Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1e/37bdb7-9b93-46ab-9a15-42a48dbc2521/1/OEiIXJcC6sHz0BJj5tPlREnuIVQ.mft
File: OEiIXJcC6sHz0BJj5tPlREnuIVQ.mft (raw, json)
Hash identifier: cCesQ3n1iPDIjhC/B6bzZfYx8xkLbxp0LtobA9u8nMQ=
Subject key identifier: B1:00:5D:CA:69:80:01:8D:9E:B1:DE:64:0C:99:FE:15:2B:BD:E5:83
Authority key identifier: 38:48:88:5C:97:02:EA:C1:F3:D0:12:63:E6:D3:E5:44:49:EE:21:54
Certificate issuer: /CN=3848885c9702eac1f3d01263e6d3e54449ee2154
Certificate serial: 01967F0F86A2A88A001F79EF2C764A42DCAB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OEiIXJcC6sHz0BJj5tPlREnuIVQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1e/37bdb7-9b93-46ab-9a15-42a48dbc2521/1/OEiIXJcC6sHz0BJj5tPlREnuIVQ.mft
Manifest number: 0E79
Signing time: Tue 29 Apr 2025 01:00:45 +0000
Manifest this update: Tue 29 Apr 2025 01:00:45 +0000
Manifest next update: Wed 30 Apr 2025 01:00:45 +0000
Files and hashes: 1: OEiIXJcC6sHz0BJj5tPlREnuIVQ.crl (hash: 455N78GgyoqeT1f3P9C5ijhXDkfFthW01/IBBWL8cmg=)
2: mVMhaZyReFl--kv_RJ_-OuFBGYU.roa (hash: IwLGaJq3OYCljCCB7S0knCQn4hKuFoxDOc6G4aTbSQA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1e/37bdb7-9b93-46ab-9a15-42a48dbc2521/1/OEiIXJcC6sHz0BJj5tPlREnuIVQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/1e/37bdb7-9b93-46ab-9a15-42a48dbc2521/1/OEiIXJcC6sHz0BJj5tPlREnuIVQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/OEiIXJcC6sHz0BJj5tPlREnuIVQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 30 Apr 2025 00:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:7f:0f:86:a2:a8:8a:00:1f:79:ef:2c:76:4a:42:dc:ab
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3848885c9702eac1f3d01263e6d3e54449ee2154
Validity
Not Before: Apr 29 01:00:45 2025 GMT
Not After : Apr 30 01:00:45 2025 GMT
Subject: CN=b1005dca6980018d9eb1de640c99fe152bbde583
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:c8:74:d3:b1:bb:0a:d8:04:a4:6c:9e:22:08:
6a:59:5b:d3:02:33:ac:45:03:92:fb:3c:71:87:87:
5f:66:19:e5:39:29:87:3b:92:d4:86:ef:9c:70:b9:
f9:93:f8:f9:60:20:ef:ab:e8:86:cc:c8:ae:1c:cc:
67:e2:13:f0:17:62:14:d8:17:65:b5:78:32:9f:7c:
59:64:82:20:43:d7:fb:ae:41:8f:28:6a:3b:02:d5:
7d:2e:db:c6:63:73:65:27:05:39:2f:73:a5:d1:10:
d3:24:5b:0f:fe:b4:8c:c7:59:3c:b4:c9:66:ec:32:
cc:9f:8c:4d:41:b3:72:c9:29:dc:e2:ae:73:a3:e7:
2f:dd:99:56:6c:f0:9b:b2:c0:55:bf:8f:d9:be:a1:
7c:9d:f2:5a:b0:13:95:c2:83:14:75:ef:4e:59:8c:
d3:30:9e:15:6b:68:a9:56:6a:47:e9:d9:57:a6:ab:
a4:a8:4a:20:90:5a:90:a0:60:f6:c0:b6:1c:50:91:
e8:30:74:30:90:1c:f1:94:96:3c:a2:b8:eb:62:59:
b7:49:e7:e2:6c:99:4f:c4:9f:24:c7:2b:61:40:43:
71:00:6a:05:d1:a2:3b:e9:ad:b0:40:c2:71:80:fc:
c9:ef:07:06:cf:ca:4b:9f:ff:93:16:d1:bb:b4:cc:
f4:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B1:00:5D:CA:69:80:01:8D:9E:B1:DE:64:0C:99:FE:15:2B:BD:E5:83
X509v3 Authority Key Identifier:
keyid:38:48:88:5C:97:02:EA:C1:F3:D0:12:63:E6:D3:E5:44:49:EE:21:54
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OEiIXJcC6sHz0BJj5tPlREnuIVQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/37bdb7-9b93-46ab-9a15-42a48dbc2521/1/OEiIXJcC6sHz0BJj5tPlREnuIVQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/37bdb7-9b93-46ab-9a15-42a48dbc2521/1/OEiIXJcC6sHz0BJj5tPlREnuIVQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
85:b3:c8:ec:bf:ce:5c:4a:eb:9e:b0:51:09:05:09:41:5d:2d:
64:99:cc:b8:9b:9d:3e:08:02:3f:50:07:c6:8e:e9:29:9f:1b:
02:c2:af:0c:96:92:a5:f9:17:da:58:96:b3:3e:13:99:a5:a8:
85:e0:54:ad:55:be:fd:7b:43:6a:fc:77:1b:84:48:b6:9d:bf:
b4:67:f8:a8:10:4a:ef:36:0b:76:57:43:ac:71:71:19:74:d4:
6d:be:e3:e1:9e:ce:9b:d3:20:3c:d8:9c:2e:22:ad:b7:f3:1f:
25:b4:c0:82:82:7f:0d:98:46:19:66:5b:9f:3c:a7:cd:cd:15:
16:ad:0e:52:02:64:80:ed:a5:89:a8:0a:24:80:e5:73:7b:c2:
7d:f9:cd:2c:a9:37:3b:c8:62:c5:3c:fc:a7:bb:68:47:5a:6a:
4d:6a:89:07:ba:f2:d3:89:5c:86:21:1f:b8:49:1a:f5:97:90:
38:29:3c:15:f4:3b:5e:c8:c0:eb:20:24:3c:18:3d:6d:da:9e:
90:72:01:69:b5:b7:70:de:2d:fe:1f:77:fd:c0:bc:a2:c6:04:
5e:e6:3e:94:b9:bf:64:97:b1:fe:d1:0c:03:d3:26:59:37:81:
93:8b:2c:94:9f:cd:73:43:c6:74:f4:30:d7:d6:a6:ac:72:80:
25:a4:37:cf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 29 05:40:58 2025 by rpki-client