Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/14/89460c-132f-4c91-bd81-cfc0fcba83a2/1/T0_oHzIxJo9848MUpJaoLMInfDs.mft
File: T0_oHzIxJo9848MUpJaoLMInfDs.mft (raw, json)
Hash identifier: H4rOhMIt9fZ8f628qPwKME48/+WhRcCmIlAIn3XQGx8=
Subject key identifier: B3:5B:20:B5:A6:90:9E:58:B0:D7:F4:41:B3:6A:D8:52:6D:6F:A7:F6
Authority key identifier: 4F:4F:E8:1F:32:31:26:8F:7C:E3:C3:14:A4:96:A8:2C:C2:27:7C:3B
Certificate issuer: /CN=4f4fe81f3231268f7ce3c314a496a82cc2277c3b
Certificate serial: 01964E5A57DC95B3804D6D87F8C752450A39
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/T0_oHzIxJo9848MUpJaoLMInfDs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/14/89460c-132f-4c91-bd81-cfc0fcba83a2/1/T0_oHzIxJo9848MUpJaoLMInfDs.mft
Manifest number: 1273
Signing time: Sat 19 Apr 2025 14:01:05 +0000
Manifest this update: Sat 19 Apr 2025 14:01:05 +0000
Manifest next update: Sun 20 Apr 2025 14:01:05 +0000
Files and hashes: 1: T0_oHzIxJo9848MUpJaoLMInfDs.crl (hash: 9vuOvpncpO6vJC1NNyHapI813FHoBWMXAeT33WsUaJQ=)
2: aeH9HJ9pJaNmWyF-L7DK5SJwZY4.roa (hash: ZymKLot+S0ODnNv/ycCiCzvG9PSmkpOXHHZ4MxN5d9U=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/14/89460c-132f-4c91-bd81-cfc0fcba83a2/1/T0_oHzIxJo9848MUpJaoLMInfDs.crl
rsync://rpki.ripe.net/repository/DEFAULT/14/89460c-132f-4c91-bd81-cfc0fcba83a2/1/T0_oHzIxJo9848MUpJaoLMInfDs.mft
rsync://rpki.ripe.net/repository/DEFAULT/T0_oHzIxJo9848MUpJaoLMInfDs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 20 Apr 2025 13:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:4e:5a:57:dc:95:b3:80:4d:6d:87:f8:c7:52:45:0a:39
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4f4fe81f3231268f7ce3c314a496a82cc2277c3b
Validity
Not Before: Apr 19 14:01:05 2025 GMT
Not After : Apr 20 14:01:05 2025 GMT
Subject: CN=b35b20b5a6909e58b0d7f441b36ad8526d6fa7f6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:fb:69:8d:de:a6:c0:d7:7e:92:96:1b:78:b0:
25:fb:5c:a3:1f:f7:5c:de:44:2e:0e:ac:fd:f1:b1:
70:29:4a:f9:e1:03:c0:d8:87:ff:f1:a5:32:f8:f7:
57:88:d8:c6:21:54:f9:32:6d:0c:ef:6e:82:88:55:
13:de:b2:a7:eb:6b:80:dc:cc:c4:1a:fe:95:37:f1:
36:59:42:a4:c9:13:78:07:91:a6:20:9d:c2:64:5c:
ad:6c:c2:32:10:17:81:62:f6:03:8f:92:32:05:0d:
7a:ee:42:ad:17:64:7b:a2:56:c0:8b:c1:65:88:24:
71:24:6a:f0:3d:86:3e:8f:aa:f4:5c:f5:a6:93:ea:
4d:f8:d4:b5:2f:e2:1e:69:3e:d2:b0:c0:aa:a3:00:
71:a6:41:16:63:bc:f7:ac:2b:9e:48:1d:bd:e2:13:
7b:ca:61:bc:11:d9:00:78:da:e9:43:3c:fc:1f:b8:
67:d4:e1:b9:fd:dc:9c:51:e4:29:a2:8b:f0:de:05:
c1:3e:81:02:13:41:f4:8a:f3:7c:0c:3c:4a:48:1e:
5a:00:34:cf:82:4a:cf:c8:fb:79:2a:c8:17:71:bf:
9a:3e:6e:76:c7:77:18:ea:09:d6:7b:2e:35:76:e1:
3e:6d:4b:67:a2:18:05:d7:19:08:bf:c7:6b:8f:e9:
21:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B3:5B:20:B5:A6:90:9E:58:B0:D7:F4:41:B3:6A:D8:52:6D:6F:A7:F6
X509v3 Authority Key Identifier:
keyid:4F:4F:E8:1F:32:31:26:8F:7C:E3:C3:14:A4:96:A8:2C:C2:27:7C:3B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/T0_oHzIxJo9848MUpJaoLMInfDs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/14/89460c-132f-4c91-bd81-cfc0fcba83a2/1/T0_oHzIxJo9848MUpJaoLMInfDs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/14/89460c-132f-4c91-bd81-cfc0fcba83a2/1/T0_oHzIxJo9848MUpJaoLMInfDs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
83:12:ea:d5:90:f9:50:79:5a:f3:3c:66:68:6c:c2:e7:b0:ad:
89:6a:4b:2e:94:b6:33:43:6b:b5:ff:7f:7e:15:88:66:ee:e4:
cd:5d:0d:ce:64:23:37:4c:7b:56:99:7e:7c:bf:36:a4:e6:dd:
a8:ca:83:de:ce:77:44:86:26:0e:ba:6f:19:d6:0a:d2:44:68:
28:62:10:0c:da:4d:65:a2:ec:0e:7d:a1:1c:df:26:df:13:3f:
be:36:72:c6:fd:2f:bb:4b:32:94:9e:21:07:e1:a2:f6:06:a8:
41:4c:62:0f:68:a9:92:3d:48:a5:bd:ac:ec:88:39:51:b8:f3:
c4:b8:87:5a:73:48:c5:44:4f:49:6e:9f:48:2a:85:ea:80:1a:
d2:f9:20:0f:02:69:7a:d3:d5:bb:db:f6:68:55:9b:86:38:d0:
ec:90:88:c2:ba:60:0a:40:3e:c3:74:c8:a8:15:a0:25:ac:3d:
c5:14:7b:0c:e6:9d:34:c6:82:8e:b4:99:30:06:f7:4a:07:90:
bd:b3:6c:ec:ed:fc:c0:34:83:51:ce:d3:17:da:d2:0d:a9:6f:
3c:fc:45:fb:d6:21:e2:5e:83:4d:34:fd:17:13:00:4e:a1:88:
20:89:0b:a2:0f:07:0e:58:ab:b7:aa:21:70:a3:a5:37:a9:62:
d1:07:7e:b5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 19 18:35:12 2025 by rpki-client