Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/58/82f0f1-2147-49fd-a4d6-b7b574eedc33/1/OuFF_jt5sr9oqtvgB9721yrvKsM.mft
File: OuFF_jt5sr9oqtvgB9721yrvKsM.mft (raw, json)
Hash identifier: L9m+YKBLQOzIspldVzJO0tvns9tqkt62dpmHdmda4/g=
Subject key identifier: 36:32:8E:20:BD:68:38:D5:5B:3E:5C:6D:29:94:2F:1A:BB:45:F3:EB
Authority key identifier: 3A:E1:45:FE:3B:79:B2:BF:68:AA:DB:E0:07:DE:F6:D7:2A:EF:2A:C3
Certificate issuer: /CN=3ae145fe3b79b2bf68aadbe007def6d72aef2ac3
Certificate serial: 019610C4E4B9E1747BA9E1BBD6A539D05FA3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OuFF_jt5sr9oqtvgB9721yrvKsM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/58/82f0f1-2147-49fd-a4d6-b7b574eedc33/1/OuFF_jt5sr9oqtvgB9721yrvKsM.mft
Manifest number: 0DEB
Signing time: Mon 07 Apr 2025 15:01:01 +0000
Manifest this update: Mon 07 Apr 2025 15:01:01 +0000
Manifest next update: Tue 08 Apr 2025 15:01:01 +0000
Files and hashes: 1: 6z3u5jhbEbKa0ThEh3AFryqpqyQ.roa (hash: uoWydXs46C7pAA7LsT8e6YRW42KQemKKMgQf6yVmG/s=)
2: 7OwJ3NZ5gt6M2YbNy203LEEgxvo.roa (hash: ceOMKYcnnBwRulSCt+ABQYJyvPInT12PHncdmZb/zVg=)
3: OuFF_jt5sr9oqtvgB9721yrvKsM.crl (hash: iezwQrebcC/iv2xLRWYdZF9nPbLdjKGMFrFRtDU50as=)
4: jp5nTO_8vGG_gXw2zLO8q19JQc4.roa (hash: VCuZ3n81SKY0VnV/9981IOoXLe5Qs/nr8ZYqBQ4Ru6s=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/58/82f0f1-2147-49fd-a4d6-b7b574eedc33/1/OuFF_jt5sr9oqtvgB9721yrvKsM.crl
rsync://rpki.ripe.net/repository/DEFAULT/58/82f0f1-2147-49fd-a4d6-b7b574eedc33/1/OuFF_jt5sr9oqtvgB9721yrvKsM.mft
rsync://rpki.ripe.net/repository/DEFAULT/OuFF_jt5sr9oqtvgB9721yrvKsM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 08 Apr 2025 14:28:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:10:c4:e4:b9:e1:74:7b:a9:e1:bb:d6:a5:39:d0:5f:a3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3ae145fe3b79b2bf68aadbe007def6d72aef2ac3
Validity
Not Before: Apr 7 15:01:01 2025 GMT
Not After : Apr 8 15:01:01 2025 GMT
Subject: CN=36328e20bd6838d55b3e5c6d29942f1abb45f3eb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:db:4b:e0:da:f5:8f:f5:25:64:75:2d:cb:9b:87:
32:20:b6:ca:82:ac:c0:96:f6:8f:07:58:3d:8b:46:
c4:58:5e:45:4f:a5:ac:72:24:c2:61:a7:d5:ff:1a:
b9:41:ec:ff:ae:9b:ba:aa:25:8a:8d:58:21:39:b6:
a7:0e:4a:be:27:34:a5:9e:4f:9b:12:c1:fd:04:34:
ed:48:28:d0:61:8c:0c:ff:e2:1e:86:e1:17:61:a5:
19:6c:d8:8b:17:14:46:e0:59:34:ce:c2:43:d7:92:
61:20:1b:c7:da:11:1a:9f:d6:43:98:ef:5b:2c:1d:
59:be:a4:7d:0c:f6:4a:fb:b3:a6:71:68:ce:e6:7f:
e6:e1:20:dc:2a:8f:90:9e:50:c0:39:c8:91:45:e6:
4d:6c:0f:d3:d9:ee:3d:ef:ba:25:5c:20:1f:8d:e5:
3c:4a:e1:23:ba:fa:0e:bb:be:4a:cb:3e:d9:c5:f7:
92:c4:ce:18:8b:7c:eb:1b:84:42:45:8a:b6:54:ba:
10:02:29:f2:b1:eb:f8:28:cc:a3:ac:00:f7:f9:87:
28:ba:24:10:fd:7b:0f:bd:72:a1:f4:d6:fe:90:75:
f9:3f:9c:cf:e9:7e:41:b0:5a:6b:71:95:e0:70:f9:
0e:85:e3:99:a7:83:42:ff:a7:a1:a8:79:86:ed:4c:
5e:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
36:32:8E:20:BD:68:38:D5:5B:3E:5C:6D:29:94:2F:1A:BB:45:F3:EB
X509v3 Authority Key Identifier:
keyid:3A:E1:45:FE:3B:79:B2:BF:68:AA:DB:E0:07:DE:F6:D7:2A:EF:2A:C3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OuFF_jt5sr9oqtvgB9721yrvKsM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/58/82f0f1-2147-49fd-a4d6-b7b574eedc33/1/OuFF_jt5sr9oqtvgB9721yrvKsM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/58/82f0f1-2147-49fd-a4d6-b7b574eedc33/1/OuFF_jt5sr9oqtvgB9721yrvKsM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6a:21:64:9f:c5:bd:40:14:d7:f7:58:ff:86:f7:92:70:4c:98:
50:8f:ba:36:b3:e2:bb:16:28:3f:d2:85:f4:4a:56:be:9b:18:
86:14:dc:17:6c:0a:3e:01:73:2a:f2:c5:d8:8a:4d:1c:d8:7b:
38:03:fc:b4:ae:fd:f2:62:b1:0b:d0:6f:0a:f7:98:d5:81:92:
9e:9e:54:16:62:7e:81:c4:c5:5a:d7:22:f5:0f:6f:68:6c:8f:
4f:45:98:af:b2:c5:f5:73:38:26:77:2d:fb:61:2e:d5:f6:9b:
bc:b9:d6:1e:f4:c7:e1:25:d9:a8:c7:c5:73:43:5c:07:48:fb:
bc:e1:60:4e:15:e8:34:fb:b1:57:3c:c4:59:c4:d0:5e:60:92:
f8:ce:1a:c2:73:da:c7:ab:05:75:e0:89:42:1d:df:56:d1:fc:
e6:59:a6:41:4c:54:fa:84:9b:6c:1c:5e:64:10:5e:46:9e:55:
f9:f9:dc:fd:b1:5f:5c:4c:25:2c:6d:d5:e0:9a:07:05:92:99:
fe:dd:7b:f7:a2:54:29:a5:90:bf:48:c3:e9:92:40:46:27:b7:
4b:1f:8b:eb:e0:21:da:10:51:41:9b:9c:f6:64:8a:6a:c7:a7:
50:96:05:93:da:31:8a:23:6d:6a:e4:2f:04:47:25:ea:58:8c:
da:6a:79:bf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 21:06:19 2025 by rpki-client