Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1c/897876-da72-40bc-8d5c-7ca9b8e91ac7/1/Od2goAlTA6kfOOQ6tNN7YZw76h0.mft
File: Od2goAlTA6kfOOQ6tNN7YZw76h0.mft (raw, json)
Hash identifier: aCyIMgvelV+w37dAKnkRqR0xyq24lJUdvLEvlNPYZKY=
Subject key identifier: F1:AC:0A:07:D1:10:A1:2E:18:5C:E3:62:AF:69:C4:47:26:70:81:88
Authority key identifier: 39:DD:A0:A0:09:53:03:A9:1F:38:E4:3A:B4:D3:7B:61:9C:3B:EA:1D
Certificate issuer: /CN=39dda0a0095303a91f38e43ab4d37b619c3bea1d
Certificate serial: 0196BD4974591D14E2694E79B1B83B21E78B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Od2goAlTA6kfOOQ6tNN7YZw76h0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1c/897876-da72-40bc-8d5c-7ca9b8e91ac7/1/Od2goAlTA6kfOOQ6tNN7YZw76h0.mft
Manifest number: 1534
Signing time: Sun 11 May 2025 03:00:29 +0000
Manifest this update: Sun 11 May 2025 03:00:29 +0000
Manifest next update: Mon 12 May 2025 03:00:29 +0000
Files and hashes: 1: EzYELBbdECMUd5jL00V2yecSQYs.roa (hash: GVtwH5pzCQ3ejlHuG6nu4gzTRA6JPrykk4d+btWS9mI=)
2: Od2goAlTA6kfOOQ6tNN7YZw76h0.crl (hash: uyZb/9aKDueRp4z/RSCMScsHYxBzIGDGffWly+jhHOA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1c/897876-da72-40bc-8d5c-7ca9b8e91ac7/1/Od2goAlTA6kfOOQ6tNN7YZw76h0.crl
rsync://rpki.ripe.net/repository/DEFAULT/1c/897876-da72-40bc-8d5c-7ca9b8e91ac7/1/Od2goAlTA6kfOOQ6tNN7YZw76h0.mft
rsync://rpki.ripe.net/repository/DEFAULT/Od2goAlTA6kfOOQ6tNN7YZw76h0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 11 May 2025 22:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:bd:49:74:59:1d:14:e2:69:4e:79:b1:b8:3b:21:e7:8b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=39dda0a0095303a91f38e43ab4d37b619c3bea1d
Validity
Not Before: May 11 03:00:29 2025 GMT
Not After : May 12 03:00:29 2025 GMT
Subject: CN=f1ac0a07d110a12e185ce362af69c44726708188
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:6c:15:64:fd:e3:53:0d:b7:cb:d2:b5:03:8a:
df:5e:2a:96:cf:ec:ce:c4:cd:ee:30:1d:7d:cc:3a:
80:11:54:bd:10:2e:bd:a6:04:98:4f:fe:d7:c7:53:
ce:6d:18:27:1c:91:14:ea:81:5a:35:19:42:53:ae:
4c:09:cb:d1:f8:64:19:32:54:f3:97:af:a3:1e:a8:
c5:c5:04:a9:77:43:b6:82:36:14:6f:03:68:e1:31:
dd:a8:98:71:45:83:b3:33:8b:d9:5b:7c:7b:79:22:
38:0a:8f:37:5e:f9:b3:8d:47:d6:b8:33:28:89:d9:
a8:5d:5b:74:31:1d:ce:c9:92:83:70:1e:ac:3a:10:
56:ad:cd:0c:59:39:49:3a:ea:b5:e7:97:72:1c:0e:
41:3e:1e:93:9b:a7:87:db:7f:1b:0e:ca:36:4d:af:
76:2f:ef:d0:f4:fb:c4:32:65:5d:a5:49:5b:43:30:
53:75:23:63:64:f9:1f:51:98:20:92:a4:d2:7f:da:
70:39:e2:f6:8a:87:3b:1e:09:e4:46:8f:52:06:c0:
c6:48:c9:56:b4:5d:c3:3c:6d:fe:a5:24:c1:ac:05:
c1:78:e6:8b:20:00:e9:a4:0a:3e:f5:99:a1:af:09:
93:cd:a5:a3:ed:ef:18:aa:d6:d2:8a:a4:7f:f5:3f:
d3:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F1:AC:0A:07:D1:10:A1:2E:18:5C:E3:62:AF:69:C4:47:26:70:81:88
X509v3 Authority Key Identifier:
keyid:39:DD:A0:A0:09:53:03:A9:1F:38:E4:3A:B4:D3:7B:61:9C:3B:EA:1D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Od2goAlTA6kfOOQ6tNN7YZw76h0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/897876-da72-40bc-8d5c-7ca9b8e91ac7/1/Od2goAlTA6kfOOQ6tNN7YZw76h0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/897876-da72-40bc-8d5c-7ca9b8e91ac7/1/Od2goAlTA6kfOOQ6tNN7YZw76h0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
44:b7:6d:95:8a:f7:5a:02:d8:0e:92:5d:a3:89:20:57:2c:99:
7d:66:23:44:c0:f8:f1:2c:b9:5e:28:b0:a3:ca:8b:70:71:b7:
4d:52:90:63:23:21:a0:e4:93:e4:c9:f1:a9:fc:19:88:fd:c9:
e9:c1:dd:5a:95:de:e8:49:ba:1f:e8:e5:cf:fe:f7:a4:ad:90:
fa:74:22:33:0d:8f:94:7c:a5:04:51:ec:41:a2:36:6d:c2:88:
e9:75:8b:b0:9c:3b:2d:4c:82:fd:c3:62:48:7a:20:cf:f7:de:
77:79:35:7d:5c:38:f5:60:15:20:03:df:ca:15:6e:59:9d:d2:
7d:6c:74:6a:ee:67:1c:70:35:9d:27:ef:c7:e6:c1:ff:e0:a5:
b4:0f:50:0b:f0:c6:81:41:b6:cc:15:33:c6:3c:93:08:98:b0:
9e:d8:92:db:9d:44:97:c9:6b:77:e7:09:9d:0c:52:ab:9a:a7:
58:05:c4:c3:71:ec:1a:e9:c8:76:5e:8c:e9:82:a3:d0:c3:b1:
ab:b4:ed:1c:c4:99:24:e0:4f:1c:88:41:00:fa:81:5e:10:05:
e3:69:43:2c:a7:98:ab:0c:7c:b0:55:06:5f:66:9a:4e:cc:57:
77:68:66:55:ff:6d:5e:a9:2f:7e:e7:d3:c4:4c:84:02:88:f8:
c4:ca:6a:9e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 11 06:12:43 2025 by rpki-client