Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d9/83a77d-9cad-40de-abed-c4d42b7f6270/1/ogAYZIx6-hREZNR7seLLK6eG67E.mft
File: ogAYZIx6-hREZNR7seLLK6eG67E.mft (raw, json)
Hash identifier: GOibM0kTxU7hHJ9JJFazLmLGYX+l/wQY/ohUv6TK5bw=
Subject key identifier: AE:46:53:4A:24:E9:31:F3:71:29:F2:A3:FF:4C:1A:EC:12:46:C5:4A
Authority key identifier: A2:00:18:64:8C:7A:FA:14:44:64:D4:7B:B1:E2:CB:2B:A7:86:EB:B1
Certificate issuer: /CN=a20018648c7afa144464d47bb1e2cb2ba786ebb1
Certificate serial: 0196CBE1163F49966D8D28C73A68C3FAAACE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ogAYZIx6-hREZNR7seLLK6eG67E.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d9/83a77d-9cad-40de-abed-c4d42b7f6270/1/ogAYZIx6-hREZNR7seLLK6eG67E.mft
Manifest number: 0244
Signing time: Tue 13 May 2025 23:00:48 +0000
Manifest this update: Tue 13 May 2025 23:00:48 +0000
Manifest next update: Wed 14 May 2025 23:00:48 +0000
Files and hashes: 1: Hg_LuWwF2PqnDP--QEmiR8s_JMw.roa (hash: pTVkg9vcSnhojGDdhaJdcSnTn9EzuAwvN69LeVjj+eI=)
2: ZyIFjDXNoQmTUrQTfRFil604EkI.roa (hash: w5vJh9LGNygfKftlkH12Umx5kIPwjNAoWDXEhQaobKc=)
3: ogAYZIx6-hREZNR7seLLK6eG67E.crl (hash: SvSqBHhoacCrhTw/GYRV9wdTVWSdWSz3FdOBKiKvxic=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d9/83a77d-9cad-40de-abed-c4d42b7f6270/1/ogAYZIx6-hREZNR7seLLK6eG67E.crl
rsync://rpki.ripe.net/repository/DEFAULT/d9/83a77d-9cad-40de-abed-c4d42b7f6270/1/ogAYZIx6-hREZNR7seLLK6eG67E.mft
rsync://rpki.ripe.net/repository/DEFAULT/ogAYZIx6-hREZNR7seLLK6eG67E.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 14 May 2025 22:19:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:cb:e1:16:3f:49:96:6d:8d:28:c7:3a:68:c3:fa:aa:ce
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a20018648c7afa144464d47bb1e2cb2ba786ebb1
Validity
Not Before: May 13 23:00:48 2025 GMT
Not After : May 14 23:00:48 2025 GMT
Subject: CN=ae46534a24e931f37129f2a3ff4c1aec1246c54a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:cd:0e:ea:0a:2e:d6:43:29:8f:61:d3:f5:3e:
42:8b:06:59:66:67:80:57:b6:a5:e3:c2:80:96:4b:
03:42:11:5d:c0:7e:e8:17:cb:12:68:5f:d8:bc:c7:
5b:ff:a7:09:bf:bc:c7:cb:bf:25:6e:32:79:00:63:
95:61:2f:fc:64:bc:15:ac:47:08:69:b6:4c:88:25:
60:f3:ee:0b:e6:e2:db:fa:b7:99:d0:76:a4:e7:42:
06:dd:4b:94:cf:42:e9:69:5c:c7:b8:ce:5a:57:9a:
cb:a6:cc:4a:9b:76:d2:c2:9a:35:19:ce:50:a5:7f:
f9:3a:07:f4:ef:7d:e5:79:4f:cb:44:2d:ac:4f:a5:
b6:ba:ef:92:be:26:79:5d:cd:47:cd:b7:f8:96:12:
b9:de:c2:90:07:85:68:cb:91:ca:d2:91:e0:af:9c:
05:c0:8f:8b:96:95:82:a0:64:4e:7f:5d:8b:49:3a:
4b:6b:fb:2d:3a:4c:e8:c9:7b:6d:8d:da:a1:15:45:
a3:9b:79:e6:6e:3d:b8:46:ff:fe:48:b9:c6:b0:ca:
84:16:2e:a2:4e:68:4d:e5:79:9d:23:14:d7:75:1e:
57:e3:a9:7f:85:ef:77:40:b1:ab:81:47:e8:28:b6:
8e:cc:f4:14:03:19:02:59:a0:9d:ec:65:0a:5d:c9:
69:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AE:46:53:4A:24:E9:31:F3:71:29:F2:A3:FF:4C:1A:EC:12:46:C5:4A
X509v3 Authority Key Identifier:
keyid:A2:00:18:64:8C:7A:FA:14:44:64:D4:7B:B1:E2:CB:2B:A7:86:EB:B1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ogAYZIx6-hREZNR7seLLK6eG67E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/83a77d-9cad-40de-abed-c4d42b7f6270/1/ogAYZIx6-hREZNR7seLLK6eG67E.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/83a77d-9cad-40de-abed-c4d42b7f6270/1/ogAYZIx6-hREZNR7seLLK6eG67E.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
d5:a0:06:f9:c3:33:69:da:64:ec:09:e0:ae:23:83:f5:11:86:
b1:ce:86:6a:85:1f:b1:e6:5e:c0:29:a7:91:23:53:7b:0a:09:
a2:26:85:1d:6b:f1:65:ad:7d:e4:09:78:5e:73:fe:3b:48:5d:
2f:ec:97:22:27:7a:a0:39:c2:76:8d:6a:93:bb:b5:ff:25:a1:
d5:98:de:68:ab:40:01:38:e7:2f:5c:c0:a1:a8:ad:8f:58:9a:
fc:e8:ee:4d:11:38:d2:11:8a:53:e8:40:52:24:fa:85:64:f1:
c8:71:b8:5d:23:74:0c:d7:7a:38:ee:fb:04:3a:0d:7c:81:6c:
54:98:ba:a5:8a:55:7c:b6:9e:5a:cc:75:9d:8b:90:57:72:19:
6e:80:df:73:a9:e0:b6:7c:7a:be:b6:ec:7d:b3:c4:ab:a2:7f:
33:8c:7e:26:ab:d4:02:89:09:ce:a4:74:c4:2d:e1:77:f5:10:
1b:e1:5e:65:16:c8:14:6b:99:08:83:16:74:c7:ed:dd:ed:1d:
a6:ee:a0:b4:f4:3e:a4:bd:12:26:0a:51:17:36:19:a2:27:5e:
56:1e:81:0a:be:9f:0d:94:e8:4f:6d:41:82:48:da:de:d7:df:
eb:ef:db:e0:ee:c9:8c:e6:e0:5e:84:84:2c:01:0b:fe:30:7a:
47:84:0c:5b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 14 06:02:49 2025 by rpki-client