Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/17/784601-0461-4753-8a52-e80a05e39f4b/1/OJbZ85IBpJ-hNpWC4Y8aK7llsoM.mft
File: OJbZ85IBpJ-hNpWC4Y8aK7llsoM.mft (raw, json)
Hash identifier: 4lHCaXj20QDKSdIDOeG+YI71l2EZF6wHQYH+Zj4A7rw=
Subject key identifier: 84:C6:A2:7E:91:44:62:8F:F2:60:2C:8D:B0:42:F5:F0:DC:CE:25:6B
Authority key identifier: 38:96:D9:F3:92:01:A4:9F:A1:36:95:82:E1:8F:1A:2B:B9:65:B2:83
Certificate issuer: /CN=3896d9f39201a49fa1369582e18f1a2bb965b283
Certificate serial: 01969E636B8F9BE07282F609C3DE6B5AE327
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OJbZ85IBpJ-hNpWC4Y8aK7llsoM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/17/784601-0461-4753-8a52-e80a05e39f4b/1/OJbZ85IBpJ-hNpWC4Y8aK7llsoM.mft
Manifest number: 0745
Signing time: Mon 05 May 2025 03:00:37 +0000
Manifest this update: Mon 05 May 2025 03:00:37 +0000
Manifest next update: Tue 06 May 2025 03:00:37 +0000
Files and hashes: 1: OJbZ85IBpJ-hNpWC4Y8aK7llsoM.crl (hash: QbswZyWVVG6iJq/wXtCl0Q8evlcIDCgsckYVPmDAo14=)
2: cNiza7IEiNMNBNBagOrbk4czUFI.roa (hash: cxXOTzwPl8qSVNIA1za+AwOz7dJ4d9CdZy9RaFccNUA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/17/784601-0461-4753-8a52-e80a05e39f4b/1/OJbZ85IBpJ-hNpWC4Y8aK7llsoM.crl
rsync://rpki.ripe.net/repository/DEFAULT/17/784601-0461-4753-8a52-e80a05e39f4b/1/OJbZ85IBpJ-hNpWC4Y8aK7llsoM.mft
rsync://rpki.ripe.net/repository/DEFAULT/OJbZ85IBpJ-hNpWC4Y8aK7llsoM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 05 May 2025 22:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:9e:63:6b:8f:9b:e0:72:82:f6:09:c3:de:6b:5a:e3:27
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3896d9f39201a49fa1369582e18f1a2bb965b283
Validity
Not Before: May 5 03:00:37 2025 GMT
Not After : May 6 03:00:37 2025 GMT
Subject: CN=84c6a27e9144628ff2602c8db042f5f0dcce256b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:df:f5:6a:90:f4:ed:22:b4:ea:f5:88:5f:1b:76:
e2:90:06:ce:f6:8b:45:41:4c:89:de:0a:bc:8c:41:
1e:0e:5e:60:d0:2c:1a:64:e6:10:d6:b3:9d:a2:b9:
2d:ce:b8:19:42:40:45:a2:d9:98:a1:f0:71:15:86:
b3:31:c1:63:6c:d3:19:70:01:07:4b:a7:39:95:f2:
26:06:0e:74:f7:87:a2:6a:2e:bf:fd:7e:fb:70:d3:
04:af:a7:65:81:f1:b5:df:54:d7:ce:a8:5a:b5:9c:
15:c0:12:52:7f:34:03:eb:23:7f:93:70:17:8a:4c:
5f:35:74:44:a6:86:90:36:ba:33:fa:19:09:59:05:
75:40:2e:6c:1d:b2:32:0c:1a:d3:b9:e4:57:65:59:
61:a7:d2:fb:2d:08:c1:ae:c8:5e:d3:aa:56:47:63:
7b:6d:ed:cb:2e:ff:38:aa:2c:3b:46:93:c1:12:55:
df:5f:a2:8b:be:6d:ad:b1:f2:63:e6:5b:f1:de:47:
a0:c5:eb:3e:66:0b:03:ec:f5:67:a1:bd:69:ee:4d:
73:67:ee:59:c3:07:f8:6c:de:21:d1:36:a9:a4:bf:
10:ac:3d:30:12:e5:67:be:8c:9b:da:11:05:6d:aa:
d2:31:b0:e5:d1:8b:a9:5e:4a:72:0c:55:66:a5:0d:
5f:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
84:C6:A2:7E:91:44:62:8F:F2:60:2C:8D:B0:42:F5:F0:DC:CE:25:6B
X509v3 Authority Key Identifier:
keyid:38:96:D9:F3:92:01:A4:9F:A1:36:95:82:E1:8F:1A:2B:B9:65:B2:83
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OJbZ85IBpJ-hNpWC4Y8aK7llsoM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/17/784601-0461-4753-8a52-e80a05e39f4b/1/OJbZ85IBpJ-hNpWC4Y8aK7llsoM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/17/784601-0461-4753-8a52-e80a05e39f4b/1/OJbZ85IBpJ-hNpWC4Y8aK7llsoM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
cd:8c:87:45:c7:37:0f:5c:db:0d:cc:a2:f8:b6:96:30:14:7b:
be:e8:6b:0d:5e:ed:de:38:c0:b2:f8:ce:db:99:eb:de:8c:0f:
07:de:c4:dc:38:6a:ce:a5:cc:da:7b:96:1a:7c:58:2d:45:d1:
73:19:4f:fe:db:1e:75:a0:68:05:06:c6:bf:7f:ab:57:bc:14:
76:b7:fd:4b:93:24:01:80:d3:64:90:5c:ab:ca:77:4d:aa:8c:
55:62:be:30:c2:ab:13:2d:cf:40:c7:ec:44:c3:a7:8b:04:7c:
00:f8:b4:45:f2:11:3b:74:27:03:41:2d:70:e7:c8:f9:f3:52:
75:58:84:0b:bf:53:e6:de:e4:4b:a3:e1:75:17:09:c2:b3:18:
4a:d8:eb:bd:7c:bf:ac:89:08:5a:b2:db:45:65:b3:58:0e:de:
71:a9:c6:72:08:2f:cd:78:f1:93:d5:8a:17:2c:78:3e:e2:c8:
4b:41:28:97:69:73:21:1b:52:3f:91:16:2f:c9:04:12:93:47:
70:95:fb:88:9e:8f:10:05:1a:da:89:49:f8:18:92:bd:01:9d:
17:bf:28:38:0d:33:3c:9e:17:4c:2d:86:4b:6d:f5:c4:c3:1a:
85:54:95:f7:2a:74:7c:af:ba:2e:ee:fa:62:6e:33:a7:ce:e2:
07:b3:a2:29
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 5 05:35:06 2025 by rpki-client