Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/86/dea149-4fb8-4978-a46b-33985db8047a/1/okz5AynEe6NDpmzWXTiDOjV7WVU.mft
File: okz5AynEe6NDpmzWXTiDOjV7WVU.mft (raw, json)
Hash identifier: jFEqE8JWwKtb2i+LxbwGwyhfG3db7rMo8QD287no7qA=
Subject key identifier: 60:14:07:11:CC:5D:10:5C:96:17:0F:D4:38:33:EC:BB:E7:A9:6A:E0
Authority key identifier: A2:4C:F9:03:29:C4:7B:A3:43:A6:6C:D6:5D:38:83:3A:35:7B:59:55
Certificate issuer: /CN=a24cf90329c47ba343a66cd65d38833a357b5955
Certificate serial: 01965CBA7C9D3D8484146A0420C9B57949F4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/okz5AynEe6NDpmzWXTiDOjV7WVU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/86/dea149-4fb8-4978-a46b-33985db8047a/1/okz5AynEe6NDpmzWXTiDOjV7WVU.mft
Manifest number: 1505
Signing time: Tue 22 Apr 2025 09:00:47 +0000
Manifest this update: Tue 22 Apr 2025 09:00:47 +0000
Manifest next update: Wed 23 Apr 2025 09:00:47 +0000
Files and hashes: 1: L_hJzZcxwJZunjzxLQL-YVG1jT0.roa (hash: /H7f2gZdXTvhI8V5NwcetnxeXbpLznW3EXechuUQFz0=)
2: RwOt6V2v9wJzu17DXTZnu1cti-k.roa (hash: pKpNRVrX80xh9DAepdCWEqDAUnRd1u2Llc+QIfnWV/Q=)
3: okz5AynEe6NDpmzWXTiDOjV7WVU.crl (hash: +uz0aDwosJjth6NoHm5ZfgCSue9xFRTnGpDsNCKWD/8=)
4: tDQAlIS1RkP7Hll5jY6GwoLQRHA.roa (hash: ZBp1qrqjsUhmRr1QqJR4LsXUqiXorK/xdRoQ9NS8bh8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/86/dea149-4fb8-4978-a46b-33985db8047a/1/okz5AynEe6NDpmzWXTiDOjV7WVU.crl
rsync://rpki.ripe.net/repository/DEFAULT/86/dea149-4fb8-4978-a46b-33985db8047a/1/okz5AynEe6NDpmzWXTiDOjV7WVU.mft
rsync://rpki.ripe.net/repository/DEFAULT/okz5AynEe6NDpmzWXTiDOjV7WVU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 23 Apr 2025 09:00:47 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:5c:ba:7c:9d:3d:84:84:14:6a:04:20:c9:b5:79:49:f4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a24cf90329c47ba343a66cd65d38833a357b5955
Validity
Not Before: Apr 22 09:00:47 2025 GMT
Not After : Apr 23 09:00:47 2025 GMT
Subject: CN=60140711cc5d105c96170fd43833ecbbe7a96ae0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:20:25:35:2e:01:f8:b6:a6:ef:fc:a9:1c:34:
05:0a:54:6d:0b:b1:10:30:5a:5c:21:1c:d6:c2:08:
58:ea:cd:91:92:9d:4a:eb:8d:57:3a:23:81:03:16:
5d:2a:75:d8:94:67:5f:54:02:17:c9:88:eb:8c:e2:
e6:28:28:eb:0f:36:46:82:36:41:1b:d0:83:bf:ac:
cd:80:dd:aa:a0:0b:a0:53:6e:8f:f3:15:76:1a:6b:
7e:4f:a2:6f:de:14:7b:2c:01:bb:a1:54:8b:d7:ac:
45:19:16:0d:b4:ed:47:af:aa:4d:2f:a5:35:28:ed:
49:1f:bc:52:c8:7b:5a:5f:a8:c6:1b:ce:ab:dd:ca:
ca:e5:9c:04:b5:10:ad:a0:6e:35:5d:59:09:aa:3f:
ba:de:da:3f:bd:10:38:d7:f6:4d:5c:b0:3c:36:dc:
44:bb:1e:ea:c8:b1:de:b2:a3:ed:85:5a:f0:b0:9a:
d5:9d:26:60:69:65:64:bf:51:03:6d:43:12:cc:dc:
be:b9:84:7d:16:79:a6:b7:3a:50:11:cd:d3:82:7e:
1e:83:2a:74:ac:27:3a:4c:05:fa:57:78:9d:34:ec:
48:94:a8:6f:de:f1:8f:8c:eb:79:97:27:32:be:42:
a2:0f:03:4a:59:36:ed:25:78:ab:27:78:c6:54:ac:
6f:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
60:14:07:11:CC:5D:10:5C:96:17:0F:D4:38:33:EC:BB:E7:A9:6A:E0
X509v3 Authority Key Identifier:
keyid:A2:4C:F9:03:29:C4:7B:A3:43:A6:6C:D6:5D:38:83:3A:35:7B:59:55
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/okz5AynEe6NDpmzWXTiDOjV7WVU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/86/dea149-4fb8-4978-a46b-33985db8047a/1/okz5AynEe6NDpmzWXTiDOjV7WVU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/86/dea149-4fb8-4978-a46b-33985db8047a/1/okz5AynEe6NDpmzWXTiDOjV7WVU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a7:48:64:d9:78:3d:ac:7a:2e:82:98:72:cc:6f:9d:47:39:a2:
a1:c9:3a:a4:13:2f:9d:70:78:6d:dc:d0:70:b9:cc:ea:45:ab:
fc:e2:58:b9:7b:68:1f:08:73:52:66:15:59:08:0f:4f:61:58:
6d:86:75:f8:a2:f2:6d:5a:11:cd:b2:71:53:6b:fa:5e:6e:e6:
e7:41:f2:5e:9a:1d:29:31:b9:22:11:8d:d2:48:7a:67:f3:82:
67:77:10:90:ba:1f:db:22:69:a8:3d:63:bd:18:d3:40:95:fc:
f8:b0:52:59:5e:fd:1e:f9:27:c0:51:2e:98:d7:56:e1:82:03:
fe:87:66:18:36:61:18:01:c4:e6:6f:be:df:75:43:50:a4:f2:
a2:c5:66:61:aa:85:4d:77:f9:bb:91:c5:95:84:48:40:a3:20:
5a:ce:e9:c0:e3:5d:bf:09:2d:d8:4a:14:48:cf:ee:0f:cd:af:
34:9a:af:c7:85:a9:81:25:12:a8:f4:05:eb:97:7f:40:ec:08:
e4:ad:e4:26:df:59:b7:8f:28:84:d2:a4:e6:0e:dc:03:d3:24:
a1:cb:a3:ae:b3:92:57:5a:1a:b6:5d:f3:bc:88:e0:a2:2d:b3:
43:d2:e5:38:23:01:11:32:a6:af:c7:3a:40:df:21:4e:c4:7d:
5a:cc:15:bf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 22 17:01:12 2025 by rpki-client