Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c0/f06e2c-97b7-4628-8b69-ec2fbafe4d91/1/0OLajokWkOcem4WVCX2nxgZNpgI.mft
File: 0OLajokWkOcem4WVCX2nxgZNpgI.mft (raw, json)
Hash identifier: MM2VDXWQyq4qSjFxzIRyrHnUuqAks7DV88t/1TygP48=
Subject key identifier: 43:B7:D7:46:89:88:00:7C:34:C4:99:D8:EF:37:C9:BC:96:10:7F:40
Authority key identifier: D0:E2:DA:8E:89:16:90:E7:1E:9B:85:95:09:7D:A7:C6:06:4D:A6:02
Certificate issuer: /CN=d0e2da8e891690e71e9b8595097da7c6064da602
Certificate serial: 01958C973CDFBDE69C5F19D10E0581B23BAD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0OLajokWkOcem4WVCX2nxgZNpgI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c0/f06e2c-97b7-4628-8b69-ec2fbafe4d91/1/0OLajokWkOcem4WVCX2nxgZNpgI.mft
Manifest number: 0306
Signing time: Wed 12 Mar 2025 23:01:16 +0000
Manifest this update: Wed 12 Mar 2025 23:01:16 +0000
Manifest next update: Thu 13 Mar 2025 23:01:16 +0000
Files and hashes: 1: 0OLajokWkOcem4WVCX2nxgZNpgI.crl (hash: Bu+RINwBbVlvNLn/CrCbX6rVThK4DSsUiiHDoEhP1+8=)
2: 1-G5CHegTogIfJOzVSZ12ruOsd1A.roa (hash: WZqBI8pDVZog2pYstlONiupHgRaN9/CPeYVUUMcxtjo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c0/f06e2c-97b7-4628-8b69-ec2fbafe4d91/1/0OLajokWkOcem4WVCX2nxgZNpgI.crl
rsync://rpki.ripe.net/repository/DEFAULT/c0/f06e2c-97b7-4628-8b69-ec2fbafe4d91/1/0OLajokWkOcem4WVCX2nxgZNpgI.mft
rsync://rpki.ripe.net/repository/DEFAULT/0OLajokWkOcem4WVCX2nxgZNpgI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 13 Mar 2025 19:14:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:8c:97:3c:df:bd:e6:9c:5f:19:d1:0e:05:81:b2:3b:ad
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d0e2da8e891690e71e9b8595097da7c6064da602
Validity
Not Before: Mar 12 23:01:16 2025 GMT
Not After : Mar 13 23:01:16 2025 GMT
Subject: CN=43b7d7468988007c34c499d8ef37c9bc96107f40
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:0b:c4:98:8b:a1:be:52:96:a0:12:da:46:b6:
b0:ad:88:8a:cd:de:ef:43:9c:02:9b:10:b3:40:64:
8e:00:4b:81:a8:1e:e4:27:2e:81:51:12:31:77:b6:
37:75:d6:5d:8c:a2:61:9e:f4:a3:68:7d:ab:2e:f7:
16:5f:dc:a2:83:4c:5b:ef:55:21:36:ee:b6:1b:17:
cf:d1:79:d3:99:50:d1:0f:fd:9f:d9:ad:c5:7e:6e:
5e:43:ec:3e:3f:b7:be:18:37:36:a0:c9:2d:92:89:
a3:90:db:43:b6:51:43:c7:f0:ad:be:1c:22:9f:60:
f9:fc:99:bf:a3:86:b0:7c:b9:73:0e:e9:3e:37:81:
d8:dd:72:a6:1e:0d:28:85:43:c8:f5:a5:02:b3:89:
bb:54:54:76:b1:6a:51:f9:a2:07:cc:b5:8a:dc:e2:
5a:0a:c7:48:60:3b:e4:12:91:93:64:01:5e:af:ad:
d1:e3:61:53:6a:7f:bf:fa:ad:5f:ce:55:a1:cd:56:
51:4c:de:af:3e:a9:a0:db:ae:ec:f0:08:c9:b1:40:
c9:e8:a4:7d:fa:59:3a:9b:df:7d:de:50:a1:0e:05:
b4:22:ea:7d:9e:61:48:b3:06:c2:1b:fb:e9:60:92:
f1:f7:fc:ce:e6:06:c4:a8:36:1a:ae:bc:d6:da:91:
ce:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
43:B7:D7:46:89:88:00:7C:34:C4:99:D8:EF:37:C9:BC:96:10:7F:40
X509v3 Authority Key Identifier:
keyid:D0:E2:DA:8E:89:16:90:E7:1E:9B:85:95:09:7D:A7:C6:06:4D:A6:02
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0OLajokWkOcem4WVCX2nxgZNpgI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/f06e2c-97b7-4628-8b69-ec2fbafe4d91/1/0OLajokWkOcem4WVCX2nxgZNpgI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/f06e2c-97b7-4628-8b69-ec2fbafe4d91/1/0OLajokWkOcem4WVCX2nxgZNpgI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
96:1b:92:3b:f3:8b:d0:b6:72:2e:67:ad:22:43:84:4d:e4:f6:
c0:57:fe:68:5d:7a:ab:a4:ec:e8:4f:02:c4:fe:1e:88:b7:3e:
6e:ac:1b:18:45:b9:60:d0:ad:47:b8:0d:dc:c2:3f:0f:93:66:
76:9f:66:61:d2:e4:a5:73:36:9a:d5:5a:39:bc:de:09:d9:d0:
e4:34:f8:27:31:de:54:b0:78:45:0e:1f:5a:00:c3:83:d5:96:
47:85:23:ab:02:aa:61:65:d6:41:65:6e:47:f5:ab:06:19:4b:
20:41:08:ee:80:e8:f2:57:94:1a:91:7d:2c:7f:cc:a1:c8:6a:
5a:a7:15:66:f7:1e:e3:ab:ba:b9:56:ed:84:0a:09:56:38:1b:
99:53:d9:58:24:03:7d:80:d9:53:f1:83:1f:ef:60:21:80:2d:
50:1d:9e:2f:4c:1d:eb:50:13:8d:1e:53:82:0f:52:6f:85:95:
f6:9d:57:02:54:76:0e:56:d9:4a:a2:db:34:fb:2c:8b:6f:38:
f5:12:c5:1d:11:8d:78:72:85:73:b3:04:e0:ac:69:a2:39:96:
f9:db:95:0c:4f:0a:02:10:bc:b1:76:c3:cb:30:26:1d:fa:07:
7b:3c:64:74:b6:fc:4e:a0:b8:67:b5:4c:95:43:7b:01:02:3d:
80:52:45:8c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 13 02:19:27 2025 by rpki-client