Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1c/03bab8-6c43-4a20-a960-c37a5982f466/1/ofeIKGHCntWZvkqTdIDE0T4lv8I.mft
File: ofeIKGHCntWZvkqTdIDE0T4lv8I.mft (raw, json)
Hash identifier: k2DcBnz3V7uRQnP0/nmM4sfxKUFKJVUM0Q5hRZLtfEg=
Subject key identifier: 01:28:56:D6:7E:FE:68:DB:55:00:E7:A2:E0:33:7D:64:44:5E:48:86
Authority key identifier: A1:F7:88:28:61:C2:9E:D5:99:BE:4A:93:74:80:C4:D1:3E:25:BF:C2
Certificate issuer: /CN=a1f7882861c29ed599be4a937480c4d13e25bfc2
Certificate serial: 01969FAD2FCC64D730575B7BBEC38588B5FC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ofeIKGHCntWZvkqTdIDE0T4lv8I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1c/03bab8-6c43-4a20-a960-c37a5982f466/1/ofeIKGHCntWZvkqTdIDE0T4lv8I.mft
Manifest number: 1529
Signing time: Mon 05 May 2025 09:00:49 +0000
Manifest this update: Mon 05 May 2025 09:00:49 +0000
Manifest next update: Tue 06 May 2025 09:00:49 +0000
Files and hashes: 1: ZI8Cc8TbOXHSTT6aTy4qes85u18.roa (hash: Gcf7oNxz6hoE1nbwGxOkKAeIU8snb4fxphzbF+WsHH8=)
2: hQJK6zQLhYj5qTjnWHPVq5_Ggwc.roa (hash: qWKatLGe/VjD4eV5U12XcGzsbBr23W6H5teeHc7VO7g=)
3: ofeIKGHCntWZvkqTdIDE0T4lv8I.crl (hash: ULg47NoBRg2h4dEJDI8jjngoo2xSILSjyNwAUfWeTUM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1c/03bab8-6c43-4a20-a960-c37a5982f466/1/ofeIKGHCntWZvkqTdIDE0T4lv8I.crl
rsync://rpki.ripe.net/repository/DEFAULT/1c/03bab8-6c43-4a20-a960-c37a5982f466/1/ofeIKGHCntWZvkqTdIDE0T4lv8I.mft
rsync://rpki.ripe.net/repository/DEFAULT/ofeIKGHCntWZvkqTdIDE0T4lv8I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 06 May 2025 01:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:9f:ad:2f:cc:64:d7:30:57:5b:7b:be:c3:85:88:b5:fc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a1f7882861c29ed599be4a937480c4d13e25bfc2
Validity
Not Before: May 5 09:00:49 2025 GMT
Not After : May 6 09:00:49 2025 GMT
Subject: CN=012856d67efe68db5500e7a2e0337d64445e4886
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e1:9e:28:e9:8c:6b:22:64:6d:e6:9b:4b:16:34:
1d:84:15:c0:ab:3f:0d:5a:4d:e6:37:b1:50:cc:4d:
ba:2d:77:a6:12:9f:ab:8b:a1:c6:8e:d7:b5:8c:65:
07:af:e5:cc:89:8a:91:d0:94:78:4e:47:b5:e4:81:
c7:a7:05:33:3f:75:72:b1:07:23:b4:2c:04:c2:77:
c4:8f:77:be:9d:74:a7:9d:dc:91:34:a4:33:bf:ea:
0a:3e:c4:df:b5:45:3d:d9:34:23:58:e6:0e:b0:fb:
50:f5:34:24:94:69:2c:7d:1d:eb:7d:35:69:36:80:
09:fe:da:04:54:57:4c:8e:52:e7:a0:94:b2:20:19:
ae:22:bd:aa:2a:49:cc:68:e2:29:5d:d9:b4:db:f8:
a6:c1:e3:d5:b8:79:73:31:7b:fa:92:ef:79:e8:74:
1c:33:bc:30:1f:d1:06:d5:62:0b:ba:57:91:6b:61:
d7:33:d0:0a:53:c1:1e:b7:84:d3:05:d1:16:1b:f0:
4a:04:36:61:6a:e6:b1:fe:d8:fa:98:ec:d2:9c:ba:
41:9c:91:ae:27:70:fb:9d:df:0a:a8:9a:58:ab:c5:
d4:5a:18:0d:b6:e4:a9:8d:ff:fc:65:d3:3b:3a:66:
49:a6:96:8e:6e:09:56:6e:c5:ba:25:a5:b5:5e:54:
35:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
01:28:56:D6:7E:FE:68:DB:55:00:E7:A2:E0:33:7D:64:44:5E:48:86
X509v3 Authority Key Identifier:
keyid:A1:F7:88:28:61:C2:9E:D5:99:BE:4A:93:74:80:C4:D1:3E:25:BF:C2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ofeIKGHCntWZvkqTdIDE0T4lv8I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/03bab8-6c43-4a20-a960-c37a5982f466/1/ofeIKGHCntWZvkqTdIDE0T4lv8I.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/03bab8-6c43-4a20-a960-c37a5982f466/1/ofeIKGHCntWZvkqTdIDE0T4lv8I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
77:96:63:8b:8f:0d:a3:2f:c8:f4:a2:26:51:cd:11:c8:1d:03:
e7:4e:ea:b8:75:9e:54:af:ef:71:04:c5:40:37:27:27:5a:d1:
44:13:46:81:22:dd:1c:fb:07:f5:fb:be:0a:f8:86:84:3d:f3:
0e:a0:c0:8e:28:27:74:b3:45:8e:9a:90:ea:c9:90:c6:1b:6c:
96:1b:dd:62:f7:11:d2:04:f0:c9:90:45:d2:3a:7d:b7:57:3c:
56:17:ab:34:60:11:a7:9f:8f:46:f1:de:d7:ec:ca:4b:f2:63:
01:27:e0:e3:2f:fc:e3:8e:29:85:8b:68:d7:30:35:05:01:ea:
45:d7:85:7b:88:86:39:79:53:f2:4d:6f:fa:f5:2d:dd:b3:73:
93:91:80:11:ae:99:df:c1:dc:88:50:1b:95:4f:bb:ae:cd:00:
62:31:cd:7b:16:d8:48:43:f2:c5:71:b7:c7:73:17:0c:d3:56:
a3:bd:fb:ab:de:46:24:50:b5:c5:c7:24:09:1b:74:56:31:1c:
f3:7f:78:97:45:c3:15:41:41:72:7c:14:22:f5:45:38:7f:e0:
f1:6f:45:de:6c:ab:e0:d8:2a:18:90:19:bd:08:f0:00:f7:59:
d9:65:47:6a:c4:c1:f4:ea:2f:97:b8:08:43:85:b2:23:c0:bc:
db:19:c7:38
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 5 11:03:31 2025 by rpki-client