Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e0/0c363c-2d0e-4bca-a9f2-813c5aab783e/1/oGOa3x4LhLn_ZOT46-Y4679dJ7k.mft
File: oGOa3x4LhLn_ZOT46-Y4679dJ7k.mft (raw, json)
Hash identifier: sIDH5QEHboNrk5pyu7Mxfv7ShnDPF8wDBNHtx4rdJNw=
Subject key identifier: A5:7B:F6:AD:C2:B8:51:76:B4:7B:CE:DD:49:54:98:62:D1:35:34:17
Authority key identifier: A0:63:9A:DF:1E:0B:84:B9:FF:64:E4:F8:EB:E6:38:EB:BF:5D:27:B9
Certificate issuer: /CN=a0639adf1e0b84b9ff64e4f8ebe638ebbf5d27b9
Certificate serial: 0196BDB72D3B41733FC77862E71CE7D449B9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/oGOa3x4LhLn_ZOT46-Y4679dJ7k.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e0/0c363c-2d0e-4bca-a9f2-813c5aab783e/1/oGOa3x4LhLn_ZOT46-Y4679dJ7k.mft
Manifest number: 1535
Signing time: Sun 11 May 2025 05:00:20 +0000
Manifest this update: Sun 11 May 2025 05:00:20 +0000
Manifest next update: Mon 12 May 2025 05:00:20 +0000
Files and hashes: 1: 7C0eLiHaSivPjWvCeJI7OYyeX0w.roa (hash: QECF5Dw9n/dUuIXbwLPUz1r2SDqHk19ywfPN3IJ1Bjo=)
2: YL2mjFkL3ptl5VIC6FUskxqO4nY.roa (hash: jZ9khSDfHMU1HP/GDGXtwMlzTdVqjL0AwmhZP5bokp4=)
3: oGOa3x4LhLn_ZOT46-Y4679dJ7k.crl (hash: Q9ETM1Z5WEpUzkgKVn+hw2lZcRc4cfaKVjVrxdKlkPQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e0/0c363c-2d0e-4bca-a9f2-813c5aab783e/1/oGOa3x4LhLn_ZOT46-Y4679dJ7k.crl
rsync://rpki.ripe.net/repository/DEFAULT/e0/0c363c-2d0e-4bca-a9f2-813c5aab783e/1/oGOa3x4LhLn_ZOT46-Y4679dJ7k.mft
rsync://rpki.ripe.net/repository/DEFAULT/oGOa3x4LhLn_ZOT46-Y4679dJ7k.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 12 May 2025 05:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:bd:b7:2d:3b:41:73:3f:c7:78:62:e7:1c:e7:d4:49:b9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a0639adf1e0b84b9ff64e4f8ebe638ebbf5d27b9
Validity
Not Before: May 11 05:00:20 2025 GMT
Not After : May 12 05:00:20 2025 GMT
Subject: CN=a57bf6adc2b85176b47bcedd49549862d1353417
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:b6:e4:7d:35:6f:45:b6:c1:a5:90:87:46:b9:
d3:1c:7e:5b:a2:70:95:a3:12:0d:2a:c5:45:11:db:
e8:89:fd:14:1e:7c:27:72:be:d0:d4:7c:16:a5:06:
5a:2f:f3:31:96:37:6b:f0:e0:17:95:b3:bb:0e:00:
af:ca:2d:88:33:26:8c:37:fc:d0:d1:af:f2:f2:9f:
f3:d5:a6:3b:ca:39:fc:c3:8b:74:2c:42:d9:36:89:
44:a1:03:06:83:88:6a:29:94:1c:c6:f2:45:c3:7f:
71:e6:11:f3:c8:a3:e9:4a:c9:a8:b2:54:56:b6:45:
92:98:51:53:e8:29:a6:57:5b:35:a0:27:0a:c4:85:
e8:6b:0c:d5:60:95:3c:7c:e6:17:93:b7:ae:7e:5f:
63:cb:db:f8:ad:f0:cd:fd:62:87:d3:e7:87:d3:9e:
23:89:58:6e:e2:d2:76:ad:30:3b:db:d6:d8:62:42:
00:32:98:eb:87:23:e8:4b:ce:dd:2c:93:7c:c3:46:
04:ba:dc:74:ec:86:6c:7e:a6:21:49:60:02:ef:b4:
a9:c5:03:11:67:0c:84:bd:72:c2:f9:de:33:ec:99:
a8:40:29:83:92:ff:86:b4:94:b8:2b:9f:d8:0d:04:
72:58:24:64:85:2c:aa:ef:c9:1c:38:89:e9:60:59:
9c:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A5:7B:F6:AD:C2:B8:51:76:B4:7B:CE:DD:49:54:98:62:D1:35:34:17
X509v3 Authority Key Identifier:
keyid:A0:63:9A:DF:1E:0B:84:B9:FF:64:E4:F8:EB:E6:38:EB:BF:5D:27:B9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/oGOa3x4LhLn_ZOT46-Y4679dJ7k.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/0c363c-2d0e-4bca-a9f2-813c5aab783e/1/oGOa3x4LhLn_ZOT46-Y4679dJ7k.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/0c363c-2d0e-4bca-a9f2-813c5aab783e/1/oGOa3x4LhLn_ZOT46-Y4679dJ7k.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3b:20:9f:b6:a5:2e:65:da:b8:8f:48:64:b4:f7:eb:a9:81:e2:
83:63:fe:b5:ca:b4:37:8c:86:6c:59:d0:55:9a:60:d5:e2:63:
37:bb:46:c5:96:ee:33:04:3a:9e:2b:94:f1:3c:c4:06:0c:a4:
aa:3f:a7:98:df:9c:80:78:6e:b7:f7:50:1f:4e:e5:b2:35:2e:
c7:ce:c0:55:b2:7c:9b:ff:00:45:01:09:8d:97:cc:74:dc:8e:
72:1e:64:a4:ad:43:8a:18:31:00:bb:f3:77:98:60:5e:95:bc:
7d:7e:13:b4:fd:fd:51:b5:eb:94:80:06:61:80:99:21:e5:d7:
d1:df:d1:4f:eb:73:38:04:f3:74:78:98:ca:f2:55:3a:a0:d5:
29:93:5a:cd:ce:cf:13:14:10:bc:ed:14:e0:1d:5f:34:b9:18:
1a:4e:4b:4e:14:3b:a3:6f:6a:ea:a3:b3:e7:f1:0d:8d:5e:f9:
f5:fe:e6:e2:4d:94:64:31:7e:cb:0b:cc:e0:3c:72:91:11:5e:
42:0c:8f:a5:c7:a8:d1:6d:69:ae:5a:2e:ad:fc:79:ce:bf:05:
35:d4:fe:f2:95:6c:1f:63:77:24:b6:1e:3c:e8:7c:f2:4a:ce:
c0:a2:b5:e1:e6:10:c1:01:ab:f0:ff:55:99:30:cf:c0:b9:de:
32:13:08:dc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 11 15:07:51 2025 by rpki-client