Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/39/b1e63b-01ab-4c05-84a7-45e1c77a18c0/1/cdOdbFDdMJ7pKGwwLfsVJFvbryM.mft
File: cdOdbFDdMJ7pKGwwLfsVJFvbryM.mft (raw, json)
Hash identifier: qZDdk35lndEiwSkhQ9VKtstdfDJthySWyHB/MJ0NfWA=
Subject key identifier: 3E:13:C9:CC:DD:FF:AE:46:D7:C5:D2:E8:AA:28:A4:52:16:8A:21:26
Authority key identifier: 71:D3:9D:6C:50:DD:30:9E:E9:28:6C:30:2D:FB:15:24:5B:DB:AF:23
Certificate issuer: /CN=71d39d6c50dd309ee9286c302dfb15245bdbaf23
Certificate serial: 0196A465A34FEB8C7C2EF5515FB03F5D8094
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cdOdbFDdMJ7pKGwwLfsVJFvbryM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/39/b1e63b-01ab-4c05-84a7-45e1c77a18c0/1/cdOdbFDdMJ7pKGwwLfsVJFvbryM.mft
Manifest number: 1528
Signing time: Tue 06 May 2025 07:00:46 +0000
Manifest this update: Tue 06 May 2025 07:00:46 +0000
Manifest next update: Wed 07 May 2025 07:00:46 +0000
Files and hashes: 1: cKLVURSgkoMYO4wy8vne_qwgRmg.roa (hash: SnmmNcbbOM0qBXdozd7WzP3UhHfxrlR5ILW9dCCKUpI=)
2: cdOdbFDdMJ7pKGwwLfsVJFvbryM.crl (hash: QQDLdNHfyOn/PksxeJfnMR7g/G8uI8YWSEJg55WVtFU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/39/b1e63b-01ab-4c05-84a7-45e1c77a18c0/1/cdOdbFDdMJ7pKGwwLfsVJFvbryM.crl
rsync://rpki.ripe.net/repository/DEFAULT/39/b1e63b-01ab-4c05-84a7-45e1c77a18c0/1/cdOdbFDdMJ7pKGwwLfsVJFvbryM.mft
rsync://rpki.ripe.net/repository/DEFAULT/cdOdbFDdMJ7pKGwwLfsVJFvbryM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 07 May 2025 04:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:a4:65:a3:4f:eb:8c:7c:2e:f5:51:5f:b0:3f:5d:80:94
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=71d39d6c50dd309ee9286c302dfb15245bdbaf23
Validity
Not Before: May 6 07:00:46 2025 GMT
Not After : May 7 07:00:46 2025 GMT
Subject: CN=3e13c9ccddffae46d7c5d2e8aa28a452168a2126
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:95:43:90:52:91:b4:45:f7:3e:a1:ee:0f:f5:
ff:8e:d7:25:19:c0:1e:fd:e9:30:17:d8:29:cb:e2:
fe:de:b4:85:47:a8:00:d8:52:24:76:a5:79:94:e8:
03:c5:18:b1:43:81:f6:a3:0f:b0:bb:13:ee:1d:70:
ec:c9:ef:1d:a5:d3:b2:1d:1c:e1:0e:68:9f:6d:14:
79:2f:1a:9c:8f:e8:99:df:58:c3:09:15:b4:11:70:
02:b3:18:25:53:a8:22:04:9c:e8:93:38:68:8e:ea:
a7:12:2b:92:03:12:0b:eb:a1:32:6b:5b:ef:a6:7a:
c1:40:3e:56:b2:1a:8a:7a:bc:91:45:80:11:07:80:
5b:ab:30:36:5f:4b:28:2d:4b:40:6e:68:d1:72:c8:
88:f2:ab:27:5a:af:59:d7:f3:48:e5:1d:5f:df:80:
a3:b3:8a:25:73:c4:75:33:36:96:9e:9d:6f:80:fc:
a9:ad:80:ee:7f:5e:53:73:bc:c6:0c:4a:86:41:41:
4d:03:4c:46:a5:d0:4a:db:c7:02:63:a3:e6:91:9d:
6f:93:7c:2a:4a:ab:df:24:66:38:f0:7f:a0:04:21:
4d:3f:2a:72:7c:03:91:e4:05:e5:a3:0a:13:37:da:
cb:a2:32:86:ab:89:31:e5:26:bc:ff:32:7f:72:9a:
dd:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3E:13:C9:CC:DD:FF:AE:46:D7:C5:D2:E8:AA:28:A4:52:16:8A:21:26
X509v3 Authority Key Identifier:
keyid:71:D3:9D:6C:50:DD:30:9E:E9:28:6C:30:2D:FB:15:24:5B:DB:AF:23
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cdOdbFDdMJ7pKGwwLfsVJFvbryM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/39/b1e63b-01ab-4c05-84a7-45e1c77a18c0/1/cdOdbFDdMJ7pKGwwLfsVJFvbryM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/39/b1e63b-01ab-4c05-84a7-45e1c77a18c0/1/cdOdbFDdMJ7pKGwwLfsVJFvbryM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
28:8f:b0:25:49:b5:c6:fd:5b:f2:a1:12:10:90:30:28:14:33:
d7:1b:4b:a5:b9:0a:18:5f:8f:8b:f3:25:45:fb:98:4e:b9:25:
bf:75:49:a5:60:f0:d2:9a:29:ba:a6:21:8d:78:54:d8:d8:4f:
49:10:60:d3:eb:98:20:fd:fa:b8:3c:2e:c8:0b:05:b7:c3:b3:
43:7a:23:44:b6:09:37:da:29:f2:09:ba:49:3e:56:d8:af:1e:
7f:6c:b0:8e:2e:26:75:bf:cd:e0:23:02:95:5b:23:9c:3c:0c:
c2:d0:15:81:8f:4e:be:d1:b5:3a:75:76:52:0c:61:2f:0e:72:
d0:03:87:d7:af:21:42:55:89:a8:ef:ad:e2:2a:42:34:14:03:
b6:46:90:46:e4:74:6f:2c:11:bb:3e:3b:47:f6:2c:c8:83:35:
67:6d:28:4f:ac:7b:80:a3:fa:1d:46:c2:56:bd:21:3c:f3:95:
34:1a:ac:98:ab:0b:fd:97:61:41:fb:a9:1d:27:97:8f:c5:d9:
81:c7:f6:6f:c7:99:67:3b:7e:41:9a:13:d2:c5:72:68:88:15:
3e:b4:72:2f:57:61:b4:eb:5b:4b:dd:4a:3e:85:95:d5:a3:7c:
64:e7:cd:96:01:5d:ca:ef:d2:29:ef:77:04:9b:5a:13:94:f6:
bd:f6:5a:ad
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 6 11:32:45 2025 by rpki-client