Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f2/fc7657-063e-4af7-89e6-f9fea34b6b01/1/OYhH9wo15xCETpu4omK-3bQLfMk.mft
File: OYhH9wo15xCETpu4omK-3bQLfMk.mft (raw, json)
Hash identifier: MisB/2U5OE0jXlNSwI0sSn1s87yBn8WmLbMyeQruAzo=
Subject key identifier: 84:4B:D2:C8:CD:D6:53:57:2B:B0:F0:77:46:4B:BD:9E:E8:B0:77:A9
Authority key identifier: 39:88:47:F7:0A:35:E7:10:84:4E:9B:B8:A2:62:BE:DD:B4:0B:7C:C9
Certificate issuer: /CN=398847f70a35e710844e9bb8a262beddb40b7cc9
Certificate serial: 0196A5AF7025DB7A207489192305995AAF2C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OYhH9wo15xCETpu4omK-3bQLfMk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f2/fc7657-063e-4af7-89e6-f9fea34b6b01/1/OYhH9wo15xCETpu4omK-3bQLfMk.mft
Manifest number: 02EB
Signing time: Tue 06 May 2025 13:01:00 +0000
Manifest this update: Tue 06 May 2025 13:01:00 +0000
Manifest next update: Wed 07 May 2025 13:01:00 +0000
Files and hashes: 1: AKsS4j3-VaOHBWSMj23g7vx6Zz4.roa (hash: U4YaSKjxHoIRGGCP7ydVCxsh9Cu5QYl71iaS4zOmA2c=)
2: OYhH9wo15xCETpu4omK-3bQLfMk.crl (hash: OvD2DfD5OiM2hzfdeub9H9gKMXICJaphv6VlISv+G/E=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f2/fc7657-063e-4af7-89e6-f9fea34b6b01/1/OYhH9wo15xCETpu4omK-3bQLfMk.crl
rsync://rpki.ripe.net/repository/DEFAULT/f2/fc7657-063e-4af7-89e6-f9fea34b6b01/1/OYhH9wo15xCETpu4omK-3bQLfMk.mft
rsync://rpki.ripe.net/repository/DEFAULT/OYhH9wo15xCETpu4omK-3bQLfMk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 07 May 2025 13:01:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:a5:af:70:25:db:7a:20:74:89:19:23:05:99:5a:af:2c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=398847f70a35e710844e9bb8a262beddb40b7cc9
Validity
Not Before: May 6 13:01:00 2025 GMT
Not After : May 7 13:01:00 2025 GMT
Subject: CN=844bd2c8cdd653572bb0f077464bbd9ee8b077a9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:c4:59:1c:e3:5d:92:1b:44:93:ed:f5:1b:4e:
dc:23:7c:07:dc:62:99:47:0b:11:ad:b6:fa:5d:31:
cc:dd:7e:3a:09:63:6f:9b:7b:b9:1d:87:0a:34:fe:
18:f9:3a:85:db:04:e1:25:7f:53:82:55:a6:68:88:
12:9f:b8:3d:d5:49:1a:23:55:a2:ef:ed:55:b4:63:
13:c5:13:93:0a:bf:f3:66:f3:93:90:6d:fc:44:de:
14:a5:6f:64:00:52:3f:ed:ba:e0:69:32:c0:ed:e6:
f6:18:1d:57:09:13:9c:08:7d:71:38:f5:20:8e:c0:
30:a3:55:3b:5e:0b:b7:8b:eb:2d:1b:6d:fd:b8:78:
4c:d0:5f:98:c6:7b:ae:58:84:8c:22:2b:97:dd:d1:
9c:cb:ef:3b:36:46:8e:93:9b:8c:24:a7:7c:cf:ba:
fc:8b:82:18:9c:87:38:18:12:79:ef:10:c2:ca:e2:
47:73:e4:36:44:fb:a3:d2:40:e7:09:0b:d3:83:16:
9e:d4:07:d3:bb:18:ee:7f:46:e6:07:5b:6a:cc:39:
21:d6:f3:e2:ab:92:39:9e:fd:2f:1f:9d:39:55:07:
64:1b:2b:44:bc:c8:51:5a:9d:b0:43:62:17:d1:26:
cd:0b:ee:a8:b8:ca:ec:a0:6f:ca:61:53:97:2d:32:
45:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
84:4B:D2:C8:CD:D6:53:57:2B:B0:F0:77:46:4B:BD:9E:E8:B0:77:A9
X509v3 Authority Key Identifier:
keyid:39:88:47:F7:0A:35:E7:10:84:4E:9B:B8:A2:62:BE:DD:B4:0B:7C:C9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OYhH9wo15xCETpu4omK-3bQLfMk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/fc7657-063e-4af7-89e6-f9fea34b6b01/1/OYhH9wo15xCETpu4omK-3bQLfMk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/fc7657-063e-4af7-89e6-f9fea34b6b01/1/OYhH9wo15xCETpu4omK-3bQLfMk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
58:28:46:60:67:99:67:cd:e3:6b:96:c9:17:de:5b:51:e5:e2:
1e:dd:e1:c7:fc:ec:84:4e:f4:c5:d3:de:46:37:97:bb:54:d4:
8e:1b:e1:be:aa:22:a7:e7:72:d1:b3:be:dd:62:a4:26:a2:e9:
51:22:b0:74:70:0a:6d:c6:5c:e7:c7:2c:79:c4:c3:13:84:28:
22:14:40:8a:b7:25:0d:ed:ff:9e:b5:4c:17:51:32:a9:57:e3:
b2:68:6f:9f:85:19:f2:90:1a:fc:28:36:79:e9:e0:69:74:f6:
9f:c1:cd:f3:63:84:11:36:1b:3d:5e:c1:11:33:01:92:85:77:
79:c9:69:cf:63:22:4b:45:ce:02:53:87:e7:5c:4f:c6:fc:78:
89:ff:67:bf:de:6e:8f:2c:e8:46:40:08:79:c4:0f:0b:5d:5d:
cc:e0:b6:8f:0d:a2:96:e4:23:76:30:28:e8:06:3b:ad:7e:68:
19:f9:58:3e:cf:99:03:fb:11:1c:ce:b0:53:50:7f:10:e2:e9:
67:52:c5:a2:f5:ce:b3:86:bb:ef:ee:08:4b:d8:a2:d0:c4:3e:
2c:ae:49:df:28:92:3a:e6:fe:c8:83:60:b4:3f:7d:7d:62:ed:
4a:bc:90:e5:4e:82:6d:cc:e8:24:81:70:06:37:ea:69:71:a8:
d0:5c:60:e6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 6 14:47:42 2025 by rpki-client