Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/83/b1592d-3a23-4f40-81c8-1600b742b5dd/1/oODFkETIfj4t-hPL-ZAjruAS76A.mft
File: oODFkETIfj4t-hPL-ZAjruAS76A.mft (raw, json)
Hash identifier: rC1UjMXSIx0KwdOinrztupdtKe1YG/9aKkVqNr34Tos=
Subject key identifier: 07:58:32:33:3E:A7:D5:F7:AB:A7:F5:65:41:18:67:DF:C9:D3:51:C8
Authority key identifier: A0:E0:C5:90:44:C8:7E:3E:2D:FA:13:CB:F9:90:23:AE:E0:12:EF:A0
Certificate issuer: /CN=a0e0c59044c87e3e2dfa13cbf99023aee012efa0
Certificate serial: 01958C9755D0EA4F59D671A8892A7814BA21
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/oODFkETIfj4t-hPL-ZAjruAS76A.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/83/b1592d-3a23-4f40-81c8-1600b742b5dd/1/oODFkETIfj4t-hPL-ZAjruAS76A.mft
Manifest number: 1496
Signing time: Wed 12 Mar 2025 23:01:22 +0000
Manifest this update: Wed 12 Mar 2025 23:01:22 +0000
Manifest next update: Thu 13 Mar 2025 23:01:22 +0000
Files and hashes: 1: THn-YaWLx96HuhrNbGtVod7EkgM.roa (hash: rsUPsLC3jm8thXVYAO+m9Ea1wFzIeFwCIPJOkL/61EY=)
2: oODFkETIfj4t-hPL-ZAjruAS76A.crl (hash: bLApy9rTfrUC3q++QwB9KECgbBjUdBGlgNlgBq/cuBM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/83/b1592d-3a23-4f40-81c8-1600b742b5dd/1/oODFkETIfj4t-hPL-ZAjruAS76A.crl
rsync://rpki.ripe.net/repository/DEFAULT/83/b1592d-3a23-4f40-81c8-1600b742b5dd/1/oODFkETIfj4t-hPL-ZAjruAS76A.mft
rsync://rpki.ripe.net/repository/DEFAULT/oODFkETIfj4t-hPL-ZAjruAS76A.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 13 Mar 2025 19:14:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:8c:97:55:d0:ea:4f:59:d6:71:a8:89:2a:78:14:ba:21
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a0e0c59044c87e3e2dfa13cbf99023aee012efa0
Validity
Not Before: Mar 12 23:01:22 2025 GMT
Not After : Mar 13 23:01:22 2025 GMT
Subject: CN=075832333ea7d5f7aba7f565411867dfc9d351c8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:de:d9:6e:e7:18:a8:37:19:7c:3e:bf:77:ee:74:
0d:0b:66:d4:11:e7:c1:27:bd:12:f2:8a:9e:30:86:
96:f2:18:16:b1:64:99:a4:7f:e3:19:ef:ae:15:b2:
11:31:80:a2:4d:f0:a7:42:98:cd:e2:29:ff:51:e1:
0d:25:70:a2:5a:08:f2:41:9b:36:65:ef:17:25:01:
d1:6d:4d:03:cd:fa:4f:be:08:79:6a:b0:d1:c3:68:
26:25:88:61:56:c0:3a:54:42:1c:2a:ad:e0:dd:6c:
e6:d5:4e:86:7d:35:17:48:57:10:b0:2c:cb:bf:24:
d0:9e:3b:b3:be:31:11:f4:03:47:98:64:ca:1d:d0:
ff:6f:e9:06:37:d4:cc:47:d3:66:17:c1:02:d8:a9:
43:2d:32:e3:8f:e2:6a:45:df:fc:77:51:05:11:38:
39:1a:c8:5d:e1:d5:81:22:92:19:94:c7:b5:f6:d5:
6e:12:ce:89:a8:73:a1:8b:12:19:d6:a7:79:ca:68:
8f:30:f9:61:e1:63:ef:ca:dc:ed:18:82:a9:37:a9:
84:52:3a:05:c6:27:cf:b7:21:5d:6f:c8:d7:0e:08:
94:55:9b:28:88:c7:6b:11:90:33:66:36:c1:75:87:
8e:46:82:a5:e9:2f:03:a0:3b:06:db:ae:bc:fe:6d:
d8:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
07:58:32:33:3E:A7:D5:F7:AB:A7:F5:65:41:18:67:DF:C9:D3:51:C8
X509v3 Authority Key Identifier:
keyid:A0:E0:C5:90:44:C8:7E:3E:2D:FA:13:CB:F9:90:23:AE:E0:12:EF:A0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/oODFkETIfj4t-hPL-ZAjruAS76A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/83/b1592d-3a23-4f40-81c8-1600b742b5dd/1/oODFkETIfj4t-hPL-ZAjruAS76A.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/83/b1592d-3a23-4f40-81c8-1600b742b5dd/1/oODFkETIfj4t-hPL-ZAjruAS76A.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a3:e4:f2:44:b8:61:f9:6f:5a:4d:ba:04:17:12:6b:fc:b2:3e:
d1:b9:af:ca:c9:86:87:46:02:e6:2d:73:41:44:c4:8c:37:53:
4a:cd:5a:d4:df:52:1c:85:0d:6f:8c:f7:bb:57:2a:5b:35:28:
d1:4b:c4:41:e7:fd:fc:ee:fd:ac:cc:98:71:3d:2e:49:9b:45:
4b:c2:3e:d3:36:45:f2:be:c0:b0:df:09:91:3e:4e:2b:6f:02:
61:95:6d:b3:96:a2:78:1d:1d:0f:26:0f:f7:76:0d:47:a4:28:
30:2f:68:a4:0a:0f:52:93:a2:d1:0a:45:fc:96:eb:ea:86:26:
f4:bd:d6:66:3b:59:18:fc:86:77:f3:a9:5b:08:13:cc:bc:8b:
36:da:53:f4:fc:d5:3d:fe:42:75:38:b7:37:ef:b7:b6:f9:ef:
1e:49:28:4a:fe:d3:b7:9c:22:c3:94:01:92:e3:54:4b:18:7f:
7a:44:3c:33:85:7c:19:20:11:12:7c:3a:0e:6e:f7:a6:19:e0:
31:87:8f:8d:6b:4b:42:b8:f6:f1:34:b1:f9:48:d3:0a:4c:66:
7e:9a:7e:71:ea:3f:d9:38:de:d2:7e:2e:7c:00:c2:73:a2:95:
b8:2f:fa:3c:d3:0a:5c:91:e8:62:80:0d:cd:40:ca:7d:9e:ca:
0b:6b:63:11
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 13 02:53:07 2025 by rpki-client