
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d1/19f229-a90f-42c4-980b-1550f2ac87b3/1/oR8gWXnS-96VdWpGoPJznXgW1Fk.mft
File: oR8gWXnS-96VdWpGoPJznXgW1Fk.mft (raw, json)
Hash identifier: HDqroUI8JYf7crUjBJXta5674r5lPUH1CyK5qmHDu8I=
Subject key identifier: AF:41:E4:27:78:4A:E9:F8:0A:17:59:E6:94:FC:50:11:90:B4:0F:B7
Authority key identifier: A1:1F:20:59:79:D2:FB:DE:95:75:6A:46:A0:F2:73:9D:78:16:D4:59
Certificate issuer: /CN=a11f205979d2fbde95756a46a0f2739d7816d459
Certificate serial: 0196DBF914ED4CDA915C74E36C4E8388B4F1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/oR8gWXnS-96VdWpGoPJznXgW1Fk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d1/19f229-a90f-42c4-980b-1550f2ac87b3/1/oR8gWXnS-96VdWpGoPJznXgW1Fk.mft
Manifest number: 1544
Signing time: Sat 17 May 2025 02:00:56 +0000
Manifest this update: Sat 17 May 2025 02:00:56 +0000
Manifest next update: Sun 18 May 2025 02:00:56 +0000
Files and hashes: 1: 6vbfFj5TD4fDaSTru2yjQXF2OFk.roa (hash: oXfLAfaVHKOErMTF1H2nSkxbh4csWsQNcGxt19vZDpM=)
2: oR8gWXnS-96VdWpGoPJznXgW1Fk.crl (hash: fLWYzYIkPbWZRy/R8QS3JVPh9/laqaZh0QQRPVznZcs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d1/19f229-a90f-42c4-980b-1550f2ac87b3/1/oR8gWXnS-96VdWpGoPJznXgW1Fk.crl
rsync://rpki.ripe.net/repository/DEFAULT/d1/19f229-a90f-42c4-980b-1550f2ac87b3/1/oR8gWXnS-96VdWpGoPJznXgW1Fk.mft
rsync://rpki.ripe.net/repository/DEFAULT/oR8gWXnS-96VdWpGoPJznXgW1Fk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 18 May 2025 02:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:db:f9:14:ed:4c:da:91:5c:74:e3:6c:4e:83:88:b4:f1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a11f205979d2fbde95756a46a0f2739d7816d459
Validity
Not Before: May 17 02:00:56 2025 GMT
Not After : May 18 02:00:56 2025 GMT
Subject: CN=af41e427784ae9f80a1759e694fc501190b40fb7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:f1:1c:11:1f:94:2c:87:a8:d0:0d:32:2c:ba:
b5:a2:ff:23:42:c7:41:a7:3f:9c:c4:61:ec:69:1c:
73:7a:eb:a3:11:2d:ec:1e:37:5c:e3:76:df:cc:f0:
dd:ac:ea:0b:6c:97:c8:6d:36:54:cd:ad:37:8d:a2:
27:d0:4a:a9:cd:8d:08:d2:21:40:22:22:0c:00:6e:
4b:0f:86:13:24:63:7a:be:da:0a:df:6a:34:aa:77:
54:c4:11:52:c7:86:03:c5:c2:13:ad:c3:f9:5d:f0:
50:66:43:4f:4a:16:69:b0:18:77:8c:1d:83:45:f0:
22:fc:bf:59:ab:3e:ee:1f:fb:47:ed:ea:aa:61:fa:
4d:8e:7d:e1:4f:d5:59:82:74:bb:2d:d1:49:eb:30:
03:01:a1:bc:b6:8e:a4:4f:24:30:37:40:93:1e:5c:
ca:0f:53:e9:74:67:79:ee:05:ce:5b:7a:bf:c3:8f:
71:b2:16:f0:08:54:c5:76:ea:e8:c7:0a:7f:51:d8:
69:42:af:da:86:21:42:49:d7:18:89:ab:5e:23:0e:
d1:f6:7f:20:93:af:d0:b1:d5:84:84:75:eb:6c:83:
9d:44:6c:2e:a0:96:d6:e4:13:bb:35:e8:06:57:50:
b1:48:2f:0b:7f:36:e3:4e:48:cc:03:a5:29:f3:f9:
96:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AF:41:E4:27:78:4A:E9:F8:0A:17:59:E6:94:FC:50:11:90:B4:0F:B7
X509v3 Authority Key Identifier:
keyid:A1:1F:20:59:79:D2:FB:DE:95:75:6A:46:A0:F2:73:9D:78:16:D4:59
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/oR8gWXnS-96VdWpGoPJznXgW1Fk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d1/19f229-a90f-42c4-980b-1550f2ac87b3/1/oR8gWXnS-96VdWpGoPJznXgW1Fk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d1/19f229-a90f-42c4-980b-1550f2ac87b3/1/oR8gWXnS-96VdWpGoPJznXgW1Fk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a2:87:88:d2:fc:dd:e8:68:17:49:aa:a7:db:ca:15:20:a0:c1:
81:5a:b0:28:a1:7b:5e:b9:34:85:2e:ae:67:1d:27:51:5a:f9:
27:0e:20:4f:8c:09:cc:a5:d6:aa:c5:e0:00:f2:ed:96:9b:66:
d5:dc:86:f1:27:ee:76:8d:2f:f1:40:72:5c:0d:84:6d:38:9d:
3e:00:17:0f:93:19:fd:ad:4d:a3:3e:d5:8f:2a:2e:26:ec:36:
20:7e:fa:b0:84:29:6c:de:e3:27:42:17:c0:01:cd:bb:da:d0:
68:62:87:fa:c2:98:0e:7b:ec:56:f3:4e:0e:26:02:97:17:f3:
2d:79:8b:10:33:15:67:5a:73:f6:a1:7f:de:7c:4c:39:c8:64:
e1:3a:c8:14:87:b6:f7:ba:8a:cc:05:c6:41:4e:c9:22:3d:33:
de:c6:7c:c9:86:fe:7b:d0:e6:86:e8:fc:93:c6:b3:ff:8a:6b:
92:18:b7:1f:40:52:22:7d:e4:bb:56:eb:ba:17:d5:99:08:8f:
0e:85:61:87:fa:56:00:89:7e:6d:ac:65:c9:3d:e2:a4:94:b2:
21:00:9d:1c:b2:3a:95:8f:11:e3:cd:f9:65:08:ea:1f:04:7b:
f2:83:23:75:8a:83:e9:e5:80:fb:90:73:e8:ab:81:7d:dd:48:
a7:39:3c:2f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 17 08:22:28 2025 by rpki-client