Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/83/b1592d-3a23-4f40-81c8-1600b742b5dd/1/oODFkETIfj4t-hPL-ZAjruAS76A.mft
File: oODFkETIfj4t-hPL-ZAjruAS76A.mft (raw, json)
Hash identifier: Aw8kLC26J6q43zJm3DM5+Qpgryo3x7QlktJVPxI9xu4=
Subject key identifier: 59:18:6E:7B:BF:5E:78:44:04:DC:FD:8E:34:69:95:A4:22:E4:17:3F
Authority key identifier: A0:E0:C5:90:44:C8:7E:3E:2D:FA:13:CB:F9:90:23:AE:E0:12:EF:A0
Certificate issuer: /CN=a0e0c59044c87e3e2dfa13cbf99023aee012efa0
Certificate serial: 0196BBC8F4943C09E7901556B96D12D631CB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/oODFkETIfj4t-hPL-ZAjruAS76A.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/83/b1592d-3a23-4f40-81c8-1600b742b5dd/1/oODFkETIfj4t-hPL-ZAjruAS76A.mft
Manifest number: 1533
Signing time: Sat 10 May 2025 20:00:31 +0000
Manifest this update: Sat 10 May 2025 20:00:31 +0000
Manifest next update: Sun 11 May 2025 20:00:31 +0000
Files and hashes: 1: THn-YaWLx96HuhrNbGtVod7EkgM.roa (hash: rsUPsLC3jm8thXVYAO+m9Ea1wFzIeFwCIPJOkL/61EY=)
2: oODFkETIfj4t-hPL-ZAjruAS76A.crl (hash: Kr7vDxz78GUXy/0yt7YCktT3JHV7UNSpHK6pe1NRC2k=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/83/b1592d-3a23-4f40-81c8-1600b742b5dd/1/oODFkETIfj4t-hPL-ZAjruAS76A.crl
rsync://rpki.ripe.net/repository/DEFAULT/83/b1592d-3a23-4f40-81c8-1600b742b5dd/1/oODFkETIfj4t-hPL-ZAjruAS76A.mft
rsync://rpki.ripe.net/repository/DEFAULT/oODFkETIfj4t-hPL-ZAjruAS76A.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 11 May 2025 13:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:bb:c8:f4:94:3c:09:e7:90:15:56:b9:6d:12:d6:31:cb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a0e0c59044c87e3e2dfa13cbf99023aee012efa0
Validity
Not Before: May 10 20:00:31 2025 GMT
Not After : May 11 20:00:31 2025 GMT
Subject: CN=59186e7bbf5e784404dcfd8e346995a422e4173f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:e6:d3:97:c8:55:98:b0:e2:96:eb:c8:ec:38:
01:94:4a:14:70:ba:69:bd:b8:4a:64:fd:19:30:3a:
74:19:81:e0:12:07:da:fd:65:fe:6d:a2:1a:35:da:
76:07:55:69:32:48:de:10:d6:3c:02:d2:bc:d8:28:
72:18:27:5f:43:2b:c3:8f:56:ed:ba:3d:84:55:6c:
28:c6:bb:10:89:0c:56:9b:8f:a5:7a:f1:eb:90:6e:
1b:42:c6:74:36:e6:98:ff:aa:76:b4:3e:fc:61:be:
8a:a2:a4:63:44:a4:d9:19:45:b9:c4:f4:03:e0:58:
23:28:89:44:47:f8:00:8f:41:58:2d:e3:5d:5a:e2:
85:65:47:1c:eb:03:fc:4c:fa:86:dc:10:fc:cb:ef:
23:ea:eb:09:98:97:b1:97:b9:93:3e:6b:09:05:00:
2e:04:be:28:c3:12:a0:86:89:d7:bb:d2:14:db:e4:
1f:c1:3d:62:ee:cb:9c:dd:fd:8f:11:fb:17:50:09:
43:f7:eb:e6:8d:b6:71:b8:a1:19:f9:b9:ca:2c:7a:
c4:af:d5:39:8b:6b:53:89:dd:3e:6a:68:c1:43:e7:
95:b2:8f:fb:47:4c:86:fb:67:ee:33:9e:27:f1:99:
0e:f5:3f:ff:55:33:c5:9a:4c:c8:2f:ab:9a:cb:70:
01:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
59:18:6E:7B:BF:5E:78:44:04:DC:FD:8E:34:69:95:A4:22:E4:17:3F
X509v3 Authority Key Identifier:
keyid:A0:E0:C5:90:44:C8:7E:3E:2D:FA:13:CB:F9:90:23:AE:E0:12:EF:A0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/oODFkETIfj4t-hPL-ZAjruAS76A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/83/b1592d-3a23-4f40-81c8-1600b742b5dd/1/oODFkETIfj4t-hPL-ZAjruAS76A.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/83/b1592d-3a23-4f40-81c8-1600b742b5dd/1/oODFkETIfj4t-hPL-ZAjruAS76A.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3b:d0:b6:e4:d0:82:5c:1e:e0:d1:b0:ad:32:a5:8a:5c:85:91:
bf:43:b9:44:33:60:95:8d:5f:1f:2c:a9:b3:54:e0:fb:fb:01:
89:af:82:f0:4c:f0:1a:a6:15:ae:70:df:6d:f4:62:32:72:e5:
54:f7:c7:d8:de:ba:22:44:c6:89:90:34:7d:1b:ee:6a:4e:f7:
95:34:21:9f:dd:f1:a2:85:e2:03:6a:44:d6:d0:c9:8e:6c:e4:
03:2e:cd:df:57:61:0c:83:73:c3:b1:76:ad:81:ad:c3:2f:a4:
70:cc:f4:77:3a:c2:03:56:21:f2:0d:54:88:7b:ef:d0:ac:db:
20:a6:f4:84:54:67:41:74:63:5a:e8:83:f3:da:5e:00:ee:25:
fd:2f:15:0a:50:dd:75:b5:5a:1c:8d:54:58:00:9f:69:fb:b3:
0f:a3:c7:46:10:b5:0c:da:fa:7f:0b:97:fc:70:ef:b0:1f:77:
2d:f9:e8:57:b6:d4:8c:0e:b8:f1:3f:87:84:0d:9c:72:0b:f6:
36:85:eb:13:a9:1a:d7:4c:85:59:8f:b2:41:0e:a5:d5:81:4d:
71:cf:ec:e6:4c:25:f2:ce:37:12:89:b7:cf:d8:79:11:19:04:
c1:15:b7:21:ae:7a:be:38:48:69:73:d5:3b:46:9a:14:37:f5:
7a:b5:4b:94
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 10 23:04:11 2025 by rpki-client