Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fa/f4dc76-dcd2-475b-9e68-c22395ce1be4/1/OPdGuBrsAONrm8t6CGQqZOkT2ls.mft
File: OPdGuBrsAONrm8t6CGQqZOkT2ls.mft (raw, json)
Hash identifier: uFPe847qoMiurPCfkOtDBqzt7DR/NIYzOoSZM+LnA5Y=
Subject key identifier: F0:7A:8D:A6:4A:5B:C5:1B:34:52:26:9F:86:4C:A8:65:3B:02:2C:BD
Authority key identifier: 38:F7:46:B8:1A:EC:00:E3:6B:9B:CB:7A:08:64:2A:64:E9:13:DA:5B
Certificate issuer: /CN=38f746b81aec00e36b9bcb7a08642a64e913da5b
Certificate serial: 0196C8DFCDDEBC022B2943FACFD3CC36112B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OPdGuBrsAONrm8t6CGQqZOkT2ls.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fa/f4dc76-dcd2-475b-9e68-c22395ce1be4/1/OPdGuBrsAONrm8t6CGQqZOkT2ls.mft
Manifest number: 0B3D
Signing time: Tue 13 May 2025 09:00:32 +0000
Manifest this update: Tue 13 May 2025 09:00:32 +0000
Manifest next update: Wed 14 May 2025 09:00:32 +0000
Files and hashes: 1: MMlvH8atmySzJI7kLxLVPyyRhLQ.roa (hash: bccMFVINTXPOtpxYZS3LUeW2cuJPhCPq33JXorYAWpk=)
2: OPdGuBrsAONrm8t6CGQqZOkT2ls.crl (hash: KZxHiOjXlvEj0sBwqe5T6l7NKDNMrJFyb7evejwI3CE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fa/f4dc76-dcd2-475b-9e68-c22395ce1be4/1/OPdGuBrsAONrm8t6CGQqZOkT2ls.crl
rsync://rpki.ripe.net/repository/DEFAULT/fa/f4dc76-dcd2-475b-9e68-c22395ce1be4/1/OPdGuBrsAONrm8t6CGQqZOkT2ls.mft
rsync://rpki.ripe.net/repository/DEFAULT/OPdGuBrsAONrm8t6CGQqZOkT2ls.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 14 May 2025 09:00:32 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:c8:df:cd:de:bc:02:2b:29:43:fa:cf:d3:cc:36:11:2b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=38f746b81aec00e36b9bcb7a08642a64e913da5b
Validity
Not Before: May 13 09:00:32 2025 GMT
Not After : May 14 09:00:32 2025 GMT
Subject: CN=f07a8da64a5bc51b3452269f864ca8653b022cbd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:11:ed:23:55:1a:02:57:8d:a0:44:bd:71:c8:
c2:5c:19:62:90:14:b9:0d:7a:e5:86:53:1c:61:44:
75:fd:c6:3a:86:a7:38:70:e8:ca:5e:6c:29:4a:7a:
53:e6:56:8e:fc:0d:be:9d:33:40:3d:2a:ed:b4:8a:
93:47:79:9a:88:e1:e6:72:2a:74:28:a4:71:44:09:
c5:b3:d8:cf:5d:7c:82:f7:b0:a6:09:6d:d5:6f:7d:
9c:f4:0a:ed:72:35:32:7c:b3:99:0d:a1:37:61:dc:
28:7b:4e:2f:3e:b2:52:d6:d4:78:8a:4d:d6:c1:65:
c8:53:15:4c:dc:96:4a:ea:d0:9a:5b:d2:2a:4c:91:
ab:c1:2c:9c:16:d5:5b:44:56:a8:9d:db:48:43:53:
79:71:37:7d:41:45:77:62:1e:6c:45:43:a0:72:f3:
57:6a:e1:bb:1b:0b:48:2d:db:21:3b:b1:36:2e:83:
9c:b2:b7:02:b3:eb:ab:15:5b:bc:b1:14:0e:06:b3:
a0:83:0b:fb:28:14:d6:e6:12:87:97:5f:56:3a:a2:
d8:bf:d8:6a:07:16:6d:01:b8:64:a6:01:6c:42:4e:
41:15:19:3b:2d:12:58:cf:55:b9:bd:05:3f:fe:e5:
cf:4f:8d:5c:0b:a5:56:c9:b1:e9:ea:d1:7b:39:2a:
3b:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F0:7A:8D:A6:4A:5B:C5:1B:34:52:26:9F:86:4C:A8:65:3B:02:2C:BD
X509v3 Authority Key Identifier:
keyid:38:F7:46:B8:1A:EC:00:E3:6B:9B:CB:7A:08:64:2A:64:E9:13:DA:5B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OPdGuBrsAONrm8t6CGQqZOkT2ls.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/f4dc76-dcd2-475b-9e68-c22395ce1be4/1/OPdGuBrsAONrm8t6CGQqZOkT2ls.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/f4dc76-dcd2-475b-9e68-c22395ce1be4/1/OPdGuBrsAONrm8t6CGQqZOkT2ls.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0b:b3:9b:4a:9f:4c:9e:a6:71:9d:df:08:95:f7:c6:27:bc:d2:
55:8e:38:fe:09:9b:25:2a:37:8d:7f:63:2d:be:a8:0e:0e:00:
68:9d:ac:36:ae:51:3a:de:c9:39:57:af:bc:85:ef:f1:8f:ab:
7d:27:e6:6f:92:f8:8f:e8:34:c1:02:07:18:6e:cd:54:ab:6e:
45:49:40:36:09:6f:79:8d:b7:bd:77:19:95:d0:25:70:d9:d8:
19:89:4f:65:57:8d:1c:27:5b:3d:92:94:01:98:25:31:cc:03:
51:35:ce:63:0c:f6:a8:47:92:32:3b:1b:6f:bb:7a:f7:29:e6:
1f:c2:67:8a:89:82:f6:dd:61:87:f1:0c:ad:b9:c5:59:5d:19:
d3:20:56:b9:2e:26:fd:da:c7:23:34:e5:83:d9:28:0c:fb:e3:
8a:3e:03:ab:6d:72:e4:13:a9:17:08:90:3b:21:da:78:36:a1:
9d:f8:f3:79:23:5e:e0:fa:94:08:2a:be:38:a5:3f:1e:82:ff:
8b:5d:10:d1:75:13:51:11:0a:1e:78:5a:bb:f0:38:d1:d5:3b:
38:9f:86:55:50:b9:4a:07:a2:bd:0c:b2:01:04:75:27:ee:0e:
b5:27:8d:c9:2d:eb:6d:ef:87:ee:e3:35:1e:3d:4d:1d:6a:04:
95:c0:15:78
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 13 18:05:29 2025 by rpki-client