Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c4/5b3d6d-e6f1-47ad-b52b-9d943671a8a3/1/oKFURB35Yj7rWhlhONIb71gktEE.mft
File: oKFURB35Yj7rWhlhONIb71gktEE.mft (raw, json)
Hash identifier: Wa67DFA7zau15rO2DFDN2v3UdtfZd3Bq8SF0xRQK4iU=
Subject key identifier: DE:A8:5E:E9:CE:7E:63:00:7D:72:48:DF:38:2D:DB:8F:DA:11:82:18
Authority key identifier: A0:A1:54:44:1D:F9:62:3E:EB:5A:19:61:38:D2:1B:EF:58:24:B4:41
Certificate issuer: /CN=a0a154441df9623eeb5a196138d21bef5824b441
Certificate serial: 0196CB3BDB5CB09B274521E95A24D6B09C38
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/oKFURB35Yj7rWhlhONIb71gktEE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c4/5b3d6d-e6f1-47ad-b52b-9d943671a8a3/1/oKFURB35Yj7rWhlhONIb71gktEE.mft
Manifest number: 1542
Signing time: Tue 13 May 2025 20:00:19 +0000
Manifest this update: Tue 13 May 2025 20:00:19 +0000
Manifest next update: Wed 14 May 2025 20:00:19 +0000
Files and hashes: 1: cqMIZbZG_XjFMjyio64LoSb9JEM.roa (hash: xBYH5ZrjKUuPI62l0z0GQBA4FW4u95fkTkxgETr+i9Q=)
2: oKFURB35Yj7rWhlhONIb71gktEE.crl (hash: VvpFu049ZrlviVJC4IKkXqlgalJLZC1+7gPWVnNLiSI=)
3: wlqxE5iuLQB304PN7hVNM4_5h14.roa (hash: xdHQ2e13Tky6CrFmxy2+w5Er25IzDfQGHtx/iyo+wSA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c4/5b3d6d-e6f1-47ad-b52b-9d943671a8a3/1/oKFURB35Yj7rWhlhONIb71gktEE.crl
rsync://rpki.ripe.net/repository/DEFAULT/c4/5b3d6d-e6f1-47ad-b52b-9d943671a8a3/1/oKFURB35Yj7rWhlhONIb71gktEE.mft
rsync://rpki.ripe.net/repository/DEFAULT/oKFURB35Yj7rWhlhONIb71gktEE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 14 May 2025 20:00:19 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:cb:3b:db:5c:b0:9b:27:45:21:e9:5a:24:d6:b0:9c:38
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a0a154441df9623eeb5a196138d21bef5824b441
Validity
Not Before: May 13 20:00:19 2025 GMT
Not After : May 14 20:00:19 2025 GMT
Subject: CN=dea85ee9ce7e63007d7248df382ddb8fda118218
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:8a:79:1d:b3:a1:af:f4:a8:dc:3f:ad:20:e7:
07:fc:88:d2:d7:6f:c1:54:95:3b:96:bf:ff:41:c3:
6b:8a:e7:6e:15:ad:1a:f6:28:62:dc:bb:e9:41:cc:
0a:f9:4f:52:90:1d:5b:33:62:f5:f2:98:6e:0b:93:
f3:dc:dd:96:ce:17:dc:d7:18:31:d9:d2:0e:b6:f9:
35:63:9f:21:5c:5f:01:03:e9:e3:5d:93:d5:91:4a:
ad:65:56:16:0f:38:d9:c1:d4:49:68:be:4e:95:4d:
14:1f:f2:10:cf:e7:8d:94:ec:f7:ab:be:47:61:91:
f1:38:e9:a7:f1:a6:80:46:a7:9e:4d:55:03:b4:92:
24:4a:04:38:8c:44:52:91:80:27:a5:a2:b7:85:af:
7b:e1:fe:6f:22:b0:9b:89:b4:86:d8:6f:27:06:26:
3f:90:23:c4:ef:a1:0d:d1:8b:92:b9:f7:b7:46:e5:
74:f1:94:e5:84:35:37:a7:ec:5d:d3:35:b1:45:32:
52:60:9f:3d:e2:88:6e:a4:5d:33:39:10:a4:3d:56:
93:31:f9:de:31:f7:80:9f:1d:01:d3:25:d0:ef:7c:
1b:ef:65:1f:be:ba:3f:03:b0:18:19:d0:b3:73:81:
f4:3b:3b:c8:06:91:b2:6f:d2:a8:ca:b8:a3:1e:e1:
86:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DE:A8:5E:E9:CE:7E:63:00:7D:72:48:DF:38:2D:DB:8F:DA:11:82:18
X509v3 Authority Key Identifier:
keyid:A0:A1:54:44:1D:F9:62:3E:EB:5A:19:61:38:D2:1B:EF:58:24:B4:41
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/oKFURB35Yj7rWhlhONIb71gktEE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c4/5b3d6d-e6f1-47ad-b52b-9d943671a8a3/1/oKFURB35Yj7rWhlhONIb71gktEE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c4/5b3d6d-e6f1-47ad-b52b-9d943671a8a3/1/oKFURB35Yj7rWhlhONIb71gktEE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4e:90:17:57:b8:d1:9a:fe:e3:b1:76:24:9f:51:5b:4a:bb:28:
60:69:88:93:7e:f2:c3:cf:75:8e:3a:20:80:76:92:dc:ca:01:
d1:ed:dc:28:3d:84:8e:99:59:83:2e:33:e9:6e:37:97:e6:28:
f4:cb:e9:99:9f:33:d4:da:4a:62:fb:44:7b:8e:a7:47:da:91:
3c:f2:05:9e:8a:f1:1a:be:99:a0:cc:4d:f6:d8:cd:c7:fc:df:
98:18:79:d3:e7:cd:f8:fe:9a:74:9b:0f:7a:f3:68:92:8e:d9:
c3:5e:09:25:7b:e4:c9:df:40:63:83:87:bc:ce:e3:87:2c:0c:
cb:c6:eb:a0:16:55:85:cc:48:e0:c9:1d:0a:ba:ad:16:1e:be:
60:65:3b:4c:a9:7f:27:42:3a:09:ca:d0:a4:09:c8:36:4c:2a:
2d:0c:d7:05:81:5d:37:9f:d4:50:48:03:67:aa:9c:fb:8c:a5:
e4:bb:61:1d:1a:5d:cf:d1:3d:0a:72:20:3c:14:00:bf:2e:0d:
dc:01:8b:67:0f:cc:c3:35:b3:86:b3:97:2d:8f:ed:78:a2:da:
74:ec:f0:5c:55:10:d1:7c:1a:71:f9:a7:80:ca:64:c8:56:47:
62:6d:7e:61:96:14:e4:d1:57:c0:ca:1b:a5:72:e7:3c:45:ca:
b9:be:06:d6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 14 03:03:24 2025 by rpki-client