Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fa/f4dc76-dcd2-475b-9e68-c22395ce1be4/1/OPdGuBrsAONrm8t6CGQqZOkT2ls.mft
File: OPdGuBrsAONrm8t6CGQqZOkT2ls.mft (raw, json)
Hash identifier: AcOeLLWI5FIiHNsQMCin+JIxzQZhFenou5/78OWIfXs=
Subject key identifier: EF:14:AB:8B:A1:C6:75:D7:5C:58:CE:2C:B2:88:80:74:D8:3D:C5:AF
Authority key identifier: 38:F7:46:B8:1A:EC:00:E3:6B:9B:CB:7A:08:64:2A:64:E9:13:DA:5B
Certificate issuer: /CN=38f746b81aec00e36b9bcb7a08642a64e913da5b
Certificate serial: 01964B58FA57679E65A2025697F4201A1156
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OPdGuBrsAONrm8t6CGQqZOkT2ls.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fa/f4dc76-dcd2-475b-9e68-c22395ce1be4/1/OPdGuBrsAONrm8t6CGQqZOkT2ls.mft
Manifest number: 0AFC
Signing time: Sat 19 Apr 2025 00:00:44 +0000
Manifest this update: Sat 19 Apr 2025 00:00:44 +0000
Manifest next update: Sun 20 Apr 2025 00:00:44 +0000
Files and hashes: 1: MMlvH8atmySzJI7kLxLVPyyRhLQ.roa (hash: bccMFVINTXPOtpxYZS3LUeW2cuJPhCPq33JXorYAWpk=)
2: OPdGuBrsAONrm8t6CGQqZOkT2ls.crl (hash: DD1QhNUDymk0T2y7cuwPvNwdxkjW11doo3gcRoHC3lw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fa/f4dc76-dcd2-475b-9e68-c22395ce1be4/1/OPdGuBrsAONrm8t6CGQqZOkT2ls.crl
rsync://rpki.ripe.net/repository/DEFAULT/fa/f4dc76-dcd2-475b-9e68-c22395ce1be4/1/OPdGuBrsAONrm8t6CGQqZOkT2ls.mft
rsync://rpki.ripe.net/repository/DEFAULT/OPdGuBrsAONrm8t6CGQqZOkT2ls.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 19 Apr 2025 23:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:4b:58:fa:57:67:9e:65:a2:02:56:97:f4:20:1a:11:56
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=38f746b81aec00e36b9bcb7a08642a64e913da5b
Validity
Not Before: Apr 19 00:00:44 2025 GMT
Not After : Apr 20 00:00:44 2025 GMT
Subject: CN=ef14ab8ba1c675d75c58ce2cb2888074d83dc5af
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:95:33:4f:09:fe:ba:dd:86:19:85:cf:a9:a8:
b8:b0:7c:6f:f1:3c:18:d1:a8:f9:36:3e:74:7f:fd:
07:d0:8c:5e:94:fa:98:62:29:fe:f5:cb:0f:7b:15:
4a:8c:7f:8f:20:23:6d:28:b9:7e:fe:9c:7c:ce:66:
15:47:e6:50:dc:2e:93:08:0c:1d:1a:c6:d7:7f:01:
43:9d:1a:09:d4:aa:cc:36:a8:fa:f8:d8:dc:7d:07:
96:a6:7f:54:18:5c:01:a2:9a:6a:af:79:19:26:f4:
de:6d:e9:d5:b0:12:e9:ac:f5:ae:03:6e:be:51:9f:
48:2d:48:51:51:04:03:69:a3:62:c1:e1:ce:88:ef:
54:42:77:84:c9:f2:28:f9:9d:de:18:11:dd:37:3e:
88:1a:1e:12:b7:c6:20:df:cb:7d:ab:b8:e5:be:9d:
48:a1:5e:79:7b:7c:a1:6c:6c:96:f1:94:f2:fa:ea:
40:d8:41:dd:73:55:8e:33:68:2b:d6:1b:db:61:d2:
1d:b4:11:0a:a1:ec:ce:7f:21:08:2b:e0:61:1c:c1:
07:7f:ac:94:1f:74:e6:cf:fe:8a:8b:85:3b:10:56:
ff:e0:43:27:c1:d1:e6:5e:69:ef:18:23:83:1b:58:
b6:57:ac:c6:0a:ba:10:d1:a8:47:e2:ff:ab:0a:ef:
be:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EF:14:AB:8B:A1:C6:75:D7:5C:58:CE:2C:B2:88:80:74:D8:3D:C5:AF
X509v3 Authority Key Identifier:
keyid:38:F7:46:B8:1A:EC:00:E3:6B:9B:CB:7A:08:64:2A:64:E9:13:DA:5B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OPdGuBrsAONrm8t6CGQqZOkT2ls.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/f4dc76-dcd2-475b-9e68-c22395ce1be4/1/OPdGuBrsAONrm8t6CGQqZOkT2ls.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/f4dc76-dcd2-475b-9e68-c22395ce1be4/1/OPdGuBrsAONrm8t6CGQqZOkT2ls.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9d:b4:c9:f9:04:d8:b3:df:82:fa:f8:d2:19:47:4c:67:8b:73:
7f:cf:68:36:fc:76:c4:3c:4a:7b:d2:71:e8:a8:d2:e8:37:2d:
de:4b:95:91:c6:a8:9c:55:8d:5f:ae:a2:14:b3:a6:fc:ee:60:
b8:5f:6e:d9:f6:ef:71:f1:79:4b:cf:b0:69:01:0f:74:a1:d2:
10:bc:d1:82:09:77:2b:51:d6:6e:c7:5a:97:ab:a3:db:78:9f:
83:5a:05:d8:c9:4d:fa:61:e8:15:aa:98:f5:16:55:62:50:37:
2e:a7:41:68:c9:2b:95:db:15:25:06:8e:bf:c1:af:23:f7:ed:
b4:a2:7c:07:04:f3:0f:06:dc:50:0d:8a:6b:5d:3d:a6:72:43:
45:dc:78:af:bc:2b:93:a2:77:ab:52:81:8f:d3:78:bf:0f:0a:
a2:05:5b:8c:48:07:96:ca:32:18:09:af:37:e4:27:7f:a9:a1:
12:1b:0e:ce:9d:fb:65:df:bc:b1:07:9c:08:74:33:97:81:30:
e7:7e:0c:59:d7:19:de:c6:f9:9c:85:f1:79:00:34:c5:b8:38:
ad:7e:ca:bc:6f:2b:ba:d7:5b:58:5c:af:aa:14:f8:54:f5:f8:
2e:b0:50:20:2d:3f:f1:d3:eb:14:9d:0d:da:c7:e3:e5:4b:82:
e7:50:ff:33
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 19 07:20:35 2025 by rpki-client