Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d5/8aa085-cadc-446e-bbe8-c9ec3a98f9a3/1/oWUSuKJiutWZo7AjNYxc7MrJ4IU.mft
File: oWUSuKJiutWZo7AjNYxc7MrJ4IU.mft (raw, json)
Hash identifier: K1OwJ2vEHGS7cn0Vius284aWVBxGEAr8vynXsFiHuEk=
Subject key identifier: F4:F0:A5:62:EC:22:E6:D4:46:BD:FA:AA:37:A1:AC:B1:B9:F4:65:95
Authority key identifier: A1:65:12:B8:A2:62:BA:D5:99:A3:B0:23:35:8C:5C:EC:CA:C9:E0:85
Certificate issuer: /CN=a16512b8a262bad599a3b023358c5ceccac9e085
Certificate serial: 0196A954A6D4B0149683F65C26AE6F4A0BAE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/oWUSuKJiutWZo7AjNYxc7MrJ4IU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d5/8aa085-cadc-446e-bbe8-c9ec3a98f9a3/1/oWUSuKJiutWZo7AjNYxc7MrJ4IU.mft
Manifest number: 0218
Signing time: Wed 07 May 2025 06:00:19 +0000
Manifest this update: Wed 07 May 2025 06:00:19 +0000
Manifest next update: Thu 08 May 2025 06:00:19 +0000
Files and hashes: 1: oWUSuKJiutWZo7AjNYxc7MrJ4IU.crl (hash: qyLQj2DvBQgFdMzohtHMbRPbVcvZZDGOF2uRhIl1NTw=)
2: vdKJ4VP8I-i-guYkkpwttCVrQIU.roa (hash: p+JgyUOEURGu3VWxUcx0JVwt9sD2Q41aSbbM15KWS1Q=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d5/8aa085-cadc-446e-bbe8-c9ec3a98f9a3/1/oWUSuKJiutWZo7AjNYxc7MrJ4IU.crl
rsync://rpki.ripe.net/repository/DEFAULT/d5/8aa085-cadc-446e-bbe8-c9ec3a98f9a3/1/oWUSuKJiutWZo7AjNYxc7MrJ4IU.mft
rsync://rpki.ripe.net/repository/DEFAULT/oWUSuKJiutWZo7AjNYxc7MrJ4IU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 07 May 2025 23:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:a9:54:a6:d4:b0:14:96:83:f6:5c:26:ae:6f:4a:0b:ae
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a16512b8a262bad599a3b023358c5ceccac9e085
Validity
Not Before: May 7 06:00:19 2025 GMT
Not After : May 8 06:00:19 2025 GMT
Subject: CN=f4f0a562ec22e6d446bdfaaa37a1acb1b9f46595
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:35:9d:35:4e:2a:fb:43:ae:c9:05:e6:ba:8e:
c3:cc:53:c6:61:47:6f:55:f6:92:bc:d4:cf:dc:47:
67:3e:99:17:b6:13:e3:38:1f:f6:bd:4d:47:fb:50:
72:ba:77:db:58:49:b3:0b:21:f9:5f:9a:6f:ce:63:
b8:c2:42:87:df:2b:7b:eb:96:7d:d1:7a:8e:41:11:
c3:f1:9c:e7:d5:17:00:ff:dd:27:4e:d0:b6:09:8d:
93:98:be:27:a7:8e:35:4e:e9:a2:30:db:27:40:c8:
ee:db:b1:05:87:04:83:8d:12:34:6e:89:3c:6f:3a:
39:c6:77:21:c2:d8:98:c0:f7:e8:f8:58:6b:e4:e2:
9d:70:f4:64:df:6a:b8:4e:59:45:c7:31:5d:20:c7:
d5:f6:b9:6d:59:0a:04:7b:f4:a6:35:ec:3e:5f:6d:
70:cf:06:94:17:56:b7:34:0a:91:d4:ba:71:14:60:
b5:a5:09:e1:e1:f1:7c:33:7d:93:b2:ff:46:db:d3:
7d:aa:97:97:bc:bf:aa:30:ea:13:f0:0d:68:d8:cb:
97:ee:c6:38:30:82:f6:dc:ad:88:ff:aa:14:00:2e:
8e:ec:8c:21:13:f9:19:d5:d4:c0:b2:b7:98:eb:f4:
1f:d8:86:98:7a:8d:d0:f5:51:1f:2e:25:6a:72:69:
4a:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F4:F0:A5:62:EC:22:E6:D4:46:BD:FA:AA:37:A1:AC:B1:B9:F4:65:95
X509v3 Authority Key Identifier:
keyid:A1:65:12:B8:A2:62:BA:D5:99:A3:B0:23:35:8C:5C:EC:CA:C9:E0:85
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/oWUSuKJiutWZo7AjNYxc7MrJ4IU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/8aa085-cadc-446e-bbe8-c9ec3a98f9a3/1/oWUSuKJiutWZo7AjNYxc7MrJ4IU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/8aa085-cadc-446e-bbe8-c9ec3a98f9a3/1/oWUSuKJiutWZo7AjNYxc7MrJ4IU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2a:c5:49:72:67:c6:45:e9:d0:af:f3:2a:06:3c:2a:e7:29:d2:
0c:2b:ff:4d:15:90:55:1e:1e:2b:99:cb:78:bd:4c:df:33:6f:
fa:d8:7a:f5:35:80:e5:6e:d8:6f:35:e3:2c:7e:5d:1c:b2:c1:
d8:65:bc:93:8d:29:9d:fc:f1:85:76:dd:ff:0b:d4:3d:22:4f:
96:7c:9b:2e:f4:83:b1:c4:dc:30:2b:2c:14:98:20:92:e3:72:
d9:c6:5e:05:ef:f3:ff:32:41:71:b4:4f:e0:ce:5f:f7:22:8a:
e0:1b:27:ab:d7:8f:83:37:78:b5:15:2e:ff:2f:5d:7f:e3:79:
a1:f7:7e:e2:9f:8a:cc:b1:7f:45:af:fb:0e:63:c4:e9:de:7a:
46:b3:65:e3:07:ec:86:a4:67:8c:c2:fd:4e:79:ed:4a:51:05:
1c:f0:d7:d2:d3:66:c5:b7:d3:d4:9a:d1:25:6b:2b:e2:6e:9f:
29:56:5d:a0:2e:b5:83:1e:13:df:70:1f:64:fc:43:dd:e4:41:
e5:2b:e5:a8:bd:d6:79:10:df:d6:f6:28:e7:55:66:29:85:7a:
36:2e:60:7c:59:89:2f:60:e3:eb:77:38:f0:50:fc:52:6d:73:
7f:c6:cb:3e:72:d6:2b:03:13:66:3e:fc:f2:cb:66:39:d1:4e:
b2:a4:94:2f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 7 09:28:14 2025 by rpki-client