Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cb/f41e52-0f25-4cc0-ac87-352cd296ebb8/1/ODHl2Yzu4014OlHMy27k3E7kN5M.mft
File: ODHl2Yzu4014OlHMy27k3E7kN5M.mft (raw, json)
Hash identifier: 8d/ObvFZEvXhT9KrUu8/ZqBOA3slnFOoFotWLMN1OC4=
Subject key identifier: 1D:BD:9B:2A:42:1E:C9:1E:76:D5:5F:F4:DD:43:76:24:57:BF:B9:F6
Authority key identifier: 38:31:E5:D9:8C:EE:E3:4D:78:3A:51:CC:CB:6E:E4:DC:4E:E4:37:93
Certificate issuer: /CN=3831e5d98ceee34d783a51cccb6ee4dc4ee43793
Certificate serial: 01969FE3DD3AED2DEF65B4F4718A39BD58EC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ODHl2Yzu4014OlHMy27k3E7kN5M.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cb/f41e52-0f25-4cc0-ac87-352cd296ebb8/1/ODHl2Yzu4014OlHMy27k3E7kN5M.mft
Manifest number: 1525
Signing time: Mon 05 May 2025 10:00:32 +0000
Manifest this update: Mon 05 May 2025 10:00:32 +0000
Manifest next update: Tue 06 May 2025 10:00:32 +0000
Files and hashes: 1: ODHl2Yzu4014OlHMy27k3E7kN5M.crl (hash: iTIWy9x9XlzVNbTCx2GuWI0+Xbn8gYfYY8Lec5TUDHA=)
2: XHu_MLGiiIwtync8aurFr7T_kLw.roa (hash: GNnYK051qhc0CaVwirSGryQmdmLkk49r5lW5NyG95ao=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cb/f41e52-0f25-4cc0-ac87-352cd296ebb8/1/ODHl2Yzu4014OlHMy27k3E7kN5M.crl
rsync://rpki.ripe.net/repository/DEFAULT/cb/f41e52-0f25-4cc0-ac87-352cd296ebb8/1/ODHl2Yzu4014OlHMy27k3E7kN5M.mft
rsync://rpki.ripe.net/repository/DEFAULT/ODHl2Yzu4014OlHMy27k3E7kN5M.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 06 May 2025 10:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:9f:e3:dd:3a:ed:2d:ef:65:b4:f4:71:8a:39:bd:58:ec
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3831e5d98ceee34d783a51cccb6ee4dc4ee43793
Validity
Not Before: May 5 10:00:32 2025 GMT
Not After : May 6 10:00:32 2025 GMT
Subject: CN=1dbd9b2a421ec91e76d55ff4dd43762457bfb9f6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:0b:2f:f1:70:26:83:6b:bf:a6:de:80:95:e4:
36:f8:93:c5:8d:5a:33:51:42:61:fb:c8:2a:c9:27:
e9:02:7f:68:21:e6:4b:4d:7b:01:e1:88:3c:0e:00:
a6:a7:40:7c:5c:a2:b8:ff:58:38:57:5a:02:eb:47:
20:48:96:1e:00:86:5f:ba:12:bd:bb:7e:32:4d:fb:
39:f3:fe:84:fa:99:f8:e5:04:e8:38:90:66:47:3a:
d9:23:e4:09:59:a9:3a:05:65:fb:74:e4:b2:0a:3f:
43:62:da:0b:f0:5e:2f:1d:9d:d5:5c:0b:3d:f0:71:
08:ab:a7:4d:a0:9f:76:2d:40:ec:3f:14:76:b6:0c:
62:47:58:0a:82:59:43:4e:b1:bf:e9:e9:98:1b:99:
e9:ba:0f:23:4b:98:46:56:e9:27:83:33:f1:5f:5d:
a3:2d:5e:f2:a2:61:46:1e:ca:77:1e:ab:27:a1:df:
79:07:43:8d:bc:0e:59:d0:cd:d2:b7:3f:1e:4b:ee:
7e:6d:6f:f6:f2:1d:6f:ba:84:c4:8c:97:15:df:ac:
63:36:3f:0a:aa:1a:23:95:ff:67:41:9a:1d:48:95:
90:e7:b0:71:f7:4e:af:85:25:0c:77:15:f0:46:3e:
bb:f7:9e:95:87:3b:ae:75:df:07:31:8e:87:ba:e0:
49:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1D:BD:9B:2A:42:1E:C9:1E:76:D5:5F:F4:DD:43:76:24:57:BF:B9:F6
X509v3 Authority Key Identifier:
keyid:38:31:E5:D9:8C:EE:E3:4D:78:3A:51:CC:CB:6E:E4:DC:4E:E4:37:93
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ODHl2Yzu4014OlHMy27k3E7kN5M.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cb/f41e52-0f25-4cc0-ac87-352cd296ebb8/1/ODHl2Yzu4014OlHMy27k3E7kN5M.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cb/f41e52-0f25-4cc0-ac87-352cd296ebb8/1/ODHl2Yzu4014OlHMy27k3E7kN5M.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b1:a9:bf:ef:ea:79:21:f4:2a:05:f4:92:0a:45:d6:35:1f:e4:
23:90:90:15:6f:af:d5:83:fc:b6:a7:33:0a:e0:29:1f:e2:4a:
26:37:c0:22:91:07:14:5b:0f:86:61:94:e4:c2:c1:a2:59:03:
4a:4d:21:52:33:cb:90:f4:3d:8b:00:16:c7:b6:1e:18:92:b4:
5c:68:de:f1:82:f0:af:44:cb:76:0a:aa:d7:d7:46:00:10:42:
14:56:e5:22:0e:14:51:29:f4:92:57:2c:31:7b:f5:58:59:b1:
e0:ca:67:33:45:70:28:1b:ff:20:e5:70:67:81:39:89:14:ff:
dd:98:00:fe:50:b7:7f:f6:b4:0f:56:97:86:06:6c:af:b7:ef:
b5:7b:b4:e7:ae:e6:91:e1:e0:92:2f:28:73:d6:ca:3d:09:03:
80:da:18:f8:06:06:29:41:08:e2:83:c9:1b:39:51:8a:ea:7b:
03:43:72:81:a2:14:6f:d3:a0:d1:10:2c:6b:cd:a2:9c:51:19:
5f:0f:e0:42:8a:23:4c:2a:91:60:cc:d5:f6:27:57:20:62:ae:
5f:7d:99:74:40:4d:0f:25:ff:fc:5a:79:82:4b:76:80:ea:5e:
fe:42:a8:03:1a:a6:ae:14:48:50:54:71:34:17:bf:83:3d:6f:
ee:d1:fa:f4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 5 20:27:27 2025 by rpki-client