Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c7/74aa3a-473d-4fb5-9038-81d1304faf76/1/ojguLlS2Dx9o-FyYTaGmljHFLKg.mft
File: ojguLlS2Dx9o-FyYTaGmljHFLKg.mft (raw, json)
Hash identifier: dFNHnXp66nDZUmp8VYraYI5OEZ4uR/Ly7RV4yG0v5zs=
Subject key identifier: A3:12:48:34:BE:54:86:6D:FC:82:EF:4B:58:40:08:D7:C7:8F:AB:BE
Authority key identifier: A2:38:2E:2E:54:B6:0F:1F:68:F8:5C:98:4D:A1:A6:96:31:C5:2C:A8
Certificate issuer: /CN=a2382e2e54b60f1f68f85c984da1a69631c52ca8
Certificate serial: 0196B1EA54F6AAA42F773EDC0753A1DA0602
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ojguLlS2Dx9o-FyYTaGmljHFLKg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c7/74aa3a-473d-4fb5-9038-81d1304faf76/1/ojguLlS2Dx9o-FyYTaGmljHFLKg.mft
Manifest number: 01DE
Signing time: Thu 08 May 2025 22:00:46 +0000
Manifest this update: Thu 08 May 2025 22:00:46 +0000
Manifest next update: Fri 09 May 2025 22:00:46 +0000
Files and hashes: 1: ojguLlS2Dx9o-FyYTaGmljHFLKg.crl (hash: XVk8YAmnIDH1ySPC45qvAYOv2B2EP1Y7Ng0Xx9YTNkI=)
2: tgYGsGAPJ3naxRJ-JjQBKL1Vj7c.roa (hash: cPWgxwQyZuH/gL73No34Pn5M4vHlmORZov0bMnwx4CM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c7/74aa3a-473d-4fb5-9038-81d1304faf76/1/ojguLlS2Dx9o-FyYTaGmljHFLKg.crl
rsync://rpki.ripe.net/repository/DEFAULT/c7/74aa3a-473d-4fb5-9038-81d1304faf76/1/ojguLlS2Dx9o-FyYTaGmljHFLKg.mft
rsync://rpki.ripe.net/repository/DEFAULT/ojguLlS2Dx9o-FyYTaGmljHFLKg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 09 May 2025 16:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:b1:ea:54:f6:aa:a4:2f:77:3e:dc:07:53:a1:da:06:02
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a2382e2e54b60f1f68f85c984da1a69631c52ca8
Validity
Not Before: May 8 22:00:46 2025 GMT
Not After : May 9 22:00:46 2025 GMT
Subject: CN=a3124834be54866dfc82ef4b584008d7c78fabbe
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:77:51:4a:d0:44:46:56:bc:0e:b4:b5:90:08:
41:a0:c8:8b:e7:42:ae:ac:07:76:6a:9f:6e:a2:6b:
d1:2d:73:2d:96:bd:48:2d:c3:5c:2d:44:00:99:db:
72:71:7d:eb:e5:14:12:5d:6a:5f:a4:0a:ca:da:31:
88:a3:26:32:4f:f2:63:29:f9:32:f7:92:6d:89:43:
09:b1:71:35:6a:9c:14:8b:5b:8d:b1:30:1c:09:81:
0a:e3:b6:53:56:1b:97:08:06:44:9c:7b:d5:9c:d7:
6f:a0:f1:a5:1b:f9:66:24:a8:8b:18:47:19:69:48:
56:01:1e:e7:39:5f:8b:9a:c3:7a:99:65:ed:4b:a0:
5a:ce:20:5a:f8:f3:a2:d8:e0:54:2a:ce:9a:eb:ea:
c1:6c:55:16:58:a7:51:2f:b3:2b:e6:3c:59:0d:4a:
48:88:38:40:3d:55:68:a7:3f:ee:40:5c:bd:16:08:
9e:8b:1d:ce:12:64:94:31:a0:43:ca:b2:2d:2d:28:
0a:08:38:c5:e8:60:13:70:4c:58:c8:4f:20:5b:b1:
49:db:55:02:46:63:3a:cc:cc:a6:67:95:e6:c6:2e:
c3:5a:cb:85:5e:b8:b7:ee:c8:0f:38:31:bd:be:31:
54:5f:06:8a:8e:86:cf:bc:cd:75:89:bf:db:55:89:
83:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A3:12:48:34:BE:54:86:6D:FC:82:EF:4B:58:40:08:D7:C7:8F:AB:BE
X509v3 Authority Key Identifier:
keyid:A2:38:2E:2E:54:B6:0F:1F:68:F8:5C:98:4D:A1:A6:96:31:C5:2C:A8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ojguLlS2Dx9o-FyYTaGmljHFLKg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/74aa3a-473d-4fb5-9038-81d1304faf76/1/ojguLlS2Dx9o-FyYTaGmljHFLKg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/74aa3a-473d-4fb5-9038-81d1304faf76/1/ojguLlS2Dx9o-FyYTaGmljHFLKg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
36:60:4c:b0:06:fe:88:50:76:e5:b9:88:56:25:b8:9a:11:46:
09:6c:5d:c0:06:18:c3:d5:28:84:b2:30:e3:b6:6a:81:37:4c:
3e:48:66:08:1f:a6:c5:83:5c:12:6b:e1:a0:71:61:34:e6:0e:
33:15:ec:fb:4a:98:b5:bb:e6:fe:27:4e:0d:71:e2:68:65:a8:
8f:33:e2:ba:e9:72:92:de:a5:c9:75:6d:b0:5e:81:b5:37:fc:
bb:be:fd:1f:31:01:c3:50:af:de:71:d3:2f:3d:8e:e5:04:d6:
9f:c0:bd:09:1e:d6:09:c7:84:09:30:01:2d:27:98:f4:16:13:
d1:08:68:1a:08:76:58:77:9d:df:de:ff:11:6f:57:e2:6b:5e:
39:2a:f2:83:a8:3e:0d:a8:8b:d3:f6:f7:c2:78:3b:a6:d7:de:
45:7e:27:91:1a:0a:cb:c9:7c:38:ec:4b:6b:4f:a2:47:b9:c8:
14:a1:3e:14:f9:0c:88:d2:bb:61:1c:37:3c:a3:ec:ee:5f:50:
95:f0:5e:d3:2a:73:33:3f:00:ae:cc:c8:14:0a:81:d1:09:40:
ea:cc:dd:37:78:66:dc:cf:16:6d:58:04:a2:44:46:ec:fb:d1:
59:0b:22:10:5c:6d:6e:db:15:c8:e6:f2:0d:01:8d:a7:18:7f:
57:59:00:85
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 9 02:59:01 2025 by rpki-client