Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ba/143d29-cf72-4d01-918c-16afc4dffdd4/1/OgCAdpjwsJfWmrOSaRfR3Mg4piQ.mft
File: OgCAdpjwsJfWmrOSaRfR3Mg4piQ.mft (raw, json)
Hash identifier: zD63sQJgpUz6D0qU3nzKblNRM8Y3/qU+P+B1VuoOwJA=
Subject key identifier: A9:16:8C:B7:72:44:BE:50:D2:FB:85:43:70:9A:F4:7A:B5:58:A4:48
Authority key identifier: 3A:00:80:76:98:F0:B0:97:D6:9A:B3:92:69:17:D1:DC:C8:38:A6:24
Certificate issuer: /CN=3a00807698f0b097d69ab3926917d1dcc838a624
Certificate serial: 0196A8B057AD87821E25E573C9B1E227D574
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OgCAdpjwsJfWmrOSaRfR3Mg4piQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ba/143d29-cf72-4d01-918c-16afc4dffdd4/1/OgCAdpjwsJfWmrOSaRfR3Mg4piQ.mft
Manifest number: 1427
Signing time: Wed 07 May 2025 03:00:50 +0000
Manifest this update: Wed 07 May 2025 03:00:50 +0000
Manifest next update: Thu 08 May 2025 03:00:50 +0000
Files and hashes: 1: 3R71uiQs8A2yEYIuhFU6ltMSdoA.roa (hash: q6Bu6mNsK7g3Ktdy/8WD0fy0JiscBHWIuVXEPQ7F3vc=)
2: 4SmSne42qkJfP_8H235Hb69otEg.roa (hash: Rw2BEcxlO/hT8MVd1GJXC5JIyQ4FgN6SIY1eGGUmqEM=)
3: H0NKaOe5bQ8Q0_5pjno5XSaRBtA.roa (hash: 23YuHYDJK8ztv50Y7XASqWUgok/NgTr64wM7KdMg6xM=)
4: OgCAdpjwsJfWmrOSaRfR3Mg4piQ.crl (hash: //7Dg2KB6yqwxVT3C1rWA3maVIyjtksU36CDAikHLaA=)
5: PSgnnJoiSIw5Hv12Voa8VUomZgQ.roa (hash: aSwQ/+jyVOvQ9xtFsxD7WSERWfDCCWFCBTIigVEVgk8=)
6: YFzAJtaEN2OUk02732wPr2MSjTc.roa (hash: t8HA0RY/FulWJBCDF+XMDsn62YqIRGXDMqv2jjU6v40=)
7: p3Y3crt9wWUb6xKtKHwtfKRhpKA.roa (hash: NWTiGaZGuwbETRLnJD5VxxB23JLGGVuboYx2qrcj0Vo=)
8: snLBQzXncuCutjB-6mlkbK17Uy8.roa (hash: Cw28lHOUeHUJQIAt/a1n6lZjE3/YqZwG3kLD22GHFE8=)
9: yNgpBLQm6ELi-mIexk0YaTfXxb4.roa (hash: pd8PpO8asVpf3qyRi+SsT0Kl6uLeF6RLa31NmZBcfSI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ba/143d29-cf72-4d01-918c-16afc4dffdd4/1/OgCAdpjwsJfWmrOSaRfR3Mg4piQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/ba/143d29-cf72-4d01-918c-16afc4dffdd4/1/OgCAdpjwsJfWmrOSaRfR3Mg4piQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/OgCAdpjwsJfWmrOSaRfR3Mg4piQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 08 May 2025 03:00:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:a8:b0:57:ad:87:82:1e:25:e5:73:c9:b1:e2:27:d5:74
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3a00807698f0b097d69ab3926917d1dcc838a624
Validity
Not Before: May 7 03:00:50 2025 GMT
Not After : May 8 03:00:50 2025 GMT
Subject: CN=a9168cb77244be50d2fb8543709af47ab558a448
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:b6:fc:9b:22:3e:56:00:49:e8:67:78:ad:0f:
ef:bb:7a:0d:6d:a6:06:b1:0b:80:fe:a3:bb:99:66:
a0:f8:fd:15:2d:50:77:3e:a7:52:14:aa:5a:31:8a:
d5:d8:c1:b2:37:1a:89:1f:26:e2:d3:ad:d0:9a:de:
fc:d7:8e:32:43:76:9a:e8:1d:f9:af:b0:35:75:a2:
d3:05:a6:ad:cb:81:48:de:3f:5a:b0:6a:32:12:64:
9a:42:81:20:b9:e3:42:94:ce:a3:a4:2a:a8:af:9a:
dd:a3:60:61:f8:10:79:e8:0a:b1:33:88:89:05:e0:
38:c4:73:5d:cb:ee:6e:d1:35:98:5d:5d:d2:8f:f9:
da:10:b1:95:f2:04:6a:5f:13:ee:05:0d:0e:97:3f:
3e:be:d8:17:b9:81:13:b8:af:81:ea:ba:24:61:f9:
f6:95:7a:79:73:1a:d4:0e:54:50:b3:57:a3:3d:74:
28:19:aa:9b:81:5b:20:cf:be:c7:32:d2:0c:de:fe:
31:9c:6e:15:f2:5c:88:e4:46:c8:9c:9e:a1:c6:0b:
e1:14:b6:58:9b:d9:31:ac:f0:53:8a:05:a8:60:f0:
04:b0:e8:f2:b5:1a:c8:07:64:f9:fa:70:11:b7:c0:
55:9c:24:0d:4e:43:6d:f3:4b:4d:63:c6:da:40:36:
42:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A9:16:8C:B7:72:44:BE:50:D2:FB:85:43:70:9A:F4:7A:B5:58:A4:48
X509v3 Authority Key Identifier:
keyid:3A:00:80:76:98:F0:B0:97:D6:9A:B3:92:69:17:D1:DC:C8:38:A6:24
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OgCAdpjwsJfWmrOSaRfR3Mg4piQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ba/143d29-cf72-4d01-918c-16afc4dffdd4/1/OgCAdpjwsJfWmrOSaRfR3Mg4piQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ba/143d29-cf72-4d01-918c-16afc4dffdd4/1/OgCAdpjwsJfWmrOSaRfR3Mg4piQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
03:de:60:8d:81:5a:ea:b9:80:89:3e:42:5b:c8:3e:bd:1b:90:
39:fc:fc:6a:a7:1c:b7:4e:68:c1:40:8a:bd:9d:48:39:3d:f8:
be:be:8b:f0:09:5b:bf:bd:76:75:80:d3:d8:74:a0:72:3b:6c:
87:99:92:a0:aa:28:72:15:1f:89:c9:4f:e0:77:08:00:cf:99:
12:79:36:9c:46:da:c9:85:01:70:39:d4:29:2f:94:a8:8c:72:
f0:ab:54:44:5e:7b:5b:bc:5d:68:6a:58:90:a7:eb:9b:6a:7a:
43:4d:6b:18:c4:69:60:d5:b0:0e:99:84:51:45:b1:01:53:de:
f4:9c:91:9a:d6:ab:b3:0b:ad:dd:44:46:1c:b4:45:e5:04:54:
d8:40:c5:47:17:b7:2f:6a:40:04:18:25:76:b8:71:07:0f:de:
2a:6c:f9:52:21:46:87:f4:9c:6b:fc:6a:4c:eb:6c:ae:77:63:
55:00:f0:1b:83:59:63:d3:75:03:77:b2:48:07:33:a3:07:4d:
83:6d:6b:b8:21:a5:40:e1:36:f8:13:7c:9f:d1:e3:66:d7:eb:
e5:9c:bd:28:fb:e3:30:72:cf:58:b0:c2:ff:35:94:f3:ac:d0:
8e:8f:ec:a1:79:1c:f1:c6:23:e3:6b:ee:c0:72:f8:c6:4f:7c:
be:d2:50:28
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 7 11:12:10 2025 by rpki-client