Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b8/50f34c-338d-4fce-8193-ec16735a3382/1/otXHrn5FwAc077zJE6Gx6j6WS0A.mft
File: otXHrn5FwAc077zJE6Gx6j6WS0A.mft (raw, json)
Hash identifier: FglI6jPs+eYzk5zOLRokg6he3RiLwMbrX4kHCB1IedE=
Subject key identifier: C9:5B:5E:31:6F:A6:9F:0E:F8:A2:B8:9E:62:0D:CD:00:3A:3C:E0:E6
Authority key identifier: A2:D5:C7:AE:7E:45:C0:07:34:EF:BC:C9:13:A1:B1:EA:3E:96:4B:40
Certificate issuer: /CN=a2d5c7ae7e45c00734efbcc913a1b1ea3e964b40
Certificate serial: 0196451FDA8348A55DD4E38D32992D7EE797
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/otXHrn5FwAc077zJE6Gx6j6WS0A.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b8/50f34c-338d-4fce-8193-ec16735a3382/1/otXHrn5FwAc077zJE6Gx6j6WS0A.mft
Manifest number: 0353
Signing time: Thu 17 Apr 2025 19:00:37 +0000
Manifest this update: Thu 17 Apr 2025 19:00:37 +0000
Manifest next update: Fri 18 Apr 2025 19:00:37 +0000
Files and hashes: 1: BAHKXXDGf4FkpvGLoVJvz4ZQS9g.roa (hash: QG7io9HlNrI6xyBwfXvDwRjbZbOdJXrpGi6XSOhyDS8=)
2: Xa4rA7s8Ly9UJZgVYi-Jv5tyXbE.roa (hash: B0/EUa4/ThW3bg+w4c9UI/ZQv1E86GHArXlsrfN6HzQ=)
3: otXHrn5FwAc077zJE6Gx6j6WS0A.crl (hash: jx4QxXWe23JS58KfjdpGMwdTTLXIcEG7ZNn/HQOH4w4=)
4: p4F6VDWGlGgiZn3yBJi7M3fVpVg.roa (hash: TIMfRy8SxAVXXi0h232Rvp4fEAYndvsGejpfbPavyrQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b8/50f34c-338d-4fce-8193-ec16735a3382/1/otXHrn5FwAc077zJE6Gx6j6WS0A.crl
rsync://rpki.ripe.net/repository/DEFAULT/b8/50f34c-338d-4fce-8193-ec16735a3382/1/otXHrn5FwAc077zJE6Gx6j6WS0A.mft
rsync://rpki.ripe.net/repository/DEFAULT/otXHrn5FwAc077zJE6Gx6j6WS0A.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 18 Apr 2025 16:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:45:1f:da:83:48:a5:5d:d4:e3:8d:32:99:2d:7e:e7:97
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a2d5c7ae7e45c00734efbcc913a1b1ea3e964b40
Validity
Not Before: Apr 17 19:00:37 2025 GMT
Not After : Apr 18 19:00:37 2025 GMT
Subject: CN=c95b5e316fa69f0ef8a2b89e620dcd003a3ce0e6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:7c:08:13:35:80:d9:ff:1b:a4:d1:e2:46:d4:
b1:ac:9b:c8:fb:79:99:ff:78:f6:2d:a8:c5:86:2c:
a0:e1:dc:06:7b:98:34:b1:e7:35:a2:82:23:b1:e0:
d4:82:86:07:51:5a:9c:dd:4d:5e:13:c0:f4:81:49:
a7:0c:ea:18:5e:e9:d4:6c:fe:86:4e:f3:49:23:e4:
d0:ff:aa:99:98:62:f6:e0:92:fd:cd:1e:a2:3c:d5:
4d:d2:e2:51:ca:88:f9:31:75:cf:2d:49:02:0a:81:
a0:70:cb:80:7f:cb:24:5c:42:03:82:7f:76:c8:78:
d6:cc:08:d2:20:6c:dc:09:9c:0e:e0:c2:63:3c:6f:
cb:0a:48:20:69:8b:4f:26:d5:3d:d7:cd:d0:61:ca:
93:cd:09:5f:51:3a:74:6c:9f:37:d0:c4:5f:f4:65:
2a:f9:0f:99:07:dd:18:c2:ef:a0:07:ef:9e:ce:fb:
c8:1a:9a:8a:a0:16:f8:2f:1f:27:11:d8:bb:bf:f8:
f3:6f:2e:a4:a5:38:ca:be:ee:e3:1b:1a:bb:a7:4a:
79:30:43:64:54:e1:22:7f:00:55:68:19:df:7e:57:
78:90:34:5b:ea:17:6f:a9:07:32:0e:f9:08:88:8b:
9f:4e:d3:9b:e2:07:63:f4:78:52:88:a6:38:ee:28:
5d:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C9:5B:5E:31:6F:A6:9F:0E:F8:A2:B8:9E:62:0D:CD:00:3A:3C:E0:E6
X509v3 Authority Key Identifier:
keyid:A2:D5:C7:AE:7E:45:C0:07:34:EF:BC:C9:13:A1:B1:EA:3E:96:4B:40
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/otXHrn5FwAc077zJE6Gx6j6WS0A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/50f34c-338d-4fce-8193-ec16735a3382/1/otXHrn5FwAc077zJE6Gx6j6WS0A.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/50f34c-338d-4fce-8193-ec16735a3382/1/otXHrn5FwAc077zJE6Gx6j6WS0A.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
61:8d:2e:82:45:2a:79:e3:3a:81:01:38:92:14:68:06:24:e8:
c2:6d:42:bf:11:ce:00:96:52:7f:90:cd:5d:75:1e:ce:e4:58:
04:ed:07:88:29:31:e0:09:e6:70:6d:ae:27:f2:2f:b8:85:b3:
66:22:10:f8:5a:b8:1d:2f:f4:69:e3:bf:b1:83:8f:0b:fa:f2:
06:86:d0:d9:de:37:74:27:b5:25:15:e9:5f:03:f4:0d:21:d9:
5f:30:12:78:20:70:1f:db:dc:d6:20:7a:fc:60:b8:08:42:ee:
92:ae:de:56:f1:9d:90:83:37:f0:ee:c4:b0:64:c5:e5:08:d4:
b1:c6:63:0e:41:63:ba:13:81:94:28:20:8c:06:61:44:29:bd:
37:41:43:39:b4:e8:c0:3f:ba:ca:09:a3:1a:e7:7d:95:de:72:
a4:82:d0:0f:0d:54:20:fa:0d:61:90:fd:24:54:c4:1e:3b:aa:
26:37:77:dd:d0:af:f4:a1:d2:28:30:5b:34:f8:59:37:18:bf:
b9:df:e4:28:12:2f:e0:a7:34:4b:61:b0:ba:0a:bf:24:57:01:
3f:1e:44:03:44:bd:e3:50:bf:69:2b:bd:83:fb:4d:db:09:13:
48:8b:c6:71:7a:e8:14:4b:e0:67:f7:c6:7a:74:bc:9f:5b:4a:
98:04:80:20
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 18 02:02:35 2025 by rpki-client