Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a6/76b1d3-4fd9-46cf-83e6-20c4dc1e4a77/1/mOszws77XaNGB7ALUAXkS3VSSh8.mft
File: mOszws77XaNGB7ALUAXkS3VSSh8.mft (raw, json)
Hash identifier: VAOYyP82VZVdS7MRFJInIT8TL3jBd2U9NWPIRuaFqNA=
Subject key identifier: 7A:67:BC:0C:E3:85:96:D4:BD:88:29:CB:38:68:99:7B:E9:E7:4E:3B
Authority key identifier: 98:EB:33:C2:CE:FB:5D:A3:46:07:B0:0B:50:05:E4:4B:75:52:4A:1F
Certificate issuer: /CN=98eb33c2cefb5da34607b00b5005e44b75524a1f
Certificate serial: 0196BB2444C0449BBC58183DCBA9B7C0E414
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mOszws77XaNGB7ALUAXkS3VSSh8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a6/76b1d3-4fd9-46cf-83e6-20c4dc1e4a77/1/mOszws77XaNGB7ALUAXkS3VSSh8.mft
Manifest number: 0DCE
Signing time: Sat 10 May 2025 17:00:38 +0000
Manifest this update: Sat 10 May 2025 17:00:38 +0000
Manifest next update: Sun 11 May 2025 17:00:38 +0000
Files and hashes: 1: FGRnxc9C3d9faJa4e9X6S4cHjFA.roa (hash: d5SgFAeT21YMWMJqdCASd/9NKR53dDrqmG/NUaV6X8s=)
2: mOszws77XaNGB7ALUAXkS3VSSh8.crl (hash: uSTeJ4w/E79vthbHwD+SalhbIfvIfWIjL7Y8XPUxUj8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a6/76b1d3-4fd9-46cf-83e6-20c4dc1e4a77/1/mOszws77XaNGB7ALUAXkS3VSSh8.crl
rsync://rpki.ripe.net/repository/DEFAULT/a6/76b1d3-4fd9-46cf-83e6-20c4dc1e4a77/1/mOszws77XaNGB7ALUAXkS3VSSh8.mft
rsync://rpki.ripe.net/repository/DEFAULT/mOszws77XaNGB7ALUAXkS3VSSh8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 11 May 2025 17:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:bb:24:44:c0:44:9b:bc:58:18:3d:cb:a9:b7:c0:e4:14
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=98eb33c2cefb5da34607b00b5005e44b75524a1f
Validity
Not Before: May 10 17:00:38 2025 GMT
Not After : May 11 17:00:38 2025 GMT
Subject: CN=7a67bc0ce38596d4bd8829cb3868997be9e74e3b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:60:a8:5f:df:ef:b0:94:6a:30:e5:b9:92:66:
e8:43:2c:dd:eb:fb:22:02:75:c3:45:c1:ad:fc:ed:
54:41:28:7c:fa:09:ec:c4:d4:23:5c:59:b6:01:71:
a0:88:f7:ad:66:ac:36:46:9a:01:7d:64:b2:fb:2c:
7b:d0:8b:c2:44:d5:7c:9d:df:48:44:cd:b1:8d:31:
40:55:4e:cd:55:e6:29:d6:8e:97:ab:58:74:f4:9f:
56:6a:38:40:17:c1:25:e9:36:66:d9:ff:b8:6c:30:
fb:b2:e9:a4:7d:80:1e:f9:cb:a2:f7:47:8e:d3:ad:
99:c2:ac:51:2f:51:a8:6b:8b:2c:29:17:5e:74:6f:
10:23:72:de:40:a2:15:b8:41:60:37:17:32:ce:4a:
42:22:c9:e6:f8:78:57:43:e3:f6:d4:27:87:3f:44:
90:0b:51:87:a1:da:9f:cd:ad:06:59:dd:60:29:23:
0a:c1:e5:ea:9f:50:3c:d4:e0:e0:ab:c5:ba:bf:b3:
83:f1:9a:74:f9:41:35:42:82:54:4d:25:3f:b2:f2:
3a:c4:d1:a7:d4:0b:a7:62:86:80:81:6d:10:55:2c:
7e:36:82:85:fa:fc:11:0c:5b:b9:e7:e1:50:bd:6b:
1d:75:14:e3:53:3c:10:eb:ab:50:68:33:e3:1a:43:
51:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7A:67:BC:0C:E3:85:96:D4:BD:88:29:CB:38:68:99:7B:E9:E7:4E:3B
X509v3 Authority Key Identifier:
keyid:98:EB:33:C2:CE:FB:5D:A3:46:07:B0:0B:50:05:E4:4B:75:52:4A:1F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mOszws77XaNGB7ALUAXkS3VSSh8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a6/76b1d3-4fd9-46cf-83e6-20c4dc1e4a77/1/mOszws77XaNGB7ALUAXkS3VSSh8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a6/76b1d3-4fd9-46cf-83e6-20c4dc1e4a77/1/mOszws77XaNGB7ALUAXkS3VSSh8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
48:b1:90:f0:07:73:3e:a3:2e:da:92:d9:78:c0:4c:27:39:02:
d4:0d:75:8c:d1:6c:fa:79:0d:19:ac:2b:37:88:4d:54:16:e1:
16:d0:75:33:ec:7f:33:55:46:b3:b8:fb:f3:3c:a7:1a:cb:05:
b5:e6:5f:c4:32:7e:6a:4c:ec:b3:91:f7:74:c8:da:82:5f:40:
49:ce:3a:62:0e:14:44:c5:a8:d9:8a:3c:40:5d:1f:4d:ca:b3:
0a:92:a9:3a:c2:00:19:60:66:57:5d:b1:8a:ab:e2:a6:83:17:
a2:85:2c:b7:4a:d0:0b:a6:1f:b4:cb:2c:b2:5f:ab:dc:9a:f2:
a5:7a:42:10:ee:da:b2:99:4e:a5:54:d7:5e:68:35:ba:4f:18:
b0:bc:f7:4f:29:84:84:3a:49:db:d1:d3:cd:58:0c:46:24:e1:
4a:b1:c1:05:56:ed:1a:b1:36:f8:ab:c4:79:f5:be:29:9b:a3:
82:08:ab:84:52:11:f1:91:8c:c0:3d:6c:a4:91:a1:26:f6:37:
69:2d:30:e3:6a:16:f1:c4:e5:08:71:e3:74:c7:52:ce:ad:6e:
f0:c8:cc:f1:d0:1a:35:ed:43:ad:b1:a9:e8:b9:47:e1:e5:c6:
3d:16:c1:9a:c2:13:87:bf:90:f4:37:49:62:50:92:e0:d8:73:
ab:bb:24:2f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 11 02:00:13 2025 by rpki-client