Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b0/7a0c7c-f2ca-4aa9-87c5-77f4fd53425e/1/oheIwIqkN9EWXOy9aP2xlaFd-gg.mft
File: oheIwIqkN9EWXOy9aP2xlaFd-gg.mft (raw, json)
Hash identifier: VSAdX+JFupjcMfUi5cFF3FYnZdEBMMlzvnZ3xs0Blls=
Subject key identifier: 5B:75:6B:97:C4:0D:81:15:74:79:35:8F:84:AE:AB:5B:FE:07:08:24
Authority key identifier: A2:17:88:C0:8A:A4:37:D1:16:5C:EC:BD:68:FD:B1:95:A1:5D:FA:08
Certificate issuer: /CN=a21788c08aa437d1165cecbd68fdb195a15dfa08
Certificate serial: 0196AA309CE5851DFBB931C750C0EB68E413
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/oheIwIqkN9EWXOy9aP2xlaFd-gg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b0/7a0c7c-f2ca-4aa9-87c5-77f4fd53425e/1/oheIwIqkN9EWXOy9aP2xlaFd-gg.mft
Manifest number: 152D
Signing time: Wed 07 May 2025 10:00:34 +0000
Manifest this update: Wed 07 May 2025 10:00:34 +0000
Manifest next update: Thu 08 May 2025 10:00:34 +0000
Files and hashes: 1: 3hcLMvc25IMPdhmKQEHCMZTqIjs.roa (hash: SEybTz+/cd8wiIccvdujur1jHcT09AAEthIXnDu/BtA=)
2: oheIwIqkN9EWXOy9aP2xlaFd-gg.crl (hash: 2YtbR23+Mu0zo0W0urR+bohSyERY3TDscR43Kb6Oh5s=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b0/7a0c7c-f2ca-4aa9-87c5-77f4fd53425e/1/oheIwIqkN9EWXOy9aP2xlaFd-gg.crl
rsync://rpki.ripe.net/repository/DEFAULT/b0/7a0c7c-f2ca-4aa9-87c5-77f4fd53425e/1/oheIwIqkN9EWXOy9aP2xlaFd-gg.mft
rsync://rpki.ripe.net/repository/DEFAULT/oheIwIqkN9EWXOy9aP2xlaFd-gg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 08 May 2025 08:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:aa:30:9c:e5:85:1d:fb:b9:31:c7:50:c0:eb:68:e4:13
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a21788c08aa437d1165cecbd68fdb195a15dfa08
Validity
Not Before: May 7 10:00:34 2025 GMT
Not After : May 8 10:00:34 2025 GMT
Subject: CN=5b756b97c40d81157479358f84aeab5bfe070824
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:95:59:80:9b:1d:f8:5c:f7:56:f8:10:53:44:
ff:c7:63:1f:35:c8:95:bb:31:8f:fc:87:86:ee:88:
8f:5d:cd:b8:3a:96:20:e6:d6:08:fd:67:06:7b:88:
6f:06:d7:53:b7:b4:4b:26:06:29:5e:34:ed:c2:e7:
ba:25:f4:ff:f9:f5:a7:06:93:35:4c:b5:cd:41:c1:
3d:f9:17:b8:19:69:dc:a4:25:95:96:c7:09:99:97:
9c:01:8b:03:40:7b:ce:95:06:bb:40:ff:43:f3:cd:
8b:ef:06:9b:cb:63:1b:c5:9d:53:bf:b7:35:f3:a2:
46:a4:95:de:cf:08:48:9c:8b:41:94:15:22:c3:45:
26:85:d7:08:1b:f0:d8:c7:a0:2a:d5:1d:7d:34:dd:
e4:12:eb:a3:aa:0b:39:77:4e:3a:d2:41:f0:70:ba:
2d:72:91:45:87:49:66:fd:b0:58:32:00:84:ce:6d:
fc:cf:b7:3e:64:51:4a:ba:a6:82:91:3c:a5:1a:7f:
e9:a0:b2:be:98:27:fc:e3:70:eb:80:cf:93:c8:65:
73:fc:cd:b6:4c:49:f4:a9:3e:5d:99:c7:46:66:79:
b9:98:38:9e:81:a6:60:12:4b:19:e9:d2:74:3f:55:
85:0c:16:c8:01:d7:96:b7:6f:21:73:47:9d:81:0b:
e8:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5B:75:6B:97:C4:0D:81:15:74:79:35:8F:84:AE:AB:5B:FE:07:08:24
X509v3 Authority Key Identifier:
keyid:A2:17:88:C0:8A:A4:37:D1:16:5C:EC:BD:68:FD:B1:95:A1:5D:FA:08
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/oheIwIqkN9EWXOy9aP2xlaFd-gg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/7a0c7c-f2ca-4aa9-87c5-77f4fd53425e/1/oheIwIqkN9EWXOy9aP2xlaFd-gg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/7a0c7c-f2ca-4aa9-87c5-77f4fd53425e/1/oheIwIqkN9EWXOy9aP2xlaFd-gg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8e:30:f7:61:e6:5f:97:b1:71:b5:76:3e:c1:d8:c0:1e:3b:76:
3c:6a:15:e9:5a:af:34:ae:f9:4c:83:c6:bd:3d:6b:55:f9:32:
b2:c3:fd:b4:c3:dd:a8:8c:6b:0b:63:98:ab:c1:c2:e5:13:77:
9d:91:55:e9:c4:af:0c:38:51:d8:5f:f6:2e:4b:d2:a4:c6:43:
a6:27:14:b4:c3:5c:02:b5:3d:24:c4:7d:ef:81:db:96:89:cb:
69:a1:26:ec:1a:d5:31:dc:d0:b8:a3:95:1e:f5:9f:61:b6:6d:
5a:2d:d9:9e:70:97:25:b9:2a:32:8c:14:fb:bf:66:57:3f:f1:
d5:4f:00:f0:61:c0:b3:c9:ca:ac:74:2f:88:9a:f9:22:83:bc:
53:32:83:9e:ef:43:ec:9d:e4:65:c6:44:b1:de:4b:69:aa:00:
32:a3:69:fe:b1:89:47:01:d9:08:56:56:63:d1:b5:6b:ad:c5:
9b:c6:b4:70:96:93:d8:2c:6f:47:27:73:87:b6:ba:13:18:04:
46:b6:5b:9b:72:ff:ef:0b:9c:28:81:35:66:d3:2f:e7:82:d2:
b0:85:b8:01:b4:dc:c3:90:5b:1b:03:83:0d:fc:c4:74:8b:1d:
cd:2f:ac:85:78:af:2f:d6:ca:d0:32:39:67:99:df:23:68:c5:
58:07:06:06
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 7 14:17:46 2025 by rpki-client