Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ef/b7fea2-a32d-4a5e-9982-54b4ca50d248/1/OA3Z5zVccsdR__TxddrOfap7nL8.mft
File: OA3Z5zVccsdR__TxddrOfap7nL8.mft (raw, json)
Hash identifier: 8AxAf/OUZRCbYB/YBb1Qit8hpkY2rjGpwTiapghOb4c=
Subject key identifier: 30:13:4D:29:04:64:A7:2C:5B:8C:4F:AB:69:93:BE:F6:CC:53:77:E8
Authority key identifier: 38:0D:D9:E7:35:5C:72:C7:51:FF:F4:F1:75:DA:CE:7D:AA:7B:9C:BF
Certificate issuer: /CN=380dd9e7355c72c751fff4f175dace7daa7b9cbf
Certificate serial: 0196575CC5A44FF9F0252C876083BAA576CB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OA3Z5zVccsdR__TxddrOfap7nL8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ef/b7fea2-a32d-4a5e-9982-54b4ca50d248/1/OA3Z5zVccsdR__TxddrOfap7nL8.mft
Manifest number: 017E
Signing time: Mon 21 Apr 2025 08:00:19 +0000
Manifest this update: Mon 21 Apr 2025 08:00:19 +0000
Manifest next update: Tue 22 Apr 2025 08:00:19 +0000
Files and hashes: 1: OA3Z5zVccsdR__TxddrOfap7nL8.crl (hash: hXWrC9YFuvH8uA9HdsBw5Zws9jkwcOIns03ggmdseqI=)
2: kXbHyNgTaS4VSl7iNXExbL4omTQ.roa (hash: OHwa8ZLjzHYPPIqn4XloQ0JQlOD6SyKesyHnojZd1NI=)
3: sp5HWDtPMPeAvare88h0cl4f6NY.roa (hash: cp6kC/ZTZY60gv6a/PRr0WyiM/AiMEE4rKCbnq7jXXs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ef/b7fea2-a32d-4a5e-9982-54b4ca50d248/1/OA3Z5zVccsdR__TxddrOfap7nL8.crl
rsync://rpki.ripe.net/repository/DEFAULT/ef/b7fea2-a32d-4a5e-9982-54b4ca50d248/1/OA3Z5zVccsdR__TxddrOfap7nL8.mft
rsync://rpki.ripe.net/repository/DEFAULT/OA3Z5zVccsdR__TxddrOfap7nL8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 22 Apr 2025 01:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:57:5c:c5:a4:4f:f9:f0:25:2c:87:60:83:ba:a5:76:cb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=380dd9e7355c72c751fff4f175dace7daa7b9cbf
Validity
Not Before: Apr 21 08:00:19 2025 GMT
Not After : Apr 22 08:00:19 2025 GMT
Subject: CN=30134d290464a72c5b8c4fab6993bef6cc5377e8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:cf:7f:82:06:21:49:33:c8:d2:2d:da:61:d9:
02:fd:a1:34:be:b3:ce:96:6c:b3:38:79:6f:ee:d9:
11:68:02:f2:55:c1:f4:3a:1b:9d:db:63:35:c3:24:
8c:33:07:21:3b:6d:3e:97:c7:49:45:5d:d1:b5:19:
53:a0:96:64:13:c8:84:2d:b5:6f:06:0f:a6:14:80:
a1:de:8f:d0:46:76:fe:3d:f9:9b:c9:e5:6a:6e:2f:
5c:1e:00:56:cf:45:c5:8b:b0:08:8b:63:c6:fd:15:
aa:b8:7d:59:2e:3a:cf:12:6a:ef:89:28:b8:e2:5a:
84:57:1a:a9:17:d4:5a:7d:69:19:03:2e:ac:3f:82:
6a:ae:0f:4b:94:56:83:38:6d:a5:29:e5:d6:f5:1a:
66:8d:00:fa:80:f5:ac:9b:24:7a:d3:6e:57:e6:59:
45:38:22:da:73:7e:7d:47:f2:74:66:b2:87:5a:a4:
12:72:7a:61:eb:8b:a3:23:f5:a1:8d:53:b2:04:dd:
45:e4:c8:7e:28:ec:f9:55:ac:72:48:92:e3:c5:74:
b2:15:5d:f3:61:1f:ce:18:27:14:2a:eb:b5:83:3c:
04:f7:ce:f8:3a:49:2f:2f:6a:19:be:dc:eb:8e:1b:
65:f7:9a:be:de:6e:f2:9f:07:d0:85:53:43:d6:3d:
0d:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
30:13:4D:29:04:64:A7:2C:5B:8C:4F:AB:69:93:BE:F6:CC:53:77:E8
X509v3 Authority Key Identifier:
keyid:38:0D:D9:E7:35:5C:72:C7:51:FF:F4:F1:75:DA:CE:7D:AA:7B:9C:BF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OA3Z5zVccsdR__TxddrOfap7nL8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ef/b7fea2-a32d-4a5e-9982-54b4ca50d248/1/OA3Z5zVccsdR__TxddrOfap7nL8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ef/b7fea2-a32d-4a5e-9982-54b4ca50d248/1/OA3Z5zVccsdR__TxddrOfap7nL8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
40:ed:83:69:31:b0:21:f2:1a:b2:01:90:95:86:86:76:02:35:
66:e4:97:b9:8c:87:90:bb:73:fb:1f:9a:bf:b3:33:29:18:1f:
53:6f:60:64:6c:79:43:6b:af:fe:11:6a:3f:b3:e6:3b:62:df:
7c:5b:47:05:d7:a4:00:cd:3b:71:4c:4a:a9:1e:d3:c3:50:2f:
7a:0d:5c:9d:d7:da:3d:3e:25:c0:c1:e8:6a:34:58:01:89:3b:
2f:e3:e2:6f:90:9f:0f:9c:99:3a:f4:7a:05:3a:80:eb:46:2f:
2e:9a:d1:20:a6:e2:5c:f2:5c:bd:65:91:c6:c9:4e:30:d3:fc:
ba:a1:ab:05:5c:d1:52:72:b8:e9:ea:54:33:13:45:20:93:35:
69:22:7a:eb:68:28:ee:22:1b:f1:aa:1d:c0:47:72:b3:25:e4:
2b:45:5c:ad:fa:4d:65:f7:b7:7e:ed:96:3f:a7:d0:f9:30:6e:
0f:02:00:8d:3e:69:48:a5:2a:6e:79:39:62:c0:a8:a6:6d:8d:
a1:4b:e4:4f:5d:98:a8:2a:7b:4b:96:9e:13:0b:11:ed:5c:d9:
65:04:2c:0f:05:a0:ce:6d:21:2d:3d:df:c1:23:41:6c:2c:49:
ca:aa:44:b8:47:b8:b9:03:ab:3e:a0:91:ee:0b:f3:83:e6:a3:
a3:9a:aa:d1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 21 10:38:12 2025 by rpki-client