Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0e/0d64e2-e2da-468a-8f7d-7fe328571938/1/OfCGymIRu5XQZDCJx9pXb-Z8IVI.mft
File: OfCGymIRu5XQZDCJx9pXb-Z8IVI.mft (raw, json)
Hash identifier: DVqy38fBbu83sQ+qrzJqmSQavZ8s0AbOOiudUlOyU74=
Subject key identifier: 18:17:F2:B3:AF:29:1C:90:9E:50:04:32:46:6C:03:E2:20:04:CA:67
Authority key identifier: 39:F0:86:CA:62:11:BB:95:D0:64:30:89:C7:DA:57:6F:E6:7C:21:52
Certificate issuer: /CN=39f086ca6211bb95d0643089c7da576fe67c2152
Certificate serial: 019642C3725081E7C9C0D2E2A28A10E29E37
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OfCGymIRu5XQZDCJx9pXb-Z8IVI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0e/0d64e2-e2da-468a-8f7d-7fe328571938/1/OfCGymIRu5XQZDCJx9pXb-Z8IVI.mft
Manifest number: 0C30
Signing time: Thu 17 Apr 2025 08:00:26 +0000
Manifest this update: Thu 17 Apr 2025 08:00:26 +0000
Manifest next update: Fri 18 Apr 2025 08:00:26 +0000
Files and hashes: 1: MxMYPJuJ2ahCKlSKTQjVM4W37Zw.roa (hash: 9t6kBtgaiu9wCZTnovzIZuJxrTyQ2HBBvSidXlmnqaM=)
2: OfCGymIRu5XQZDCJx9pXb-Z8IVI.crl (hash: 6cNvYtM1OmRCeYU2R1tOcJrjP02203g9poPJAGimt68=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0e/0d64e2-e2da-468a-8f7d-7fe328571938/1/OfCGymIRu5XQZDCJx9pXb-Z8IVI.crl
rsync://rpki.ripe.net/repository/DEFAULT/0e/0d64e2-e2da-468a-8f7d-7fe328571938/1/OfCGymIRu5XQZDCJx9pXb-Z8IVI.mft
rsync://rpki.ripe.net/repository/DEFAULT/OfCGymIRu5XQZDCJx9pXb-Z8IVI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 18 Apr 2025 07:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:42:c3:72:50:81:e7:c9:c0:d2:e2:a2:8a:10:e2:9e:37
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=39f086ca6211bb95d0643089c7da576fe67c2152
Validity
Not Before: Apr 17 08:00:26 2025 GMT
Not After : Apr 18 08:00:26 2025 GMT
Subject: CN=1817f2b3af291c909e500432466c03e22004ca67
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:aa:ca:fe:73:4c:74:fb:02:66:93:f3:98:f5:
a0:0c:d1:df:e9:37:75:29:7d:34:24:8d:7b:d6:05:
da:e9:a7:2f:3e:9e:67:cf:c2:26:c2:ae:9b:fe:cc:
88:56:d2:51:53:4a:f2:9b:8a:14:54:a9:73:52:5c:
03:dc:af:41:4d:77:4c:f5:a7:e4:1f:ac:0e:75:79:
a2:1d:02:1b:e7:40:c4:a1:b4:8c:c0:e2:f1:2b:90:
76:d1:5a:8d:b0:0a:39:a1:c1:99:32:97:f4:22:ae:
e3:96:ea:27:9f:d2:c6:31:9a:b7:94:88:dc:03:a8:
ac:fd:39:c9:b8:f8:4d:35:55:dd:72:6d:a7:1e:13:
8b:06:b0:35:22:f7:f4:63:8c:00:93:79:da:98:0c:
74:4c:73:d0:13:94:33:35:c2:4b:47:5f:d3:d6:b8:
ac:c0:44:3e:ac:0c:2a:be:2c:e8:cb:83:6e:5f:10:
7d:5d:99:75:a3:92:8a:71:4d:4c:54:7e:b9:1e:f6:
cb:e6:57:f9:7e:dc:26:b8:d1:ea:1f:a7:69:2a:8c:
90:46:a5:df:7a:e3:d4:e6:51:ef:c3:5a:39:a5:03:
6b:45:d7:b6:3d:7f:cc:58:8e:de:17:da:c7:b9:f6:
a3:d8:c0:a1:77:e3:6b:4f:67:32:49:d1:c1:b9:db:
97:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
18:17:F2:B3:AF:29:1C:90:9E:50:04:32:46:6C:03:E2:20:04:CA:67
X509v3 Authority Key Identifier:
keyid:39:F0:86:CA:62:11:BB:95:D0:64:30:89:C7:DA:57:6F:E6:7C:21:52
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OfCGymIRu5XQZDCJx9pXb-Z8IVI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/0d64e2-e2da-468a-8f7d-7fe328571938/1/OfCGymIRu5XQZDCJx9pXb-Z8IVI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/0d64e2-e2da-468a-8f7d-7fe328571938/1/OfCGymIRu5XQZDCJx9pXb-Z8IVI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9c:46:5c:c2:bf:6d:ab:27:40:bc:7d:ee:68:b6:59:22:56:2a:
4d:e7:e3:0b:f0:30:b9:cc:3e:c1:a9:e9:c9:23:bf:76:01:19:
e6:d0:bd:56:69:47:5b:9f:83:45:b2:d6:31:a3:4f:53:02:3b:
39:80:d7:c4:27:d6:9f:27:bf:08:e1:0e:ef:2a:d3:de:1d:e7:
31:1b:69:c4:94:38:a4:30:82:1e:fa:62:e7:2f:0c:5e:49:d9:
fe:ac:55:47:c5:28:6c:bd:fe:73:7f:66:8a:5a:f2:2c:11:42:
57:b9:dc:0a:ea:c4:08:6f:dc:ad:b7:96:87:69:85:ab:2b:75:
b6:70:c7:b6:e7:7e:cf:84:48:9e:49:bd:96:1b:38:ee:9c:95:
31:18:9a:76:da:ac:e8:07:04:5c:c0:16:aa:95:b1:4e:26:19:
26:e1:64:5a:67:f5:75:2a:81:94:46:82:20:22:5d:23:71:f1:
7f:04:f4:5c:a4:ca:96:7d:87:42:de:39:1d:4f:28:32:83:19:
e0:62:e1:bd:3e:35:f6:f3:c1:27:1e:49:84:10:d0:16:48:fc:
09:f4:0e:fe:66:58:7c:11:24:1f:fd:f1:d1:02:a8:01:5b:c2:
01:7e:d4:ca:88:9f:cd:a4:9f:fd:d6:aa:67:cf:2e:4b:da:f5:
24:7d:23:b3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 17 15:51:05 2025 by rpki-client