Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e5/dd8878-2941-4c15-b204-8fc33737ceab/1/ogzGcVS0AxRdE5RpiGEnq2KeuSg.mft
File: ogzGcVS0AxRdE5RpiGEnq2KeuSg.mft (raw, json)
Hash identifier: oAsM7zgM7FQR1TdyCsh+VPn2Uj4ATwx+g4Q+cHYFwDU=
Subject key identifier: 6E:FE:E5:0B:D0:0D:94:DD:5E:96:F0:8D:7E:37:C9:7B:A9:82:DD:1E
Authority key identifier: A2:0C:C6:71:54:B4:03:14:5D:13:94:69:88:61:27:AB:62:9E:B9:28
Certificate issuer: /CN=a20cc67154b403145d139469886127ab629eb928
Certificate serial: 0196BB5B214FBD246B70297D2EF3AA9DD4A5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ogzGcVS0AxRdE5RpiGEnq2KeuSg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e5/dd8878-2941-4c15-b204-8fc33737ceab/1/ogzGcVS0AxRdE5RpiGEnq2KeuSg.mft
Manifest number: 0FA5
Signing time: Sat 10 May 2025 18:00:33 +0000
Manifest this update: Sat 10 May 2025 18:00:33 +0000
Manifest next update: Sun 11 May 2025 18:00:33 +0000
Files and hashes: 1: 13rU8nhg31f282Ufq4fY9epK_mk.roa (hash: 71Un032C55jpwedQZGjeiCXgaYcH9RkzCt+gCgI2Wak=)
2: DDq525mddfr-xwBo8-T-YcAlqlM.roa (hash: vbBu7r+JS7z7+nPsGEJDbq+t4cp8fYea0z6mgr+ClXE=)
3: ogzGcVS0AxRdE5RpiGEnq2KeuSg.crl (hash: A8EZfl9qmspvdVGc4V3uuPgHWWiWceNVwZiN/DuiteY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e5/dd8878-2941-4c15-b204-8fc33737ceab/1/ogzGcVS0AxRdE5RpiGEnq2KeuSg.crl
rsync://rpki.ripe.net/repository/DEFAULT/e5/dd8878-2941-4c15-b204-8fc33737ceab/1/ogzGcVS0AxRdE5RpiGEnq2KeuSg.mft
rsync://rpki.ripe.net/repository/DEFAULT/ogzGcVS0AxRdE5RpiGEnq2KeuSg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 11 May 2025 14:04:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:bb:5b:21:4f:bd:24:6b:70:29:7d:2e:f3:aa:9d:d4:a5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a20cc67154b403145d139469886127ab629eb928
Validity
Not Before: May 10 18:00:33 2025 GMT
Not After : May 11 18:00:33 2025 GMT
Subject: CN=6efee50bd00d94dd5e96f08d7e37c97ba982dd1e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8b:b8:ea:9d:33:a2:8b:55:d8:19:bf:34:a9:eb:
fa:aa:2f:d7:28:2e:0d:75:43:f1:d3:d2:23:3d:19:
07:63:d3:ea:0c:32:0e:3e:ef:5d:47:ea:11:27:b9:
d0:e2:d5:66:d1:de:d6:82:80:d5:86:e1:ad:44:6a:
83:b3:ad:81:cd:78:a5:c8:e4:33:73:99:9a:fe:18:
07:db:8f:9a:3d:cd:7d:1c:e0:ea:37:ac:c6:ef:7b:
cf:16:12:36:d9:0d:e2:68:9b:f7:03:f8:4b:38:e6:
84:a2:2e:a8:dd:fe:57:ce:8e:d9:ce:f1:e4:2a:ff:
46:ac:6a:6e:3c:f4:4c:6c:6a:9e:38:ad:92:00:e6:
07:9a:86:b0:db:07:59:a7:b8:17:f2:34:65:97:98:
1b:58:d4:92:0b:b6:10:f2:42:5c:a9:59:8a:3f:c0:
02:ea:a4:45:e5:c1:34:0c:39:50:b2:91:16:cd:50:
25:ee:3d:45:ed:c8:40:54:12:16:b0:b2:82:14:cf:
26:b4:1f:03:db:6a:9f:be:bd:ef:56:85:53:50:0f:
16:85:10:c5:11:20:96:9a:5d:22:42:98:f0:2f:db:
b1:11:a7:df:bd:90:76:d9:dd:a5:03:ee:88:08:b5:
62:19:43:06:32:d5:a3:a9:00:3c:87:b5:a6:ca:a4:
ab:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6E:FE:E5:0B:D0:0D:94:DD:5E:96:F0:8D:7E:37:C9:7B:A9:82:DD:1E
X509v3 Authority Key Identifier:
keyid:A2:0C:C6:71:54:B4:03:14:5D:13:94:69:88:61:27:AB:62:9E:B9:28
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ogzGcVS0AxRdE5RpiGEnq2KeuSg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/dd8878-2941-4c15-b204-8fc33737ceab/1/ogzGcVS0AxRdE5RpiGEnq2KeuSg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/dd8878-2941-4c15-b204-8fc33737ceab/1/ogzGcVS0AxRdE5RpiGEnq2KeuSg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
76:dc:3f:b0:8c:e0:87:9e:c4:9e:a4:86:6b:ac:19:8c:7a:45:
52:f9:91:23:5a:a3:5e:ea:cc:93:31:fd:05:d6:3d:f6:59:29:
85:ad:86:66:2b:3d:0d:b6:8e:58:8b:64:16:0a:39:f3:8c:4f:
e6:92:a7:68:1c:f6:d0:8f:84:19:26:1c:29:7e:25:1a:9a:e2:
e3:e0:35:8d:1d:14:1c:ca:3a:ea:0c:4c:0e:74:e8:2f:03:ca:
3d:0a:ff:c9:2f:b1:fb:99:46:5b:7e:94:67:ce:58:b8:1f:e6:
4d:e5:af:07:4d:b6:c9:58:25:2c:fc:da:1f:ff:cb:c2:1b:61:
ee:66:c9:65:f0:43:c8:97:d7:98:e5:31:83:e1:8b:2f:2a:a0:
9f:09:3a:eb:3c:ac:d4:e7:0a:49:f7:2b:04:d4:39:fb:5a:c0:
e2:9a:11:7f:bd:1d:95:ce:b5:6c:77:41:39:36:cd:f8:30:85:
83:74:04:47:88:ed:b3:47:e9:b3:36:66:ab:a8:43:00:f7:b6:
7c:8e:0c:90:2d:9c:10:fb:24:52:44:0d:80:9e:f8:d2:e5:f8:
99:93:dc:c9:c7:b3:b1:ba:50:f2:93:5e:f0:22:80:83:9d:03:
8a:1f:79:bc:56:48:fd:6d:3a:bc:5d:58:f3:42:43:6d:43:5b:
25:e5:e1:04
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 11 00:12:01 2025 by rpki-client