Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cd/d4b7f3-40ce-42ed-a93b-5e8dedac9cb7/1/OoTf7z1RB7hPx3xW3PeeBf6cc1E.mft
File: OoTf7z1RB7hPx3xW3PeeBf6cc1E.mft (raw, json)
Hash identifier: hBtnG63kvrTX+X8wKOeVpMTGHQ1O/CiDqYDPqP3HEZ8=
Subject key identifier: C1:52:F4:CC:F1:76:21:41:5D:15:7F:BE:CF:E3:0E:3F:A5:0E:A3:AF
Authority key identifier: 3A:84:DF:EF:3D:51:07:B8:4F:C7:7C:56:DC:F7:9E:05:FE:9C:73:51
Certificate issuer: /CN=3a84dfef3d5107b84fc77c56dcf79e05fe9c7351
Certificate serial: 0196440D6B8518BCFC6A78BA635A2BD176D8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OoTf7z1RB7hPx3xW3PeeBf6cc1E.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cd/d4b7f3-40ce-42ed-a93b-5e8dedac9cb7/1/OoTf7z1RB7hPx3xW3PeeBf6cc1E.mft
Manifest number: 0F0F
Signing time: Thu 17 Apr 2025 14:00:52 +0000
Manifest this update: Thu 17 Apr 2025 14:00:52 +0000
Manifest next update: Fri 18 Apr 2025 14:00:52 +0000
Files and hashes: 1: OoTf7z1RB7hPx3xW3PeeBf6cc1E.crl (hash: GJWb+Gr7oOBlVPcwCJHae6OPW0LjsaCpB8AH2+1MBFo=)
2: fmsKsNJsScyYZyH8RUfSLeG-UJA.roa (hash: XWgPxzT1eqv4he1A7biAZG6QqWis59ng7mldQueWS0g=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cd/d4b7f3-40ce-42ed-a93b-5e8dedac9cb7/1/OoTf7z1RB7hPx3xW3PeeBf6cc1E.crl
rsync://rpki.ripe.net/repository/DEFAULT/cd/d4b7f3-40ce-42ed-a93b-5e8dedac9cb7/1/OoTf7z1RB7hPx3xW3PeeBf6cc1E.mft
rsync://rpki.ripe.net/repository/DEFAULT/OoTf7z1RB7hPx3xW3PeeBf6cc1E.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 18 Apr 2025 14:00:52 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:44:0d:6b:85:18:bc:fc:6a:78:ba:63:5a:2b:d1:76:d8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3a84dfef3d5107b84fc77c56dcf79e05fe9c7351
Validity
Not Before: Apr 17 14:00:52 2025 GMT
Not After : Apr 18 14:00:52 2025 GMT
Subject: CN=c152f4ccf17621415d157fbecfe30e3fa50ea3af
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:84:7c:70:5b:3e:f7:00:c9:22:36:41:64:e0:
ac:8a:50:af:4d:a3:c9:6f:36:09:1c:87:31:69:8f:
ef:f8:51:97:f7:a6:73:ef:38:21:18:37:48:ca:ec:
10:ea:d3:aa:b2:24:bd:c3:9f:ab:d0:9d:68:16:56:
29:d3:b1:c6:73:8b:20:a4:3d:13:ab:89:7f:31:6c:
23:87:df:6a:c2:7c:3e:d3:36:a0:41:cb:3f:b2:5f:
e7:2a:d8:e3:88:0e:94:79:15:d1:75:de:71:a9:68:
e6:c4:03:00:1c:a2:6e:88:23:8e:70:7f:0f:eb:57:
99:54:73:c9:3f:c1:b5:1a:ce:c5:d8:85:ef:e3:6b:
8f:b0:7d:44:0b:98:59:91:c6:cd:53:79:17:b4:d1:
82:06:38:fb:a1:ec:fb:4d:47:d6:b8:77:2c:ad:df:
20:fb:f8:fe:ef:c2:c1:26:0c:04:99:04:74:3c:dd:
2e:30:0f:b9:54:e5:23:8c:b7:19:97:f6:c9:3c:a6:
e0:c4:88:b6:86:d5:c5:8b:19:c4:50:0a:f6:4a:9b:
d6:6e:eb:22:cb:55:12:fa:4f:29:2e:cc:92:15:f0:
c2:a5:5e:66:be:11:ee:fb:ee:74:41:6c:75:06:06:
97:b0:bf:f0:c2:2a:12:53:75:ca:44:a0:91:53:da:
23:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C1:52:F4:CC:F1:76:21:41:5D:15:7F:BE:CF:E3:0E:3F:A5:0E:A3:AF
X509v3 Authority Key Identifier:
keyid:3A:84:DF:EF:3D:51:07:B8:4F:C7:7C:56:DC:F7:9E:05:FE:9C:73:51
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OoTf7z1RB7hPx3xW3PeeBf6cc1E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/d4b7f3-40ce-42ed-a93b-5e8dedac9cb7/1/OoTf7z1RB7hPx3xW3PeeBf6cc1E.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/d4b7f3-40ce-42ed-a93b-5e8dedac9cb7/1/OoTf7z1RB7hPx3xW3PeeBf6cc1E.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
74:78:da:7a:10:0a:e1:b7:ee:ee:4f:83:55:9b:4b:78:4f:15:
b1:7e:e4:95:b3:c7:9b:38:ab:34:ca:0a:06:20:83:79:c0:5d:
bd:fb:a5:d9:5c:ab:e3:e9:cb:a8:ad:6d:eb:ec:71:1b:a7:7f:
03:a9:23:14:b6:43:ca:6e:f8:4c:d4:2f:a7:18:24:93:ad:bf:
1d:f0:26:fd:15:62:8b:a3:dd:b0:cf:8c:82:f6:7a:58:0e:01:
9c:9e:55:f9:e2:79:bf:a0:21:57:6c:e0:c7:7e:ff:46:ae:2e:
53:94:82:41:7b:75:26:ca:65:4b:75:ad:3e:2c:15:0f:d9:57:
ba:aa:6b:e7:55:11:7b:94:ba:10:db:2e:f9:ea:d2:1c:0b:4e:
5e:6f:47:28:0c:38:e2:64:af:fd:30:08:a1:ee:3d:16:de:89:
5e:9c:91:70:c5:53:35:2b:8d:35:a8:01:a9:c8:16:20:e8:1b:
13:20:e1:ea:8b:e2:99:67:39:dc:56:42:bb:d5:f1:2c:c8:0d:
e6:55:da:83:5a:3f:aa:df:31:06:8e:41:45:5a:77:14:7e:1b:
d2:8a:89:fb:ab:d6:5f:9f:41:d5:6c:8c:bd:df:9e:c4:12:d1:
2a:6b:93:c8:6d:41:fb:f3:1d:38:52:70:8c:b7:62:ad:b0:9a:
21:9a:59:ea
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 17 23:21:57 2025 by rpki-client