Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6c/d10813-fe61-4033-a433-5ee9b62246db/1/1-_OAtmdbnM1fgS4Gn_8XVHj7OKQ.mft
File: 1-_OAtmdbnM1fgS4Gn_8XVHj7OKQ.mft (raw, json)
Hash identifier: uK6pufsQUHcnanwFX+PAsvJTCPf4Bo9ZmZRr5LMx6Y0=
Subject key identifier: 9C:28:BD:FC:DD:40:7D:E2:AA:D8:E6:2B:A2:EB:A1:30:99:B5:FC:59
Authority key identifier: FB:F3:80:B6:67:5B:9C:CD:5F:81:2E:06:9F:FF:17:54:78:FB:38:A4
Certificate issuer: /CN=fbf380b6675b9ccd5f812e069fff175478fb38a4
Certificate serial: 0196BFA5807567B40679DD0B30E5D56DED0E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-_OAtmdbnM1fgS4Gn_8XVHj7OKQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6c/d10813-fe61-4033-a433-5ee9b62246db/1/1-_OAtmdbnM1fgS4Gn_8XVHj7OKQ.mft
Manifest number: 1041
Signing time: Sun 11 May 2025 14:00:16 +0000
Manifest this update: Sun 11 May 2025 14:00:16 +0000
Manifest next update: Mon 12 May 2025 14:00:16 +0000
Files and hashes: 1: 1-_OAtmdbnM1fgS4Gn_8XVHj7OKQ.crl (hash: /Sm2hVSywK20L0QjoNPmmrFiikcSorarfASo7YN/yO0=)
2: oCmBMF8iI8CutVf6sdX1dTs5wPg.roa (hash: TfgX1fiboG0xroG328eMyAxUa0ejT6atD6RIyf61++A=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6c/d10813-fe61-4033-a433-5ee9b62246db/1/1-_OAtmdbnM1fgS4Gn_8XVHj7OKQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/6c/d10813-fe61-4033-a433-5ee9b62246db/1/1-_OAtmdbnM1fgS4Gn_8XVHj7OKQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/1-_OAtmdbnM1fgS4Gn_8XVHj7OKQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 12 May 2025 14:00:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:bf:a5:80:75:67:b4:06:79:dd:0b:30:e5:d5:6d:ed:0e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fbf380b6675b9ccd5f812e069fff175478fb38a4
Validity
Not Before: May 11 14:00:16 2025 GMT
Not After : May 12 14:00:16 2025 GMT
Subject: CN=9c28bdfcdd407de2aad8e62ba2eba13099b5fc59
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e5:52:50:1b:7c:65:cf:92:46:6d:20:57:5d:d7:
c2:d9:d1:81:82:d6:9b:4e:69:9a:14:17:51:fb:57:
df:6d:93:78:4c:35:48:b6:1c:09:4a:9e:4b:d8:4a:
25:cc:8c:85:15:4b:70:1f:a2:14:b7:6f:ea:5d:ef:
bc:bf:4e:ca:e6:25:cd:ea:8a:8a:38:c5:6e:be:c2:
70:6a:d4:1d:73:a0:cf:0e:44:5f:56:9d:1c:10:21:
9d:53:2e:da:2f:60:72:e1:8a:3f:2c:d1:02:5a:eb:
b5:b1:a3:1c:cf:7e:06:97:e6:a9:c6:a1:83:d1:b3:
6d:47:f8:38:54:04:ff:0f:c1:e9:66:58:4d:0c:e8:
b7:76:bd:0e:5d:fd:94:a5:3b:25:c0:a5:94:ed:01:
56:f8:1f:5b:94:0f:61:1b:38:ce:2f:68:60:f8:a9:
fc:67:b9:53:5a:29:cc:cc:cb:d5:55:4b:7d:f8:d2:
eb:d9:99:d9:60:d0:19:84:26:6b:fd:a6:bb:79:00:
b1:bf:01:5c:da:8c:9e:36:49:d0:2a:53:32:f7:5d:
f4:5b:6a:fe:f3:6a:5d:ca:0c:a5:be:7d:18:44:f1:
9a:85:31:39:22:4e:98:e9:cb:9d:0d:28:35:8d:ad:
fd:4a:e9:4a:29:0c:07:b1:aa:25:0a:ea:29:eb:7a:
d8:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9C:28:BD:FC:DD:40:7D:E2:AA:D8:E6:2B:A2:EB:A1:30:99:B5:FC:59
X509v3 Authority Key Identifier:
keyid:FB:F3:80:B6:67:5B:9C:CD:5F:81:2E:06:9F:FF:17:54:78:FB:38:A4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-_OAtmdbnM1fgS4Gn_8XVHj7OKQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6c/d10813-fe61-4033-a433-5ee9b62246db/1/1-_OAtmdbnM1fgS4Gn_8XVHj7OKQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6c/d10813-fe61-4033-a433-5ee9b62246db/1/1-_OAtmdbnM1fgS4Gn_8XVHj7OKQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9e:db:b0:f7:16:70:1f:3c:96:2f:b3:cb:98:7d:f2:f0:cf:c0:
67:6f:63:6c:06:44:98:2b:43:04:30:5c:9a:01:f6:1b:9a:5b:
9e:72:32:d2:b0:2c:73:7d:a0:98:2b:b3:6b:31:01:08:a9:05:
9a:33:96:ed:9b:84:51:7d:eb:67:7b:28:18:79:1a:9f:06:1f:
7c:dd:da:2a:b1:a6:84:4c:fb:2d:f5:e0:25:a6:ff:cf:d0:6a:
9f:39:cb:51:8f:8c:fd:57:48:d2:3e:38:5c:78:c8:e1:74:44:
76:03:e3:8e:96:6b:c7:d3:5b:23:6d:93:82:3c:6a:8d:dc:3b:
99:4c:f7:5c:a2:69:53:d3:f6:ec:0c:14:be:26:87:66:40:72:
a0:0d:c8:a6:02:12:be:d1:e4:27:83:86:ef:f0:5e:9d:38:c9:
c2:f2:7c:80:42:a2:2d:dd:41:f0:1b:eb:da:48:6f:b2:6f:11:
81:1e:30:de:ca:c1:5d:1b:4d:c3:ee:ea:25:d5:84:90:70:77:
6b:2f:d7:b7:e4:36:0f:cc:fe:ce:ec:88:35:78:50:e5:a1:54:
50:87:5e:45:30:bc:fe:bf:e4:f0:96:89:97:c8:da:d0:6b:70:
dd:0d:a0:6a:a0:eb:39:2d:68:44:06:b2:25:e1:2e:65:02:7f:
9a:96:4b:99
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 11 23:21:56 2025 by rpki-client