Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fe/0ef403-9eff-4048-872e-4f43195d196f/1/oisfTQq0ODaycVOQgo2QdyzJ2No.mft
File: oisfTQq0ODaycVOQgo2QdyzJ2No.mft (raw, json)
Hash identifier: c8+almR4zxrjjQ1U0qQlQ79y7PacvApd+EwRLqJSnGQ=
Subject key identifier: 46:07:53:6A:56:EC:B4:28:72:1F:F2:68:FA:82:17:58:C8:5B:CF:55
Authority key identifier: A2:2B:1F:4D:0A:B4:38:36:B2:71:53:90:82:8D:90:77:2C:C9:D8:DA
Certificate issuer: /CN=a22b1f4d0ab43836b2715390828d90772cc9d8da
Certificate serial: 0196C83B1160084C609086E25F2CF8E7BFD9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/oisfTQq0ODaycVOQgo2QdyzJ2No.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fe/0ef403-9eff-4048-872e-4f43195d196f/1/oisfTQq0ODaycVOQgo2QdyzJ2No.mft
Manifest number: 0402
Signing time: Tue 13 May 2025 06:00:36 +0000
Manifest this update: Tue 13 May 2025 06:00:36 +0000
Manifest next update: Wed 14 May 2025 06:00:36 +0000
Files and hashes: 1: k7Y-Fi38UuRFP0meJSeQGqi_KaA.roa (hash: JhnVrlDDk0WiXfNjueDV4ScJZ+zIOFgIC2tv2w+Bb00=)
2: oisfTQq0ODaycVOQgo2QdyzJ2No.crl (hash: HSae42EAl2xFq/owQa+dA7sr2vmqFeROm4UXuzqfqL4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fe/0ef403-9eff-4048-872e-4f43195d196f/1/oisfTQq0ODaycVOQgo2QdyzJ2No.crl
rsync://rpki.ripe.net/repository/DEFAULT/fe/0ef403-9eff-4048-872e-4f43195d196f/1/oisfTQq0ODaycVOQgo2QdyzJ2No.mft
rsync://rpki.ripe.net/repository/DEFAULT/oisfTQq0ODaycVOQgo2QdyzJ2No.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 13 May 2025 23:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:c8:3b:11:60:08:4c:60:90:86:e2:5f:2c:f8:e7:bf:d9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a22b1f4d0ab43836b2715390828d90772cc9d8da
Validity
Not Before: May 13 06:00:36 2025 GMT
Not After : May 14 06:00:36 2025 GMT
Subject: CN=4607536a56ecb428721ff268fa821758c85bcf55
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:7f:43:4d:6b:72:4e:e6:a1:17:45:98:ee:17:
ae:0d:68:9c:fd:75:dc:1b:7e:d4:a7:57:4e:84:57:
33:a0:86:54:38:ed:41:3c:d6:d4:bf:92:a3:81:37:
33:ca:1f:00:61:4d:0a:68:7c:95:d3:e2:fb:5c:e4:
9d:59:3a:3e:0d:78:ce:7a:79:46:5f:16:f1:d8:ac:
18:a9:ba:ed:a5:c3:ea:08:24:bf:df:52:9a:e6:65:
5e:0a:3a:ff:0a:ae:40:f1:35:00:db:46:94:c9:ab:
f9:58:87:a2:e8:dc:19:d8:85:f7:0f:fa:72:9b:f5:
fd:fb:2a:2b:58:88:1a:f1:2a:fd:80:23:7c:96:20:
e7:15:00:f7:76:1f:12:ec:28:af:bc:99:cf:b9:74:
62:58:68:7b:be:5d:f8:e6:0a:a8:6b:e2:4c:f2:72:
7f:7d:32:18:64:66:2a:5e:3e:f2:6d:ff:41:39:20:
a2:24:c8:74:8f:70:0f:a0:44:f0:bf:67:93:37:9f:
4a:e7:3d:5a:71:9f:eb:ac:ff:ff:fe:d3:fd:89:6f:
4a:4b:74:75:2e:f9:6a:26:64:fe:e5:f5:6b:c7:59:
d0:e1:e2:f1:b2:52:59:9b:97:e1:a7:91:84:b5:e9:
0c:34:a0:c1:c3:f8:36:ab:59:aa:d5:83:40:51:a8:
81:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
46:07:53:6A:56:EC:B4:28:72:1F:F2:68:FA:82:17:58:C8:5B:CF:55
X509v3 Authority Key Identifier:
keyid:A2:2B:1F:4D:0A:B4:38:36:B2:71:53:90:82:8D:90:77:2C:C9:D8:DA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/oisfTQq0ODaycVOQgo2QdyzJ2No.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/0ef403-9eff-4048-872e-4f43195d196f/1/oisfTQq0ODaycVOQgo2QdyzJ2No.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/0ef403-9eff-4048-872e-4f43195d196f/1/oisfTQq0ODaycVOQgo2QdyzJ2No.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
03:8c:96:b7:43:9d:de:05:5a:9c:c0:1c:5c:e1:ca:51:1e:fc:
0c:e3:25:9b:0d:d0:5b:ac:58:61:56:34:37:f9:e3:75:37:39:
cd:6b:38:a5:ad:28:77:a9:67:e7:04:87:6e:44:55:39:a4:e9:
81:bb:9e:13:97:c1:0d:e3:dd:1c:2e:af:f4:4a:0c:07:ff:6f:
5a:22:51:83:57:15:53:9d:0e:db:bd:76:68:9e:ec:06:18:26:
0c:cd:d9:b4:bf:7b:41:5b:9a:ac:af:0e:87:1c:86:60:8e:7d:
bd:36:03:c8:78:b4:a9:4c:11:ae:72:9f:b5:b9:4e:29:c4:36:
61:55:68:1d:1e:1b:5d:cd:ad:c0:38:3d:71:c4:64:87:b5:b6:
17:e6:2f:31:39:0e:b7:d2:80:35:fd:37:2b:0b:6f:1c:8d:d7:
0a:fc:7c:87:52:30:cd:28:86:15:52:67:75:23:75:0e:a1:dc:
fc:56:2c:fe:5d:a9:4e:bd:4a:a6:60:17:4b:88:0a:7c:4b:66:
e0:eb:35:ae:62:92:ca:3c:9a:e1:b4:6e:82:0d:f3:91:85:fa:
e5:62:8a:b2:7a:ce:b2:74:9a:b3:2c:98:ad:ef:50:58:2b:ef:
97:ea:ed:ae:f6:ca:4d:3f:7c:ed:35:db:80:ca:6a:39:5f:d5:
6e:b6:50:b3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 13 08:00:51 2025 by rpki-client