Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ad/f4ce89-8a16-4af5-b57c-2846eaadde67/1/ODQP9mmjrcnWaWE1yNcfbfXqwns.mft
File: ODQP9mmjrcnWaWE1yNcfbfXqwns.mft (raw, json)
Hash identifier: f9GrDXwf0EeFlORenwbEDiXSLB6DFYQ6OekAtdTvRq0=
Subject key identifier: CB:D3:17:AC:06:3F:6C:9A:20:31:EB:CC:1E:33:4E:C4:02:2A:8A:79
Authority key identifier: 38:34:0F:F6:69:A3:AD:C9:D6:69:61:35:C8:D7:1F:6D:F5:EA:C2:7B
Certificate issuer: /CN=38340ff669a3adc9d6696135c8d71f6df5eac27b
Certificate serial: 0196C7294A5993FE27275C2F4FF0001369F1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ODQP9mmjrcnWaWE1yNcfbfXqwns.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ad/f4ce89-8a16-4af5-b57c-2846eaadde67/1/ODQP9mmjrcnWaWE1yNcfbfXqwns.mft
Manifest number: 08DE
Signing time: Tue 13 May 2025 01:01:34 +0000
Manifest this update: Tue 13 May 2025 01:01:34 +0000
Manifest next update: Wed 14 May 2025 01:01:34 +0000
Files and hashes: 1: ODQP9mmjrcnWaWE1yNcfbfXqwns.crl (hash: i9J3ukU1ImhqU1Bh+zZ3sRzGQf+wAJW4KV0p7N8zQY8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ad/f4ce89-8a16-4af5-b57c-2846eaadde67/1/ODQP9mmjrcnWaWE1yNcfbfXqwns.crl
rsync://rpki.ripe.net/repository/DEFAULT/ad/f4ce89-8a16-4af5-b57c-2846eaadde67/1/ODQP9mmjrcnWaWE1yNcfbfXqwns.mft
rsync://rpki.ripe.net/repository/DEFAULT/ODQP9mmjrcnWaWE1yNcfbfXqwns.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 13 May 2025 23:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:c7:29:4a:59:93:fe:27:27:5c:2f:4f:f0:00:13:69:f1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=38340ff669a3adc9d6696135c8d71f6df5eac27b
Validity
Not Before: May 13 01:01:34 2025 GMT
Not After : May 14 01:01:34 2025 GMT
Subject: CN=cbd317ac063f6c9a2031ebcc1e334ec4022a8a79
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:45:54:7d:ee:e6:61:be:eb:2c:65:03:ce:a4:
07:4b:01:f7:0b:ea:1b:a5:29:89:dd:b5:31:9b:69:
11:aa:1d:f4:7c:93:f0:87:52:f5:03:5f:db:a3:19:
8b:25:d3:96:28:ee:e8:05:29:b8:5f:06:35:61:23:
fc:48:3f:18:d8:46:26:9f:5b:a7:34:47:c9:79:54:
3f:f4:1d:8b:32:ba:b7:f2:38:7b:0b:86:95:0e:51:
94:b3:18:11:a6:46:0a:3a:dc:e2:a2:c1:8f:34:1e:
be:22:30:a2:11:db:bd:ca:80:2f:28:45:27:be:38:
5d:1e:1b:c4:2a:95:1b:3e:59:2d:d5:22:ae:56:61:
a9:5e:76:82:24:e2:52:11:01:4a:e9:1a:0f:80:7d:
ca:1a:eb:72:00:2b:e4:de:7d:64:27:6c:71:1d:4d:
41:c7:4e:cc:3b:8f:ea:a6:3d:bb:c5:bf:ea:bb:0e:
b3:52:42:a6:65:16:54:49:75:57:db:71:05:74:46:
3e:62:55:62:69:96:16:dd:b8:0d:30:f0:9b:ee:a3:
70:1e:85:94:aa:f5:c4:c8:6e:87:f6:47:ef:a6:85:
5d:bb:4e:0d:db:7d:f4:96:f6:ee:21:d3:1d:e4:9d:
68:6d:eb:25:ab:30:93:9b:e3:36:10:c7:89:21:52:
7e:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CB:D3:17:AC:06:3F:6C:9A:20:31:EB:CC:1E:33:4E:C4:02:2A:8A:79
X509v3 Authority Key Identifier:
keyid:38:34:0F:F6:69:A3:AD:C9:D6:69:61:35:C8:D7:1F:6D:F5:EA:C2:7B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ODQP9mmjrcnWaWE1yNcfbfXqwns.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ad/f4ce89-8a16-4af5-b57c-2846eaadde67/1/ODQP9mmjrcnWaWE1yNcfbfXqwns.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ad/f4ce89-8a16-4af5-b57c-2846eaadde67/1/ODQP9mmjrcnWaWE1yNcfbfXqwns.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
55:f3:8a:9c:09:ef:5d:50:3f:67:d4:7c:b4:72:87:76:5e:5d:
1d:19:af:45:96:22:3c:1d:97:bb:92:cd:b9:1e:b5:e5:21:73:
39:48:f6:f0:f3:a9:8f:b3:c7:34:4c:c3:41:28:fa:bb:c9:3f:
f9:8a:51:85:f8:c4:4c:a0:fb:fe:6f:c9:12:57:ec:f0:9c:18:
e2:36:9a:5e:7e:1e:ac:f3:e7:8d:a4:ce:eb:ef:32:a1:f0:24:
91:b5:e2:52:82:ae:60:12:26:77:59:a7:72:a6:b7:78:6e:31:
5a:e9:6f:75:9c:bd:3d:72:52:25:d7:0f:af:3f:f5:27:f7:85:
37:d9:2c:54:f0:93:00:03:89:d4:2b:62:55:f5:00:4a:28:15:
88:d5:60:03:9b:95:0a:d8:d6:ea:fb:73:28:a7:fc:a5:ad:a0:
6a:67:cf:ea:16:5c:9d:20:a7:58:25:c2:0c:22:c1:5f:e6:c6:
9d:5b:26:7f:02:85:0d:7c:4a:43:26:ba:61:91:d3:1c:be:43:
71:95:e9:0c:29:94:92:78:81:d7:e2:7f:d4:8c:c7:fb:45:42:
17:17:c5:aa:84:29:68:d8:4d:3a:5c:5e:5b:e4:b1:2c:25:b1:
8c:bd:0e:3b:78:0d:13:3f:4d:a4:30:43:0e:4f:f1:67:dc:9c:
3e:c3:d9:ee
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 13 06:49:14 2025 by rpki-client