Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e1/bb0e7b-2a81-4970-b3bd-686f0a0616cc/1/OOf0e7m5Flflcmv8st74qtlz4mg.mft
File: OOf0e7m5Flflcmv8st74qtlz4mg.mft (raw, json)
Hash identifier: Kd4CKctJihneRR1tdNp7Yxx70GbFzMqNGNuar6Wwn3Q=
Subject key identifier: 3B:19:67:E4:7B:A1:9E:AA:4F:00:B4:3C:2E:79:82:4A:BA:F0:33:D3
Authority key identifier: 38:E7:F4:7B:B9:B9:16:57:E5:72:6B:FC:B2:DE:F8:AA:D9:73:E2:68
Certificate issuer: /CN=38e7f47bb9b91657e5726bfcb2def8aad973e268
Certificate serial: 01960AF9B122505829BA54F9322B5AC49D0C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OOf0e7m5Flflcmv8st74qtlz4mg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e1/bb0e7b-2a81-4970-b3bd-686f0a0616cc/1/OOf0e7m5Flflcmv8st74qtlz4mg.mft
Manifest number: 14DD
Signing time: Sun 06 Apr 2025 12:00:57 +0000
Manifest this update: Sun 06 Apr 2025 12:00:57 +0000
Manifest next update: Mon 07 Apr 2025 12:00:57 +0000
Files and hashes: 1: 0xAthu916pMLSA6LAzNdYgS-VXE.roa (hash: AkpmQS7tFUygGvZU+BjPsGOPcILRyQ+KZnPhCEBla9M=)
2: 7jmf9BlNbV-fUUbiGDuTogUiPEo.roa (hash: TRehU0GSo0OYFjBdQZcn/8kKiD62iX7mi6y4Y4CJ6lY=)
3: OOf0e7m5Flflcmv8st74qtlz4mg.crl (hash: 0QbNVBMdzasZVzOEkp4l2AOHLu0Lhb+As9mlLwYMsQA=)
4: nF8H_i-63xsIqf6G91Sqghmhrmk.roa (hash: seOXQgoakN6MLHPcruniEufkAIlfgGYPYWwRtHa0PF4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e1/bb0e7b-2a81-4970-b3bd-686f0a0616cc/1/OOf0e7m5Flflcmv8st74qtlz4mg.crl
rsync://rpki.ripe.net/repository/DEFAULT/e1/bb0e7b-2a81-4970-b3bd-686f0a0616cc/1/OOf0e7m5Flflcmv8st74qtlz4mg.mft
rsync://rpki.ripe.net/repository/DEFAULT/OOf0e7m5Flflcmv8st74qtlz4mg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 07 Apr 2025 07:00:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:0a:f9:b1:22:50:58:29:ba:54:f9:32:2b:5a:c4:9d:0c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=38e7f47bb9b91657e5726bfcb2def8aad973e268
Validity
Not Before: Apr 6 12:00:57 2025 GMT
Not After : Apr 7 12:00:57 2025 GMT
Subject: CN=3b1967e47ba19eaa4f00b43c2e79824abaf033d3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:4d:58:94:15:32:5f:70:e1:70:bb:70:2f:cf:
9d:5d:51:fa:42:28:1d:75:2b:4a:36:da:2a:e0:a2:
21:46:22:e3:2c:d8:78:c6:11:a6:13:ec:65:58:02:
58:30:04:0b:17:44:20:a2:7d:4a:67:5f:90:ed:36:
67:a9:0e:f2:4a:0d:94:31:b4:b4:ee:5f:29:55:37:
57:54:50:af:80:f9:ce:3b:be:f8:54:d9:3c:5a:d3:
2d:5d:f8:10:f7:cc:56:76:d8:71:af:7d:26:5c:a3:
21:ee:f5:36:ab:58:c5:e4:0c:1c:1c:1d:15:52:c0:
69:a0:b5:9a:cb:a5:2c:da:52:eb:83:cb:83:0e:5d:
45:f4:17:8c:f0:2f:e9:9e:32:1b:d9:cb:a2:bf:66:
39:36:d6:f6:4e:a5:e3:ae:5c:34:d8:df:3f:2c:9a:
16:70:e0:15:60:63:6a:3a:be:d7:0d:b9:c7:4f:e5:
2d:1b:63:3e:9c:f0:04:9a:3d:31:03:58:bc:a0:34:
f5:fb:fd:19:40:ff:a2:d1:9e:06:0c:94:b5:d6:28:
cd:1a:c7:c6:f1:79:e8:2b:55:ab:15:ca:35:d4:86:
18:3d:6e:ea:fc:f4:39:f2:f2:ba:0c:a7:65:01:fc:
4c:3e:5c:a2:d3:d1:b1:ab:09:72:6b:db:7d:fa:18:
d1:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3B:19:67:E4:7B:A1:9E:AA:4F:00:B4:3C:2E:79:82:4A:BA:F0:33:D3
X509v3 Authority Key Identifier:
keyid:38:E7:F4:7B:B9:B9:16:57:E5:72:6B:FC:B2:DE:F8:AA:D9:73:E2:68
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OOf0e7m5Flflcmv8st74qtlz4mg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e1/bb0e7b-2a81-4970-b3bd-686f0a0616cc/1/OOf0e7m5Flflcmv8st74qtlz4mg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e1/bb0e7b-2a81-4970-b3bd-686f0a0616cc/1/OOf0e7m5Flflcmv8st74qtlz4mg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b1:f8:b4:d0:da:95:1e:02:58:83:ea:7e:d1:30:a1:5a:c3:83:
bb:38:2f:4f:1f:0b:71:06:f8:4e:2a:39:7b:b1:d9:1a:78:7b:
90:ab:30:75:d7:ce:96:b1:46:9b:15:6c:3b:9f:8e:00:24:53:
51:8c:82:27:7f:f9:ee:85:7e:0a:a6:a5:81:2b:8d:4d:4f:42:
7a:80:df:42:5d:6c:2b:d8:03:86:19:70:80:c9:de:11:c8:b5:
fd:37:e3:3c:6e:ea:7e:ed:44:00:fa:4e:8a:e9:7b:90:5d:b1:
5f:45:21:d9:58:70:69:fb:1c:b6:02:9b:17:9e:69:ee:c7:48:
a4:60:a6:fe:a8:23:4f:27:11:97:c4:ac:58:0e:1c:c1:2e:9d:
28:b3:a6:7e:fc:45:27:e5:3c:5b:e7:d0:19:12:76:8f:6f:fe:
3e:1d:32:8c:53:76:02:c2:e4:90:df:b4:b5:00:14:20:7e:70:
e6:1c:dd:b1:38:ae:de:01:fa:05:7d:43:04:87:32:04:ee:28:
5e:10:34:e2:d9:83:6f:74:ee:63:f0:3b:e7:9d:85:ca:55:f1:
8c:d2:fd:67:dd:8c:57:a5:ae:41:39:fa:a0:01:e6:fe:a7:a9:
11:0e:46:34:1f:a8:b2:d9:67:b8:bf:5f:3e:eb:9d:16:7b:0d:
a3:f4:f7:04
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 15:57:38 2025 by rpki-client