Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f9/23b3ce-9922-42fb-a124-48093fb6c67f/1/oHejVvB-B0yubybn9Yk9zp2sitM.mft
File: oHejVvB-B0yubybn9Yk9zp2sitM.mft (raw, json)
Hash identifier: n3U4DkmdMg8T7ESozOkdJ9hCJabs99+3K7oteqo7eHc=
Subject key identifier: 2E:53:49:06:A9:A4:54:C0:E5:E1:B3:0D:C5:AA:CF:C4:6C:41:4D:54
Authority key identifier: A0:77:A3:56:F0:7E:07:4C:AE:6F:26:E7:F5:89:3D:CE:9D:AC:8A:D3
Certificate issuer: /CN=a077a356f07e074cae6f26e7f5893dce9dac8ad3
Certificate serial: 0196BBFFB008094385B1FE6FA8068D52DC76
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/oHejVvB-B0yubybn9Yk9zp2sitM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f9/23b3ce-9922-42fb-a124-48093fb6c67f/1/oHejVvB-B0yubybn9Yk9zp2sitM.mft
Manifest number: 1022
Signing time: Sat 10 May 2025 21:00:18 +0000
Manifest this update: Sat 10 May 2025 21:00:18 +0000
Manifest next update: Sun 11 May 2025 21:00:18 +0000
Files and hashes: 1: lxW4zSYAimUluowH0s8gP36GI8E.roa (hash: ACOT5wzA2KcUFV8Qgc3AQN3HAUIG6x6Guns6Pzhv5rk=)
2: oHejVvB-B0yubybn9Yk9zp2sitM.crl (hash: OeE+2OSxuDZsjER+2e5fuL831H0jQ/bfxxX/pM0Srjk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f9/23b3ce-9922-42fb-a124-48093fb6c67f/1/oHejVvB-B0yubybn9Yk9zp2sitM.crl
rsync://rpki.ripe.net/repository/DEFAULT/f9/23b3ce-9922-42fb-a124-48093fb6c67f/1/oHejVvB-B0yubybn9Yk9zp2sitM.mft
rsync://rpki.ripe.net/repository/DEFAULT/oHejVvB-B0yubybn9Yk9zp2sitM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 11 May 2025 21:00:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:bb:ff:b0:08:09:43:85:b1:fe:6f:a8:06:8d:52:dc:76
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a077a356f07e074cae6f26e7f5893dce9dac8ad3
Validity
Not Before: May 10 21:00:18 2025 GMT
Not After : May 11 21:00:18 2025 GMT
Subject: CN=2e534906a9a454c0e5e1b30dc5aacfc46c414d54
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e9:5d:99:b4:fd:51:f2:2d:c1:11:d0:30:08:c1:
bf:cb:31:84:f9:3b:37:2c:9e:6b:a4:cc:c6:1d:32:
af:83:0a:c2:6d:c1:b9:a8:c7:82:c8:d3:88:48:6f:
30:ad:96:7b:f6:44:49:29:40:89:c8:36:8d:fb:79:
39:6f:2d:e1:0c:1c:3f:3b:ed:ae:3c:7f:44:2c:42:
05:11:f0:d1:eb:ed:d7:ad:8c:f6:fc:7a:a0:8f:3f:
13:01:37:c2:bf:6c:50:74:e4:2b:47:2a:cf:ca:aa:
e9:1c:a1:6e:a3:51:69:c8:72:fd:21:b1:95:73:5d:
05:5f:a9:d3:5b:d5:15:7a:b5:38:87:15:d6:2a:88:
70:bd:46:61:7f:71:98:53:79:64:51:4f:6f:be:30:
6f:5f:58:f5:d7:aa:8f:25:15:52:bf:87:93:a3:0a:
af:b8:90:11:ea:80:c9:d9:bd:15:ae:da:8b:aa:9c:
48:76:fb:64:7b:d2:af:df:2f:44:36:2b:00:6f:8f:
af:64:b2:1e:f8:a4:85:3a:8e:76:f1:ee:ae:ae:46:
d9:7a:45:ef:9c:4f:41:e5:77:a9:0a:71:2e:b8:c2:
0e:17:f2:bd:14:cf:fd:26:a0:5b:65:59:88:9b:c1:
cb:86:42:8f:df:9e:09:61:c1:9c:7a:08:a6:ea:5a:
fe:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2E:53:49:06:A9:A4:54:C0:E5:E1:B3:0D:C5:AA:CF:C4:6C:41:4D:54
X509v3 Authority Key Identifier:
keyid:A0:77:A3:56:F0:7E:07:4C:AE:6F:26:E7:F5:89:3D:CE:9D:AC:8A:D3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/oHejVvB-B0yubybn9Yk9zp2sitM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f9/23b3ce-9922-42fb-a124-48093fb6c67f/1/oHejVvB-B0yubybn9Yk9zp2sitM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f9/23b3ce-9922-42fb-a124-48093fb6c67f/1/oHejVvB-B0yubybn9Yk9zp2sitM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9a:0f:ce:b1:1b:e9:0e:f8:fd:2c:3d:c4:98:95:2a:a0:81:2f:
b8:b8:58:19:7e:51:c6:09:fb:38:8e:51:03:15:58:49:58:bd:
29:a2:99:46:1b:c3:e6:98:d7:90:94:e5:e5:ee:ef:7e:30:41:
a5:9e:d1:08:9f:d3:ae:7b:59:db:36:c1:b8:b2:cf:9b:2a:db:
f0:a7:e9:ca:bb:3a:bc:b5:d8:a1:4d:e3:07:e1:d0:ab:20:a7:
2d:22:f4:a9:49:72:13:c3:d1:17:33:68:17:64:da:12:36:c8:
db:42:72:42:04:49:77:a2:3a:90:84:3f:ba:02:e2:d2:a4:9f:
f0:61:69:ed:af:a5:55:e1:55:63:00:2f:5e:63:84:88:ec:b9:
3f:6c:10:aa:0c:9c:89:4f:16:12:8a:2b:49:39:b8:61:18:c6:
41:c4:34:f6:51:95:7f:3e:aa:d5:09:4c:58:7a:ea:7a:0a:a8:
29:b4:79:7a:41:08:cc:b8:ed:76:55:b2:ed:08:8e:c1:57:ea:
26:b4:06:44:72:04:39:f5:db:a4:2a:ef:c2:25:cc:ff:62:40:
50:ac:7d:62:c2:9b:93:ca:cc:3b:c8:5a:48:81:83:55:16:69:
7e:c5:69:d3:76:98:bc:14:69:05:55:ad:be:46:49:f2:a8:f3:
d7:83:ee:65
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 11 05:32:05 2025 by rpki-client