Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d7/0c9dbb-f2ef-4f15-8b2e-643e447444d6/1/_OJaykNP7rb1c6pGOhLGlAvE0Zg.mft
File: _OJaykNP7rb1c6pGOhLGlAvE0Zg.mft (raw, json)
Hash identifier: DoiVFGK6GHCkd7U2GB2TuljB6QXu5M1hPQsCh4SZMl0=
Subject key identifier: D4:D6:89:50:91:B9:34:ED:22:B9:87:44:9E:52:D1:D9:12:68:CE:F4
Authority key identifier: FC:E2:5A:CA:43:4F:EE:B6:F5:73:AA:46:3A:12:C6:94:0B:C4:D1:98
Certificate issuer: /CN=fce25aca434feeb6f573aa463a12c6940bc4d198
Certificate serial: 0196C314D3FF563933EA18B7D29D5141C30C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_OJaykNP7rb1c6pGOhLGlAvE0Zg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d7/0c9dbb-f2ef-4f15-8b2e-643e447444d6/1/_OJaykNP7rb1c6pGOhLGlAvE0Zg.mft
Manifest number: 153A
Signing time: Mon 12 May 2025 06:00:43 +0000
Manifest this update: Mon 12 May 2025 06:00:43 +0000
Manifest next update: Tue 13 May 2025 06:00:43 +0000
Files and hashes: 1: PIvjtjk0bcL1uBI75s2x-HEScf0.roa (hash: zVKNd6h1T8gwJhJ85/3bttBRHKLXvm4f0amj7KVDyew=)
2: _OJaykNP7rb1c6pGOhLGlAvE0Zg.crl (hash: 9Z5kklV17hBcj73k3evINi7IV+6rfP7qH9kRlalWVIk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d7/0c9dbb-f2ef-4f15-8b2e-643e447444d6/1/_OJaykNP7rb1c6pGOhLGlAvE0Zg.crl
rsync://rpki.ripe.net/repository/DEFAULT/d7/0c9dbb-f2ef-4f15-8b2e-643e447444d6/1/_OJaykNP7rb1c6pGOhLGlAvE0Zg.mft
rsync://rpki.ripe.net/repository/DEFAULT/_OJaykNP7rb1c6pGOhLGlAvE0Zg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 13 May 2025 06:00:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:c3:14:d3:ff:56:39:33:ea:18:b7:d2:9d:51:41:c3:0c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fce25aca434feeb6f573aa463a12c6940bc4d198
Validity
Not Before: May 12 06:00:43 2025 GMT
Not After : May 13 06:00:43 2025 GMT
Subject: CN=d4d6895091b934ed22b987449e52d1d91268cef4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:b0:a8:5f:d8:5d:5a:e8:14:33:9b:7b:92:b2:
6e:e8:35:df:85:8f:46:3f:fe:e9:b1:80:eb:6e:e3:
aa:25:bd:45:b1:f0:b4:de:dd:45:8e:ce:7b:76:a9:
80:a3:2d:68:0e:e8:95:8b:e8:8e:54:1c:ec:8c:aa:
9d:97:d9:c9:d7:d6:fc:10:47:2a:b0:ed:cd:59:df:
74:f5:e1:cc:b3:c5:90:a0:45:af:db:90:05:d4:cb:
cd:2a:2c:92:82:38:3e:10:c4:e7:e8:60:c8:61:e9:
39:96:f3:ee:d9:a6:6b:a0:d4:c7:80:55:7d:86:aa:
96:ff:ce:54:2c:e4:f7:8a:fd:68:e6:fd:13:17:cb:
83:e1:51:97:1d:b9:27:f4:19:66:f6:bc:f9:80:8c:
67:44:2d:be:c9:50:2c:aa:8b:c6:ce:d8:fd:2d:b2:
db:84:26:0a:6b:79:03:8e:88:32:4a:a4:1f:4d:44:
b0:10:5b:dd:18:65:62:47:72:8d:29:af:61:df:62:
79:34:91:fa:6e:0f:62:e8:6c:0b:39:ef:f8:8d:83:
c4:81:a2:da:d1:4f:57:77:db:67:0b:c6:78:47:7a:
5c:68:b2:d1:81:9a:9a:54:21:f2:c6:04:e7:9b:28:
de:8d:e5:3e:ce:e8:23:fc:29:22:1a:fb:58:42:f4:
d5:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D4:D6:89:50:91:B9:34:ED:22:B9:87:44:9E:52:D1:D9:12:68:CE:F4
X509v3 Authority Key Identifier:
keyid:FC:E2:5A:CA:43:4F:EE:B6:F5:73:AA:46:3A:12:C6:94:0B:C4:D1:98
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_OJaykNP7rb1c6pGOhLGlAvE0Zg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/0c9dbb-f2ef-4f15-8b2e-643e447444d6/1/_OJaykNP7rb1c6pGOhLGlAvE0Zg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/0c9dbb-f2ef-4f15-8b2e-643e447444d6/1/_OJaykNP7rb1c6pGOhLGlAvE0Zg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8b:42:38:d1:8a:40:81:0f:9d:9f:30:90:c2:89:10:e0:f1:d3:
91:e5:19:80:e0:18:6b:10:b9:58:7e:29:1b:35:0e:b0:1a:d1:
3b:e8:a7:6c:14:41:3e:26:b4:5e:a7:c1:d3:a3:08:cb:a9:3e:
8d:04:c0:61:5e:f0:68:40:ae:a2:11:88:49:d5:e1:77:73:25:
c7:aa:3c:f2:dc:25:e9:a4:13:55:1c:a6:05:15:72:b7:6b:5b:
74:dc:d7:2f:77:21:51:28:9f:1f:df:36:c8:63:45:a6:39:22:
11:26:a9:db:10:e2:00:49:76:8b:bf:e4:6b:53:4c:57:f1:eb:
25:99:a6:30:33:fc:50:33:a5:a0:06:32:ca:22:0e:9d:3d:05:
c6:b3:ce:6e:2c:1c:ae:14:f4:c7:6c:f4:22:6f:6b:a8:16:3a:
ff:e2:ec:b9:7c:2e:8e:39:91:53:92:47:3a:69:f1:80:c8:8a:
ca:b7:09:31:ac:51:a7:24:fb:45:9e:a9:37:25:6c:82:b4:9c:
05:cb:9d:09:02:d6:1b:61:2d:de:26:64:94:19:e0:3c:67:20:
58:5a:c4:d7:26:4e:46:ed:5c:7c:0e:46:03:40:98:fb:a4:22:
3c:4b:eb:c4:19:e3:02:2c:23:88:2c:ce:74:a8:c0:d9:51:40:
ba:cb:70:aa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 12 13:56:29 2025 by rpki-client