Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/43/761a3e-880e-4f7c-9366-c8cc5b2d0aed/1/_otJRFUnf_UwAlzvLVHffquORRA.mft
File: _otJRFUnf_UwAlzvLVHffquORRA.mft (raw, json)
Hash identifier: G9C9heWx0wKOL6oVR2MwbgmfuOFqaXSTmtt4e46wpP8=
Subject key identifier: 24:DC:93:9E:45:A3:FD:DB:69:D9:6A:2B:18:ED:39:F8:62:66:E9:65
Authority key identifier: FE:8B:49:44:55:27:7F:F5:30:02:5C:EF:2D:51:DF:7E:AB:8E:45:10
Certificate issuer: /CN=fe8b494455277ff530025cef2d51df7eab8e4510
Certificate serial: 0196556EC18C57B5432FAEE101E597D51CB0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_otJRFUnf_UwAlzvLVHffquORRA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/43/761a3e-880e-4f7c-9366-c8cc5b2d0aed/1/_otJRFUnf_UwAlzvLVHffquORRA.mft
Manifest number: 08E5
Signing time: Sun 20 Apr 2025 23:00:43 +0000
Manifest this update: Sun 20 Apr 2025 23:00:43 +0000
Manifest next update: Mon 21 Apr 2025 23:00:43 +0000
Files and hashes: 1: Oc5Exwy6ZGrRe3cJEpFcoAoZ8LY.roa (hash: GCIh2gF/E3yjQMebTbwaKQU3aGp4E0TQ+qUjMjQObt4=)
2: _otJRFUnf_UwAlzvLVHffquORRA.crl (hash: WAeZrKHexW8YNtbMKkkFZNiXHtDYtmmHVOV5/jQcb1Q=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/43/761a3e-880e-4f7c-9366-c8cc5b2d0aed/1/_otJRFUnf_UwAlzvLVHffquORRA.crl
rsync://rpki.ripe.net/repository/DEFAULT/43/761a3e-880e-4f7c-9366-c8cc5b2d0aed/1/_otJRFUnf_UwAlzvLVHffquORRA.mft
rsync://rpki.ripe.net/repository/DEFAULT/_otJRFUnf_UwAlzvLVHffquORRA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 21 Apr 2025 16:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:55:6e:c1:8c:57:b5:43:2f:ae:e1:01:e5:97:d5:1c:b0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fe8b494455277ff530025cef2d51df7eab8e4510
Validity
Not Before: Apr 20 23:00:43 2025 GMT
Not After : Apr 21 23:00:43 2025 GMT
Subject: CN=24dc939e45a3fddb69d96a2b18ed39f86266e965
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ed:e5:22:dd:1f:cf:44:33:64:20:0f:cf:3d:95:
4a:dd:53:d7:c6:f6:6b:54:c7:aa:c3:eb:0d:49:af:
31:ae:7b:47:4c:92:91:66:88:bf:ad:e2:d6:bc:02:
51:af:e0:ff:59:af:e1:7d:9f:a7:0c:23:2a:ae:c4:
80:51:7e:98:c5:02:2e:cd:99:0f:25:e2:78:a5:0a:
5e:d3:d6:ee:dd:7a:ce:f2:53:7b:75:c9:ec:63:20:
fa:b2:0f:fe:24:6f:ed:6c:80:7c:e4:d4:05:39:81:
22:d7:59:ac:4b:72:e1:c1:00:d0:5e:55:15:4e:73:
87:e1:84:7f:1e:15:ad:94:83:1d:32:14:4e:f3:49:
e3:55:30:fb:19:ca:2b:5f:45:8c:af:ad:5c:0e:95:
f9:6e:ee:69:a3:7b:2b:02:d0:86:c3:0a:64:a3:46:
ec:83:e0:6e:c7:41:91:8d:3f:b5:08:f4:d9:f5:d0:
3b:77:2d:c2:be:e7:97:a4:2c:6c:1a:e6:7f:52:0d:
c7:ef:1b:35:03:4c:73:97:b4:a6:39:7d:3a:dc:c6:
97:9b:a7:55:7f:91:30:2c:43:bf:4b:e0:c9:d2:3f:
70:ca:7c:97:6d:76:fb:7e:16:49:b9:2d:07:51:d6:
a7:9b:8b:c7:fc:73:56:71:1c:11:6b:9a:68:39:67:
29:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
24:DC:93:9E:45:A3:FD:DB:69:D9:6A:2B:18:ED:39:F8:62:66:E9:65
X509v3 Authority Key Identifier:
keyid:FE:8B:49:44:55:27:7F:F5:30:02:5C:EF:2D:51:DF:7E:AB:8E:45:10
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_otJRFUnf_UwAlzvLVHffquORRA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/43/761a3e-880e-4f7c-9366-c8cc5b2d0aed/1/_otJRFUnf_UwAlzvLVHffquORRA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/43/761a3e-880e-4f7c-9366-c8cc5b2d0aed/1/_otJRFUnf_UwAlzvLVHffquORRA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
95:ad:51:b8:45:f1:b0:41:6f:3a:6a:dd:26:aa:bd:74:48:27:
49:a8:7f:1c:ac:1d:c1:fd:0b:30:5a:90:0b:da:eb:20:33:f5:
2b:b5:70:cc:25:b9:4a:cb:dc:a0:9c:d9:27:08:42:48:e5:e4:
ec:6e:ac:71:03:a8:65:53:60:8f:1c:36:29:e4:e4:41:06:ec:
90:d1:19:31:b4:12:e8:dc:8f:4e:cf:91:2c:c5:43:67:d3:fc:
ab:9a:6d:75:7e:ea:cb:34:63:cf:4f:0c:2b:e1:fb:4b:b6:86:
78:af:f0:7a:af:bc:83:e9:3d:1a:a2:ec:0b:bc:9c:dc:33:79:
85:e1:67:80:c5:56:d4:ac:cd:2f:78:c4:45:1b:56:be:ee:9b:
d7:1f:92:2f:5c:d8:78:37:dc:2a:b1:ae:00:43:da:25:60:08:
4d:6b:ed:5a:43:3e:43:0b:3a:a1:d2:f6:b7:d1:17:ab:c5:ee:
7b:bf:8d:82:30:70:46:a2:ff:42:d1:b9:46:e7:eb:02:cc:1d:
14:73:95:06:6f:b0:a6:de:ba:2f:2d:8d:9f:08:15:ed:e6:db:
49:76:ed:8a:93:94:47:1f:2b:4c:13:55:5d:9b:d4:83:c4:38:
12:51:a2:3a:a2:6e:f0:53:1a:c0:3d:09:ef:db:f0:81:7c:1b:
15:63:90:06
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 21 01:18:53 2025 by rpki-client