Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/17/784601-0461-4753-8a52-e80a05e39f4b/1/OJbZ85IBpJ-hNpWC4Y8aK7llsoM.mft
File: OJbZ85IBpJ-hNpWC4Y8aK7llsoM.mft (raw, json)
Hash identifier: t12j2Mn96WLgRNlwIYWKiRLF8a9ZnkYWIG5ool0dSyw=
Subject key identifier: BB:2C:9C:14:55:04:11:C3:20:B6:A1:1B:23:FB:C4:C5:A6:88:35:58
Authority key identifier: 38:96:D9:F3:92:01:A4:9F:A1:36:95:82:E1:8F:1A:2B:B9:65:B2:83
Certificate issuer: /CN=3896d9f39201a49fa1369582e18f1a2bb965b283
Certificate serial: 019677C3E0313E7A175AB4A342527FE12E6D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OJbZ85IBpJ-hNpWC4Y8aK7llsoM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/17/784601-0461-4753-8a52-e80a05e39f4b/1/OJbZ85IBpJ-hNpWC4Y8aK7llsoM.mft
Manifest number: 0731
Signing time: Sun 27 Apr 2025 15:00:47 +0000
Manifest this update: Sun 27 Apr 2025 15:00:47 +0000
Manifest next update: Mon 28 Apr 2025 15:00:47 +0000
Files and hashes: 1: OJbZ85IBpJ-hNpWC4Y8aK7llsoM.crl (hash: LRoc33DbmkNvWw8tq1AzbYbSomsn/WqIG4Fxj4RNcX8=)
2: cNiza7IEiNMNBNBagOrbk4czUFI.roa (hash: cxXOTzwPl8qSVNIA1za+AwOz7dJ4d9CdZy9RaFccNUA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/17/784601-0461-4753-8a52-e80a05e39f4b/1/OJbZ85IBpJ-hNpWC4Y8aK7llsoM.crl
rsync://rpki.ripe.net/repository/DEFAULT/17/784601-0461-4753-8a52-e80a05e39f4b/1/OJbZ85IBpJ-hNpWC4Y8aK7llsoM.mft
rsync://rpki.ripe.net/repository/DEFAULT/OJbZ85IBpJ-hNpWC4Y8aK7llsoM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Apr 2025 14:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:77:c3:e0:31:3e:7a:17:5a:b4:a3:42:52:7f:e1:2e:6d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3896d9f39201a49fa1369582e18f1a2bb965b283
Validity
Not Before: Apr 27 15:00:47 2025 GMT
Not After : Apr 28 15:00:47 2025 GMT
Subject: CN=bb2c9c14550411c320b6a11b23fbc4c5a6883558
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:2a:84:d8:59:4c:4e:78:b2:c8:b5:f5:92:57:
4a:4d:60:64:da:ab:13:46:29:bd:d8:4c:2c:4d:f8:
33:e3:40:4c:43:70:c1:63:bf:b6:11:d9:b3:54:47:
72:d5:aa:5c:e2:30:10:36:dc:5c:b4:88:e3:e7:bd:
38:98:43:62:ac:f4:df:59:d1:83:01:64:dd:07:d3:
ad:3b:87:8e:93:b3:25:1f:82:b0:a4:1b:36:8b:99:
ca:ae:e4:42:bc:11:69:59:ad:3c:cf:d6:8d:10:2c:
8d:c7:96:d6:d9:2f:64:3f:e3:7e:49:db:f4:76:10:
74:5f:9d:89:18:ad:30:74:97:24:e0:f4:b0:f4:26:
83:96:93:f4:f3:76:2e:92:f9:df:b7:05:12:9f:27:
58:5b:58:bf:64:7e:55:fc:48:3d:df:ac:82:4f:ab:
a5:15:4e:fb:4c:32:b9:ba:09:9f:80:d2:ae:19:55:
6e:fd:93:67:22:83:1a:16:5d:29:b3:9e:64:ac:ab:
b0:15:fc:78:10:09:54:15:ea:12:a2:f2:c9:6f:51:
78:5c:2b:43:09:47:3d:ba:ec:76:b7:62:02:37:b1:
89:16:2d:8d:78:af:c0:04:78:ca:e6:3d:81:b8:90:
03:2e:fc:6d:fe:de:a6:f9:5f:7a:b1:76:54:04:ad:
fb:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BB:2C:9C:14:55:04:11:C3:20:B6:A1:1B:23:FB:C4:C5:A6:88:35:58
X509v3 Authority Key Identifier:
keyid:38:96:D9:F3:92:01:A4:9F:A1:36:95:82:E1:8F:1A:2B:B9:65:B2:83
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OJbZ85IBpJ-hNpWC4Y8aK7llsoM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/17/784601-0461-4753-8a52-e80a05e39f4b/1/OJbZ85IBpJ-hNpWC4Y8aK7llsoM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/17/784601-0461-4753-8a52-e80a05e39f4b/1/OJbZ85IBpJ-hNpWC4Y8aK7llsoM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
64:d6:37:9d:6b:f1:88:58:d2:d8:35:a2:db:c5:db:5a:6c:2c:
47:1d:fc:af:73:21:b4:74:f2:fd:fa:c9:c0:7d:e0:bf:c1:43:
01:f4:c1:0e:53:f3:1c:6b:8b:48:07:7d:b4:ef:75:4b:6b:f8:
d8:ac:b4:b3:60:6e:b3:4d:7d:08:73:18:b2:a4:b1:15:5a:f0:
dc:66:db:c5:1c:04:56:67:60:f0:9c:21:c9:06:46:ef:de:04:
8e:d6:0e:ba:2b:ba:e4:89:bb:7a:5e:1e:d7:01:b3:e4:ad:bc:
cc:19:70:64:8c:ae:56:2a:84:06:6c:c1:76:42:20:ef:eb:60:
46:b2:53:09:b1:1d:fa:09:1d:e5:2f:de:31:65:85:69:3d:12:
04:e5:5f:8c:d4:65:d5:dc:85:4d:a9:b5:0d:8b:26:d8:3b:61:
e4:ea:4c:d6:bc:dc:c3:65:d6:a4:3d:56:19:24:62:73:1b:fe:
41:a0:8f:f8:f0:3d:b1:e2:98:5b:fa:e7:24:33:15:a4:46:8b:
f9:5b:e9:d8:f3:e9:cb:80:df:68:cd:ae:29:8a:3d:0b:be:b0:
db:6c:a9:a9:72:4f:5a:b1:99:e9:30:76:c3:e3:70:53:e7:e4:
dd:a4:ea:6c:de:02:02:c7:31:b8:e1:96:ac:31:35:35:7f:17:
8a:e7:9e:be
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 18:31:12 2025 by rpki-client