Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/76/62afef-70d1-4fe2-9edf-7f1e57487c1a/1/oktI7cejJdfxrg8lfA4oNRcbya4.mft
File: oktI7cejJdfxrg8lfA4oNRcbya4.mft (raw, json)
Hash identifier: v+jlk93AJVRKEkmHY+/OBvVx56UOmarIfmWvToiRKRs=
Subject key identifier: F2:75:53:AF:3F:50:75:50:82:80:DB:6A:2D:75:CE:4F:DC:52:05:D8
Authority key identifier: A2:4B:48:ED:C7:A3:25:D7:F1:AE:0F:25:7C:0E:28:35:17:1B:C9:AE
Certificate issuer: /CN=a24b48edc7a325d7f1ae0f257c0e2835171bc9ae
Certificate serial: 01965A9520CA6949F5C75C2D586A0600E282
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/oktI7cejJdfxrg8lfA4oNRcbya4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/76/62afef-70d1-4fe2-9edf-7f1e57487c1a/1/oktI7cejJdfxrg8lfA4oNRcbya4.mft
Manifest number: 1509
Signing time: Mon 21 Apr 2025 23:00:44 +0000
Manifest this update: Mon 21 Apr 2025 23:00:44 +0000
Manifest next update: Tue 22 Apr 2025 23:00:44 +0000
Files and hashes: 1: B0JGrIFbhcfZ9k0gLZbKOC7BRts.roa (hash: uan7Xlr3tx5QNJHwIPILAsu/3eaM2Ksrcs3oBa0JKWg=)
2: B6qJHXpeC3IEJy34_URs46RdWiA.roa (hash: toHD5hhCltD6s8AbgpGot0TJcoWUl/7kkl/+KkMGZ/I=)
3: X5BI_4m66OA1gTOSPBNCsDRd-Pw.roa (hash: 3oZT1fDyGLqNouLkyRSol/W9I5a1RPKZknAigOCTTYM=)
4: oktI7cejJdfxrg8lfA4oNRcbya4.crl (hash: K31YSsxjkcqdnXvb5IcfDcSUNxKeFzPlLDMmD7AZwis=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/76/62afef-70d1-4fe2-9edf-7f1e57487c1a/1/oktI7cejJdfxrg8lfA4oNRcbya4.crl
rsync://rpki.ripe.net/repository/DEFAULT/76/62afef-70d1-4fe2-9edf-7f1e57487c1a/1/oktI7cejJdfxrg8lfA4oNRcbya4.mft
rsync://rpki.ripe.net/repository/DEFAULT/oktI7cejJdfxrg8lfA4oNRcbya4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 22 Apr 2025 19:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:5a:95:20:ca:69:49:f5:c7:5c:2d:58:6a:06:00:e2:82
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a24b48edc7a325d7f1ae0f257c0e2835171bc9ae
Validity
Not Before: Apr 21 23:00:44 2025 GMT
Not After : Apr 22 23:00:44 2025 GMT
Subject: CN=f27553af3f5075508280db6a2d75ce4fdc5205d8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:98:1d:13:bf:98:5c:2b:88:0c:3a:76:f6:ac:
5c:8b:e4:86:04:ff:3a:af:2e:4b:5e:54:8c:4a:c0:
ed:e3:12:4a:7d:96:1d:b8:80:87:62:e3:d9:b1:da:
e3:29:6d:7b:e3:0f:63:ca:51:08:7b:86:5a:01:82:
0a:68:86:6c:bb:c5:e0:79:e8:b9:63:0c:0d:d7:bd:
ad:50:c6:ac:c5:96:7a:36:a6:0f:14:1a:ad:ea:46:
1f:8e:76:33:c1:55:cc:a3:f6:5a:6d:71:26:76:f1:
ac:01:3b:0c:e5:83:0d:8c:81:37:c0:4e:13:d8:25:
ef:f2:03:03:ea:7d:a6:44:a7:fe:1c:fc:5d:45:7f:
c4:cd:52:3a:cf:a5:c6:35:ce:1a:28:0b:6b:02:30:
aa:c8:93:cb:2d:35:f7:6e:99:6b:ac:8f:14:26:44:
1d:50:3e:b1:2a:0b:fe:6f:11:bf:7d:d2:79:57:e8:
a6:56:96:05:f4:7a:4b:d7:1b:f7:ad:e7:ed:0c:67:
47:65:33:86:e4:1b:e0:dc:b5:77:c2:b6:4b:04:5c:
11:93:e8:3a:98:44:6b:4f:aa:7a:96:d7:8a:84:1c:
20:2b:26:0e:4a:5f:be:41:89:ec:9b:38:de:03:71:
8d:66:1e:e7:f3:5e:c0:00:b6:b8:18:f2:c8:52:f7:
33:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F2:75:53:AF:3F:50:75:50:82:80:DB:6A:2D:75:CE:4F:DC:52:05:D8
X509v3 Authority Key Identifier:
keyid:A2:4B:48:ED:C7:A3:25:D7:F1:AE:0F:25:7C:0E:28:35:17:1B:C9:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/oktI7cejJdfxrg8lfA4oNRcbya4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/76/62afef-70d1-4fe2-9edf-7f1e57487c1a/1/oktI7cejJdfxrg8lfA4oNRcbya4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/76/62afef-70d1-4fe2-9edf-7f1e57487c1a/1/oktI7cejJdfxrg8lfA4oNRcbya4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
84:cb:52:bf:a3:29:69:e9:36:8f:e0:ed:46:fa:ca:28:2e:ee:
1e:63:eb:4a:4a:f6:41:6b:a1:6a:c6:9f:5b:4c:82:d9:f9:44:
83:6a:b4:5b:50:88:17:95:82:2e:06:5e:2a:76:23:6b:09:d1:
c5:95:41:ff:4f:32:f3:4a:6e:5b:a3:99:b6:cb:2f:fe:e1:2f:
4d:71:1b:1c:4b:a6:9d:3a:ae:c0:e8:91:c1:b5:d4:7b:8e:61:
0b:71:e8:bc:6a:2f:72:68:86:e6:6e:9b:e0:e8:52:e6:28:fb:
81:e9:96:36:3b:69:9d:49:20:d1:11:d1:b3:97:23:2c:ef:d5:
c9:2d:81:05:6e:72:39:3f:45:ac:7e:79:ea:59:6a:c3:87:62:
23:2f:1a:0d:c1:90:6f:02:86:bd:de:76:3c:18:cb:eb:0b:96:
38:49:86:71:2e:08:46:aa:6c:4e:68:0e:a7:6b:15:31:6b:d4:
c7:2c:1c:43:96:bb:ea:d8:bd:66:c2:3e:2e:a4:0a:dc:0c:f8:
d2:a1:ee:78:ce:cc:a7:3f:4f:d8:10:49:8a:98:c5:55:64:ec:
76:13:45:11:48:b2:71:b2:67:e7:b2:05:53:c3:c5:c8:6a:32:
6b:1c:0d:d1:ec:66:2b:62:42:89:75:12:8a:0c:2e:5f:30:d4:
5c:67:da:0f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 22 01:04:05 2025 by rpki-client