Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c0/478aea-6b94-49a3-aa7f-189490d60ea6/1/1OKXHl2BaclArwINsCe-2tiZFZA.mft
File: 1OKXHl2BaclArwINsCe-2tiZFZA.mft (raw, json)
Hash identifier: phYhypxhsTzTep3mvSNlp/ejPtKyfQ/C0XyWWuHuJm0=
Subject key identifier: 8A:6E:AC:34:17:D6:C6:E6:51:B4:02:8D:5B:C5:59:D8:7B:93:59:13
Authority key identifier: D4:E2:97:1E:5D:81:69:C9:40:AF:02:0D:B0:27:BE:DA:D8:99:15:90
Certificate issuer: /CN=d4e2971e5d8169c940af020db027bedad8991590
Certificate serial: 019653EE39C5F3A788AC8D97E6FBA492B14B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1OKXHl2BaclArwINsCe-2tiZFZA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c0/478aea-6b94-49a3-aa7f-189490d60ea6/1/1OKXHl2BaclArwINsCe-2tiZFZA.mft
Manifest number: 1501
Signing time: Sun 20 Apr 2025 16:00:43 +0000
Manifest this update: Sun 20 Apr 2025 16:00:43 +0000
Manifest next update: Mon 21 Apr 2025 16:00:43 +0000
Files and hashes: 1: 1OKXHl2BaclArwINsCe-2tiZFZA.crl (hash: O4R4TqBP9yYsaose8mN81KXJpEZOczjuLBfeWU2g3wA=)
2: JSqJ02JsxZMyq1FZ1Ds1WnAXfzM.roa (hash: FrjQUqzgc9bbbA26gpxWpuyB85Zjnu+GzKv9yBO8vww=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c0/478aea-6b94-49a3-aa7f-189490d60ea6/1/1OKXHl2BaclArwINsCe-2tiZFZA.crl
rsync://rpki.ripe.net/repository/DEFAULT/c0/478aea-6b94-49a3-aa7f-189490d60ea6/1/1OKXHl2BaclArwINsCe-2tiZFZA.mft
rsync://rpki.ripe.net/repository/DEFAULT/1OKXHl2BaclArwINsCe-2tiZFZA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 21 Apr 2025 16:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:53:ee:39:c5:f3:a7:88:ac:8d:97:e6:fb:a4:92:b1:4b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d4e2971e5d8169c940af020db027bedad8991590
Validity
Not Before: Apr 20 16:00:43 2025 GMT
Not After : Apr 21 16:00:43 2025 GMT
Subject: CN=8a6eac3417d6c6e651b4028d5bc559d87b935913
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:f6:d9:fb:45:ea:d0:27:20:42:3d:2a:ce:64:
03:05:8a:73:74:8b:22:8b:8f:7f:de:61:5e:1d:91:
e3:2b:12:dc:1c:8f:f0:12:3a:c2:c4:e0:79:17:5d:
f5:42:db:7e:d8:5f:1a:ea:b9:68:fe:00:3c:5d:a4:
91:69:07:2f:94:52:ae:6e:fc:56:19:6a:72:d8:b9:
4a:82:a1:3b:f4:a6:ba:71:7b:98:b6:d2:58:57:f1:
e5:12:5a:70:95:bc:7b:e4:fe:c3:86:3b:01:78:f6:
dc:2c:98:73:ed:63:2b:ca:8f:05:0a:c1:ee:7a:41:
30:7b:99:ac:a7:ca:14:3d:73:4e:97:16:90:4f:af:
59:f7:a7:b6:93:5e:3f:a1:1b:be:0a:f9:fa:4d:7e:
5e:6a:be:49:5a:13:b5:6c:68:8a:eb:b6:2f:70:bd:
eb:38:a3:df:ba:a5:57:88:90:0b:da:f7:11:ca:90:
44:38:97:6f:d9:21:ab:be:84:a6:cb:88:4a:08:16:
1c:76:70:9a:71:b8:b5:84:dc:1e:67:af:fe:c2:e7:
c3:63:c4:00:25:3d:c5:ea:86:aa:02:67:43:53:e5:
4f:bd:4f:4d:9c:ed:9d:ee:1b:cd:92:b1:f7:54:57:
06:d1:36:91:e5:33:ce:0d:3c:2c:ba:28:0f:9d:52:
0d:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8A:6E:AC:34:17:D6:C6:E6:51:B4:02:8D:5B:C5:59:D8:7B:93:59:13
X509v3 Authority Key Identifier:
keyid:D4:E2:97:1E:5D:81:69:C9:40:AF:02:0D:B0:27:BE:DA:D8:99:15:90
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1OKXHl2BaclArwINsCe-2tiZFZA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/478aea-6b94-49a3-aa7f-189490d60ea6/1/1OKXHl2BaclArwINsCe-2tiZFZA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/478aea-6b94-49a3-aa7f-189490d60ea6/1/1OKXHl2BaclArwINsCe-2tiZFZA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
96:e7:31:56:93:cd:3c:68:df:52:01:7c:7d:34:15:d8:56:a9:
43:84:35:03:e3:54:a1:d5:1c:5f:68:ef:74:f2:4b:45:99:52:
cd:8d:5f:d7:8c:5d:c0:ad:fd:06:62:bb:f8:d8:42:19:2c:78:
83:23:47:67:22:60:9b:10:42:72:0a:fb:3d:4e:1d:03:f6:8e:
f0:8b:9f:14:ee:22:56:78:29:37:a4:d7:07:80:4d:81:f5:bc:
1e:b9:a1:7c:b3:32:e2:d9:7a:ee:aa:13:72:27:fe:38:48:d4:
64:d3:3a:3d:81:0d:e7:b5:06:6e:2d:20:6a:d1:0f:57:d7:8d:
0d:18:a4:ee:39:3a:c7:ca:f4:30:b8:df:30:f8:9d:d4:26:f3:
b6:fa:9f:b4:a2:c1:4b:ec:27:b4:27:21:9d:82:cf:77:36:b4:
26:f4:e7:ef:6f:b4:fc:12:6d:c8:37:69:a0:6a:ac:07:fb:e6:
ef:f5:74:3e:07:a3:fd:5b:06:29:f8:29:4b:4c:ad:78:1a:12:
ea:ff:aa:ee:df:54:98:82:60:ba:d8:11:b1:bd:f4:5d:6d:ed:
bd:74:95:78:8b:49:4d:3d:ae:ba:87:4a:78:54:c9:9f:4f:bc:
3a:2a:fb:40:d1:92:51:bd:63:10:36:f4:de:aa:2d:43:2e:27:
99:00:05:34
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 21 01:19:05 2025 by rpki-client