Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/32/90e923-2f2d-4086-819c-4e655b5b6427/1/OfhzzTk5IDx3io6q8Wg-lGSsNAA.mft
File: OfhzzTk5IDx3io6q8Wg-lGSsNAA.mft (raw, json)
Hash identifier: 9MtZA8oB06jQeWic4EnriT1vj9wtEBaq/Au+e50XWxk=
Subject key identifier: A2:2C:83:A4:A0:9B:0A:A7:E6:AD:C7:84:C6:5C:DB:1A:BA:E8:6D:E1
Authority key identifier: 39:F8:73:CD:39:39:20:3C:77:8A:8E:AA:F1:68:3E:94:64:AC:34:00
Certificate issuer: /CN=39f873cd3939203c778a8eaaf1683e9464ac3400
Certificate serial: 019671C214ABBF9E3AE78CBB4573D6E8EA52
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OfhzzTk5IDx3io6q8Wg-lGSsNAA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/32/90e923-2f2d-4086-819c-4e655b5b6427/1/OfhzzTk5IDx3io6q8Wg-lGSsNAA.mft
Manifest number: 88
Signing time: Sat 26 Apr 2025 11:01:06 +0000
Manifest this update: Sat 26 Apr 2025 11:01:06 +0000
Manifest next update: Sun 27 Apr 2025 11:01:06 +0000
Files and hashes: 1: 4TBEbTwznRUyfO-99-DGzicdpVY.roa (hash: NUzc37NEChJ2ehR4MuI3RA+Wwr1maBIZ+yC3jO0gtfU=)
2: OfhzzTk5IDx3io6q8Wg-lGSsNAA.crl (hash: HU3buu2qIqOIohin1P1FZ/1P+IQeDq9RV5qZv6glxww=)
3: dsqp4bxyFCCs7RL2PZGSdi7KthE.roa (hash: LpothYWyfl3DUg9u8R+0xehBO2vE3vsq9xV0G0H4C0U=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/32/90e923-2f2d-4086-819c-4e655b5b6427/1/OfhzzTk5IDx3io6q8Wg-lGSsNAA.crl
rsync://rpki.ripe.net/repository/DEFAULT/32/90e923-2f2d-4086-819c-4e655b5b6427/1/OfhzzTk5IDx3io6q8Wg-lGSsNAA.mft
rsync://rpki.ripe.net/repository/DEFAULT/OfhzzTk5IDx3io6q8Wg-lGSsNAA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Apr 2025 11:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:71:c2:14:ab:bf:9e:3a:e7:8c:bb:45:73:d6:e8:ea:52
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=39f873cd3939203c778a8eaaf1683e9464ac3400
Validity
Not Before: Apr 26 11:01:06 2025 GMT
Not After : Apr 27 11:01:06 2025 GMT
Subject: CN=a22c83a4a09b0aa7e6adc784c65cdb1abae86de1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:50:14:e0:c1:f4:da:d5:3b:5d:a5:34:dd:1e:
22:9b:99:9c:8c:3f:3e:9b:1b:67:88:87:23:c3:18:
44:73:f5:56:0c:14:ee:81:65:61:71:7e:96:00:8c:
2e:16:9d:d8:ee:f9:42:63:3a:fa:40:fd:b7:8f:f4:
5a:ba:77:7f:06:06:bb:db:05:cb:7b:a9:b1:6f:0c:
31:80:d5:35:a2:f4:ab:6a:f0:4f:b9:aa:41:42:87:
29:62:65:5f:08:23:59:2e:a8:a6:e5:fc:31:89:36:
6d:18:4e:01:73:03:89:f5:ff:62:45:1c:8b:f2:e2:
b0:ff:cf:03:8f:aa:85:46:cc:8b:c4:8a:66:bf:b4:
a3:ce:92:fb:fc:55:6d:98:df:de:47:28:34:54:0f:
5e:d4:15:63:8e:10:c6:d9:85:e6:5a:64:cb:0c:6a:
d0:47:cb:9c:8a:af:42:92:a5:e3:82:08:9a:6f:ad:
a3:9d:bc:00:e0:79:f4:ad:48:de:f8:16:59:c1:69:
6d:e9:0a:69:a7:10:ae:0d:39:f9:38:3f:a2:12:b7:
dd:09:a5:e9:72:04:94:74:7e:c6:40:15:c6:85:e2:
10:ed:2b:8e:ce:a2:42:1c:f5:59:86:9f:5d:7f:a1:
e5:dd:4c:1c:e3:94:dc:8c:66:88:d1:c9:80:9d:c8:
45:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A2:2C:83:A4:A0:9B:0A:A7:E6:AD:C7:84:C6:5C:DB:1A:BA:E8:6D:E1
X509v3 Authority Key Identifier:
keyid:39:F8:73:CD:39:39:20:3C:77:8A:8E:AA:F1:68:3E:94:64:AC:34:00
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OfhzzTk5IDx3io6q8Wg-lGSsNAA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/32/90e923-2f2d-4086-819c-4e655b5b6427/1/OfhzzTk5IDx3io6q8Wg-lGSsNAA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/32/90e923-2f2d-4086-819c-4e655b5b6427/1/OfhzzTk5IDx3io6q8Wg-lGSsNAA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9d:e7:8d:01:67:47:24:68:ed:b3:a4:fc:a2:80:f8:05:a2:e0:
ba:f7:e1:a9:fd:aa:f9:78:e1:b4:7c:90:56:83:4c:57:c7:35:
6e:31:53:6d:8f:2f:5c:2f:74:5f:8b:76:1a:58:8d:af:1a:e0:
10:31:65:0f:d6:e8:b9:34:37:8c:f2:17:71:e1:a7:50:4a:f5:
f7:78:e3:c3:c6:a4:c6:a2:82:38:ee:ba:0f:23:65:50:fd:b2:
e0:56:b3:ff:c0:72:34:fe:5e:67:3c:68:f1:fb:0c:a3:4a:6b:
c5:04:ad:88:6e:9a:6d:6f:9a:f9:16:ae:11:3c:e4:4e:ac:16:
26:f5:f7:fc:82:19:76:69:28:f3:d8:fd:e4:75:96:30:7a:4d:
21:39:0b:a1:80:e1:d8:a9:69:0d:3f:58:36:36:53:07:24:4f:
2c:2a:2a:ca:82:f7:19:99:af:94:96:04:c4:91:be:24:5e:4c:
42:5f:8f:70:a2:27:7d:1c:a2:d3:76:fa:da:3f:43:fa:43:07:
5b:d2:fe:8a:3b:ee:bf:d3:b3:d7:86:d1:85:bc:88:b3:cb:4d:
ac:12:4e:f2:85:e0:d9:f3:53:29:b3:77:4b:de:75:08:cd:e3:
cf:ce:46:0c:bc:6d:f3:b0:79:e9:fe:35:d9:66:cb:2b:3f:fc:
4e:39:85:30
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 20:19:07 2025 by rpki-client