Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7c/cc8e7a-e413-43ff-aa59-0914ad24a3e4/1/o8cchkWd50u9NaPMv9iuXZy00tg.mft
File: o8cchkWd50u9NaPMv9iuXZy00tg.mft (raw, json)
Hash identifier: 8eq9/oDVohMEk2anZUHl/mcNrCIGuQmGcWPIn9dWk4s=
Subject key identifier: C9:7B:A1:B9:FA:A8:C0:F1:49:82:C5:67:84:FC:D6:5C:58:38:DE:31
Authority key identifier: A3:C7:1C:86:45:9D:E7:4B:BD:35:A3:CC:BF:D8:AE:5D:9C:B4:D2:D8
Certificate issuer: /CN=a3c71c86459de74bbd35a3ccbfd8ae5d9cb4d2d8
Certificate serial: 01964B59114A77BF736DBCE0EBA7BEA61777
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/o8cchkWd50u9NaPMv9iuXZy00tg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7c/cc8e7a-e413-43ff-aa59-0914ad24a3e4/1/o8cchkWd50u9NaPMv9iuXZy00tg.mft
Manifest number: 0DAB
Signing time: Sat 19 Apr 2025 00:00:50 +0000
Manifest this update: Sat 19 Apr 2025 00:00:50 +0000
Manifest next update: Sun 20 Apr 2025 00:00:50 +0000
Files and hashes: 1: UK3kp7DVS-fpdp_PyKKZBPAEkaQ.roa (hash: 8KxM7G0u96R3lRI3p6WhEJjK8omSDAMQXe8llr10HQ8=)
2: o8cchkWd50u9NaPMv9iuXZy00tg.crl (hash: n8i5wa1mQIVfFAPnNLUa78M4Z8eqsUZtyCNvQP4tZwc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7c/cc8e7a-e413-43ff-aa59-0914ad24a3e4/1/o8cchkWd50u9NaPMv9iuXZy00tg.crl
rsync://rpki.ripe.net/repository/DEFAULT/7c/cc8e7a-e413-43ff-aa59-0914ad24a3e4/1/o8cchkWd50u9NaPMv9iuXZy00tg.mft
rsync://rpki.ripe.net/repository/DEFAULT/o8cchkWd50u9NaPMv9iuXZy00tg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 19 Apr 2025 19:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:4b:59:11:4a:77:bf:73:6d:bc:e0:eb:a7:be:a6:17:77
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a3c71c86459de74bbd35a3ccbfd8ae5d9cb4d2d8
Validity
Not Before: Apr 19 00:00:50 2025 GMT
Not After : Apr 20 00:00:50 2025 GMT
Subject: CN=c97ba1b9faa8c0f14982c56784fcd65c5838de31
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:05:47:31:65:76:2e:f7:36:bb:18:e2:96:f0:
3b:31:eb:2e:42:e1:16:85:98:58:64:44:3c:89:b9:
6e:2f:88:5e:05:81:85:45:91:c3:7a:e3:02:46:33:
d8:06:61:a6:cc:dd:4e:a1:e9:0d:a3:fa:db:6e:13:
8c:f9:4c:5b:6a:0b:16:03:d6:57:44:ec:f8:a6:67:
d9:cd:3c:e6:bf:e9:31:78:41:90:69:91:04:a2:f9:
9d:be:25:89:a0:75:02:ed:04:41:80:2e:94:d5:fb:
c8:85:d5:63:c0:aa:64:77:66:90:c5:1d:ae:52:35:
9b:ed:43:bd:15:2f:e0:07:ca:88:ea:6b:37:a1:d1:
bc:17:fd:79:16:88:71:e7:7f:32:4a:93:6e:f3:1b:
b0:98:90:46:53:d3:d9:a1:e9:0d:d4:15:6d:66:83:
4b:37:7c:95:d7:93:ea:ac:26:7e:d8:2f:5c:c2:c1:
4e:29:f0:55:16:65:c6:41:d5:27:fb:06:8e:ad:88:
c1:3b:35:04:d4:ef:72:25:7b:76:2f:17:3a:65:c1:
e5:41:6f:c3:1b:a2:59:5d:6d:f5:cb:48:98:4a:dc:
d8:8b:28:e2:0b:47:6e:94:76:ed:bf:86:16:5a:c6:
ad:26:c5:2c:d9:9f:a3:e5:49:b9:c4:9b:8b:b3:8e:
7f:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C9:7B:A1:B9:FA:A8:C0:F1:49:82:C5:67:84:FC:D6:5C:58:38:DE:31
X509v3 Authority Key Identifier:
keyid:A3:C7:1C:86:45:9D:E7:4B:BD:35:A3:CC:BF:D8:AE:5D:9C:B4:D2:D8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/o8cchkWd50u9NaPMv9iuXZy00tg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7c/cc8e7a-e413-43ff-aa59-0914ad24a3e4/1/o8cchkWd50u9NaPMv9iuXZy00tg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7c/cc8e7a-e413-43ff-aa59-0914ad24a3e4/1/o8cchkWd50u9NaPMv9iuXZy00tg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
09:d8:8f:a4:58:f3:fc:c3:ba:ab:d5:01:dc:83:95:dd:d8:a3:
c2:5d:b4:1f:1b:5e:84:32:47:ae:d4:46:c6:10:20:96:65:c1:
8d:a2:89:88:04:78:b0:5f:d3:44:8f:b8:c4:5a:84:b3:7f:23:
cb:62:8b:89:ce:5c:94:8b:d8:b5:2c:2c:78:bd:e8:29:7a:47:
ff:cc:34:65:c9:90:16:47:f4:af:dd:c2:57:59:41:3d:e9:43:
c4:c6:55:a7:10:7a:07:d2:86:40:b6:6b:4a:c9:fa:d2:93:ee:
93:b9:99:7d:64:4e:a4:8a:fb:87:1e:dd:4a:1f:2f:40:a3:82:
a4:7e:62:94:87:d9:25:38:39:11:d9:8f:fb:e2:b5:24:65:69:
b2:48:2d:f6:07:a1:4b:c8:46:11:38:6b:25:72:6b:b9:bf:34:
0b:e8:35:5a:6d:76:ed:74:d6:17:63:97:94:b6:a5:6a:a5:3e:
7b:c7:65:03:9a:a8:49:7b:55:6c:1f:08:63:3f:52:31:18:d7:
6a:6a:56:1d:45:5b:7c:c4:29:a4:68:81:74:6d:38:c6:19:20:
ae:a7:3a:c3:60:92:48:92:08:4c:b7:a0:f0:36:fc:07:3f:2e:
94:69:d7:ad:34:86:0b:a9:4a:c8:ea:cf:99:1d:ae:67:54:cc:
f5:ed:23:69
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 19 01:47:02 2025 by rpki-client