Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/76/40e405-a38f-4781-8d55-0c9e0cf7e9fc/1/od5FbU1AXG9CktY2iGds4VDn8H4.mft
File: od5FbU1AXG9CktY2iGds4VDn8H4.mft (raw, json)
Hash identifier: 2+W0FPoQp7ZLpxQ8+qX5a3WOS5OslQOz2hvFftLCzNY=
Subject key identifier: DF:7D:F4:C1:36:1D:FB:8A:F1:B6:52:1E:4C:55:69:D4:69:27:48:33
Authority key identifier: A1:DE:45:6D:4D:40:5C:6F:42:92:D6:36:88:67:6C:E1:50:E7:F0:7E
Certificate issuer: /CN=a1de456d4d405c6f4292d63688676ce150e7f07e
Certificate serial: 01958BF21EA191CDEA0900C575416CF36547
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/od5FbU1AXG9CktY2iGds4VDn8H4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/76/40e405-a38f-4781-8d55-0c9e0cf7e9fc/1/od5FbU1AXG9CktY2iGds4VDn8H4.mft
Manifest number: 0A07
Signing time: Wed 12 Mar 2025 20:00:55 +0000
Manifest this update: Wed 12 Mar 2025 20:00:55 +0000
Manifest next update: Thu 13 Mar 2025 20:00:55 +0000
Files and hashes: 1: dqExZg0GTgu9TOznJg-Erf9mkrI.roa (hash: h4iiYtbEAvUkqkzgU+RKRv7Gvi0HY66tI3dhqgvZQ0E=)
2: od5FbU1AXG9CktY2iGds4VDn8H4.crl (hash: ZrO5U6D7vkZvKUx+7cNor6/q5SeYp1uiaPNm+klbgPE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/76/40e405-a38f-4781-8d55-0c9e0cf7e9fc/1/od5FbU1AXG9CktY2iGds4VDn8H4.crl
rsync://rpki.ripe.net/repository/DEFAULT/76/40e405-a38f-4781-8d55-0c9e0cf7e9fc/1/od5FbU1AXG9CktY2iGds4VDn8H4.mft
rsync://rpki.ripe.net/repository/DEFAULT/od5FbU1AXG9CktY2iGds4VDn8H4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 13 Mar 2025 19:14:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:8b:f2:1e:a1:91:cd:ea:09:00:c5:75:41:6c:f3:65:47
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a1de456d4d405c6f4292d63688676ce150e7f07e
Validity
Not Before: Mar 12 20:00:55 2025 GMT
Not After : Mar 13 20:00:55 2025 GMT
Subject: CN=df7df4c1361dfb8af1b6521e4c5569d469274833
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:03:b1:d5:a6:65:ec:cd:b3:12:e4:2e:bd:73:
01:e3:34:a2:76:34:2a:e4:d3:86:58:c8:8c:2e:d2:
c3:6a:4d:1a:42:d1:b5:c9:0b:88:51:60:74:0b:7c:
94:57:ee:52:ac:86:5b:47:f3:00:90:e2:bb:1d:61:
60:7e:6a:04:8c:c1:83:fd:0e:e4:9f:75:d6:ba:0d:
91:66:ea:a1:b1:2b:18:a1:d8:b8:4a:54:62:08:e7:
e1:87:f6:64:91:ac:8f:ac:f3:e7:88:b8:92:0c:d7:
8b:36:e9:4e:ab:22:2b:ff:b4:e4:34:17:c6:c3:79:
42:1a:76:ac:d8:be:ff:0a:0c:2a:68:5b:e8:06:46:
df:01:2d:f5:bb:3b:fe:da:e7:7f:84:ea:88:9f:05:
fd:83:b4:fd:56:9a:99:80:ef:9d:bc:25:2c:61:6a:
ee:45:98:79:89:5e:fc:e1:dd:11:65:1a:c5:3b:54:
a6:09:18:77:31:e8:4e:63:d7:1b:50:e8:23:46:02:
ae:d0:32:42:39:2f:bb:2c:20:30:7b:b5:f6:70:d0:
17:26:d9:c0:8f:7b:37:20:2c:42:dc:34:ad:c5:40:
fe:90:03:91:29:44:bf:42:b5:d9:bf:67:8b:17:41:
cf:70:29:f7:91:b7:ca:2d:36:0c:52:fc:4f:08:62:
45:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DF:7D:F4:C1:36:1D:FB:8A:F1:B6:52:1E:4C:55:69:D4:69:27:48:33
X509v3 Authority Key Identifier:
keyid:A1:DE:45:6D:4D:40:5C:6F:42:92:D6:36:88:67:6C:E1:50:E7:F0:7E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/od5FbU1AXG9CktY2iGds4VDn8H4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/76/40e405-a38f-4781-8d55-0c9e0cf7e9fc/1/od5FbU1AXG9CktY2iGds4VDn8H4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/76/40e405-a38f-4781-8d55-0c9e0cf7e9fc/1/od5FbU1AXG9CktY2iGds4VDn8H4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
86:69:6e:c6:79:1a:c4:48:38:e8:26:8d:33:ca:71:b4:db:8b:
bb:3d:40:02:e1:ab:6a:15:07:01:f6:3e:bb:ec:f6:cd:99:90:
2d:55:a0:26:c8:e5:13:cd:82:6c:c0:c5:b2:59:93:ed:bd:f8:
e0:8f:2e:01:3d:5b:67:1b:0c:a9:5f:98:00:7c:4c:07:7c:6d:
7e:55:8a:ce:e8:02:c5:29:d3:25:0f:db:44:ef:d5:a5:1b:dd:
72:a0:a8:f5:8b:11:90:c1:39:cc:54:ff:5b:64:42:1b:ae:f7:
33:f7:c3:9f:e7:9b:30:fb:4e:fb:1a:1b:ac:58:43:03:00:cd:
d0:9a:43:c4:d5:6b:f8:1b:15:21:af:74:5c:de:dd:68:85:50:
76:29:ca:f9:c5:5e:11:8a:8f:b3:83:c4:ad:98:2c:df:8c:7f:
ab:24:4d:7d:66:5d:38:bc:ca:6b:aa:f6:3a:42:4b:42:a1:a1:
8f:4b:19:09:2d:cc:f2:d5:20:cf:87:e4:5b:78:58:ea:45:5e:
c7:14:2a:b5:59:21:a2:09:52:86:1d:90:78:63:5c:aa:b5:ae:
22:94:fe:c3:66:cd:b1:30:aa:b5:92:e6:3e:b1:43:46:5a:2a:
03:fe:f6:e3:11:ff:a8:e0:c7:3f:6a:f0:46:e7:6c:d7:4f:59:
11:fb:d9:63
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 13 02:42:40 2025 by rpki-client