Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ac/a214a5-4449-44af-87ff-c967c9db5752/1/e_OebrMTHs883c0MnjeMNS2kH8I.mft
File: e_OebrMTHs883c0MnjeMNS2kH8I.mft (raw, json)
Hash identifier: xLShIgJkP1Io8kah8jojPYmtC73hmTz8SUMCNRVVF+8=
Subject key identifier: 43:A2:31:C2:EF:40:4A:C1:72:C0:A0:7E:87:2A:FD:A0:90:55:2B:E4
Authority key identifier: 7B:F3:9E:6E:B3:13:1E:CF:3C:DD:CD:0C:9E:37:8C:35:2D:A4:1F:C2
Certificate issuer: /CN=7bf39e6eb3131ecf3cddcd0c9e378c352da41fc2
Certificate serial: 01969E9B21C9280CD028DC2EB03FC8689BF8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/e_OebrMTHs883c0MnjeMNS2kH8I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ac/a214a5-4449-44af-87ff-c967c9db5752/1/e_OebrMTHs883c0MnjeMNS2kH8I.mft
Manifest number: 0E95
Signing time: Mon 05 May 2025 04:01:28 +0000
Manifest this update: Mon 05 May 2025 04:01:28 +0000
Manifest next update: Tue 06 May 2025 04:01:28 +0000
Files and hashes: 1: UbCWmkTBKtMgqtYfftK4bzNkfjc.roa (hash: 2USUqiqyvmda1iLGBaPyJ2mFdfz8AiGFv7Y7tVUma2g=)
2: e_OebrMTHs883c0MnjeMNS2kH8I.crl (hash: Rqa2OXMuEsd4cpbSfKMSFSLXzcDitgIUI/KJdqVt4Bs=)
3: vAhoECj76DxTiQ3yLLf6mu-_BqI.roa (hash: nCQBvqDRV7DEKusg0hBSa9SwoVzc4dU3/3Bre1jok34=)
4: xZRqK0ehAUNFfp7bd5x7WM7WU48.roa (hash: RKiSJS4ui6TI89oyaWSjQ9KPJJo62REtrxZnTIi0/mg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ac/a214a5-4449-44af-87ff-c967c9db5752/1/e_OebrMTHs883c0MnjeMNS2kH8I.crl
rsync://rpki.ripe.net/repository/DEFAULT/ac/a214a5-4449-44af-87ff-c967c9db5752/1/e_OebrMTHs883c0MnjeMNS2kH8I.mft
rsync://rpki.ripe.net/repository/DEFAULT/e_OebrMTHs883c0MnjeMNS2kH8I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 06 May 2025 04:01:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:9e:9b:21:c9:28:0c:d0:28:dc:2e:b0:3f:c8:68:9b:f8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7bf39e6eb3131ecf3cddcd0c9e378c352da41fc2
Validity
Not Before: May 5 04:01:28 2025 GMT
Not After : May 6 04:01:28 2025 GMT
Subject: CN=43a231c2ef404ac172c0a07e872afda090552be4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:9a:59:5d:2c:d2:49:70:a8:39:99:1d:b8:00:
79:e7:c7:16:40:2b:ce:2d:98:85:68:88:8f:ff:59:
3b:0f:d3:b9:a9:8a:97:38:5d:ca:f2:b3:d9:2e:f1:
f3:bd:19:b8:fd:95:be:99:08:88:be:5f:1b:37:d3:
95:9d:98:5b:e8:c2:8e:64:fd:b4:ae:97:d6:85:3e:
85:8f:ac:df:08:60:f0:8b:30:1d:2d:a4:bf:e9:93:
06:7e:c4:0b:21:e9:60:b1:3f:1c:54:b3:a0:f8:68:
a2:68:3a:53:6b:ce:16:b6:a4:cb:30:05:f6:5c:d5:
71:af:a8:81:59:46:8e:1d:0c:84:33:ce:a1:04:b1:
65:ec:0a:30:c5:de:4f:dd:2b:9d:10:9b:86:84:0f:
13:71:ad:9d:30:15:9d:5f:73:5a:d6:20:f5:88:63:
e0:18:51:86:57:ad:c2:4a:d9:76:c3:57:cf:87:46:
dc:08:89:c3:62:66:82:dc:52:b7:fc:54:cd:f3:e0:
45:71:c4:87:33:9d:5a:b9:66:a9:ec:8a:ef:65:01:
17:a2:85:1d:b3:cf:00:dd:fe:0d:f2:1b:e6:11:e9:
ab:7a:d5:d0:08:81:35:f6:37:41:1e:57:30:be:db:
1c:56:a0:9c:65:40:e4:9e:ad:02:cb:15:d9:c5:8c:
a4:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
43:A2:31:C2:EF:40:4A:C1:72:C0:A0:7E:87:2A:FD:A0:90:55:2B:E4
X509v3 Authority Key Identifier:
keyid:7B:F3:9E:6E:B3:13:1E:CF:3C:DD:CD:0C:9E:37:8C:35:2D:A4:1F:C2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/e_OebrMTHs883c0MnjeMNS2kH8I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/a214a5-4449-44af-87ff-c967c9db5752/1/e_OebrMTHs883c0MnjeMNS2kH8I.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/a214a5-4449-44af-87ff-c967c9db5752/1/e_OebrMTHs883c0MnjeMNS2kH8I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2e:ba:51:d1:d8:23:e6:bc:fd:c8:0a:66:7a:4c:3e:0e:b8:7f:
62:02:34:df:33:c9:63:0f:04:46:3b:d1:85:13:f7:a7:f6:1f:
8f:18:fe:60:d1:fd:a2:cd:cd:31:4e:7f:e7:85:b6:16:ad:8d:
ec:df:89:5d:30:26:51:f6:44:8d:6b:f7:c5:f3:ef:f2:e1:31:
43:ef:1c:d4:09:77:33:4e:75:54:04:78:d5:30:bb:20:b1:0a:
20:e8:35:c5:37:2f:b6:9a:3c:5c:03:a0:c9:e1:59:bd:63:aa:
e8:0e:f4:de:7d:39:8a:19:63:c9:30:d9:41:27:06:07:f9:e2:
4b:66:c5:67:56:e4:f8:6e:db:60:8a:32:da:52:3a:e4:52:c1:
b9:43:d0:d9:c8:a9:e8:eb:c8:8e:e5:ff:f2:28:54:a9:d7:22:
45:5a:1b:a7:5d:e2:eb:93:27:22:19:05:02:28:e5:4f:e4:10:
b6:ea:98:93:05:3b:82:58:a6:40:e9:97:b0:83:fd:31:9e:16:
e5:87:29:48:09:87:78:5a:2c:9d:0e:79:d8:59:fc:63:e0:52:
c0:1c:93:a3:9f:41:f2:0c:6a:a7:b8:aa:40:ce:16:aa:7e:6d:
54:99:1c:80:f6:fc:04:39:70:4f:9e:9b:65:ac:e0:17:0c:0a:
73:6a:11:30
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 5 12:46:15 2025 by rpki-client