Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/66/b9117c-51c5-4af8-bbef-f5d8ab7c15f0/1/OQJ3OPl4_tokqdh7DLi7mqevVA0.mft
File: OQJ3OPl4_tokqdh7DLi7mqevVA0.mft (raw, json)
Hash identifier: o5lqFtFkCejPC1xYBjrFfO1fANRS4e/1THAfUb9evTo=
Subject key identifier: 71:27:72:7F:13:DC:12:46:B3:22:E8:A4:59:FB:02:BC:E4:57:72:89
Authority key identifier: 39:02:77:38:F9:78:FE:DA:24:A9:D8:7B:0C:B8:BB:9A:A7:AF:54:0D
Certificate issuer: /CN=39027738f978feda24a9d87b0cb8bb9aa7af540d
Certificate serial: 01965793F217C8E1AFCAD1BA6F6CE1DF9024
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OQJ3OPl4_tokqdh7DLi7mqevVA0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/66/b9117c-51c5-4af8-bbef-f5d8ab7c15f0/1/OQJ3OPl4_tokqdh7DLi7mqevVA0.mft
Manifest number: 1509
Signing time: Mon 21 Apr 2025 09:00:35 +0000
Manifest this update: Mon 21 Apr 2025 09:00:35 +0000
Manifest next update: Tue 22 Apr 2025 09:00:35 +0000
Files and hashes: 1: OQJ3OPl4_tokqdh7DLi7mqevVA0.crl (hash: ZmM5N7UtX4lkPo2KLkcXNuZSEnPhrXaBd1Ssn1X/jas=)
2: THEjTsFNcxDVZEOdq3GfXqXC4zc.roa (hash: x5CBmcScUC+Y/Wuw5WgYT+dNtpSqSEasQSVqzZJLzc4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/66/b9117c-51c5-4af8-bbef-f5d8ab7c15f0/1/OQJ3OPl4_tokqdh7DLi7mqevVA0.crl
rsync://rpki.ripe.net/repository/DEFAULT/66/b9117c-51c5-4af8-bbef-f5d8ab7c15f0/1/OQJ3OPl4_tokqdh7DLi7mqevVA0.mft
rsync://rpki.ripe.net/repository/DEFAULT/OQJ3OPl4_tokqdh7DLi7mqevVA0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 22 Apr 2025 01:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:57:93:f2:17:c8:e1:af:ca:d1:ba:6f:6c:e1:df:90:24
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=39027738f978feda24a9d87b0cb8bb9aa7af540d
Validity
Not Before: Apr 21 09:00:35 2025 GMT
Not After : Apr 22 09:00:35 2025 GMT
Subject: CN=7127727f13dc1246b322e8a459fb02bce4577289
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:b7:20:4a:48:38:c5:ca:2a:c9:c8:57:33:f0:
84:cc:d4:aa:56:e0:21:7f:60:0b:82:f2:7f:c1:f5:
81:fb:37:7c:1a:79:ee:cd:b9:51:8a:13:6e:6a:dc:
05:7a:01:c8:ee:5c:4a:20:08:62:f7:0b:e9:ff:eb:
1f:48:a8:c6:0a:4f:e1:05:90:e4:6c:e0:bc:0f:ae:
c1:d1:f8:f9:6a:7b:f7:7a:26:a8:8f:99:71:d8:c6:
29:04:6b:6c:db:7e:68:5d:c7:8c:4e:fb:28:b4:8e:
8e:80:d7:11:d5:8b:13:1a:ea:99:96:da:33:3e:d7:
62:9f:4a:9d:c2:98:42:c2:5e:bd:c7:7a:e5:91:1a:
88:b9:6e:81:6a:0f:ea:e6:88:15:8b:eb:8f:ad:2a:
6d:41:eb:50:27:fb:5b:21:2c:1f:52:c4:80:dc:1b:
b3:09:f8:10:aa:4d:a2:08:37:c0:eb:9d:36:fe:f4:
09:3a:ba:f1:1d:87:96:d1:ee:b1:35:d4:69:f9:28:
41:d5:77:f2:f5:77:16:09:2b:a0:5e:74:8d:d8:5d:
0a:e4:ec:44:59:ed:94:59:0e:b5:7a:b7:85:10:2e:
79:2a:07:f0:68:6f:15:e2:f1:82:4b:65:95:c9:03:
d7:46:7f:4e:8d:69:57:e3:56:6d:21:26:72:29:91:
9a:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
71:27:72:7F:13:DC:12:46:B3:22:E8:A4:59:FB:02:BC:E4:57:72:89
X509v3 Authority Key Identifier:
keyid:39:02:77:38:F9:78:FE:DA:24:A9:D8:7B:0C:B8:BB:9A:A7:AF:54:0D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OQJ3OPl4_tokqdh7DLi7mqevVA0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/66/b9117c-51c5-4af8-bbef-f5d8ab7c15f0/1/OQJ3OPl4_tokqdh7DLi7mqevVA0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/66/b9117c-51c5-4af8-bbef-f5d8ab7c15f0/1/OQJ3OPl4_tokqdh7DLi7mqevVA0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7e:98:9c:cc:58:be:f4:29:f9:ab:8a:ec:0a:15:22:e8:c8:d6:
38:ff:ee:36:e7:44:50:e3:72:60:86:a3:37:30:db:5b:38:47:
7c:74:cc:bc:f5:1e:fc:32:15:20:c4:a0:87:7f:fd:c9:89:fd:
c2:48:fc:c7:bf:8a:59:2f:c4:2c:5e:cc:17:ad:45:45:e0:2b:
d1:23:57:16:9d:f8:80:6b:d2:de:39:94:bb:5d:df:f8:a6:de:
e8:c1:ff:f0:95:92:b8:b4:fe:da:d2:13:f9:e3:da:b8:0c:72:
ed:76:a5:2e:97:a0:77:5f:f0:26:6a:70:6b:b1:10:b9:fe:bd:
67:1d:dd:41:8e:ad:86:bb:85:f3:33:41:49:08:2a:a9:ec:05:
ef:4c:33:40:3d:25:d0:d0:3f:18:95:8b:9f:e7:60:cf:8d:a3:
7a:66:52:23:f8:29:9b:0f:cf:2b:15:2c:88:a4:ce:1f:a8:6e:
04:97:35:b0:6c:c8:38:a1:07:fd:21:87:01:b0:ea:b3:a5:21:
f8:77:e9:d4:49:8a:e7:70:be:5c:86:7a:83:9f:1e:9d:74:5d:
30:7d:f1:52:a5:eb:46:42:17:7f:84:97:b1:6f:bb:23:17:6d:
3f:e4:bc:3d:d9:a6:fb:bb:5e:87:46:e2:21:6f:cb:88:ca:ba:
dc:f5:24:41
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 21 10:43:34 2025 by rpki-client