Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0d/fffba4-2efa-465f-af96-abf837ace8e4/1/Ohk1s8vCUn6vFn1psgeNM-TE2iA.mft
File: Ohk1s8vCUn6vFn1psgeNM-TE2iA.mft (raw, json)
Hash identifier: 0E07OHDvExDXfMzR9m/ZJctIXzhO7Z0qYYmn5fAiGdQ=
Subject key identifier: 1C:C7:99:F7:E7:A5:2E:2F:DE:08:5E:2F:FF:FB:09:39:75:43:E3:75
Authority key identifier: 3A:19:35:B3:CB:C2:52:7E:AF:16:7D:69:B2:07:8D:33:E4:C4:DA:20
Certificate issuer: /CN=3a1935b3cbc2527eaf167d69b2078d33e4c4da20
Certificate serial: 0196797B5558FFF88FA344B69B61AAE4BD57
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Ohk1s8vCUn6vFn1psgeNM-TE2iA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0d/fffba4-2efa-465f-af96-abf837ace8e4/1/Ohk1s8vCUn6vFn1psgeNM-TE2iA.mft
Manifest number: 0657
Signing time: Sun 27 Apr 2025 23:00:47 +0000
Manifest this update: Sun 27 Apr 2025 23:00:47 +0000
Manifest next update: Mon 28 Apr 2025 23:00:47 +0000
Files and hashes: 1: M82sfYNUsyqK13nZZfstvwDd7Fs.roa (hash: Pwd9phO+f2VaYBcGPbgT8icjGcqdGdD4Q6fe+fixav0=)
2: Ohk1s8vCUn6vFn1psgeNM-TE2iA.crl (hash: XHjzVtIwDr0n9bsYMvKhlQmjHqidBK+kbdjvQfUHpIU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0d/fffba4-2efa-465f-af96-abf837ace8e4/1/Ohk1s8vCUn6vFn1psgeNM-TE2iA.crl
rsync://rpki.ripe.net/repository/DEFAULT/0d/fffba4-2efa-465f-af96-abf837ace8e4/1/Ohk1s8vCUn6vFn1psgeNM-TE2iA.mft
rsync://rpki.ripe.net/repository/DEFAULT/Ohk1s8vCUn6vFn1psgeNM-TE2iA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Apr 2025 23:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:79:7b:55:58:ff:f8:8f:a3:44:b6:9b:61:aa:e4:bd:57
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3a1935b3cbc2527eaf167d69b2078d33e4c4da20
Validity
Not Before: Apr 27 23:00:47 2025 GMT
Not After : Apr 28 23:00:47 2025 GMT
Subject: CN=1cc799f7e7a52e2fde085e2ffffb09397543e375
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:75:20:92:5d:98:2c:b8:5f:c5:f0:0b:37:6a:
15:b6:03:a8:41:ea:b5:dc:00:3f:f8:a1:25:b5:25:
02:bb:04:2e:bb:ee:4d:80:6a:90:4d:77:a9:ef:e3:
86:b1:d0:92:ff:48:34:34:de:fa:91:90:69:d5:2e:
07:f9:3f:63:b1:79:82:e3:d3:8f:b2:5e:db:09:9a:
3b:96:96:d7:51:3d:6a:89:e2:30:b5:cd:e7:b5:35:
1c:b8:17:71:1e:3c:53:f7:1d:25:99:6d:c8:19:a6:
ac:71:17:48:af:18:da:3e:b5:63:e3:83:54:99:6b:
ba:29:b2:32:9f:51:09:6c:e3:7c:fc:75:1d:97:a9:
ce:88:63:bb:d8:6c:49:e5:9a:da:4e:dd:e8:1b:08:
49:d1:cf:71:86:bc:3d:9c:54:68:97:f0:32:a0:91:
09:2c:6d:3e:3c:c8:b8:ec:ec:4a:7e:d7:7e:34:36:
60:10:5b:7f:e2:58:19:2e:0b:73:17:0f:1f:d1:56:
22:8b:0a:60:96:26:6a:89:8d:fd:d1:f9:62:2b:89:
49:10:e0:c8:c7:fd:ea:41:50:01:59:56:7e:f7:13:
03:2a:32:7d:8b:ec:27:19:0d:93:4f:0c:2a:71:d9:
20:e6:98:da:d3:e0:dc:3c:dd:31:ad:63:94:af:a7:
c7:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1C:C7:99:F7:E7:A5:2E:2F:DE:08:5E:2F:FF:FB:09:39:75:43:E3:75
X509v3 Authority Key Identifier:
keyid:3A:19:35:B3:CB:C2:52:7E:AF:16:7D:69:B2:07:8D:33:E4:C4:DA:20
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Ohk1s8vCUn6vFn1psgeNM-TE2iA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/fffba4-2efa-465f-af96-abf837ace8e4/1/Ohk1s8vCUn6vFn1psgeNM-TE2iA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/fffba4-2efa-465f-af96-abf837ace8e4/1/Ohk1s8vCUn6vFn1psgeNM-TE2iA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0d:d3:81:02:dc:33:95:c4:1a:0c:6e:0d:88:e1:81:17:0e:e3:
ed:88:91:4a:27:bf:d7:d3:65:ad:30:0e:cf:1a:92:55:58:4e:
02:66:05:7e:cb:f9:43:9a:08:bb:b6:b7:9a:44:fb:85:3d:4f:
98:15:e8:9b:dc:06:14:67:cf:6d:94:a5:b5:f6:6f:e3:ff:fb:
0d:b5:fc:ae:7c:7e:29:08:2a:72:50:bc:39:c1:14:c1:b0:67:
11:81:b1:34:59:6f:f0:0b:e2:a5:c4:66:8c:a2:8c:67:85:dd:
6d:93:9b:ff:cd:88:8a:73:d7:6f:77:52:d8:97:09:b8:cc:34:
3f:ca:07:4d:9b:cc:a4:e1:26:f9:83:9d:92:79:87:ae:29:67:
07:00:ae:fa:ec:45:ab:3a:96:4f:7f:81:4d:5c:d9:f1:e5:ee:
32:43:21:dd:a5:a1:17:9f:80:ca:e6:a2:16:c1:0d:8d:91:94:
b9:b2:76:cf:61:3f:2f:48:fd:ff:3a:03:8b:68:db:8d:c0:30:
6c:09:55:cc:af:fb:e2:89:e9:c7:eb:8d:7c:be:d1:83:cb:dc:
ec:39:8b:d8:d8:0c:53:fe:4b:ef:0b:64:0f:1b:76:4a:ad:f7:
20:2f:78:c1:8f:79:bf:5d:3e:41:9f:f5:cf:c2:a5:bd:60:b5:
e6:62:7a:f3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 08:31:18 2025 by rpki-client