Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/83/b1592d-3a23-4f40-81c8-1600b742b5dd/1/oODFkETIfj4t-hPL-ZAjruAS76A.mft
File: oODFkETIfj4t-hPL-ZAjruAS76A.mft (raw, json)
Hash identifier: E4uftXKUAyBNXmAHiJg+0lODnNg+2dMM47Qyk0I2EVk=
Subject key identifier: C3:9C:03:43:B7:A3:0C:EA:59:C8:79:2E:C2:A4:BC:CC:63:B9:24:0C
Authority key identifier: A0:E0:C5:90:44:C8:7E:3E:2D:FA:13:CB:F9:90:23:AE:E0:12:EF:A0
Certificate issuer: /CN=a0e0c59044c87e3e2dfa13cbf99023aee012efa0
Certificate serial: 0196556E88879A14C0D9B27B3575F2C39333
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/oODFkETIfj4t-hPL-ZAjruAS76A.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/83/b1592d-3a23-4f40-81c8-1600b742b5dd/1/oODFkETIfj4t-hPL-ZAjruAS76A.mft
Manifest number: 14FE
Signing time: Sun 20 Apr 2025 23:00:29 +0000
Manifest this update: Sun 20 Apr 2025 23:00:29 +0000
Manifest next update: Mon 21 Apr 2025 23:00:29 +0000
Files and hashes: 1: THn-YaWLx96HuhrNbGtVod7EkgM.roa (hash: rsUPsLC3jm8thXVYAO+m9Ea1wFzIeFwCIPJOkL/61EY=)
2: oODFkETIfj4t-hPL-ZAjruAS76A.crl (hash: hxs6RvA0Ir+C9xHb6RgFmtlHpUUC6g+Yi5J5N4dMEHI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/83/b1592d-3a23-4f40-81c8-1600b742b5dd/1/oODFkETIfj4t-hPL-ZAjruAS76A.crl
rsync://rpki.ripe.net/repository/DEFAULT/83/b1592d-3a23-4f40-81c8-1600b742b5dd/1/oODFkETIfj4t-hPL-ZAjruAS76A.mft
rsync://rpki.ripe.net/repository/DEFAULT/oODFkETIfj4t-hPL-ZAjruAS76A.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 21 Apr 2025 23:00:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:55:6e:88:87:9a:14:c0:d9:b2:7b:35:75:f2:c3:93:33
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a0e0c59044c87e3e2dfa13cbf99023aee012efa0
Validity
Not Before: Apr 20 23:00:29 2025 GMT
Not After : Apr 21 23:00:29 2025 GMT
Subject: CN=c39c0343b7a30cea59c8792ec2a4bccc63b9240c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:bb:cf:4e:0c:aa:0d:3d:e0:c2:97:86:f2:c0:
dd:f5:a3:17:9d:b7:84:a2:dc:1e:18:7d:1d:69:e9:
bb:7c:55:3f:66:34:ae:cf:bb:9f:ac:7c:fa:5e:25:
f2:b4:4a:db:89:4a:2e:01:f9:3b:74:2c:76:fa:03:
8c:4d:8a:3a:e9:69:d1:b0:e8:1a:f8:b2:a2:c4:88:
b5:51:1a:22:91:9f:16:4c:d6:4c:2f:d7:eb:65:6e:
09:c6:ce:98:e7:94:ea:62:2a:c3:65:93:85:42:b5:
a6:03:4e:6f:49:fa:ea:6c:74:49:bd:2f:0e:4c:44:
64:10:48:0d:a6:7e:8a:c4:58:6e:94:86:fa:4f:80:
2f:84:57:8c:9d:0a:5e:77:10:30:6d:a8:4e:89:22:
51:e1:48:e0:29:05:a3:fe:a1:93:67:d4:b6:85:fc:
5c:4b:91:a3:3a:57:29:4d:ea:cd:47:85:36:a1:00:
8f:71:25:39:7d:e1:fd:05:f4:66:73:d9:86:ad:de:
e4:aa:45:15:0e:09:0c:e6:aa:b4:e0:82:04:8a:ac:
d2:77:4d:9e:2d:fa:b8:c8:15:c3:0a:43:89:8f:f8:
f8:58:1b:63:be:41:c6:06:a7:dd:ff:7e:f3:bd:68:
dd:03:36:50:db:96:e4:64:3f:22:16:db:9e:70:a2:
c8:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C3:9C:03:43:B7:A3:0C:EA:59:C8:79:2E:C2:A4:BC:CC:63:B9:24:0C
X509v3 Authority Key Identifier:
keyid:A0:E0:C5:90:44:C8:7E:3E:2D:FA:13:CB:F9:90:23:AE:E0:12:EF:A0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/oODFkETIfj4t-hPL-ZAjruAS76A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/83/b1592d-3a23-4f40-81c8-1600b742b5dd/1/oODFkETIfj4t-hPL-ZAjruAS76A.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/83/b1592d-3a23-4f40-81c8-1600b742b5dd/1/oODFkETIfj4t-hPL-ZAjruAS76A.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b1:56:84:ef:0e:0a:d4:9c:d1:50:77:f9:d3:fd:2b:08:38:1f:
f7:53:26:89:d5:a2:fb:ba:22:30:aa:26:f1:55:f4:3d:7d:b6:
9c:37:e4:ab:13:e9:f2:c7:e9:cd:89:71:de:2c:fe:7f:88:22:
d2:3d:61:a5:ff:a5:cb:03:c9:1a:b9:73:f4:ba:1c:93:e8:d3:
e5:7a:66:7b:f7:07:35:99:26:a2:9a:62:d3:d6:de:6d:47:1c:
24:84:a9:61:73:84:03:14:02:0f:9e:63:10:4f:2c:57:d0:4f:
78:f7:69:10:12:ff:a6:b7:83:ff:c4:da:0e:98:ac:01:47:c6:
ee:69:56:fe:a8:d7:ca:83:4b:ae:be:48:38:6a:b5:74:dc:54:
71:59:3b:dd:5c:e9:a0:fc:21:c0:a0:70:6c:d0:21:ba:3f:1d:
d4:da:de:fa:cc:19:27:54:b3:95:60:ce:ea:2d:42:da:9d:aa:
8d:e5:a7:b7:6b:9f:8e:a8:c5:64:b7:f1:e8:09:c2:94:4f:d2:
a2:0c:11:58:f1:fa:5f:02:06:d0:02:3b:95:c2:47:69:fa:50:
eb:0d:da:b9:a7:12:a6:10:c3:dd:a4:46:a6:97:60:b3:05:f0:
5d:72:62:ce:da:a2:28:74:bb:eb:47:09:40:94:3f:8c:ff:c0:
41:38:6a:53
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 21 05:31:12 2025 by rpki-client