Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2a/69a09f-5809-4656-b355-146f254ac131/1/f0OdlCQm_Gc7J5zJirNf29fql_U.mft
File: f0OdlCQm_Gc7J5zJirNf29fql_U.mft (raw, json)
Hash identifier: 7z9tojaLy0USeAn/dJhHg5fnmkoAYYeBGHhsTJvl1Ws=
Subject key identifier: A1:46:AD:E3:6C:7E:15:0E:C7:33:E6:91:CD:8D:D8:1F:1E:2E:D1:94
Authority key identifier: 7F:43:9D:94:24:26:FC:67:3B:27:9C:C9:8A:B3:5F:DB:D7:EA:97:F5
Certificate issuer: /CN=7f439d942426fc673b279cc98ab35fdbd7ea97f5
Certificate serial: 01967EA1BFC8D406544888B3849F08FE508F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/f0OdlCQm_Gc7J5zJirNf29fql_U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2a/69a09f-5809-4656-b355-146f254ac131/1/f0OdlCQm_Gc7J5zJirNf29fql_U.mft
Manifest number: 10AB
Signing time: Mon 28 Apr 2025 23:00:51 +0000
Manifest this update: Mon 28 Apr 2025 23:00:51 +0000
Manifest next update: Tue 29 Apr 2025 23:00:51 +0000
Files and hashes: 1: a7d8hNkNtlXljnH2m0docaTzG3k.roa (hash: q9e8wKrMSBg+y8Ryx5GLGY7FYsS8+BQXj+N/+pi34ag=)
2: f0OdlCQm_Gc7J5zJirNf29fql_U.crl (hash: nLXrlL/MAj+pTEKJC1opBqI9Uy9dxUoLYByJgjDV8kY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2a/69a09f-5809-4656-b355-146f254ac131/1/f0OdlCQm_Gc7J5zJirNf29fql_U.crl
rsync://rpki.ripe.net/repository/DEFAULT/2a/69a09f-5809-4656-b355-146f254ac131/1/f0OdlCQm_Gc7J5zJirNf29fql_U.mft
rsync://rpki.ripe.net/repository/DEFAULT/f0OdlCQm_Gc7J5zJirNf29fql_U.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 29 Apr 2025 22:36:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:7e:a1:bf:c8:d4:06:54:48:88:b3:84:9f:08:fe:50:8f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7f439d942426fc673b279cc98ab35fdbd7ea97f5
Validity
Not Before: Apr 28 23:00:51 2025 GMT
Not After : Apr 29 23:00:51 2025 GMT
Subject: CN=a146ade36c7e150ec733e691cd8dd81f1e2ed194
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:ac:34:44:75:13:60:0d:ed:35:27:2d:08:48:
59:be:f7:56:bb:d7:ea:26:11:9a:cf:f1:1b:e2:fa:
35:68:93:b9:ec:ae:36:89:a1:ab:e0:84:9f:81:42:
df:79:04:36:b0:86:09:ae:f2:7f:e4:72:80:3a:ca:
41:9f:0d:91:5b:6a:21:92:bd:f4:a5:bc:94:a7:65:
41:49:18:c3:22:22:4b:2c:33:f9:6b:7b:5b:88:d3:
da:14:d1:53:a6:ac:7d:a6:50:df:2f:37:ea:21:2c:
8b:a8:81:72:97:ee:2b:99:7d:eb:50:94:f9:57:5a:
07:98:8b:6b:c4:28:39:a3:86:04:15:e3:bb:7a:21:
14:0f:c7:9f:85:75:6e:38:a7:c6:70:96:a5:37:86:
c8:a4:48:01:1a:69:50:96:dc:bd:5a:c0:f5:ef:bf:
87:04:c2:48:c3:ab:71:c7:c1:41:af:f8:47:d2:c1:
9b:e5:26:62:15:d2:76:d0:ea:50:a0:5d:bb:c8:bf:
50:e3:57:31:ee:98:5c:4c:e0:c7:7e:34:ab:d6:4e:
a7:9e:a6:2d:4e:62:58:2d:b3:39:02:69:07:14:86:
9e:82:ac:1c:f0:2b:f6:ff:82:37:fd:73:c5:c9:38:
07:03:a9:f6:49:03:a4:ea:10:7b:e0:93:c6:23:d5:
b3:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A1:46:AD:E3:6C:7E:15:0E:C7:33:E6:91:CD:8D:D8:1F:1E:2E:D1:94
X509v3 Authority Key Identifier:
keyid:7F:43:9D:94:24:26:FC:67:3B:27:9C:C9:8A:B3:5F:DB:D7:EA:97:F5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/f0OdlCQm_Gc7J5zJirNf29fql_U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/69a09f-5809-4656-b355-146f254ac131/1/f0OdlCQm_Gc7J5zJirNf29fql_U.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/69a09f-5809-4656-b355-146f254ac131/1/f0OdlCQm_Gc7J5zJirNf29fql_U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3a:88:53:6b:d7:37:83:1f:b4:20:b1:6b:32:5d:e2:fa:99:8d:
40:1f:b4:24:56:08:16:aa:3f:8e:c6:b9:cf:77:ec:3f:59:13:
29:96:39:0f:42:9a:0c:80:97:31:f5:72:e1:0d:ab:ab:a4:66:
76:24:06:05:ea:82:54:f2:9e:2c:e0:8b:8e:79:60:7d:84:d7:
84:d5:ad:a0:48:92:e7:c9:8f:d2:aa:af:7d:94:fb:9a:e1:2b:
9f:ac:b1:46:61:9c:d7:8e:71:1c:b7:7a:52:8d:ad:0c:00:a7:
f8:03:b7:a3:a9:37:52:62:c5:22:5f:d8:d9:68:06:58:c6:b7:
db:14:aa:e8:6d:a2:4e:d6:f9:da:04:c0:46:b2:34:f6:67:f0:
ce:b1:5f:0d:11:55:75:fe:17:7e:df:29:c8:6a:24:e5:1c:02:
d2:80:81:d7:71:6b:38:20:25:39:b4:58:ed:f1:b8:8d:1b:35:
cc:c3:5f:0d:00:51:d9:3f:ab:6c:0d:00:a7:b9:87:05:cb:c6:
c6:1c:88:96:0f:cd:83:ab:3f:6c:51:81:1b:e9:c7:14:f0:32:
82:27:9c:f2:38:1b:fe:90:18:7f:de:9e:43:63:06:db:9d:b4:
20:c0:89:49:5f:6a:85:a8:65:5e:6c:32:93:93:04:15:3c:2e:
95:04:d4:75
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 29 03:41:13 2025 by rpki-client