Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/73/42c355-585a-48bb-9e4a-a47540fed4b9/1/1olx6h0itezaGpdZ8FwmyMVqRow.mft
File: 1olx6h0itezaGpdZ8FwmyMVqRow.mft (raw, json)
Hash identifier: JggdzDFUzlUTpm8hZOKlOoi5JoK8siJcgghDBclC42U=
Subject key identifier: 93:27:6A:3A:2E:CC:DB:F6:DB:9E:23:C0:54:2F:D7:1D:B9:56:D9:59
Authority key identifier: D6:89:71:EA:1D:22:B5:EC:DA:1A:97:59:F0:5C:26:C8:C5:6A:46:8C
Certificate issuer: /CN=d68971ea1d22b5ecda1a9759f05c26c8c56a468c
Certificate serial: 019655009746AC8FC3C23EFCE198FC828EAB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1olx6h0itezaGpdZ8FwmyMVqRow.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/73/42c355-585a-48bb-9e4a-a47540fed4b9/1/1olx6h0itezaGpdZ8FwmyMVqRow.mft
Manifest number: 0CED
Signing time: Sun 20 Apr 2025 21:00:24 +0000
Manifest this update: Sun 20 Apr 2025 21:00:24 +0000
Manifest next update: Mon 21 Apr 2025 21:00:24 +0000
Files and hashes: 1: 1olx6h0itezaGpdZ8FwmyMVqRow.crl (hash: 6KpOxifUt14yCD1qdwJYH+l8HLtyz0qjilf9Wpb8p9w=)
2: BN10iJQINkqqQbCXE2ZsJo5PDg0.roa (hash: dLiu8pKhhmUdKMIv3bdjJ619GvxkAvZ9+W0bGvQ4ymQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/73/42c355-585a-48bb-9e4a-a47540fed4b9/1/1olx6h0itezaGpdZ8FwmyMVqRow.crl
rsync://rpki.ripe.net/repository/DEFAULT/73/42c355-585a-48bb-9e4a-a47540fed4b9/1/1olx6h0itezaGpdZ8FwmyMVqRow.mft
rsync://rpki.ripe.net/repository/DEFAULT/1olx6h0itezaGpdZ8FwmyMVqRow.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 21 Apr 2025 21:00:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:55:00:97:46:ac:8f:c3:c2:3e:fc:e1:98:fc:82:8e:ab
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d68971ea1d22b5ecda1a9759f05c26c8c56a468c
Validity
Not Before: Apr 20 21:00:24 2025 GMT
Not After : Apr 21 21:00:24 2025 GMT
Subject: CN=93276a3a2eccdbf6db9e23c0542fd71db956d959
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:49:08:bc:f1:bd:7f:9b:22:a4:06:ee:09:4b:
d0:7a:a4:c7:65:87:89:dd:11:bf:2a:e2:c2:17:c6:
1a:8e:37:f9:d4:88:8f:de:a9:2f:21:aa:78:c3:23:
35:39:28:11:ee:42:77:40:8b:3e:78:a5:fe:7c:ec:
1e:a6:76:8e:01:6e:94:07:e4:6b:02:37:4a:84:32:
b7:34:e6:2e:3c:c0:a2:a2:9f:53:84:fb:2d:f6:ad:
c0:b0:09:fd:09:90:44:d5:cf:98:03:6f:d8:60:39:
9c:94:46:33:b2:12:8a:4e:29:55:31:4d:07:2e:10:
d0:64:73:8e:b9:2f:4b:54:8a:72:bd:13:77:f5:78:
a9:89:b9:90:90:e1:16:e4:88:99:ae:34:cd:50:57:
9f:66:f7:10:c0:6b:af:dd:b5:41:32:a5:a5:bf:69:
4f:31:43:93:23:8d:46:60:08:b5:63:24:e4:86:4d:
67:82:56:45:8a:c5:71:65:09:a3:3d:aa:02:49:9a:
19:55:8b:1c:20:cb:53:93:31:d8:12:16:2a:7f:75:
7e:b7:2f:79:c3:0a:79:e7:64:17:65:63:1f:52:90:
17:2f:b4:ca:19:da:59:43:0c:92:bb:ef:59:8d:98:
71:db:86:e7:bd:cc:c2:16:53:f3:f2:69:2c:27:c1:
ca:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
93:27:6A:3A:2E:CC:DB:F6:DB:9E:23:C0:54:2F:D7:1D:B9:56:D9:59
X509v3 Authority Key Identifier:
keyid:D6:89:71:EA:1D:22:B5:EC:DA:1A:97:59:F0:5C:26:C8:C5:6A:46:8C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1olx6h0itezaGpdZ8FwmyMVqRow.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/73/42c355-585a-48bb-9e4a-a47540fed4b9/1/1olx6h0itezaGpdZ8FwmyMVqRow.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/73/42c355-585a-48bb-9e4a-a47540fed4b9/1/1olx6h0itezaGpdZ8FwmyMVqRow.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
03:56:00:73:6d:86:fe:0c:58:cb:fb:e8:25:d3:f4:65:d3:0b:
31:aa:a5:01:e6:f9:3d:18:d1:26:76:26:5e:e5:58:e0:37:23:
9b:67:f3:8a:a0:d0:9d:67:c3:ba:19:37:cc:25:ed:61:52:3e:
53:d1:3f:3a:fc:af:d6:5b:9c:58:54:ac:a0:08:d1:e6:ef:4e:
ce:35:41:d5:20:1d:0d:92:62:67:18:e7:3c:e6:84:78:16:bc:
88:46:25:ee:c0:e5:38:13:eb:ce:5e:01:e7:72:61:ea:7e:89:
a7:17:d0:63:56:22:4b:0c:fc:d8:49:6f:ca:b9:5b:7f:07:93:
b2:1b:23:f6:ec:e4:26:1d:b9:64:82:e2:44:74:61:b6:15:34:
a8:08:89:f5:59:1c:56:25:17:96:1f:7c:74:85:c5:12:c8:d3:
9c:af:0c:ed:b3:63:d4:1a:25:ee:53:22:bc:9e:61:e8:4a:5c:
81:67:eb:84:c7:9c:69:db:97:f6:18:84:0e:cf:b0:06:4b:ad:
ca:ae:e8:9b:4c:7b:63:01:53:81:ad:f8:fb:36:e2:5f:c8:93:
11:e2:be:c2:4f:8f:2f:48:5d:4b:06:23:e7:9e:64:37:87:2b:
ae:b1:cf:f0:ea:71:aa:71:a3:72:a0:d8:e8:cc:cb:e5:35:bd:
b0:b0:d5:6f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 21 06:47:15 2025 by rpki-client