Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/af/09d329-7ffe-451b-bc82-2831a4850645/1/Oe6oRlUcbkGblH4NoQfuywBwQZo.mft
File: Oe6oRlUcbkGblH4NoQfuywBwQZo.mft (raw, json)
Hash identifier: nAagnoFAJsrhANKL1Bnt+bPSbRO3fihVnv2RZqODiis=
Subject key identifier: B6:A7:BF:B8:1B:0B:1D:65:FF:02:7E:8D:89:03:70:00:BA:B2:53:19
Authority key identifier: 39:EE:A8:46:55:1C:6E:41:9B:94:7E:0D:A1:07:EE:CB:00:70:41:9A
Certificate issuer: /CN=39eea846551c6e419b947e0da107eecb0070419a
Certificate serial: 0196BB91C12766CC94A52BA2313EF9D98B6A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Oe6oRlUcbkGblH4NoQfuywBwQZo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/af/09d329-7ffe-451b-bc82-2831a4850645/1/Oe6oRlUcbkGblH4NoQfuywBwQZo.mft
Manifest number: 12B6
Signing time: Sat 10 May 2025 19:00:13 +0000
Manifest this update: Sat 10 May 2025 19:00:13 +0000
Manifest next update: Sun 11 May 2025 19:00:13 +0000
Files and hashes: 1: Oe6oRlUcbkGblH4NoQfuywBwQZo.crl (hash: pbJnPg69Rtw87TzqM/83CT7agXX4BCaw92XUgJUtRWg=)
2: UR9eQe3KGZ-9c60OTO6AJ5Nv5N4.roa (hash: i7xKIbibG1Wf9vR46/89Xb0uAuY5HlesJatHG5Hh1rk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/af/09d329-7ffe-451b-bc82-2831a4850645/1/Oe6oRlUcbkGblH4NoQfuywBwQZo.crl
rsync://rpki.ripe.net/repository/DEFAULT/af/09d329-7ffe-451b-bc82-2831a4850645/1/Oe6oRlUcbkGblH4NoQfuywBwQZo.mft
rsync://rpki.ripe.net/repository/DEFAULT/Oe6oRlUcbkGblH4NoQfuywBwQZo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 11 May 2025 13:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:bb:91:c1:27:66:cc:94:a5:2b:a2:31:3e:f9:d9:8b:6a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=39eea846551c6e419b947e0da107eecb0070419a
Validity
Not Before: May 10 19:00:13 2025 GMT
Not After : May 11 19:00:13 2025 GMT
Subject: CN=b6a7bfb81b0b1d65ff027e8d89037000bab25319
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:d7:9f:87:fd:f4:2f:b6:b3:8a:cc:11:72:2c:
10:6b:90:61:9c:e0:92:45:5f:d7:56:1a:cd:97:29:
fb:a1:4e:fb:af:1e:86:5a:b4:69:c3:36:ea:a5:7c:
08:41:74:19:c5:c7:56:1e:69:f7:15:11:a3:47:3f:
17:03:d2:6d:7d:1a:57:03:87:4b:b9:b0:36:84:2c:
ea:a5:31:55:e0:c8:53:7f:1e:b6:c0:9d:f1:a0:77:
c5:fc:2b:9a:f7:55:38:07:12:25:c3:c5:49:97:b9:
cc:8e:cd:38:cc:a6:c9:00:9c:bf:eb:83:e7:b3:2d:
36:e4:30:bc:1c:f5:a5:15:c1:f7:9d:23:96:18:d2:
4b:4e:d4:82:33:79:55:0a:53:7d:d8:f4:27:97:d1:
e9:1d:3c:38:0d:0b:ed:5d:f3:88:8b:8b:b4:5d:33:
c9:17:0a:d9:59:77:9d:47:e4:ec:e7:31:95:f9:b6:
4c:fe:36:0a:3b:0f:54:1e:dd:3e:a4:c3:1b:62:f8:
74:4d:0f:64:4d:fd:c8:a8:09:72:cb:fa:77:21:b5:
48:97:c2:ec:27:23:c9:f3:09:c8:b0:cb:50:d4:8b:
fb:b0:db:ac:61:76:05:8b:42:80:1f:f3:82:d2:0e:
4c:ba:1f:90:52:21:5e:27:13:de:ee:46:e3:6d:8a:
4a:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B6:A7:BF:B8:1B:0B:1D:65:FF:02:7E:8D:89:03:70:00:BA:B2:53:19
X509v3 Authority Key Identifier:
keyid:39:EE:A8:46:55:1C:6E:41:9B:94:7E:0D:A1:07:EE:CB:00:70:41:9A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Oe6oRlUcbkGblH4NoQfuywBwQZo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/af/09d329-7ffe-451b-bc82-2831a4850645/1/Oe6oRlUcbkGblH4NoQfuywBwQZo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/af/09d329-7ffe-451b-bc82-2831a4850645/1/Oe6oRlUcbkGblH4NoQfuywBwQZo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9f:23:52:a3:60:a0:88:89:d6:59:5e:8b:de:0b:55:65:d0:c1:
d0:1f:c7:63:df:54:cb:c0:94:89:70:8e:78:ba:7c:f7:c3:ca:
ba:1d:5b:b0:ae:78:5a:65:cb:19:45:54:3e:29:ca:7e:1d:e3:
5d:17:a6:10:33:ef:99:8e:1f:c9:c7:0d:fc:4f:49:a1:ba:86:
e1:e8:80:2a:2a:c0:9f:03:24:b3:69:10:36:17:56:1e:88:e0:
07:91:cf:30:e9:78:52:07:7d:1b:fd:05:bc:b1:7f:fd:01:19:
42:37:01:9a:5c:96:0a:e7:3a:ef:0c:4d:2c:c4:6b:dc:2f:4e:
02:7d:f7:3d:1c:b0:2d:35:6c:a8:b4:be:fc:5e:a4:ea:9f:80:
bd:c5:ee:5d:3e:13:3d:d9:bb:cb:68:df:00:16:f2:c6:02:89:
75:95:0d:f7:c0:64:07:12:4d:56:8a:82:7c:0d:47:6f:0d:26:
ec:bc:74:58:57:7c:c4:71:52:d0:de:77:68:f5:e2:d1:48:a9:
22:67:ac:1c:06:c4:31:a0:b7:12:2d:2d:f4:36:df:c0:00:af:
96:85:8a:29:15:53:53:d9:39:40:45:14:04:e8:ef:b1:8d:81:
d0:fb:2d:e9:e2:dc:fd:a4:c6:3c:64:69:3b:b6:77:98:7f:14:
66:11:8e:2b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 10 22:02:35 2025 by rpki-client