Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c4/2d7609-2142-4a03-b11e-1148fde7aef7/1/oKbWsIdGH97GpbnVLSmDLY8pnIc.mft
File: oKbWsIdGH97GpbnVLSmDLY8pnIc.mft (raw, json)
Hash identifier: Fc6oS4NBOsvcp9lY4yzWoqGXlorOkQQREZyQXqqTkzA=
Subject key identifier: A2:2A:DD:20:4B:87:4D:AF:A9:CA:5A:16:4A:A2:A4:08:81:17:2F:74
Authority key identifier: A0:A6:D6:B0:87:46:1F:DE:C6:A5:B9:D5:2D:29:83:2D:8F:29:9C:87
Certificate issuer: /CN=a0a6d6b087461fdec6a5b9d52d29832d8f299c87
Certificate serial: 01969FE3EDF47EFA5730AF6031A546BE046F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/oKbWsIdGH97GpbnVLSmDLY8pnIc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c4/2d7609-2142-4a03-b11e-1148fde7aef7/1/oKbWsIdGH97GpbnVLSmDLY8pnIc.mft
Manifest number: 1526
Signing time: Mon 05 May 2025 10:00:36 +0000
Manifest this update: Mon 05 May 2025 10:00:36 +0000
Manifest next update: Tue 06 May 2025 10:00:36 +0000
Files and hashes: 1: ABSwg5iM7lDSwpBpbSUM-jWDkxQ.roa (hash: DOO9GA+T1exZrXJnaC8HcR8le9oe4m7a+sJjxpyxjOg=)
2: GJYCLN0ib9ODqjC_4u9aKGjHiAs.roa (hash: AqwhbZ6NQ3s8EvVMwRFSwmoYz6Yquuk8Hi4hrgtZv3M=)
3: oKbWsIdGH97GpbnVLSmDLY8pnIc.crl (hash: s+W2L1qC6R6ZvS30QAAZxuL58YQggaHcM5+oyjcM4wc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c4/2d7609-2142-4a03-b11e-1148fde7aef7/1/oKbWsIdGH97GpbnVLSmDLY8pnIc.crl
rsync://rpki.ripe.net/repository/DEFAULT/c4/2d7609-2142-4a03-b11e-1148fde7aef7/1/oKbWsIdGH97GpbnVLSmDLY8pnIc.mft
rsync://rpki.ripe.net/repository/DEFAULT/oKbWsIdGH97GpbnVLSmDLY8pnIc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 06 May 2025 10:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:9f:e3:ed:f4:7e:fa:57:30:af:60:31:a5:46:be:04:6f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a0a6d6b087461fdec6a5b9d52d29832d8f299c87
Validity
Not Before: May 5 10:00:36 2025 GMT
Not After : May 6 10:00:36 2025 GMT
Subject: CN=a22add204b874dafa9ca5a164aa2a40881172f74
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:69:a8:b0:8e:28:32:53:94:d8:61:06:71:17:
93:c2:b3:1a:e4:e7:b5:b8:33:e6:6d:78:9b:c4:a0:
4a:3a:f0:2e:26:f4:5d:e1:c7:7c:82:4a:c6:90:33:
ce:2c:b9:27:98:ca:2a:fb:9d:ad:da:b6:0b:25:eb:
b2:0f:9f:71:66:06:4c:56:f8:9e:0b:1b:b6:27:22:
f1:61:9c:64:fa:5d:aa:ee:8a:5b:28:5a:b3:15:32:
ad:f3:57:9a:a0:4f:7e:69:e4:a3:23:4a:2b:48:b0:
56:01:78:b1:df:fc:9c:4a:0c:b2:49:c9:06:48:78:
44:21:87:8d:97:a8:5e:a9:b6:58:96:53:21:fa:4c:
52:13:c0:9f:b5:53:3c:b3:7c:f2:4b:d3:5e:71:94:
5f:01:bf:2c:4c:8c:9a:1e:7b:fa:6f:37:d5:cc:07:
b2:6d:ee:ad:34:84:f2:8e:e5:9d:13:c5:2c:76:22:
9b:b0:44:0f:da:8d:e8:55:08:40:0d:d0:44:62:f3:
7e:34:1b:5e:aa:ca:63:ae:ef:c1:9e:61:77:ca:f1:
a9:ee:8c:02:36:8a:25:1d:8a:13:f7:d1:29:7e:2d:
79:93:59:1a:3d:36:b5:5f:4b:fe:5e:98:d4:4c:df:
0c:4b:0d:ad:cb:26:54:ac:ac:ff:0c:68:80:78:0c:
b4:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A2:2A:DD:20:4B:87:4D:AF:A9:CA:5A:16:4A:A2:A4:08:81:17:2F:74
X509v3 Authority Key Identifier:
keyid:A0:A6:D6:B0:87:46:1F:DE:C6:A5:B9:D5:2D:29:83:2D:8F:29:9C:87
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/oKbWsIdGH97GpbnVLSmDLY8pnIc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c4/2d7609-2142-4a03-b11e-1148fde7aef7/1/oKbWsIdGH97GpbnVLSmDLY8pnIc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c4/2d7609-2142-4a03-b11e-1148fde7aef7/1/oKbWsIdGH97GpbnVLSmDLY8pnIc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
98:85:7f:1e:33:92:f7:d0:11:88:a4:95:fa:58:3a:2c:8f:25:
b3:ea:c6:e9:31:82:1e:3c:0d:65:a4:b4:b4:5d:3a:66:57:f7:
87:19:5b:f1:64:25:0a:a6:2c:c8:36:f8:a7:ec:7c:b9:77:c0:
41:cc:6f:8f:de:fd:a2:09:4e:32:3b:a7:81:d4:5a:e7:05:ef:
5d:28:a5:53:9b:d7:3d:7e:00:db:92:18:87:1b:30:5a:a3:ab:
14:e9:32:b2:cc:e8:15:af:f5:e9:4f:a0:91:7a:43:5e:9c:90:
d7:79:01:b3:89:d3:6b:d9:35:8d:de:47:ca:df:9e:26:d4:59:
30:48:3f:e1:aa:82:55:25:c9:29:1e:60:10:b2:b1:40:e0:fb:
4f:0a:17:b1:a7:4d:d2:32:db:d3:0c:18:3f:cc:15:89:f5:1f:
18:c8:81:a3:b7:56:11:ac:07:a6:5f:80:5e:e6:53:b8:a1:7f:
7a:52:ca:61:5c:1b:f1:43:b1:2f:77:54:7c:7d:1d:72:de:b3:
ac:b5:b2:82:58:27:82:6b:a8:26:5f:44:35:9b:19:5d:29:da:
60:c6:80:7c:bc:53:97:f5:99:14:27:3c:02:a4:38:1e:f7:ff:
ba:9a:75:22:17:26:09:bd:f9:a7:ca:e1:70:fb:e8:59:b5:4f:
bf:b5:da:f8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 5 17:22:04 2025 by rpki-client