Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1c/897876-da72-40bc-8d5c-7ca9b8e91ac7/1/Od2goAlTA6kfOOQ6tNN7YZw76h0.mft
File: Od2goAlTA6kfOOQ6tNN7YZw76h0.mft (raw, json)
Hash identifier: oqJi1VSMIJj9nnRtM4YN6qPwVi0D3NuTo6Ls05sReP0=
Subject key identifier: FE:36:99:B1:87:86:A2:9A:BB:E7:6B:E6:3F:CE:AC:20:03:1C:8A:4C
Authority key identifier: 39:DD:A0:A0:09:53:03:A9:1F:38:E4:3A:B4:D3:7B:61:9C:3B:EA:1D
Certificate issuer: /CN=39dda0a0095303a91f38e43ab4d37b619c3bea1d
Certificate serial: 01967F7D6C958442F0020BBF6DFC240442A5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Od2goAlTA6kfOOQ6tNN7YZw76h0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1c/897876-da72-40bc-8d5c-7ca9b8e91ac7/1/Od2goAlTA6kfOOQ6tNN7YZw76h0.mft
Manifest number: 1514
Signing time: Tue 29 Apr 2025 03:00:48 +0000
Manifest this update: Tue 29 Apr 2025 03:00:48 +0000
Manifest next update: Wed 30 Apr 2025 03:00:48 +0000
Files and hashes: 1: EzYELBbdECMUd5jL00V2yecSQYs.roa (hash: GVtwH5pzCQ3ejlHuG6nu4gzTRA6JPrykk4d+btWS9mI=)
2: Od2goAlTA6kfOOQ6tNN7YZw76h0.crl (hash: +iEeWCHl9nWSeielZ3TGHRRVBUhbXOhXKCk/pyftVJg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1c/897876-da72-40bc-8d5c-7ca9b8e91ac7/1/Od2goAlTA6kfOOQ6tNN7YZw76h0.crl
rsync://rpki.ripe.net/repository/DEFAULT/1c/897876-da72-40bc-8d5c-7ca9b8e91ac7/1/Od2goAlTA6kfOOQ6tNN7YZw76h0.mft
rsync://rpki.ripe.net/repository/DEFAULT/Od2goAlTA6kfOOQ6tNN7YZw76h0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 30 Apr 2025 00:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:7f:7d:6c:95:84:42:f0:02:0b:bf:6d:fc:24:04:42:a5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=39dda0a0095303a91f38e43ab4d37b619c3bea1d
Validity
Not Before: Apr 29 03:00:48 2025 GMT
Not After : Apr 30 03:00:48 2025 GMT
Subject: CN=fe3699b18786a29abbe76be63fceac20031c8a4c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:3e:19:45:ba:1e:6f:84:83:f0:01:d3:4e:dd:
b6:3b:40:ea:ba:a3:49:54:01:48:99:ee:4f:21:d8:
e6:48:65:67:80:ad:2c:84:2d:0a:05:06:99:44:68:
fa:8f:c2:8f:4e:b3:91:d7:8e:a1:6e:44:30:d9:5d:
1e:25:d0:b4:58:72:3e:42:ae:3a:1f:60:e4:b7:e6:
99:dc:82:fa:26:1a:20:63:25:20:0c:b3:b1:a5:2b:
41:a6:f1:8c:68:ef:d6:4a:a8:24:a9:6f:96:53:19:
44:26:f5:30:0d:23:83:a6:57:53:96:46:95:9a:40:
61:b9:88:33:fc:77:c5:9d:bf:33:71:2f:28:6d:e2:
43:19:32:37:a7:56:b3:9a:de:24:8e:37:26:83:c1:
38:ca:1f:85:d2:e0:dd:9e:64:93:93:3f:93:79:33:
92:e1:2f:14:9e:49:5f:df:8a:ee:8a:48:d8:dd:95:
9b:ad:ad:a1:d5:b2:6a:49:47:b4:c0:84:85:b4:7b:
ca:b7:b3:3b:aa:c3:89:a8:97:8c:c1:4d:da:21:e6:
1e:f5:e1:9d:fa:df:57:1a:dc:28:b4:eb:1d:8c:6f:
68:13:4c:80:60:2b:1a:58:3e:46:25:c8:17:3d:17:
73:53:38:d9:f7:bb:12:51:84:f1:2d:2e:62:0b:13:
a3:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FE:36:99:B1:87:86:A2:9A:BB:E7:6B:E6:3F:CE:AC:20:03:1C:8A:4C
X509v3 Authority Key Identifier:
keyid:39:DD:A0:A0:09:53:03:A9:1F:38:E4:3A:B4:D3:7B:61:9C:3B:EA:1D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Od2goAlTA6kfOOQ6tNN7YZw76h0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/897876-da72-40bc-8d5c-7ca9b8e91ac7/1/Od2goAlTA6kfOOQ6tNN7YZw76h0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/897876-da72-40bc-8d5c-7ca9b8e91ac7/1/Od2goAlTA6kfOOQ6tNN7YZw76h0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
cd:4c:1e:19:40:46:65:1b:05:e2:af:de:b3:de:7f:6a:de:40:
e9:40:01:ed:8c:86:f7:5d:84:54:46:9f:1d:cb:ec:3a:9b:58:
59:27:01:18:d8:b3:c2:3c:ad:fb:74:5e:ae:4c:83:a3:70:b2:
c3:a5:7e:b4:22:9d:32:e8:cb:8d:a9:89:74:38:c9:7e:e8:54:
b6:18:a8:40:5b:8c:62:a0:46:d3:aa:ca:47:b2:db:89:c3:93:
de:f6:36:ba:68:01:c2:f9:f8:3f:d6:06:e1:58:f1:83:56:1c:
55:47:45:0c:11:42:52:cb:1c:69:e6:b8:ed:07:17:fb:6a:25:
21:50:9d:4a:63:b6:2c:8a:df:69:10:6d:5b:3e:a7:ce:0a:a8:
9d:b3:ca:bf:25:f8:86:02:3a:c2:33:74:6a:04:13:1c:9c:23:
e6:29:a9:23:ef:d8:76:5a:a2:a8:1d:3a:bc:43:0f:ef:7c:29:
c4:3f:31:11:cc:7a:f4:68:c8:4f:95:9d:9a:17:62:2f:40:17:
55:57:e1:7d:19:80:9d:a5:fe:62:ea:7b:39:6e:dd:ec:81:9a:
69:01:29:8f:12:bf:96:eb:d3:ff:b6:3e:c8:25:32:b5:6a:50:
f3:da:4e:ba:4e:32:8d:59:3e:d4:33:ed:af:0b:95:64:3a:59:
48:df:ec:fe
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 29 09:39:16 2025 by rpki-client