Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/82/3770f8-62fe-40a5-94b5-548e7e4b102b/1/Ojxjy9k0gl5Vu-NZy3MGhp7UUc0.mft
File: Ojxjy9k0gl5Vu-NZy3MGhp7UUc0.mft (raw, json)
Hash identifier: BrH5VXCFI8RkpZiAGL/pieCzUAQEp1Z+kiWvvvd/VIQ=
Subject key identifier: 05:4C:D4:F6:A4:CB:90:6A:00:54:C2:08:54:F2:6D:DE:80:53:28:E3
Authority key identifier: 3A:3C:63:CB:D9:34:82:5E:55:BB:E3:59:CB:73:06:86:9E:D4:51:CD
Certificate issuer: /CN=3a3c63cbd934825e55bbe359cb7306869ed451cd
Certificate serial: 01965CF246B9CE2DEFED40E29F7D24354604
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Ojxjy9k0gl5Vu-NZy3MGhp7UUc0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/82/3770f8-62fe-40a5-94b5-548e7e4b102b/1/Ojxjy9k0gl5Vu-NZy3MGhp7UUc0.mft
Manifest number: 13A0
Signing time: Tue 22 Apr 2025 10:01:43 +0000
Manifest this update: Tue 22 Apr 2025 10:01:43 +0000
Manifest next update: Wed 23 Apr 2025 10:01:43 +0000
Files and hashes: 1: Ojxjy9k0gl5Vu-NZy3MGhp7UUc0.crl (hash: DPcEMLYs0jlBps4kqPWs18WHWkK1gw8Q5b3YFE1uF9Y=)
2: i7yXvmlWG45A5KxBFSXl668mPOM.roa (hash: xpvrCv1mTXlVyotmQuRYzvYT5pY/lTfAVskj11L66Qw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/82/3770f8-62fe-40a5-94b5-548e7e4b102b/1/Ojxjy9k0gl5Vu-NZy3MGhp7UUc0.crl
rsync://rpki.ripe.net/repository/DEFAULT/82/3770f8-62fe-40a5-94b5-548e7e4b102b/1/Ojxjy9k0gl5Vu-NZy3MGhp7UUc0.mft
rsync://rpki.ripe.net/repository/DEFAULT/Ojxjy9k0gl5Vu-NZy3MGhp7UUc0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 23 Apr 2025 10:01:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:5c:f2:46:b9:ce:2d:ef:ed:40:e2:9f:7d:24:35:46:04
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3a3c63cbd934825e55bbe359cb7306869ed451cd
Validity
Not Before: Apr 22 10:01:43 2025 GMT
Not After : Apr 23 10:01:43 2025 GMT
Subject: CN=054cd4f6a4cb906a0054c20854f26dde805328e3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:6c:0f:8d:66:9e:22:a1:ff:c9:be:75:cf:09:
7e:f9:5e:c1:38:83:d1:62:00:e6:13:e7:ee:42:f8:
cd:09:54:34:4f:e8:a1:37:31:81:22:f5:d2:46:84:
48:a9:8c:80:c3:2d:09:a2:3e:dd:51:33:c5:76:d3:
ee:2e:7b:a8:af:b9:28:ea:93:43:94:46:0b:25:8c:
c1:04:2a:53:f2:b8:4a:ab:38:bb:0b:fd:5d:24:ca:
aa:16:c5:1e:4e:6e:62:75:e6:bb:f2:cc:3d:d9:c8:
68:b5:8f:11:c6:6c:71:80:ec:fe:51:bb:44:18:b4:
01:29:2b:0d:c1:28:2b:f7:9d:a2:62:20:70:50:92:
41:2f:38:80:c0:e0:1a:49:9a:d5:6f:b9:bf:3f:a1:
ea:10:ff:7b:b3:6b:b6:f8:8f:6c:90:00:cb:53:fa:
be:98:e2:ce:57:d5:a5:87:94:55:e6:36:8d:67:b7:
6b:3d:4e:7a:05:a8:92:b1:27:0f:20:63:10:8e:fd:
98:d5:b5:9a:5f:a6:0c:e1:37:d4:53:5b:75:0f:5e:
1a:7c:0e:5f:4b:4e:0e:f3:94:fd:83:46:32:3e:5e:
6d:6b:c6:d0:fe:f4:49:72:2e:1f:de:3c:ab:0f:e3:
43:74:99:0f:a5:4a:98:52:a2:bf:51:2c:53:47:ef:
15:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
05:4C:D4:F6:A4:CB:90:6A:00:54:C2:08:54:F2:6D:DE:80:53:28:E3
X509v3 Authority Key Identifier:
keyid:3A:3C:63:CB:D9:34:82:5E:55:BB:E3:59:CB:73:06:86:9E:D4:51:CD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Ojxjy9k0gl5Vu-NZy3MGhp7UUc0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/82/3770f8-62fe-40a5-94b5-548e7e4b102b/1/Ojxjy9k0gl5Vu-NZy3MGhp7UUc0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/82/3770f8-62fe-40a5-94b5-548e7e4b102b/1/Ojxjy9k0gl5Vu-NZy3MGhp7UUc0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
86:7e:7f:c2:77:3b:71:17:e9:05:10:1c:62:79:b4:45:87:78:
6f:8a:ab:72:ff:de:5e:5f:b4:47:22:b7:b4:57:d0:ec:a7:8d:
99:d9:30:2b:be:f5:8c:56:e8:91:56:3b:ae:21:db:3d:4e:26:
f8:a6:54:bc:e1:37:e1:e5:7c:cc:5b:3c:ea:b0:78:28:a2:c0:
3f:cb:3b:86:96:01:a8:ae:ed:2f:8b:fa:3d:17:e9:75:2a:0a:
25:03:ad:14:3c:f9:b3:e5:f2:ef:e0:ed:1f:3e:44:64:a6:04:
38:5f:8e:b9:58:4e:a0:90:fe:28:b2:c1:ae:d4:17:69:fa:15:
41:ef:7d:d0:ca:d3:61:88:2f:4b:15:6f:39:0a:fd:4f:fd:6f:
05:ef:b8:3f:21:57:54:3f:ad:34:75:65:d6:96:82:50:34:c1:
eb:7f:3c:60:30:f3:56:89:52:09:14:88:b3:f2:47:8e:07:42:
76:27:fb:2d:21:bb:73:10:28:56:bc:aa:00:fb:ce:0c:7a:9e:
1a:a4:f0:74:4d:b3:38:84:2f:d5:b4:3c:ff:e0:ef:5b:41:2c:
e5:53:86:8c:e6:85:b8:ae:cd:be:c8:fd:47:08:24:95:f5:1a:
18:c6:bf:67:0f:2b:56:96:fb:32:b4:05:41:aa:f2:1d:2e:ef:
99:cf:dd:c5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 22 19:24:36 2025 by rpki-client