Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bb/32eaa2-ccb9-48e1-962d-e3ea6494d4ea/1/OExnnLr4wq171-FZCG_fCifSooQ.mft
File: OExnnLr4wq171-FZCG_fCifSooQ.mft (raw, json)
Hash identifier: kBM1c8M/psbic7ArhQ9piANPEt+5ErwGwdZ7zdDrCxM=
Subject key identifier: C4:86:8A:2A:07:2F:CF:1E:3E:E2:0B:AC:3D:54:B6:64:B4:1A:4E:9B
Authority key identifier: 38:4C:67:9C:BA:F8:C2:AD:7B:D7:E1:59:08:6F:DF:0A:27:D2:A2:84
Certificate issuer: /CN=384c679cbaf8c2ad7bd7e159086fdf0a27d2a284
Certificate serial: 0196BA7F934A9681069FD74A8AB4C47EB0B7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OExnnLr4wq171-FZCG_fCifSooQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bb/32eaa2-ccb9-48e1-962d-e3ea6494d4ea/1/OExnnLr4wq171-FZCG_fCifSooQ.mft
Manifest number: 0B20
Signing time: Sat 10 May 2025 14:00:44 +0000
Manifest this update: Sat 10 May 2025 14:00:44 +0000
Manifest next update: Sun 11 May 2025 14:00:44 +0000
Files and hashes: 1: OExnnLr4wq171-FZCG_fCifSooQ.crl (hash: 96COA1cY8QG93wJ5g2Rl8WhWtmUVu6x+d7/mV4qOTBs=)
2: dOLAcZqxH53yb4L2nTWOqgwfPdw.roa (hash: 2YFuU3G8qtklSATjn4cas6IxZSziYEVnTqShHhdL/7w=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bb/32eaa2-ccb9-48e1-962d-e3ea6494d4ea/1/OExnnLr4wq171-FZCG_fCifSooQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/bb/32eaa2-ccb9-48e1-962d-e3ea6494d4ea/1/OExnnLr4wq171-FZCG_fCifSooQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/OExnnLr4wq171-FZCG_fCifSooQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 11 May 2025 13:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:ba:7f:93:4a:96:81:06:9f:d7:4a:8a:b4:c4:7e:b0:b7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=384c679cbaf8c2ad7bd7e159086fdf0a27d2a284
Validity
Not Before: May 10 14:00:44 2025 GMT
Not After : May 11 14:00:44 2025 GMT
Subject: CN=c4868a2a072fcf1e3ee20bac3d54b664b41a4e9b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:8c:bf:35:04:c2:0f:74:02:16:fa:5e:ab:1a:
1d:66:80:e4:b6:3a:42:45:d6:10:d7:3d:82:05:a8:
32:18:ec:13:6c:bc:c1:09:3e:3b:b1:71:5b:16:6e:
80:77:b7:30:90:f8:60:b2:cd:0c:5f:cc:a6:26:a6:
4f:86:3c:b9:90:33:fd:4b:47:b8:c2:4e:39:83:a1:
0c:22:9f:7b:64:05:95:a6:00:ff:94:8a:98:a4:bc:
60:c8:a5:c0:ac:71:4a:0e:19:46:89:26:9c:f1:5f:
a8:db:ce:71:db:a9:d2:7b:c7:8b:7c:8e:01:31:ca:
8b:b1:b6:75:9e:51:74:db:34:0e:ab:ce:f3:b0:15:
6a:63:4a:b5:57:15:0d:31:d0:d0:e7:50:aa:5c:20:
0b:11:c3:a8:83:0b:72:58:87:26:fd:c5:de:8f:3c:
cd:38:bf:7a:39:90:5f:d8:f0:69:07:25:dd:22:dc:
00:dc:d3:80:59:84:29:87:7e:db:1c:bd:3e:6a:38:
42:33:fb:93:80:55:e5:97:08:35:e5:a1:fc:34:23:
93:cc:ba:97:31:4b:c8:20:c3:9a:16:6a:a7:ac:97:
14:13:8c:85:86:3b:d2:67:d9:23:2e:3e:ea:81:50:
93:76:05:ed:b0:0c:46:87:1b:ba:6b:d8:d5:8c:20:
c7:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C4:86:8A:2A:07:2F:CF:1E:3E:E2:0B:AC:3D:54:B6:64:B4:1A:4E:9B
X509v3 Authority Key Identifier:
keyid:38:4C:67:9C:BA:F8:C2:AD:7B:D7:E1:59:08:6F:DF:0A:27:D2:A2:84
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OExnnLr4wq171-FZCG_fCifSooQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bb/32eaa2-ccb9-48e1-962d-e3ea6494d4ea/1/OExnnLr4wq171-FZCG_fCifSooQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bb/32eaa2-ccb9-48e1-962d-e3ea6494d4ea/1/OExnnLr4wq171-FZCG_fCifSooQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0e:31:a9:a0:01:d4:92:54:df:e6:0c:df:e0:67:cf:91:ad:6d:
3f:aa:81:69:3c:26:cd:45:71:67:8b:f9:4f:ad:2b:1e:64:f4:
e5:f2:76:7c:8a:9f:3b:ca:53:59:27:75:bf:83:b5:17:9a:86:
af:85:31:c4:4b:0c:2a:69:95:ba:78:c1:3e:3e:15:ee:20:b8:
bb:68:15:0f:cb:9e:1b:fb:13:ea:b5:e7:58:64:69:d9:2b:63:
8e:cb:b1:36:4c:26:77:28:4c:04:ca:3c:41:b6:90:f8:ac:1e:
71:2d:22:c6:f0:25:65:29:a9:69:8e:5b:df:8f:18:ff:20:b2:
fc:41:11:d4:58:ca:e9:2c:b3:db:32:9c:3d:12:9b:d9:22:7d:
0a:4d:8b:1d:43:e5:0e:26:fd:16:43:8f:7f:97:47:4f:13:24:
51:f9:4e:cb:d8:4f:62:a1:14:4c:78:d7:34:93:ec:fb:af:38:
82:91:92:5c:ea:4f:7a:9b:59:5c:c7:19:4a:0b:9e:12:09:4e:
4f:a7:9c:d0:cf:24:4c:af:f9:d7:c6:c4:b6:af:5c:f6:a5:71:
ef:ee:92:56:e5:de:6b:9a:19:e0:07:cb:e8:66:0c:dc:94:a7:
62:41:9b:26:b7:b2:de:5b:d9:81:8b:87:0a:59:44:83:90:fd:
f0:e5:25:4d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 10 21:00:44 2025 by rpki-client