Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/64/c1ce51-19eb-4096-bdb9-1bffa74a3b1d/1/ODB5K147usnzcNTK56uipc26ego.mft
File: ODB5K147usnzcNTK56uipc26ego.mft (raw, json)
Hash identifier: 3/5oR+cPeoHXDAw3njw4S4SBsqGWQGFKOBCNVGwyrIk=
Subject key identifier: 29:D5:C2:60:E0:D0:39:3E:05:75:8D:8A:99:A0:A7:FE:13:71:A1:D9
Authority key identifier: 38:30:79:2B:5E:3B:BA:C9:F3:70:D4:CA:E7:AB:A2:A5:CD:BA:7A:0A
Certificate issuer: /CN=3830792b5e3bbac9f370d4cae7aba2a5cdba7a0a
Certificate serial: 01965914D82F063BFF6379BA3BB71A7782FF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ODB5K147usnzcNTK56uipc26ego.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/64/c1ce51-19eb-4096-bdb9-1bffa74a3b1d/1/ODB5K147usnzcNTK56uipc26ego.mft
Manifest number: 10F4
Signing time: Mon 21 Apr 2025 16:01:00 +0000
Manifest this update: Mon 21 Apr 2025 16:01:00 +0000
Manifest next update: Tue 22 Apr 2025 16:01:00 +0000
Files and hashes: 1: 1-2PnzzFVpt1dGXWeYqhIzX1nVe0.roa (hash: hI/InHmZs9EbHw0E5EzTrrWOPonm9OzaUn8fi0xcF4M=)
2: ODB5K147usnzcNTK56uipc26ego.crl (hash: cpZWizlLKxgymHrFSGnt01rGDcL8t0f6d4tkyGovTAE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/64/c1ce51-19eb-4096-bdb9-1bffa74a3b1d/1/ODB5K147usnzcNTK56uipc26ego.crl
rsync://rpki.ripe.net/repository/DEFAULT/64/c1ce51-19eb-4096-bdb9-1bffa74a3b1d/1/ODB5K147usnzcNTK56uipc26ego.mft
rsync://rpki.ripe.net/repository/DEFAULT/ODB5K147usnzcNTK56uipc26ego.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 22 Apr 2025 10:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:59:14:d8:2f:06:3b:ff:63:79:ba:3b:b7:1a:77:82:ff
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3830792b5e3bbac9f370d4cae7aba2a5cdba7a0a
Validity
Not Before: Apr 21 16:01:00 2025 GMT
Not After : Apr 22 16:01:00 2025 GMT
Subject: CN=29d5c260e0d0393e05758d8a99a0a7fe1371a1d9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:1c:83:a6:43:70:04:98:9d:ed:a7:72:ae:d7:
69:bb:04:60:cc:56:87:ae:34:6f:39:ba:d7:d5:27:
5b:72:94:90:43:a6:6d:85:71:df:81:5a:75:20:31:
0f:59:b5:f7:35:b1:27:3f:9e:4a:8e:85:1c:da:ab:
18:7a:08:a1:13:27:c9:3b:3d:f5:77:05:03:4f:6d:
45:63:70:04:b4:0b:04:3f:e8:96:1c:18:74:1e:03:
1b:e2:c5:c1:61:1b:73:c4:e0:de:27:5f:12:32:32:
9d:66:dd:f3:80:84:37:66:30:90:eb:de:62:99:f2:
df:3c:1e:d3:af:6b:15:44:40:a5:56:dc:8d:c6:e1:
ec:fd:f8:bf:6e:85:dc:bb:12:86:1c:fe:15:03:ac:
78:d0:a1:1e:b2:49:a0:21:b8:9d:04:a7:ef:ef:65:
4e:a7:d7:ef:3b:ae:bf:0b:b7:31:db:fa:5f:5f:28:
be:d4:14:ce:66:13:a6:76:79:3f:17:dc:e8:2c:c3:
9b:2a:f7:a0:d2:6f:d2:0e:7d:a3:1e:e3:dc:b0:04:
fd:19:ff:3b:b8:4c:66:33:46:34:d2:52:fd:d1:45:
c6:80:c1:fb:34:7a:09:9e:49:b6:e5:69:49:2c:d9:
54:98:c2:5e:72:c2:bc:84:8a:dc:80:26:b3:30:dd:
0d:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
29:D5:C2:60:E0:D0:39:3E:05:75:8D:8A:99:A0:A7:FE:13:71:A1:D9
X509v3 Authority Key Identifier:
keyid:38:30:79:2B:5E:3B:BA:C9:F3:70:D4:CA:E7:AB:A2:A5:CD:BA:7A:0A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ODB5K147usnzcNTK56uipc26ego.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/64/c1ce51-19eb-4096-bdb9-1bffa74a3b1d/1/ODB5K147usnzcNTK56uipc26ego.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/64/c1ce51-19eb-4096-bdb9-1bffa74a3b1d/1/ODB5K147usnzcNTK56uipc26ego.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
64:2d:05:13:42:db:07:09:9c:29:e3:dd:f0:fa:de:c0:aa:78:
26:09:6e:f7:b9:9a:0f:19:bd:98:6b:3e:04:9b:dd:08:f2:33:
10:1f:37:6a:85:58:99:35:0f:7a:fb:16:a8:73:4d:64:b8:30:
7a:94:9d:2a:7f:19:73:44:64:34:68:f5:46:87:3a:2b:60:c8:
3a:06:be:09:d5:ff:6e:84:8f:0f:84:aa:ed:d0:af:48:b9:2d:
34:2e:85:29:cb:87:8e:b5:4d:b9:90:da:50:f1:bf:42:96:91:
5c:b7:8f:42:14:92:64:c6:6f:5f:b8:0c:f4:09:59:a9:da:4c:
82:8a:7b:4d:7c:d0:12:d8:95:5c:c1:ee:25:0d:ee:35:2a:44:
e0:04:40:1d:db:d7:3c:c1:0c:87:d5:1b:ca:d0:b4:95:a8:f5:
58:d7:ba:9c:da:b0:f5:b4:1d:ae:9f:b8:83:95:d4:47:d1:2f:
0c:4e:5c:47:95:cf:4f:99:e8:37:bb:3e:5a:d4:c6:0d:ec:5f:
59:8d:22:1d:43:18:32:f6:a7:0c:9e:58:25:28:ef:a0:d9:5c:
fa:7e:0e:df:23:39:6b:b0:1e:1d:cb:c0:a7:7c:99:2e:4b:04:
47:73:be:22:0c:09:e9:7c:f8:19:8f:4a:fa:d7:e9:be:8f:cc:
74:eb:b8:3d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 21 19:58:56 2025 by rpki-client