Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1c/03bab8-6c43-4a20-a960-c37a5982f466/1/ofeIKGHCntWZvkqTdIDE0T4lv8I.mft
File: ofeIKGHCntWZvkqTdIDE0T4lv8I.mft (raw, json)
Hash identifier: cdow1p5KzCtYrobhR97RmHBdm1wWBjDpsOsmljoFNeA=
Subject key identifier: 95:DB:CF:DC:A1:EC:FC:B5:CB:3B:C0:30:46:DA:FA:00:88:D7:89:D8
Authority key identifier: A1:F7:88:28:61:C2:9E:D5:99:BE:4A:93:74:80:C4:D1:3E:25:BF:C2
Certificate issuer: /CN=a1f7882861c29ed599be4a937480c4d13e25bfc2
Certificate serial: 0196526DB4EDEA71D95C86DC31390D5A8B87
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ofeIKGHCntWZvkqTdIDE0T4lv8I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1c/03bab8-6c43-4a20-a960-c37a5982f466/1/ofeIKGHCntWZvkqTdIDE0T4lv8I.mft
Manifest number: 1501
Signing time: Sun 20 Apr 2025 09:00:43 +0000
Manifest this update: Sun 20 Apr 2025 09:00:43 +0000
Manifest next update: Mon 21 Apr 2025 09:00:43 +0000
Files and hashes: 1: ZI8Cc8TbOXHSTT6aTy4qes85u18.roa (hash: Gcf7oNxz6hoE1nbwGxOkKAeIU8snb4fxphzbF+WsHH8=)
2: hQJK6zQLhYj5qTjnWHPVq5_Ggwc.roa (hash: qWKatLGe/VjD4eV5U12XcGzsbBr23W6H5teeHc7VO7g=)
3: ofeIKGHCntWZvkqTdIDE0T4lv8I.crl (hash: XhRScK4suuZLV6ne5BEENu3cf8oirknOkYbxAxpqYv4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1c/03bab8-6c43-4a20-a960-c37a5982f466/1/ofeIKGHCntWZvkqTdIDE0T4lv8I.crl
rsync://rpki.ripe.net/repository/DEFAULT/1c/03bab8-6c43-4a20-a960-c37a5982f466/1/ofeIKGHCntWZvkqTdIDE0T4lv8I.mft
rsync://rpki.ripe.net/repository/DEFAULT/ofeIKGHCntWZvkqTdIDE0T4lv8I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 21 Apr 2025 07:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:52:6d:b4:ed:ea:71:d9:5c:86:dc:31:39:0d:5a:8b:87
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a1f7882861c29ed599be4a937480c4d13e25bfc2
Validity
Not Before: Apr 20 09:00:43 2025 GMT
Not After : Apr 21 09:00:43 2025 GMT
Subject: CN=95dbcfdca1ecfcb5cb3bc03046dafa0088d789d8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:5d:cb:e9:26:85:2c:1d:d6:41:37:5f:7b:4f:
89:f8:6c:96:6e:3b:ec:2d:59:c3:3b:ff:9a:cd:59:
ec:a4:d3:ff:48:7f:ae:95:9a:b8:e6:aa:2f:43:c1:
96:fd:e3:7e:fe:04:60:82:13:fe:e3:1d:c6:c8:01:
0e:65:e8:a4:66:fd:21:4f:e4:b3:cc:6e:68:4a:ec:
6b:67:09:b8:5c:ea:3f:c6:3f:e0:7e:a9:c2:d3:86:
c5:e0:fe:72:02:4a:d5:52:ae:97:ae:d0:0b:8b:9e:
77:15:6c:a0:ce:b6:6b:03:12:0a:ab:9d:19:4d:28:
d5:4c:cc:8e:4e:1f:10:41:23:f5:09:69:6d:a1:b3:
e0:36:1a:0a:3d:ba:a9:d9:76:43:31:a5:20:01:8d:
5c:be:87:6a:e0:ef:6a:e1:62:fc:ca:85:80:56:ea:
eb:34:b5:03:18:25:46:ab:19:30:c6:d6:bc:d4:5d:
09:f1:64:9d:ec:d7:c7:74:ac:fa:8c:ef:02:1d:bd:
b0:b1:ec:cd:53:88:f2:09:da:2f:00:bf:29:6a:4b:
a9:ab:a8:61:39:62:dd:af:51:7b:86:4c:c9:3a:94:
fb:c9:63:60:6b:72:bb:02:5c:52:f8:d5:56:b1:85:
4f:64:f5:9b:0c:10:f5:db:b4:c5:2b:db:36:66:b6:
2b:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
95:DB:CF:DC:A1:EC:FC:B5:CB:3B:C0:30:46:DA:FA:00:88:D7:89:D8
X509v3 Authority Key Identifier:
keyid:A1:F7:88:28:61:C2:9E:D5:99:BE:4A:93:74:80:C4:D1:3E:25:BF:C2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ofeIKGHCntWZvkqTdIDE0T4lv8I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/03bab8-6c43-4a20-a960-c37a5982f466/1/ofeIKGHCntWZvkqTdIDE0T4lv8I.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/03bab8-6c43-4a20-a960-c37a5982f466/1/ofeIKGHCntWZvkqTdIDE0T4lv8I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
69:f6:fc:74:12:68:1b:ad:1f:26:a5:1f:52:33:43:04:b5:af:
c5:42:5b:47:35:83:b1:fc:31:36:d8:38:ab:28:0d:59:4c:99:
0f:38:4d:33:0f:28:e7:c7:dc:fe:2d:36:0b:30:13:52:a9:22:
1e:a7:ff:f1:3e:1f:3b:6f:62:b0:84:57:e2:bc:f9:e7:68:aa:
5a:24:a3:bf:d9:53:8f:66:b9:6f:f5:3a:67:5f:96:b7:a9:ea:
23:6e:94:77:ec:1d:72:e6:df:74:ed:bb:7c:95:54:1c:6a:80:
37:c2:1f:be:70:a6:01:f5:1b:6b:ff:d9:06:6d:d2:bd:da:52:
2d:2f:4a:86:63:0f:47:2e:01:24:01:d8:63:61:78:35:06:2e:
93:ee:b8:fb:58:69:7e:76:63:cd:9a:6f:05:fc:73:6c:2f:a5:
be:6e:80:75:ca:9d:73:c2:88:b9:4c:0b:81:79:76:16:ba:06:
63:e8:0b:96:d6:87:94:1d:9d:b7:c7:da:bd:70:31:cb:98:0e:
07:3d:ab:ba:82:1f:58:86:55:07:c0:3c:f5:20:d9:59:0b:a5:
d8:d7:85:1a:43:b5:08:e7:38:62:4c:c0:d4:dc:07:b5:59:7a:
30:eb:94:4d:4c:28:23:2d:70:4b:89:66:dd:ea:b1:1a:18:3c:
17:00:ca:17
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 20 12:13:35 2025 by rpki-client