Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ee/dffbc8-b149-46b4-bbb8-31ea2094b557/1/OIN-SKr1mLyrVKX8iuQ7F74lQik.mft
File: OIN-SKr1mLyrVKX8iuQ7F74lQik.mft (raw, json)
Hash identifier: cAFhXqMCck8/AES/MdxpNML/bEY/551Bp8LRd7RMLTI=
Subject key identifier: C5:2D:D9:9A:EE:18:88:E0:31:CC:02:92:6B:70:00:2A:B0:B3:65:BA
Authority key identifier: 38:83:7E:48:AA:F5:98:BC:AB:54:A5:FC:8A:E4:3B:17:BE:25:42:29
Certificate issuer: /CN=38837e48aaf598bcab54a5fc8ae43b17be254229
Certificate serial: 0196C1CAC44DFA0FFB03412DC780929AE8EA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OIN-SKr1mLyrVKX8iuQ7F74lQik.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ee/dffbc8-b149-46b4-bbb8-31ea2094b557/1/OIN-SKr1mLyrVKX8iuQ7F74lQik.mft
Manifest number: 0BB4
Signing time: Mon 12 May 2025 00:00:13 +0000
Manifest this update: Mon 12 May 2025 00:00:13 +0000
Manifest next update: Tue 13 May 2025 00:00:13 +0000
Files and hashes: 1: Mbpk8QVkIW5FKgYutE5nhEuorhg.roa (hash: XJAfJvP6njUJvUjL+QeRVdBXhasJwe6UWIW0OOiZ2es=)
2: OIN-SKr1mLyrVKX8iuQ7F74lQik.crl (hash: Moj6EwEIYt0nviRnx2kw1TSsRSHrXKTaE/7sL8Hucow=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ee/dffbc8-b149-46b4-bbb8-31ea2094b557/1/OIN-SKr1mLyrVKX8iuQ7F74lQik.crl
rsync://rpki.ripe.net/repository/DEFAULT/ee/dffbc8-b149-46b4-bbb8-31ea2094b557/1/OIN-SKr1mLyrVKX8iuQ7F74lQik.mft
rsync://rpki.ripe.net/repository/DEFAULT/OIN-SKr1mLyrVKX8iuQ7F74lQik.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 13 May 2025 00:00:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:c1:ca:c4:4d:fa:0f:fb:03:41:2d:c7:80:92:9a:e8:ea
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=38837e48aaf598bcab54a5fc8ae43b17be254229
Validity
Not Before: May 12 00:00:13 2025 GMT
Not After : May 13 00:00:13 2025 GMT
Subject: CN=c52dd99aee1888e031cc02926b70002ab0b365ba
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:25:ef:0e:cd:42:8b:81:bd:ec:45:b3:8b:67:
4e:e2:62:68:82:ee:57:12:54:64:6b:c5:25:71:da:
7d:29:91:42:2c:f9:52:57:fc:13:96:be:51:b7:1b:
b9:19:ce:c2:61:be:5b:bb:18:38:06:1f:89:4e:1a:
f5:19:5d:0d:a3:57:01:ce:b1:35:f1:c3:90:44:01:
ae:b3:77:99:9a:1f:b0:9b:bc:db:34:55:20:65:12:
81:3c:3b:1f:6f:96:52:b1:96:0f:2a:13:95:aa:f1:
61:ce:45:ca:3d:52:f9:3f:32:1e:7f:8f:41:31:08:
7d:dd:47:f5:e4:98:37:43:69:bf:03:51:57:72:12:
13:cb:6c:76:88:8b:ea:3e:92:a9:be:75:2e:23:e7:
34:3f:fc:e2:4a:d4:64:14:23:6e:aa:05:e8:ae:05:
86:c5:5e:3e:57:04:73:d1:4c:33:8e:c9:80:2c:61:
26:a4:93:94:b5:6d:5f:a8:7f:e7:68:c0:11:71:23:
17:73:c2:8e:57:2e:70:50:68:30:94:dd:f8:b3:ca:
a4:02:16:a2:ac:b0:cb:53:e1:59:91:28:96:30:17:
f4:75:13:d9:9f:59:de:78:8d:8f:03:7f:2e:43:9c:
3f:94:d7:7b:5c:2f:12:28:2d:db:b4:7c:31:7d:d1:
c9:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C5:2D:D9:9A:EE:18:88:E0:31:CC:02:92:6B:70:00:2A:B0:B3:65:BA
X509v3 Authority Key Identifier:
keyid:38:83:7E:48:AA:F5:98:BC:AB:54:A5:FC:8A:E4:3B:17:BE:25:42:29
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OIN-SKr1mLyrVKX8iuQ7F74lQik.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ee/dffbc8-b149-46b4-bbb8-31ea2094b557/1/OIN-SKr1mLyrVKX8iuQ7F74lQik.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ee/dffbc8-b149-46b4-bbb8-31ea2094b557/1/OIN-SKr1mLyrVKX8iuQ7F74lQik.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1e:d9:32:3b:c0:9e:e0:c4:5f:04:27:39:82:b7:d6:07:35:1d:
72:de:b1:e5:93:e3:92:7b:96:dd:b4:a8:0e:68:87:f5:80:07:
d3:0a:7d:a6:2d:54:a5:77:a1:b2:1a:09:bf:36:fa:28:d3:e8:
b4:34:e6:ff:e7:2a:ce:d4:37:a0:7d:d1:ec:12:30:3b:7f:58:
71:89:40:cd:70:30:b6:ef:d9:1e:fc:c3:7d:4b:60:f6:70:7a:
68:d3:a8:ec:f1:fa:9d:fd:50:ec:f6:70:14:99:c7:fc:ea:70:
71:8e:ce:4b:b2:3e:df:7a:5d:11:3b:2d:be:15:4e:90:4e:5c:
e3:a3:39:06:72:60:86:88:f6:21:2c:74:8c:42:9b:77:da:d4:
fb:84:44:b4:4e:43:ef:f6:1c:f0:08:96:1c:77:6d:63:06:d3:
04:e7:82:10:a5:92:bf:5b:17:3c:90:76:e2:34:a4:42:15:71:
cf:fe:31:74:11:a1:0d:58:8e:6c:3d:d0:e8:4a:53:7e:42:64:
f9:6f:3c:96:13:e1:dd:07:02:92:4e:73:ed:38:f6:57:da:21:
29:0f:10:7e:11:33:82:2f:35:c4:0d:3e:ed:e8:d4:26:e1:70:
ba:f5:8f:c6:c6:52:12:ce:c3:cb:bb:80:e2:5c:67:1f:76:bd:
cb:24:9b:06
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 12 05:41:22 2025 by rpki-client