Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8a/af2f8f-1212-4943-bd0c-d86ab2fe7648/1/OX2fPb_DZTMuKCvRdqaAdURtHRs.mft
File: OX2fPb_DZTMuKCvRdqaAdURtHRs.mft (raw, json)
Hash identifier: 89P10NSWmlqtyk0BJVKPAotqTX1Q2jCwE27CIQIGZ5Y=
Subject key identifier: FC:8A:F7:0F:E8:11:E9:4D:A2:48:0F:9B:D1:04:20:83:E2:A1:3C:33
Authority key identifier: 39:7D:9F:3D:BF:C3:65:33:2E:28:2B:D1:76:A6:80:75:44:6D:1D:1B
Certificate issuer: /CN=397d9f3dbfc365332e282bd176a68075446d1d1b
Certificate serial: 01964EFEBD2F0AA0DB1E02F971C055A76241
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OX2fPb_DZTMuKCvRdqaAdURtHRs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8a/af2f8f-1212-4943-bd0c-d86ab2fe7648/1/OX2fPb_DZTMuKCvRdqaAdURtHRs.mft
Manifest number: 0F1F
Signing time: Sat 19 Apr 2025 17:00:39 +0000
Manifest this update: Sat 19 Apr 2025 17:00:39 +0000
Manifest next update: Sun 20 Apr 2025 17:00:39 +0000
Files and hashes: 1: OX2fPb_DZTMuKCvRdqaAdURtHRs.crl (hash: Ynf/AdQUOQP8L+GcoOgFB5GbFVaOh/qiBO6iBsNyFQY=)
2: PKmiIVXi-5ieWf281G2v09ZDGMA.roa (hash: 6UbdjRvfhwNfGfOQcI0HpEZ2pxwE+yP96jeW3uJG9VU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8a/af2f8f-1212-4943-bd0c-d86ab2fe7648/1/OX2fPb_DZTMuKCvRdqaAdURtHRs.crl
rsync://rpki.ripe.net/repository/DEFAULT/8a/af2f8f-1212-4943-bd0c-d86ab2fe7648/1/OX2fPb_DZTMuKCvRdqaAdURtHRs.mft
rsync://rpki.ripe.net/repository/DEFAULT/OX2fPb_DZTMuKCvRdqaAdURtHRs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 20 Apr 2025 17:00:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:4e:fe:bd:2f:0a:a0:db:1e:02:f9:71:c0:55:a7:62:41
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=397d9f3dbfc365332e282bd176a68075446d1d1b
Validity
Not Before: Apr 19 17:00:39 2025 GMT
Not After : Apr 20 17:00:39 2025 GMT
Subject: CN=fc8af70fe811e94da2480f9bd1042083e2a13c33
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:93:b1:95:f4:cf:e2:37:41:0c:19:11:51:5f:
83:2b:3b:9b:0a:fb:f4:d6:f7:f7:4d:fe:6d:b6:a3:
c1:77:25:17:08:07:aa:72:18:f7:9f:81:77:8a:20:
e7:0f:55:96:8d:8a:ce:4d:0a:53:5d:65:51:22:2a:
38:b1:9d:d5:4a:c2:05:ce:1b:b1:bd:de:b7:06:0a:
a8:5b:60:a9:5a:3e:a0:a2:6c:98:a3:9d:a4:e2:4f:
2b:eb:4c:3e:b8:db:8c:82:62:d1:94:ab:87:5a:31:
bd:b8:96:93:9a:42:d1:01:0d:a0:a9:f7:14:e3:01:
d0:3f:1c:fa:37:a3:d5:27:bb:08:b6:c4:5f:b6:46:
7d:11:2e:ec:b7:e4:25:06:d9:82:c4:06:35:a2:c7:
36:eb:c7:ec:50:89:0f:d4:a4:58:51:6c:2c:00:dc:
5b:19:83:a0:d7:5e:2b:e1:49:ee:68:2f:26:dd:a8:
22:5b:f5:5d:53:d9:66:d5:68:d0:75:5f:41:1c:9d:
f3:00:3e:ad:18:57:33:c4:df:57:97:5f:c3:93:23:
43:65:98:79:d6:d7:3f:63:df:ae:56:4e:80:26:0c:
09:c8:54:d5:fc:a5:15:99:d7:69:10:b2:81:e3:8c:
d4:b1:01:d2:cc:05:8f:a2:dc:5b:d3:ab:4f:0e:31:
70:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FC:8A:F7:0F:E8:11:E9:4D:A2:48:0F:9B:D1:04:20:83:E2:A1:3C:33
X509v3 Authority Key Identifier:
keyid:39:7D:9F:3D:BF:C3:65:33:2E:28:2B:D1:76:A6:80:75:44:6D:1D:1B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OX2fPb_DZTMuKCvRdqaAdURtHRs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/af2f8f-1212-4943-bd0c-d86ab2fe7648/1/OX2fPb_DZTMuKCvRdqaAdURtHRs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/af2f8f-1212-4943-bd0c-d86ab2fe7648/1/OX2fPb_DZTMuKCvRdqaAdURtHRs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
97:0e:8f:5a:f6:75:d4:9b:4f:4d:49:0a:01:e6:cc:fa:4d:b5:
2a:73:7d:67:a8:3f:2f:14:6e:b2:ba:e3:58:57:eb:84:be:ee:
11:7d:50:e4:21:e3:d1:9a:94:7f:32:4c:98:f2:92:a5:4d:93:
22:fc:e8:d4:fc:61:63:89:42:67:f0:6b:4d:2f:c0:bb:41:1d:
9c:2d:03:b0:3e:e9:fd:73:11:21:28:22:32:2e:ba:86:c4:47:
f1:6d:fa:ca:33:f2:9b:5f:5f:8e:f1:63:bc:38:8c:79:b0:31:
af:47:82:d4:b8:fb:24:5e:66:5d:6e:4f:c0:f8:e4:8d:8b:84:
8c:ad:22:4f:26:04:c9:7e:1b:f6:6d:19:c2:7f:68:ae:dc:64:
08:2c:ba:68:35:fa:d5:99:bd:0a:78:ff:b9:f1:68:9e:b1:d9:
82:d9:b9:64:17:f2:a1:95:4c:ca:1c:96:72:46:8e:94:bc:59:
86:94:93:69:16:04:7b:df:43:35:99:ae:b9:0b:1f:85:d1:84:
b1:21:c2:20:76:40:34:fa:3b:0d:ac:25:aa:b0:e9:39:42:ef:
7a:dd:5c:81:df:3f:a5:b0:b9:0a:92:b1:2f:f9:9b:c9:27:5b:
56:0f:52:57:9b:30:5c:2e:c0:c4:43:a7:1d:3e:cb:56:23:7e:
78:d9:37:1e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 20 03:28:54 2025 by rpki-client