Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2d/80eb21-af20-48eb-a2dc-6210eab05b70/1/OJwTxrPB3GsiFQNaZC8e-5sA3fU.mft
File: OJwTxrPB3GsiFQNaZC8e-5sA3fU.mft (raw, json)
Hash identifier: DmaeqDVnLJKJZJLaUJ+A+yTv76xFeY4utkAiAbGGJwQ=
Subject key identifier: 7C:C6:10:B3:0F:AE:0D:59:11:CD:28:90:81:AB:47:74:D5:8C:D2:2D
Authority key identifier: 38:9C:13:C6:B3:C1:DC:6B:22:15:03:5A:64:2F:1E:FB:9B:00:DD:F5
Certificate issuer: /CN=389c13c6b3c1dc6b2215035a642f1efb9b00ddf5
Certificate serial: 019646D76CFCB51CB253906D16F489F91F50
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OJwTxrPB3GsiFQNaZC8e-5sA3fU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2d/80eb21-af20-48eb-a2dc-6210eab05b70/1/OJwTxrPB3GsiFQNaZC8e-5sA3fU.mft
Manifest number: 0C09
Signing time: Fri 18 Apr 2025 03:00:45 +0000
Manifest this update: Fri 18 Apr 2025 03:00:45 +0000
Manifest next update: Sat 19 Apr 2025 03:00:45 +0000
Files and hashes: 1: OJwTxrPB3GsiFQNaZC8e-5sA3fU.crl (hash: 0E7Ih7RCSDfHfE7Y9xRphkN6HmjWwLa2vwxvvIZUs48=)
2: Pq3PJBDygUjjz_TTAnDa5kWUA6s.roa (hash: wl7p1VcPhHxXGT78nGLW8yRi9KyIJcca4JW840Jj2X0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2d/80eb21-af20-48eb-a2dc-6210eab05b70/1/OJwTxrPB3GsiFQNaZC8e-5sA3fU.crl
rsync://rpki.ripe.net/repository/DEFAULT/2d/80eb21-af20-48eb-a2dc-6210eab05b70/1/OJwTxrPB3GsiFQNaZC8e-5sA3fU.mft
rsync://rpki.ripe.net/repository/DEFAULT/OJwTxrPB3GsiFQNaZC8e-5sA3fU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 19 Apr 2025 01:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:46:d7:6c:fc:b5:1c:b2:53:90:6d:16:f4:89:f9:1f:50
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=389c13c6b3c1dc6b2215035a642f1efb9b00ddf5
Validity
Not Before: Apr 18 03:00:45 2025 GMT
Not After : Apr 19 03:00:45 2025 GMT
Subject: CN=7cc610b30fae0d5911cd289081ab4774d58cd22d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e1:2c:b5:a4:ce:96:fc:87:0d:e9:a6:c2:b7:2a:
79:d1:67:fa:98:30:c9:76:c5:94:88:2e:d5:79:47:
34:3b:69:fa:a2:b9:7e:0d:2b:67:3a:c1:45:ec:92:
05:cf:b0:8c:a9:91:b1:72:f3:28:ab:25:0d:1d:8d:
40:e5:bc:8b:5d:55:5f:b0:76:e0:e6:0e:94:f9:1c:
6c:6f:00:4b:41:6b:64:0e:90:68:2e:b6:c3:9a:2e:
c1:b5:48:33:92:2a:36:e5:e2:e5:9f:86:d9:93:37:
cc:8f:22:91:67:7a:c7:1b:02:b3:b7:af:a7:97:49:
03:f7:5c:16:97:ce:f5:16:a6:b2:45:14:f9:51:80:
6f:e7:14:90:bd:55:94:3b:ab:75:e1:c1:27:a8:29:
8a:1c:eb:c5:e5:6e:1f:bf:99:f7:56:f7:44:fe:1a:
60:9f:75:4f:55:27:34:fd:55:46:86:08:0f:ec:34:
9f:71:14:d6:23:91:fb:1d:5c:10:58:fc:1f:91:a3:
47:47:20:34:76:fc:ee:cb:05:22:79:b2:64:cb:ff:
ac:4d:0e:93:78:46:2a:c2:87:59:88:c4:58:66:63:
f8:7d:12:e2:cd:6e:e8:32:1b:5d:57:e0:f0:c8:d3:
a8:31:0d:91:df:01:01:9d:0f:58:16:7b:c0:b3:a4:
fe:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7C:C6:10:B3:0F:AE:0D:59:11:CD:28:90:81:AB:47:74:D5:8C:D2:2D
X509v3 Authority Key Identifier:
keyid:38:9C:13:C6:B3:C1:DC:6B:22:15:03:5A:64:2F:1E:FB:9B:00:DD:F5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OJwTxrPB3GsiFQNaZC8e-5sA3fU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/80eb21-af20-48eb-a2dc-6210eab05b70/1/OJwTxrPB3GsiFQNaZC8e-5sA3fU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/80eb21-af20-48eb-a2dc-6210eab05b70/1/OJwTxrPB3GsiFQNaZC8e-5sA3fU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
aa:5a:62:3f:3b:82:17:29:d9:d0:1d:6b:6f:13:e4:c0:bb:df:
6b:3b:7a:af:4b:46:56:54:13:69:03:26:a0:52:37:e1:16:15:
8b:04:b3:01:82:d8:f0:b7:09:99:76:59:c0:40:9f:89:0e:6d:
6c:70:82:8d:37:0b:3f:7c:ff:1c:2f:cd:43:3d:d4:9e:cc:1a:
22:4e:1d:11:f9:37:16:8e:bf:24:1e:58:f0:a7:92:7a:b3:58:
be:f0:27:c4:d2:32:00:aa:2d:42:b3:99:57:d8:98:05:87:ec:
c3:8d:5d:af:4c:97:91:b1:80:4a:dc:ea:ac:b3:f2:a8:3d:06:
0e:b7:52:d8:8e:5a:e1:31:1d:9d:04:18:ba:8c:69:30:4c:3a:
21:35:83:34:81:e9:68:62:46:54:e1:a2:42:1d:6e:1b:59:71:
c4:8e:1f:62:0f:7c:e2:ba:54:27:ca:ef:05:25:7a:8a:50:3b:
48:93:3c:b6:e1:2e:72:ec:b8:e2:a9:e5:51:de:8b:1d:ca:1b:
78:e5:36:06:77:fa:29:58:23:28:9b:e4:88:82:af:66:ca:d8:
99:73:41:c7:bc:50:9d:c6:f9:e2:37:f3:e5:31:44:37:b3:3e:
2f:e2:06:13:60:ba:e6:95:b6:13:95:c2:a6:f1:99:2f:3c:70:
e8:9b:bd:c9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 18 06:55:34 2025 by rpki-client