Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/79/91717c-eb77-4e83-8eaa-e123e4e303e1/1/Okj-BwTkrJXjpw6VvrhEJcMWua0.mft
File: Okj-BwTkrJXjpw6VvrhEJcMWua0.mft (raw, json)
Hash identifier: DSpGerNwEqNPBhCBTcpbWBgey3nVkH+ZpW4XY1v9ECw=
Subject key identifier: 4B:E2:42:5C:64:BE:E6:86:61:A5:85:A5:89:E2:47:7B:7B:7C:5F:42
Authority key identifier: 3A:48:FE:07:04:E4:AC:95:E3:A7:0E:95:BE:B8:44:25:C3:16:B9:AD
Certificate issuer: /CN=3a48fe0704e4ac95e3a70e95beb84425c316b9ad
Certificate serial: 01962D4F48C6DA2F794C8FE4A73F71FE4FFB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Okj-BwTkrJXjpw6VvrhEJcMWua0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/79/91717c-eb77-4e83-8eaa-e123e4e303e1/1/Okj-BwTkrJXjpw6VvrhEJcMWua0.mft
Manifest number: 1003
Signing time: Sun 13 Apr 2025 04:01:32 +0000
Manifest this update: Sun 13 Apr 2025 04:01:32 +0000
Manifest next update: Mon 14 Apr 2025 04:01:32 +0000
Files and hashes: 1: Okj-BwTkrJXjpw6VvrhEJcMWua0.crl (hash: nXojjLkTy9uPlJ19RBh2ihDg7UBnYovVuToT3+tZm68=)
2: jBg4c1TddaMZ79OO2ACO6rgKQkE.roa (hash: vxMjeBuQHvoGxQ3EbvzgsnvZ7fj/adVRxxvAS0tcfsE=)
3: yN3-coe-yJTzFymhuWAPFUYAkF4.roa (hash: IPNSpgYWxN2jcOf0NhOGeg6e+K9d2+ZzIVVpZsFLZDI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/79/91717c-eb77-4e83-8eaa-e123e4e303e1/1/Okj-BwTkrJXjpw6VvrhEJcMWua0.crl
rsync://rpki.ripe.net/repository/DEFAULT/79/91717c-eb77-4e83-8eaa-e123e4e303e1/1/Okj-BwTkrJXjpw6VvrhEJcMWua0.mft
rsync://rpki.ripe.net/repository/DEFAULT/Okj-BwTkrJXjpw6VvrhEJcMWua0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 14 Apr 2025 04:01:32 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:2d:4f:48:c6:da:2f:79:4c:8f:e4:a7:3f:71:fe:4f:fb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3a48fe0704e4ac95e3a70e95beb84425c316b9ad
Validity
Not Before: Apr 13 04:01:32 2025 GMT
Not After : Apr 14 04:01:32 2025 GMT
Subject: CN=4be2425c64bee68661a585a589e2477b7b7c5f42
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:fe:95:2e:5d:5b:e4:e8:76:39:ff:bf:9a:02:
ba:1b:aa:cc:9b:e0:0f:1b:14:40:e2:74:2a:0a:c2:
5d:5f:2b:18:6a:41:65:73:25:f2:1b:e6:35:ff:ed:
44:ab:5a:8f:f8:3c:83:3c:b5:ee:fb:27:2a:a3:dc:
68:18:a4:70:2d:21:4c:d6:58:3e:91:d4:7f:7e:ae:
c1:e5:16:95:2f:c5:ab:ea:99:db:7f:7d:c6:ee:97:
d4:d8:02:e7:f4:52:f4:65:00:dd:02:b8:65:86:bd:
32:a4:5f:87:1e:52:89:ea:a2:9a:c2:95:84:45:c7:
fd:10:56:00:dc:96:74:09:85:95:5d:83:ce:66:f6:
13:48:76:20:83:5b:ba:2f:6a:db:92:f8:2d:ee:10:
ee:dd:14:1a:f9:e9:66:24:89:93:d3:67:c1:e0:7e:
64:88:a6:31:63:a7:f7:2e:69:51:43:9d:de:15:52:
26:4d:81:67:94:68:18:7b:d9:b3:72:a2:17:1f:a7:
4a:27:cb:0a:95:68:d9:a1:eb:16:30:c2:be:6d:84:
5d:d7:d5:58:7a:0b:47:21:3f:70:f1:d2:ed:99:a5:
a3:87:3d:c3:76:03:fd:16:24:2d:ce:d0:9e:ee:21:
98:7b:89:01:6a:06:58:81:cd:82:0b:9c:c7:b6:36:
e3:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4B:E2:42:5C:64:BE:E6:86:61:A5:85:A5:89:E2:47:7B:7B:7C:5F:42
X509v3 Authority Key Identifier:
keyid:3A:48:FE:07:04:E4:AC:95:E3:A7:0E:95:BE:B8:44:25:C3:16:B9:AD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Okj-BwTkrJXjpw6VvrhEJcMWua0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/79/91717c-eb77-4e83-8eaa-e123e4e303e1/1/Okj-BwTkrJXjpw6VvrhEJcMWua0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/79/91717c-eb77-4e83-8eaa-e123e4e303e1/1/Okj-BwTkrJXjpw6VvrhEJcMWua0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6b:29:d4:b9:5d:32:ee:bf:7e:8c:1a:fb:57:0a:b1:ff:cf:1c:
aa:0b:2c:4a:0d:c9:ac:e0:bb:51:f4:62:56:ff:66:3d:4c:a5:
57:ef:02:6e:c2:74:89:b7:bc:2a:9e:57:54:b2:36:b5:8e:3c:
90:dd:33:be:5e:8c:31:35:30:29:dc:3d:bd:c9:0e:5c:ef:50:
b2:dd:1c:e1:e1:b7:ac:08:e9:e8:fd:c5:5a:24:eb:58:aa:84:
c0:f9:e2:e2:8b:62:53:79:54:60:f6:42:d5:0e:97:ec:8e:c7:
97:27:1e:83:3c:00:2d:db:d5:cb:3f:ad:fe:4e:ba:b7:bc:a9:
3d:00:27:70:1e:8b:e5:60:82:bb:e8:5f:8f:5a:3d:09:ef:89:
49:bd:06:ea:8b:4e:c9:42:c8:8a:b4:7c:3e:f7:c5:45:14:c9:
63:ec:69:b9:d3:b9:a6:42:e9:4b:ce:47:0f:b5:b5:cc:e3:a4:
dd:78:54:e0:7b:c9:11:fb:a8:10:13:4f:8b:3e:07:ca:a8:1e:
fc:00:fa:aa:05:2e:4d:6c:50:55:61:72:c9:74:a6:c2:04:f1:
51:90:44:23:90:5e:b0:9f:06:c2:f8:67:af:75:5c:ae:34:87:
f2:74:c9:40:6c:7c:21:f5:e9:84:6f:ee:75:26:d7:63:34:59:
ba:09:f5:21
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 13 14:09:28 2025 by rpki-client