Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0c/a54f90-c8d8-42fa-b0df-950f090e522f/1/OdsD7yfNrOd4Og6jg02XCvOKy-I.mft
File: OdsD7yfNrOd4Og6jg02XCvOKy-I.mft (raw, json)
Hash identifier: UPbGLSyortRk2JuWh6mcqs8/PzTlILCMtjTLMilHvWc=
Subject key identifier: AC:6D:D3:03:44:7A:02:1D:E5:27:9F:65:0B:3B:DB:E2:26:23:7E:EA
Authority key identifier: 39:DB:03:EF:27:CD:AC:E7:78:3A:0E:A3:83:4D:97:0A:F3:8A:CB:E2
Certificate issuer: /CN=39db03ef27cdace7783a0ea3834d970af38acbe2
Certificate serial: 0196AAD525968C9178459175A644EDA8149E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OdsD7yfNrOd4Og6jg02XCvOKy-I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0c/a54f90-c8d8-42fa-b0df-950f090e522f/1/OdsD7yfNrOd4Og6jg02XCvOKy-I.mft
Manifest number: 0607
Signing time: Wed 07 May 2025 13:00:17 +0000
Manifest this update: Wed 07 May 2025 13:00:17 +0000
Manifest next update: Thu 08 May 2025 13:00:17 +0000
Files and hashes: 1: OdsD7yfNrOd4Og6jg02XCvOKy-I.crl (hash: NJICmrMowUag2nszBcm2wZCjVOldTwqIdZs9+CEknto=)
2: oCkWTl_gPJJmyTDbvX7hvylBBmI.roa (hash: 5mrOTSshYKPJ6XnmVELEhWbaEJFvS2kzzHxI1jeDb90=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0c/a54f90-c8d8-42fa-b0df-950f090e522f/1/OdsD7yfNrOd4Og6jg02XCvOKy-I.crl
rsync://rpki.ripe.net/repository/DEFAULT/0c/a54f90-c8d8-42fa-b0df-950f090e522f/1/OdsD7yfNrOd4Og6jg02XCvOKy-I.mft
rsync://rpki.ripe.net/repository/DEFAULT/OdsD7yfNrOd4Og6jg02XCvOKy-I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 08 May 2025 13:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:aa:d5:25:96:8c:91:78:45:91:75:a6:44:ed:a8:14:9e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=39db03ef27cdace7783a0ea3834d970af38acbe2
Validity
Not Before: May 7 13:00:17 2025 GMT
Not After : May 8 13:00:17 2025 GMT
Subject: CN=ac6dd303447a021de5279f650b3bdbe226237eea
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ea:fd:03:43:65:9f:8b:d0:e1:6a:73:66:82:d0:
8e:79:6f:58:e6:20:2e:7a:83:a0:81:ae:c2:c4:79:
64:26:d7:de:12:69:a3:39:f3:6c:99:e1:e5:15:49:
56:59:46:b4:f4:8a:e2:6c:82:35:40:7c:e3:82:4e:
c9:d2:fb:15:63:66:19:76:f7:96:d7:a1:72:1f:c2:
de:e3:a1:2b:e6:27:ad:56:7a:e2:b8:1e:94:e0:2d:
8e:af:d6:c4:25:fb:2e:cb:06:3c:46:ce:f9:0f:1b:
b8:e8:df:32:c4:f8:ef:04:b8:12:e9:f5:f6:61:cb:
21:84:e3:7b:5c:69:6c:c8:7e:29:c8:d3:2d:b4:83:
f8:d8:94:46:ac:8d:e1:5a:b5:85:95:fa:df:25:34:
5c:99:bb:0c:5c:b6:c1:d4:76:90:fd:a8:14:3b:9d:
ee:54:66:88:03:05:1b:ce:29:8b:e3:c6:6a:ac:43:
b8:e9:24:e1:ff:9f:59:58:8a:03:ff:0a:14:20:06:
eb:cd:cf:37:79:88:6c:3c:c1:47:ae:3a:dc:c1:43:
79:91:fb:25:3b:83:60:42:c8:61:3a:67:a9:92:a5:
d4:4d:93:f6:39:ec:e5:d8:37:b4:9e:d1:d2:4d:96:
bb:89:71:9b:63:db:28:f8:e9:d1:66:7d:25:43:58:
d6:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AC:6D:D3:03:44:7A:02:1D:E5:27:9F:65:0B:3B:DB:E2:26:23:7E:EA
X509v3 Authority Key Identifier:
keyid:39:DB:03:EF:27:CD:AC:E7:78:3A:0E:A3:83:4D:97:0A:F3:8A:CB:E2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OdsD7yfNrOd4Og6jg02XCvOKy-I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/a54f90-c8d8-42fa-b0df-950f090e522f/1/OdsD7yfNrOd4Og6jg02XCvOKy-I.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/a54f90-c8d8-42fa-b0df-950f090e522f/1/OdsD7yfNrOd4Og6jg02XCvOKy-I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8d:ed:65:5b:66:5e:03:cd:28:aa:9d:e4:8e:b6:55:02:d1:c5:
a6:a5:db:e9:74:a8:6b:ee:d5:01:76:52:ff:27:6d:02:e5:e8:
93:bf:98:60:65:bc:82:55:bf:43:e8:4a:73:05:7e:ea:00:a5:
b2:33:d4:cb:5e:83:5b:a6:44:96:51:c5:2c:25:ba:59:4e:3b:
50:e8:ba:27:59:39:45:61:86:bf:58:67:95:f5:7c:a1:a1:28:
d7:c0:4c:b7:9b:bd:06:26:a9:41:9e:d2:05:e7:2d:4f:2c:01:
a9:0b:62:1a:8f:a8:e3:c8:35:af:70:4d:14:f2:0d:50:52:91:
26:3f:d4:37:54:53:61:95:6e:3c:e1:8b:c2:4f:c7:72:8e:75:
b0:c3:91:cb:86:18:f0:54:77:5c:24:99:7d:f4:b2:aa:7f:85:
66:d5:73:3c:25:a5:b6:a7:cd:ff:71:ff:19:e6:ae:16:b3:77:
03:c3:48:01:c4:62:b2:9c:9a:a3:86:1a:03:ad:d4:9a:12:fd:
2f:11:62:67:dc:43:c6:58:3c:db:b1:bf:e3:4c:3c:05:30:5d:
e0:02:0b:ac:74:72:ac:24:ca:51:b9:5b:a5:8b:ef:f5:4d:b1:
95:89:d1:61:fe:b9:a9:07:e4:ae:0b:bf:40:04:d1:5c:73:df:
39:db:70:c5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 7 23:02:45 2025 by rpki-client