Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cb/9c72ae-8365-4f50-825e-f82137e00bc3/1/oej-6X2jZbZICCGxi-35_CNVOCY.mft
File: oej-6X2jZbZICCGxi-35_CNVOCY.mft (raw, json)
Hash identifier: FDx43US329xhy44ehI4G/UkZ7oKOULuL3Q1srz/IYFg=
Subject key identifier: AB:A3:CA:7D:9A:9A:7E:0C:1E:47:C7:FA:B4:A9:F4:E2:EA:CD:46:A0
Authority key identifier: A1:E8:FE:E9:7D:A3:65:B6:48:08:21:B1:8B:ED:F9:FC:23:55:38:26
Certificate issuer: /CN=a1e8fee97da365b6480821b18bedf9fc23553826
Certificate serial: 0196BCA4F54007E27D03B7C62940C33D3F96
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/oej-6X2jZbZICCGxi-35_CNVOCY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cb/9c72ae-8365-4f50-825e-f82137e00bc3/1/oej-6X2jZbZICCGxi-35_CNVOCY.mft
Manifest number: 0C19
Signing time: Sun 11 May 2025 00:00:49 +0000
Manifest this update: Sun 11 May 2025 00:00:49 +0000
Manifest next update: Mon 12 May 2025 00:00:49 +0000
Files and hashes: 1: 4DXia6r4DTEgUbfUdc0kmvwmm1Y.roa (hash: Z6UcUFwAm3cKPg0mR+/9vcq4H9MwUtI5vEk+Pz3XR3A=)
2: oej-6X2jZbZICCGxi-35_CNVOCY.crl (hash: JnqU928LZZn4tML39bnfGeLggAq0WuMOkpcGV/CAGSc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cb/9c72ae-8365-4f50-825e-f82137e00bc3/1/oej-6X2jZbZICCGxi-35_CNVOCY.crl
rsync://rpki.ripe.net/repository/DEFAULT/cb/9c72ae-8365-4f50-825e-f82137e00bc3/1/oej-6X2jZbZICCGxi-35_CNVOCY.mft
rsync://rpki.ripe.net/repository/DEFAULT/oej-6X2jZbZICCGxi-35_CNVOCY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 12 May 2025 00:00:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:bc:a4:f5:40:07:e2:7d:03:b7:c6:29:40:c3:3d:3f:96
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a1e8fee97da365b6480821b18bedf9fc23553826
Validity
Not Before: May 11 00:00:49 2025 GMT
Not After : May 12 00:00:49 2025 GMT
Subject: CN=aba3ca7d9a9a7e0c1e47c7fab4a9f4e2eacd46a0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e7:6c:9d:aa:d0:10:a4:83:8a:d7:58:fe:27:93:
ae:b9:38:6c:be:44:09:d0:fa:7a:64:65:20:29:03:
e5:dc:6c:51:32:f0:36:16:38:ad:6c:1a:bb:56:df:
8d:7b:78:d7:40:16:ae:70:7b:71:69:29:9c:85:6b:
e5:4d:fb:81:0b:c2:29:88:9f:04:2f:9f:ab:47:b6:
db:bc:19:80:c6:1b:c6:0c:7c:a2:17:f8:30:e5:87:
c4:4e:10:3b:86:20:fb:88:57:fd:ba:6d:3c:74:18:
e6:6f:e0:c3:7b:56:51:53:07:29:4d:01:c4:4a:3e:
00:ca:09:0c:9c:14:fe:b1:27:d2:5a:d7:fa:27:24:
4e:a0:88:99:be:1b:d6:34:41:9c:8c:bc:3b:31:1f:
f2:c9:73:ca:dc:4a:ea:d6:e5:1e:75:10:66:1e:b2:
9d:dc:ee:ea:23:82:81:8c:42:aa:b7:c3:f4:55:13:
e5:74:c1:55:5a:37:6b:3b:40:54:40:38:ef:b3:cd:
ab:76:36:50:99:c4:59:22:c4:ca:dd:da:51:ac:d0:
ff:17:30:37:02:08:36:c6:8f:66:e9:3c:d1:e6:1b:
f4:c3:c5:72:d9:6d:c2:9c:09:07:d4:31:d3:f4:ce:
bb:61:28:a0:61:f0:1e:64:85:40:51:cd:13:a9:f9:
bb:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AB:A3:CA:7D:9A:9A:7E:0C:1E:47:C7:FA:B4:A9:F4:E2:EA:CD:46:A0
X509v3 Authority Key Identifier:
keyid:A1:E8:FE:E9:7D:A3:65:B6:48:08:21:B1:8B:ED:F9:FC:23:55:38:26
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/oej-6X2jZbZICCGxi-35_CNVOCY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cb/9c72ae-8365-4f50-825e-f82137e00bc3/1/oej-6X2jZbZICCGxi-35_CNVOCY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cb/9c72ae-8365-4f50-825e-f82137e00bc3/1/oej-6X2jZbZICCGxi-35_CNVOCY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
94:fe:8c:47:ee:26:47:ba:49:01:0d:3b:42:b7:1a:cd:e0:51:
be:d5:5e:c5:c2:06:a9:1b:d3:ee:11:2d:6d:77:3a:a8:02:17:
47:7b:ce:25:5c:73:65:99:f9:83:ff:f7:1e:97:3b:b5:79:51:
e3:34:ea:30:c6:d5:55:a1:bd:a6:fd:c7:a1:73:b7:91:ed:c8:
f7:63:76:c3:0d:cb:22:dc:f0:79:8f:4a:ef:ef:ba:74:c2:1e:
3d:8e:77:a7:a5:b4:59:1c:e7:70:af:39:3b:5b:5a:d5:5a:35:
fc:93:0e:f1:9c:5f:01:e3:29:a4:33:12:4a:cb:0c:fe:30:0e:
4c:76:5a:a4:b0:71:b7:ff:18:f4:c3:2e:c1:85:2a:c0:3f:19:
63:12:bd:48:d5:b8:cb:f1:52:04:83:0c:62:5c:07:b2:3d:35:
c3:80:14:30:19:58:9f:f5:f1:db:1f:32:dc:65:0c:dc:04:c0:
6e:a9:96:f4:34:e0:17:85:b0:6a:ec:70:30:44:75:b3:1a:57:
98:eb:2b:17:d7:42:e0:a7:de:d0:b9:78:ea:63:14:d9:ea:71:
a2:66:bb:07:70:5b:48:93:bb:2e:01:42:09:cb:1d:ec:49:f1:
3e:f6:7d:6f:c5:de:37:cd:e9:16:1f:37:2b:57:cc:45:71:f8:
f4:61:ac:99
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 11 10:30:16 2025 by rpki-client