Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2b/227d14-d751-4573-9919-fec8a80ed233/1/ojIkxQF9NOzcKNDPNkQtZb754KA.mft
File: ojIkxQF9NOzcKNDPNkQtZb754KA.mft (raw, json)
Hash identifier: nNkGeG3HMAPRBmzS3KM449L1uMQtTEiFiTdmvgGTf7s=
Subject key identifier: DD:DB:72:69:F0:DB:8F:25:3D:FE:A5:50:C3:D9:33:9B:90:8E:CF:DC
Authority key identifier: A2:32:24:C5:01:7D:34:EC:DC:28:D0:CF:36:44:2D:65:BE:F9:E0:A0
Certificate issuer: /CN=a23224c5017d34ecdc28d0cf36442d65bef9e0a0
Certificate serial: 01967B69DED9CDA04B707BCA9E43DD8F8052
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ojIkxQF9NOzcKNDPNkQtZb754KA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2b/227d14-d751-4573-9919-fec8a80ed233/1/ojIkxQF9NOzcKNDPNkQtZb754KA.mft
Manifest number: 151B
Signing time: Mon 28 Apr 2025 08:00:57 +0000
Manifest this update: Mon 28 Apr 2025 08:00:57 +0000
Manifest next update: Tue 29 Apr 2025 08:00:57 +0000
Files and hashes: 1: bEhBHj_5ND7DPkcxJc-eHtfnjVE.roa (hash: q7DP36VzuoeI79R3/z9nukbV52RDnraBhFmpjcuFOJ0=)
2: fUWog8dQyKlZmDz3Jt4aoMe12ZM.roa (hash: m7C2vWzzKK+0unJuovK786RQ7kI+1mqtBwzlHAjE+E0=)
3: ojIkxQF9NOzcKNDPNkQtZb754KA.crl (hash: fsRjVpMLrHUe8c1kiaHmEvT7frHX7fdzVGIMZIgJZu4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2b/227d14-d751-4573-9919-fec8a80ed233/1/ojIkxQF9NOzcKNDPNkQtZb754KA.crl
rsync://rpki.ripe.net/repository/DEFAULT/2b/227d14-d751-4573-9919-fec8a80ed233/1/ojIkxQF9NOzcKNDPNkQtZb754KA.mft
rsync://rpki.ripe.net/repository/DEFAULT/ojIkxQF9NOzcKNDPNkQtZb754KA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 29 Apr 2025 08:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:7b:69:de:d9:cd:a0:4b:70:7b:ca:9e:43:dd:8f:80:52
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a23224c5017d34ecdc28d0cf36442d65bef9e0a0
Validity
Not Before: Apr 28 08:00:57 2025 GMT
Not After : Apr 29 08:00:57 2025 GMT
Subject: CN=dddb7269f0db8f253dfea550c3d9339b908ecfdc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:e9:9a:cf:09:ae:62:ff:a0:b9:fe:27:d2:cc:
8d:54:77:4a:64:31:47:a1:92:87:1e:a5:dc:ed:4d:
f6:7d:97:b2:d4:ec:ee:95:4d:80:e7:71:ff:de:5e:
94:d2:80:fe:e6:0b:d0:7a:29:6b:f0:2b:a5:93:d7:
f7:22:de:b7:c9:60:ff:3b:b5:66:cf:f8:7f:3e:ea:
c1:2e:ae:4b:3b:73:01:5e:89:af:b8:b9:50:13:ec:
00:a0:ef:59:0a:e2:57:9b:96:f9:e6:22:f0:c2:3a:
d1:4f:6c:d8:49:d5:d3:f9:14:97:ec:8d:c8:d9:5a:
fa:a7:90:c0:02:a3:a9:e5:69:3c:2d:d9:5d:f0:af:
99:54:10:ad:2a:a3:2f:a0:bb:4c:40:a9:8d:60:71:
12:b3:71:44:0b:b9:d9:a2:78:42:dc:2b:42:06:52:
2a:70:c9:a1:c3:4c:d8:14:80:9d:41:0d:ba:ea:3f:
65:10:6f:48:ba:34:14:63:7d:c3:f0:8f:e7:ad:d9:
bf:9c:f9:59:6b:d5:79:83:d1:23:5e:62:d8:c7:81:
ef:60:aa:62:c7:fd:0d:29:57:4a:7d:e6:4e:9f:4f:
a6:a6:1a:78:a2:46:c8:b2:1d:a9:ca:b0:78:5e:a7:
2f:73:fe:06:a0:e8:f2:a5:d3:84:4d:94:74:95:a1:
97:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DD:DB:72:69:F0:DB:8F:25:3D:FE:A5:50:C3:D9:33:9B:90:8E:CF:DC
X509v3 Authority Key Identifier:
keyid:A2:32:24:C5:01:7D:34:EC:DC:28:D0:CF:36:44:2D:65:BE:F9:E0:A0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ojIkxQF9NOzcKNDPNkQtZb754KA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/227d14-d751-4573-9919-fec8a80ed233/1/ojIkxQF9NOzcKNDPNkQtZb754KA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/227d14-d751-4573-9919-fec8a80ed233/1/ojIkxQF9NOzcKNDPNkQtZb754KA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
55:ae:dd:ed:d5:d1:85:10:68:59:d3:7b:75:94:63:29:12:b2:
ac:40:25:8a:85:7a:87:17:52:dc:d7:ad:f7:53:cf:4d:2c:b3:
39:5e:c8:ff:c6:f0:7a:1b:ea:bb:39:63:e7:d5:cd:ed:38:73:
a9:35:11:28:ce:f0:11:39:00:e2:1f:7c:26:20:5d:d8:4a:85:
11:d8:e7:29:2b:00:30:42:1b:ba:eb:cd:37:71:22:12:96:ae:
25:7e:99:bf:8f:08:12:19:4a:c2:b4:8e:e7:f6:70:c8:6d:d1:
d3:48:6e:bd:0c:61:93:13:0f:db:b4:7d:82:68:b5:70:98:02:
8c:5c:30:d4:f9:90:4e:5f:aa:f2:24:f2:4e:5e:c5:d9:db:a6:
42:16:14:9c:ec:a2:3a:9f:cd:0c:5b:ed:ae:8b:14:af:a4:62:
41:71:d9:99:cf:83:57:ef:c1:4e:7e:29:16:f3:ad:c0:0e:e3:
de:0b:17:19:7e:6a:3a:e0:2f:f3:30:f0:4c:ac:15:13:34:21:
a8:0c:4d:53:fb:ef:2d:bc:95:fa:64:9c:05:e9:f4:25:b1:27:
a4:08:5b:c0:80:8f:29:5c:fd:e9:5b:7e:8b:40:b4:30:2f:40:
d2:e4:5c:b6:53:28:82:31:42:00:11:1b:b9:b4:34:d4:73:a0:
4f:38:2d:8b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 14:31:03 2025 by rpki-client