:72:eb:ae:fa:64:44:ce:08:9d:50:9f:4e:b5:cf:
0c:91:cc:d4:e7:18:fe:d3:fa:16:b2:fa:cd:90:ad:79:36:35:
c0:c4:2e:a5:d3:cb:76:25:e4:76:18:83:6c:bf:96:ec:35:63:
b2:1e:ad:58:a3:5a:d0:eb:02:8a:ef:bb:a9:f4:2b:1c:23:7d:
07:36:97:85:48:f4:78:b6:7f:9d:51:72:72:aa:44:4c:b7:35:
17:0b:77:68:90:1d:af:a9:d3:0c:6c:f8:cb:0a:3e:ed:d4:64:
1a:e3:28:04:4e:e3:c0:64:90:07:8d:11:ec:b4:48:c1:89:ae:
0a:eb:d2:ec:9b:bc:22:20:a6:20:6e:fc:eb:e7:9b:ca:64:3a:
93:91:ff:9a:d5:29:f5:87:0e:1f:2c:14:2f:88:ab:82:4b:8e:
6c:7a:3c:11:eb:db:d7:c1:36:50:32:f0:df:52:15:2c:2a:d4:
3a:03:12:c6:ec:b0:93:14:2e:06:2d:e5:0c:5c:ad:7e:7d:a7:
5b:4f:7e:28:31:23:f7:f8:14:94:99:7a:aa:d4:b0:af:3c:a5:
08:36:8f:02
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 14 05:39:17 2025 by rpki-client