Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b4/7029cc-d331-4606-889c-d66674cfa424/1/OXbmqwhMnu7ehuKva95yFSdLlac.mft
File: OXbmqwhMnu7ehuKva95yFSdLlac.mft (raw, json)
Hash identifier: SQDhDCVsZ/wIjW6zt9jKsDzwC6ccjggfU9zu+c+WzfM=
Subject key identifier: 0A:94:BC:57:FE:B6:2A:82:74:BE:17:64:6A:10:ED:2E:B6:98:AE:17
Authority key identifier: 39:76:E6:AB:08:4C:9E:EE:DE:86:E2:AF:6B:DE:72:15:27:4B:95:A7
Certificate issuer: /CN=3976e6ab084c9eeede86e2af6bde7215274b95a7
Certificate serial: 0196B032E3AF4673FDABB147C6F597DCF259
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OXbmqwhMnu7ehuKva95yFSdLlac.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b4/7029cc-d331-4606-889c-d66674cfa424/1/OXbmqwhMnu7ehuKva95yFSdLlac.mft
Manifest number: 152B
Signing time: Thu 08 May 2025 14:00:47 +0000
Manifest this update: Thu 08 May 2025 14:00:47 +0000
Manifest next update: Fri 09 May 2025 14:00:47 +0000
Files and hashes: 1: OXbmqwhMnu7ehuKva95yFSdLlac.crl (hash: IDGU6w9CFO4C8RlhDxiot9Cxzr9mHpzJLxMaYseEwys=)
2: bS8D5tTeBAXDkMQSy-j-MAcdPro.roa (hash: R+yA1y5Nb8S44doc/dttKyd8pVatx4WMIyAI41rpB+c=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b4/7029cc-d331-4606-889c-d66674cfa424/1/OXbmqwhMnu7ehuKva95yFSdLlac.crl
rsync://rpki.ripe.net/repository/DEFAULT/b4/7029cc-d331-4606-889c-d66674cfa424/1/OXbmqwhMnu7ehuKva95yFSdLlac.mft
rsync://rpki.ripe.net/repository/DEFAULT/OXbmqwhMnu7ehuKva95yFSdLlac.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 09 May 2025 14:00:47 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:b0:32:e3:af:46:73:fd:ab:b1:47:c6:f5:97:dc:f2:59
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3976e6ab084c9eeede86e2af6bde7215274b95a7
Validity
Not Before: May 8 14:00:47 2025 GMT
Not After : May 9 14:00:47 2025 GMT
Subject: CN=0a94bc57feb62a8274be17646a10ed2eb698ae17
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:d5:25:7e:70:13:2a:8a:f4:84:1f:f0:40:f0:
c9:a9:f7:c0:d4:63:5f:63:0e:59:1a:83:c9:56:01:
39:8f:3e:e7:0d:15:fc:b7:c7:54:3d:d9:23:26:7b:
68:5d:2a:2f:5a:43:41:40:56:3f:2b:3c:fa:f5:8b:
4b:6c:d9:6f:c4:7f:ca:79:d0:dc:a3:3c:e1:41:26:
96:9e:9b:97:b9:09:e7:81:9a:f3:ce:50:3f:fe:27:
7c:3a:c4:11:6e:f7:e1:11:0f:bd:da:49:22:42:30:
bf:f7:ad:73:6c:06:8e:79:f7:83:ac:7d:14:a6:2c:
4d:33:d1:a2:17:5e:1e:18:0c:89:58:46:0d:b0:5b:
df:21:d9:bd:05:60:57:63:bc:7a:6b:2f:13:29:b2:
d4:ce:f6:be:92:57:d1:96:f3:48:a8:bb:70:e5:d7:
6f:d8:35:9d:df:fe:eb:5b:00:30:72:b7:4c:37:3e:
bb:be:42:bd:2b:42:da:05:fd:3f:a0:e3:6f:b0:11:
30:ba:89:3c:8c:e4:e2:d9:24:14:2b:7d:11:b7:d3:
71:50:d3:bb:48:69:c9:9e:e6:6d:d2:38:e3:c8:1c:
3c:67:61:56:eb:43:f6:c9:22:9c:4b:57:f3:4e:22:
a5:aa:d7:f5:43:44:6a:d3:22:7c:52:56:15:77:dd:
a8:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0A:94:BC:57:FE:B6:2A:82:74:BE:17:64:6A:10:ED:2E:B6:98:AE:17
X509v3 Authority Key Identifier:
keyid:39:76:E6:AB:08:4C:9E:EE:DE:86:E2:AF:6B:DE:72:15:27:4B:95:A7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OXbmqwhMnu7ehuKva95yFSdLlac.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/7029cc-d331-4606-889c-d66674cfa424/1/OXbmqwhMnu7ehuKva95yFSdLlac.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/7029cc-d331-4606-889c-d66674cfa424/1/OXbmqwhMnu7ehuKva95yFSdLlac.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b5:67:43:57:50:a0:bc:7b:96:2d:92:fa:69:87:fe:b7:a1:49:
94:ca:b5:c0:b7:a3:a0:96:80:0f:fa:7d:7b:6a:f8:e4:a2:61:
15:6e:54:e8:d7:17:d2:e5:75:5a:c6:d5:80:4a:78:37:93:1a:
65:5c:50:f5:8a:ad:e4:e1:45:c3:1c:41:cb:06:b1:0b:67:b7:
86:ba:c4:de:df:b5:88:fc:cc:32:65:cd:7a:85:25:21:24:6d:
09:bf:54:75:7b:c8:78:4c:05:0b:4d:bf:90:af:3b:f2:b2:c4:
98:01:90:01:85:4f:22:b5:52:e1:fc:2f:6f:b4:8d:db:bb:2c:
ff:ad:ae:c0:dd:e4:c6:9c:29:28:b1:53:61:d5:03:60:7e:66:
c3:e1:7b:6f:f5:71:ab:41:d7:71:fa:10:5b:83:26:56:57:74:
13:e6:59:ab:6c:d4:43:c0:48:4a:d9:62:24:13:c5:cc:86:77:
44:14:50:6e:0c:89:a0:20:71:f3:07:e0:a7:8c:ce:57:87:b1:
be:8b:c8:ee:e9:89:b1:de:97:67:fe:1b:80:f0:fb:9c:5e:03:
74:36:ef:8e:4f:92:12:10:6f:13:90:e7:9c:f7:80:12:33:68:
a0:bc:9e:48:14:fe:28:f8:be:30:e9:12:ab:14:ba:c5:ea:fa:
bd:29:98:ec
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 9 00:04:09 2025 by rpki-client