Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/42/648bcc-0911-4f64-b6d1-0a2f29aecdb3/1/m_OG1KjS4YgyzyP7819iQNuOokI.mft
File: m_OG1KjS4YgyzyP7819iQNuOokI.mft (raw, json)
Hash identifier: a3xZHP+JW5BSDldL4h1poEv8sNvPChg6cw2tSo9JBaY=
Subject key identifier: 55:4E:04:C7:36:A7:78:30:B6:C3:B2:67:58:A3:7C:A3:9D:7D:A2:53
Authority key identifier: 9B:F3:86:D4:A8:D2:E1:88:32:CF:23:FB:F3:5F:62:40:DB:8E:A2:42
Certificate issuer: /CN=9bf386d4a8d2e18832cf23fbf35f6240db8ea242
Certificate serial: 019680221290D2761467B17652080290D32D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/m_OG1KjS4YgyzyP7819iQNuOokI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/42/648bcc-0911-4f64-b6d1-0a2f29aecdb3/1/m_OG1KjS4YgyzyP7819iQNuOokI.mft
Manifest number: 84
Signing time: Tue 29 Apr 2025 06:00:38 +0000
Manifest this update: Tue 29 Apr 2025 06:00:38 +0000
Manifest next update: Wed 30 Apr 2025 06:00:38 +0000
Files and hashes: 1: m_OG1KjS4YgyzyP7819iQNuOokI.crl (hash: pPQneAkwBE5MkBazoPogeWUNt84TZ2uW2KjZ7XQBHFw=)
2: vvhtwRxSkAUJ1c-M3BxUohEySzg.roa (hash: 5peLctB/1NoUxBRjWB/Eva3roqPmaT0WkPw4865m1uE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/42/648bcc-0911-4f64-b6d1-0a2f29aecdb3/1/m_OG1KjS4YgyzyP7819iQNuOokI.crl
rsync://rpki.ripe.net/repository/DEFAULT/42/648bcc-0911-4f64-b6d1-0a2f29aecdb3/1/m_OG1KjS4YgyzyP7819iQNuOokI.mft
rsync://rpki.ripe.net/repository/DEFAULT/m_OG1KjS4YgyzyP7819iQNuOokI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 30 Apr 2025 06:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:80:22:12:90:d2:76:14:67:b1:76:52:08:02:90:d3:2d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9bf386d4a8d2e18832cf23fbf35f6240db8ea242
Validity
Not Before: Apr 29 06:00:38 2025 GMT
Not After : Apr 30 06:00:38 2025 GMT
Subject: CN=554e04c736a77830b6c3b26758a37ca39d7da253
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:9a:d6:fa:f3:61:f2:23:94:66:f6:8e:7c:10:
3a:e8:3a:dd:52:95:be:9e:fa:a2:d5:fa:9c:d5:ef:
c7:76:3a:42:0f:04:c9:e9:b2:e4:3c:f2:0d:29:81:
82:ad:52:13:20:24:30:01:2d:9b:c2:b2:68:3a:e0:
3d:b3:3d:cc:57:4d:2e:68:b1:dd:1c:4f:98:0f:4d:
73:5e:37:75:8c:fb:e8:3c:61:d5:73:0f:d6:b0:22:
bf:18:64:2d:6a:9c:99:10:64:5d:61:34:4f:80:9c:
ca:52:2b:b2:a1:9e:1b:27:63:04:2a:86:82:e1:e5:
f5:19:99:8a:41:62:b7:ac:84:3c:6b:b1:d7:84:ba:
03:1a:c6:9a:b1:c2:53:df:29:70:1f:c1:e7:4d:b5:
55:10:f4:0d:f8:2c:8b:cb:80:e6:f7:bd:57:24:8e:
63:01:35:34:6a:be:79:72:56:32:15:aa:eb:36:db:
54:83:d3:75:1d:2d:52:c1:62:e3:dc:72:28:fa:a6:
8b:60:e3:9f:cf:5e:2d:33:cd:af:45:e2:b9:21:e0:
67:c6:79:19:dd:6b:b1:74:0b:7a:e1:13:3b:6c:ff:
9d:37:4b:19:e1:17:b6:03:e2:68:51:99:f2:5e:3f:
47:c8:f9:6b:6a:2d:4a:00:11:5f:2e:e6:ac:c4:6a:
a2:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
55:4E:04:C7:36:A7:78:30:B6:C3:B2:67:58:A3:7C:A3:9D:7D:A2:53
X509v3 Authority Key Identifier:
keyid:9B:F3:86:D4:A8:D2:E1:88:32:CF:23:FB:F3:5F:62:40:DB:8E:A2:42
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/m_OG1KjS4YgyzyP7819iQNuOokI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/42/648bcc-0911-4f64-b6d1-0a2f29aecdb3/1/m_OG1KjS4YgyzyP7819iQNuOokI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/42/648bcc-0911-4f64-b6d1-0a2f29aecdb3/1/m_OG1KjS4YgyzyP7819iQNuOokI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
95:6d:d5:e8:1d:0a:dd:76:98:67:81:6e:79:d2:7e:a8:b0:65:
3b:9d:74:c1:3d:40:76:b3:6a:fd:27:00:2f:bf:b9:ef:ac:d5:
ae:88:96:ec:b1:ff:64:6b:79:48:30:06:03:11:03:eb:90:5e:
22:9c:5b:3c:39:0c:85:72:fe:02:9f:e9:e8:71:e9:34:c8:bf:
0d:73:5c:59:08:4d:e9:bf:0a:e9:30:8a:ad:51:af:86:a7:2c:
e3:51:73:77:7c:af:ae:ee:7d:34:19:d5:39:30:e2:be:bc:a0:
9f:d4:25:a4:ed:7d:9a:9c:a8:86:08:26:be:54:c6:b4:4b:89:
60:d4:0e:4b:0b:20:f7:7a:37:12:ff:3a:16:78:07:46:45:87:
9b:d4:0b:32:27:4b:05:bd:02:04:e5:17:b5:2c:9d:ed:05:91:
8b:a6:8d:51:28:7b:53:cb:1d:a8:0c:8a:a5:24:74:b3:8c:98:
c4:3f:76:50:c0:43:39:13:60:83:85:3a:b4:18:2a:68:bf:28:
ee:3e:87:12:66:07:57:e9:03:c7:c3:3a:58:10:60:f6:18:b2:
92:30:97:a3:d2:1a:ba:73:0b:c1:fd:e4:85:fd:d8:a8:5e:51:
ff:37:55:ff:18:63:18:b7:21:1d:a5:76:dd:3f:0a:4e:84:96:
7d:17:88:33
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 29 16:23:44 2025 by rpki-client