Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cb/f41e52-0f25-4cc0-ac87-352cd296ebb8/1/ODHl2Yzu4014OlHMy27k3E7kN5M.mft
File: ODHl2Yzu4014OlHMy27k3E7kN5M.mft (raw, json)
Hash identifier: Am3Vnf3h/TrHUMq8tUJs+e3LuuczaEad/SX5kg1EQrA=
Subject key identifier: 5B:D3:42:67:82:59:39:CE:64:6B:C8:84:1E:13:7D:DC:9A:65:23:AA
Authority key identifier: 38:31:E5:D9:8C:EE:E3:4D:78:3A:51:CC:CB:6E:E4:DC:4E:E4:37:93
Certificate issuer: /CN=3831e5d98ceee34d783a51cccb6ee4dc4ee43793
Certificate serial: 01964CD90872CB5C69D1F4F575BE4C25B9FF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ODHl2Yzu4014OlHMy27k3E7kN5M.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cb/f41e52-0f25-4cc0-ac87-352cd296ebb8/1/ODHl2Yzu4014OlHMy27k3E7kN5M.mft
Manifest number: 14FA
Signing time: Sat 19 Apr 2025 07:00:13 +0000
Manifest this update: Sat 19 Apr 2025 07:00:13 +0000
Manifest next update: Sun 20 Apr 2025 07:00:13 +0000
Files and hashes: 1: ODHl2Yzu4014OlHMy27k3E7kN5M.crl (hash: irwgJ2cUGcldk9r56pJEePE7j7b+bpCrO96vFMl1v5s=)
2: XHu_MLGiiIwtync8aurFr7T_kLw.roa (hash: GNnYK051qhc0CaVwirSGryQmdmLkk49r5lW5NyG95ao=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cb/f41e52-0f25-4cc0-ac87-352cd296ebb8/1/ODHl2Yzu4014OlHMy27k3E7kN5M.crl
rsync://rpki.ripe.net/repository/DEFAULT/cb/f41e52-0f25-4cc0-ac87-352cd296ebb8/1/ODHl2Yzu4014OlHMy27k3E7kN5M.mft
rsync://rpki.ripe.net/repository/DEFAULT/ODHl2Yzu4014OlHMy27k3E7kN5M.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 20 Apr 2025 04:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:4c:d9:08:72:cb:5c:69:d1:f4:f5:75:be:4c:25:b9:ff
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3831e5d98ceee34d783a51cccb6ee4dc4ee43793
Validity
Not Before: Apr 19 07:00:13 2025 GMT
Not After : Apr 20 07:00:13 2025 GMT
Subject: CN=5bd34267825939ce646bc8841e137ddc9a6523aa
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:91:99:90:8a:31:02:4d:c8:92:98:aa:d6:f0:
e7:71:22:fe:70:36:f9:a7:f6:9a:42:5b:b3:df:16:
1c:1a:6a:af:3b:70:24:46:44:5a:f0:18:65:81:d7:
c0:6f:9e:3c:52:eb:9e:0d:cc:ab:56:cc:cc:6f:5f:
34:f4:4b:25:de:93:4d:1b:90:5b:dc:8b:98:37:04:
bd:56:a9:75:1c:23:ab:e5:4d:d0:8f:68:ba:cd:c0:
85:9d:1a:c0:9e:7f:94:76:9a:48:d0:1b:7b:bc:ca:
ad:91:6b:5a:d2:c1:d7:c3:00:8f:bc:aa:3a:82:49:
c7:ff:6c:dc:7c:bc:b1:e3:35:06:96:30:d9:27:8c:
1c:de:fd:43:f6:7d:e5:34:d9:52:b8:2c:0b:a4:af:
2c:9d:0f:5e:11:1b:c8:e8:42:c4:fd:04:51:8a:43:
d7:b3:2a:fd:cb:4b:2f:86:14:d7:e6:3d:5b:c0:87:
56:2b:5c:f1:04:3a:6f:c7:63:4d:5e:39:08:71:ab:
06:c8:f2:c3:1d:83:05:58:26:f6:9a:3d:b9:72:b9:
ba:39:cb:18:2d:8f:ed:fc:bd:87:41:0c:ef:5c:fc:
b4:03:34:f6:2a:06:ee:cb:6c:2e:f9:69:e6:bf:50:
e9:78:47:71:a2:9f:8f:39:b2:d4:a7:3c:af:d5:cb:
20:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5B:D3:42:67:82:59:39:CE:64:6B:C8:84:1E:13:7D:DC:9A:65:23:AA
X509v3 Authority Key Identifier:
keyid:38:31:E5:D9:8C:EE:E3:4D:78:3A:51:CC:CB:6E:E4:DC:4E:E4:37:93
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ODHl2Yzu4014OlHMy27k3E7kN5M.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cb/f41e52-0f25-4cc0-ac87-352cd296ebb8/1/ODHl2Yzu4014OlHMy27k3E7kN5M.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cb/f41e52-0f25-4cc0-ac87-352cd296ebb8/1/ODHl2Yzu4014OlHMy27k3E7kN5M.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7e:85:84:7a:21:ca:57:08:e5:17:08:26:d6:0f:a9:1e:80:a2:
d6:44:94:a2:43:a0:11:05:e3:f4:75:06:be:e4:5c:69:07:e6:
09:e7:14:c3:fb:e1:5a:60:af:dd:ae:b7:43:4c:ab:8e:32:64:
e3:bd:be:40:a5:f0:e6:0e:fe:cd:26:c9:51:3b:28:c4:93:3d:
23:8a:42:b1:7b:8b:58:25:11:4d:95:1e:8b:1f:c8:a3:0d:76:
06:d9:46:ec:19:26:b3:34:ec:af:10:29:ce:9e:26:a6:2d:a2:
23:c8:c1:96:74:ed:4b:48:09:c1:ad:da:bd:a8:fd:65:15:ca:
90:32:d2:8e:22:d5:fd:89:66:2d:e7:c6:0a:83:25:82:00:64:
c3:c6:db:3c:a4:73:38:33:0d:28:d9:41:66:1b:d2:01:8b:5e:
6d:e2:e4:14:c7:0b:36:49:92:d3:68:eb:91:ec:ec:4f:fd:de:
d0:7c:29:36:ed:44:1b:79:70:7c:79:79:1a:1b:a5:4e:3b:64:
6c:71:d8:1d:4a:ab:f6:b0:02:ac:e5:bf:41:be:46:5f:0a:8d:
46:5e:4a:95:bf:de:67:26:e1:81:72:e0:4f:09:84:7d:6d:b6:
e3:11:f9:66:85:68:57:fc:05:1b:4b:9d:ea:7a:c1:36:f5:0f:
a8:dc:1d:46
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 19 14:26:25 2025 by rpki-client