Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cc/4656f7-0054-48d4-961a-6dbdec51168d/1/odmzW8Pp8kk8ZNBvWy1KmcXyUek.mft
File: odmzW8Pp8kk8ZNBvWy1KmcXyUek.mft (raw, json)
Hash identifier: 5VLTz2SV+RWmsXMoqWmx0hObexsEZ/IAyTHL4PaESqo=
Subject key identifier: B6:05:CF:29:0C:A2:DA:8B:F2:CC:47:A9:B9:FB:7D:CA:EE:5D:43:20
Authority key identifier: A1:D9:B3:5B:C3:E9:F2:49:3C:64:D0:6F:5B:2D:4A:99:C5:F2:51:E9
Certificate issuer: /CN=a1d9b35bc3e9f2493c64d06f5b2d4a99c5f251e9
Certificate serial: 0196583875C1CE50BB516A0C45D2E0CA7C98
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/odmzW8Pp8kk8ZNBvWy1KmcXyUek.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cc/4656f7-0054-48d4-961a-6dbdec51168d/1/odmzW8Pp8kk8ZNBvWy1KmcXyUek.mft
Manifest number: 1500
Signing time: Mon 21 Apr 2025 12:00:17 +0000
Manifest this update: Mon 21 Apr 2025 12:00:17 +0000
Manifest next update: Tue 22 Apr 2025 12:00:17 +0000
Files and hashes: 1: FGv164p9oNmasj4tz9FMT-yTJe8.roa (hash: 2RdxitfGw59b2KF3BO+RbESKDdD8hgmB641at2eVQlk=)
2: odmzW8Pp8kk8ZNBvWy1KmcXyUek.crl (hash: mc0wmCfGzrCSsxiH+bhB6Mm+V1kcrmAUSqngM+NR4v4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cc/4656f7-0054-48d4-961a-6dbdec51168d/1/odmzW8Pp8kk8ZNBvWy1KmcXyUek.crl
rsync://rpki.ripe.net/repository/DEFAULT/cc/4656f7-0054-48d4-961a-6dbdec51168d/1/odmzW8Pp8kk8ZNBvWy1KmcXyUek.mft
rsync://rpki.ripe.net/repository/DEFAULT/odmzW8Pp8kk8ZNBvWy1KmcXyUek.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 22 Apr 2025 10:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:58:38:75:c1:ce:50:bb:51:6a:0c:45:d2:e0:ca:7c:98
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a1d9b35bc3e9f2493c64d06f5b2d4a99c5f251e9
Validity
Not Before: Apr 21 12:00:17 2025 GMT
Not After : Apr 22 12:00:17 2025 GMT
Subject: CN=b605cf290ca2da8bf2cc47a9b9fb7dcaee5d4320
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:a0:c7:a7:a4:76:81:03:09:2c:1f:c2:ae:6b:
c4:d9:2f:6c:ec:e2:f5:17:e8:e1:4b:6d:a9:c5:f0:
47:23:de:80:6c:d1:79:4a:2c:88:ad:5a:97:00:31:
d6:2b:50:66:57:9e:f9:03:14:25:45:84:de:87:20:
4e:79:a4:8f:de:0a:2a:9a:90:f6:85:dd:b4:79:6c:
ef:94:3f:c2:d3:b5:b7:96:31:d9:ca:6e:7c:51:0e:
4b:47:1f:12:54:80:16:c2:1a:1b:55:f5:cc:36:9b:
60:1a:b1:57:b9:7a:c3:51:c9:4c:39:2a:0f:d0:6a:
84:83:e4:a8:1b:5e:3e:88:ec:27:b2:4d:20:6f:6d:
f3:81:2c:de:e9:d3:9d:ff:85:20:5b:85:ad:62:d1:
de:ca:1d:a9:05:08:27:69:e3:a3:42:07:12:94:51:
c2:11:28:ec:17:02:1a:65:20:0c:d7:3b:fc:1b:d4:
e2:59:41:05:a6:2d:b6:3a:f0:21:3d:ff:97:2a:ac:
21:92:a6:d3:72:cd:3d:fd:af:de:e3:a8:75:71:53:
77:e5:77:d6:e7:e0:8e:51:37:b1:1b:a9:85:a9:26:
1d:e8:78:c9:9a:11:f1:64:a1:c7:4f:9f:80:55:7c:
57:e7:42:b0:e7:7e:07:ca:28:8d:f4:1a:d3:0b:d4:
4f:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B6:05:CF:29:0C:A2:DA:8B:F2:CC:47:A9:B9:FB:7D:CA:EE:5D:43:20
X509v3 Authority Key Identifier:
keyid:A1:D9:B3:5B:C3:E9:F2:49:3C:64:D0:6F:5B:2D:4A:99:C5:F2:51:E9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/odmzW8Pp8kk8ZNBvWy1KmcXyUek.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/4656f7-0054-48d4-961a-6dbdec51168d/1/odmzW8Pp8kk8ZNBvWy1KmcXyUek.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/4656f7-0054-48d4-961a-6dbdec51168d/1/odmzW8Pp8kk8ZNBvWy1KmcXyUek.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
04:7b:c8:a6:fe:e9:31:99:3f:b9:e0:cc:b0:d6:d5:9e:2f:c5:
af:5f:98:0d:9a:9d:cb:02:ad:91:77:23:0e:ef:80:60:5f:33:
28:f7:fa:8c:87:ff:a5:88:8d:84:e9:33:c1:99:57:91:1c:91:
4f:29:41:67:27:1b:9e:b4:fd:a1:46:e3:68:a0:7a:48:93:43:
b6:b2:2e:0d:57:4c:5f:46:52:29:99:80:23:3f:1e:d0:40:94:
60:73:a0:4a:23:a7:e6:fe:c6:56:91:6b:d8:77:57:9a:fe:4d:
e1:66:99:09:1b:05:5f:e6:3a:6b:09:95:44:60:ae:41:01:06:
ea:f4:08:68:24:b1:85:51:2d:03:43:b2:1e:ea:02:bf:41:75:
25:a3:8e:f9:98:93:6f:77:f4:54:64:19:5a:0a:70:fc:cf:42:
31:c2:ca:3c:79:c8:63:64:ea:16:1d:4d:b6:ba:7a:a8:a7:d4:
97:82:f0:45:0a:41:08:c0:ad:d3:cf:b5:2e:c6:1c:fb:bc:49:
2a:23:a9:65:41:4c:25:91:ce:91:6d:51:40:aa:66:81:ca:0d:
45:75:1e:e2:33:e2:1d:0f:36:78:09:a9:d4:dd:43:8a:8c:99:
2e:ab:a4:11:16:92:a8:50:ab:8f:c7:dc:e7:11:fb:64:23:00:
9c:6d:9f:2d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 21 14:59:59 2025 by rpki-client