Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1c/897876-da72-40bc-8d5c-7ca9b8e91ac7/1/Od2goAlTA6kfOOQ6tNN7YZw76h0.mft
File: Od2goAlTA6kfOOQ6tNN7YZw76h0.mft (raw, json)
Hash identifier: 1+/IjyPG1Hb7KO+jVCFiFAu5IvnNqGDwunRb4gROGnw=
Subject key identifier: 53:B0:3E:98:EF:32:88:16:A2:E4:26:B2:40:AD:D5:D5:63:45:E5:79
Authority key identifier: 39:DD:A0:A0:09:53:03:A9:1F:38:E4:3A:B4:D3:7B:61:9C:3B:EA:1D
Certificate issuer: /CN=39dda0a0095303a91f38e43ab4d37b619c3bea1d
Certificate serial: 01964F354A0C7F379EEE747C1B0733786E63
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Od2goAlTA6kfOOQ6tNN7YZw76h0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1c/897876-da72-40bc-8d5c-7ca9b8e91ac7/1/Od2goAlTA6kfOOQ6tNN7YZw76h0.mft
Manifest number: 14FB
Signing time: Sat 19 Apr 2025 18:00:14 +0000
Manifest this update: Sat 19 Apr 2025 18:00:14 +0000
Manifest next update: Sun 20 Apr 2025 18:00:14 +0000
Files and hashes: 1: EzYELBbdECMUd5jL00V2yecSQYs.roa (hash: GVtwH5pzCQ3ejlHuG6nu4gzTRA6JPrykk4d+btWS9mI=)
2: Od2goAlTA6kfOOQ6tNN7YZw76h0.crl (hash: mmDSfXzJB5uCYjbPj9LMnjkSIyJAxQKXoJzAaOSs68A=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1c/897876-da72-40bc-8d5c-7ca9b8e91ac7/1/Od2goAlTA6kfOOQ6tNN7YZw76h0.crl
rsync://rpki.ripe.net/repository/DEFAULT/1c/897876-da72-40bc-8d5c-7ca9b8e91ac7/1/Od2goAlTA6kfOOQ6tNN7YZw76h0.mft
rsync://rpki.ripe.net/repository/DEFAULT/Od2goAlTA6kfOOQ6tNN7YZw76h0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 20 Apr 2025 18:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:4f:35:4a:0c:7f:37:9e:ee:74:7c:1b:07:33:78:6e:63
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=39dda0a0095303a91f38e43ab4d37b619c3bea1d
Validity
Not Before: Apr 19 18:00:14 2025 GMT
Not After : Apr 20 18:00:14 2025 GMT
Subject: CN=53b03e98ef328816a2e426b240add5d56345e579
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:47:3f:12:9a:19:d5:47:32:88:0e:fe:de:53:
71:69:aa:46:f9:f0:06:f1:65:f3:50:ab:f9:98:2b:
45:7d:47:b0:cd:2f:d9:23:b5:ba:c3:d2:16:08:f8:
1e:08:49:f6:2b:05:e8:bc:7d:53:e8:9d:d2:ee:72:
2c:fe:1b:ec:85:e8:f5:64:1d:66:52:0a:93:b0:34:
0f:aa:5d:d3:ef:ec:4b:02:01:30:b7:8b:d3:c4:ac:
41:b4:47:16:35:11:06:a9:f8:94:57:fb:a9:72:a8:
ca:23:8c:56:fb:fb:1c:49:26:8a:ac:01:dd:00:0e:
31:a1:d2:9d:17:57:6c:cf:ad:e8:ba:e3:ae:7b:dd:
a3:1a:1b:42:02:72:fb:b5:b7:e5:0c:f2:01:11:ff:
6c:66:57:33:1e:64:1e:e2:bd:22:1b:b8:81:d5:7a:
97:3f:da:ef:47:1c:d7:c5:fe:48:d1:6b:da:39:3c:
8a:58:de:ae:f1:9f:c2:2e:7d:77:a9:19:89:ff:5a:
f1:f8:19:ba:c4:2c:b6:95:73:8d:9a:26:c7:fd:ad:
6e:76:a9:2b:ed:fc:2d:9b:00:5b:d0:39:d6:6c:06:
f1:18:19:19:70:75:37:ba:ff:96:41:5b:6e:24:ef:
3c:94:90:b4:b1:18:e9:50:b0:9b:c0:36:f6:1c:81:
9c:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
53:B0:3E:98:EF:32:88:16:A2:E4:26:B2:40:AD:D5:D5:63:45:E5:79
X509v3 Authority Key Identifier:
keyid:39:DD:A0:A0:09:53:03:A9:1F:38:E4:3A:B4:D3:7B:61:9C:3B:EA:1D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Od2goAlTA6kfOOQ6tNN7YZw76h0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/897876-da72-40bc-8d5c-7ca9b8e91ac7/1/Od2goAlTA6kfOOQ6tNN7YZw76h0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/897876-da72-40bc-8d5c-7ca9b8e91ac7/1/Od2goAlTA6kfOOQ6tNN7YZw76h0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
cb:00:7a:34:c2:af:13:91:56:6d:7c:c5:c8:1e:f6:e8:d0:79:
ad:39:c8:b8:91:45:2a:98:4a:6a:87:21:b3:85:5d:d3:ec:eb:
23:24:3a:80:9e:33:c8:eb:87:ef:02:5e:9d:50:77:a8:b6:e3:
76:a1:cf:82:14:43:f4:0b:83:f9:53:03:17:42:aa:c2:8c:b6:
cd:66:d9:e9:87:b5:02:26:6a:4e:4b:3e:04:ac:e2:40:fc:ca:
21:48:25:95:ef:14:cb:37:3e:10:2d:27:f2:49:b4:0b:7c:4a:
59:b5:27:cc:d4:83:af:b0:1d:cc:88:cd:21:a0:d7:d3:ed:d7:
b5:ce:ed:4b:05:d1:ff:49:70:ab:ab:72:74:16:2e:db:d9:d3:
8b:98:28:20:19:b6:7f:c8:d8:ef:1d:72:e5:0b:9f:da:82:48:
89:e0:55:25:30:fa:11:ee:bb:5d:88:9d:ed:a0:db:78:a2:16:
49:7e:aa:32:60:44:7e:20:f4:45:be:35:d0:b5:69:9a:79:4a:
54:cf:45:2b:ac:d1:f9:12:f1:79:0d:8a:37:e5:bc:db:ab:a2:
dc:86:fb:94:1d:b3:30:91:3c:15:a9:0a:15:ce:99:e1:91:9d:
c5:f4:8a:64:5b:2e:44:2f:a2:e1:23:8e:0e:6c:d9:26:05:e1:
af:e4:a9:f8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 20 03:28:18 2025 by rpki-client