Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/44/cfed0d-0fb0-4598-b365-65096dbcac30/1/oythi1COwTZTcsKqZ182ASk8xiQ.mft
File: oythi1COwTZTcsKqZ182ASk8xiQ.mft (raw, json)
Hash identifier: +FZuRQIRsxiwflXhA/ur6B3T0isPMBb4pteVlbh3nyE=
Subject key identifier: 2A:C1:0E:AB:34:9B:00:D6:C1:E6:AA:AD:0D:DA:2A:EF:FF:FB:7E:EE
Authority key identifier: A3:2B:61:8B:50:8E:C1:36:53:72:C2:AA:67:5F:36:01:29:3C:C6:24
Certificate issuer: /CN=a32b618b508ec1365372c2aa675f3601293cc624
Certificate serial: 01967F7CE32AB358E027869D2836B58D1CF3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/oythi1COwTZTcsKqZ182ASk8xiQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/44/cfed0d-0fb0-4598-b365-65096dbcac30/1/oythi1COwTZTcsKqZ182ASk8xiQ.mft
Manifest number: 08FD
Signing time: Tue 29 Apr 2025 03:00:13 +0000
Manifest this update: Tue 29 Apr 2025 03:00:13 +0000
Manifest next update: Wed 30 Apr 2025 03:00:13 +0000
Files and hashes: 1: oythi1COwTZTcsKqZ182ASk8xiQ.crl (hash: 21C2I2SgLZMPftHxV4qB38zM7HO50WQY6CN8iqmKC5U=)
2: tlRgtWShtf4NCRA8IRgcZrxGH5w.roa (hash: vWrq/qn4dImxorSwjmmV3lM2Zem99YCBAV/uApBQcww=)
3: xTZoaA-8TmHEI1jMFDvCwHtiXYE.roa (hash: T7GombXt78c9iIE0H6vcNPnQnS19iaCgMsQG50c822A=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/44/cfed0d-0fb0-4598-b365-65096dbcac30/1/oythi1COwTZTcsKqZ182ASk8xiQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/44/cfed0d-0fb0-4598-b365-65096dbcac30/1/oythi1COwTZTcsKqZ182ASk8xiQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/oythi1COwTZTcsKqZ182ASk8xiQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 30 Apr 2025 00:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:7f:7c:e3:2a:b3:58:e0:27:86:9d:28:36:b5:8d:1c:f3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a32b618b508ec1365372c2aa675f3601293cc624
Validity
Not Before: Apr 29 03:00:13 2025 GMT
Not After : Apr 30 03:00:13 2025 GMT
Subject: CN=2ac10eab349b00d6c1e6aaad0dda2aeffffb7eee
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:f9:4b:2b:03:36:93:d1:02:07:eb:5f:56:f4:
84:c8:7a:d9:2f:7f:cd:0d:d0:23:d3:e1:84:18:39:
22:b2:19:a3:25:43:60:0a:66:e9:09:82:35:fa:46:
89:aa:b4:b6:c2:28:05:46:b2:50:92:4c:7d:eb:50:
dc:8c:01:62:4c:a4:ce:31:d8:5c:f0:1a:d7:85:b8:
fe:0c:41:5f:65:46:58:96:2a:e6:5a:08:74:b0:06:
cd:b2:a0:30:88:01:13:33:3b:61:8d:ab:ee:1c:f3:
8c:8d:60:8f:4d:18:00:81:24:e3:a1:c9:4e:44:75:
76:aa:21:7e:02:d6:a8:82:57:69:81:b1:69:91:d5:
14:f6:84:3a:42:6d:60:f6:a2:ed:e6:ec:63:f3:5e:
61:b2:cc:35:92:10:91:0c:54:ff:35:9c:c2:13:47:
49:5f:dc:9d:92:b4:df:23:da:a0:5a:b7:44:a0:54:
be:8d:b7:cd:84:cc:34:85:e6:33:3e:01:19:d4:d8:
e0:27:9a:5c:e9:7a:46:75:a5:58:1a:8c:d5:f0:bc:
7f:4e:43:d7:43:60:14:7e:33:20:4b:42:f1:1d:d1:
85:65:8c:a2:fd:0d:9c:3f:bd:fc:0c:ff:fd:33:85:
89:cc:45:21:06:94:70:34:b6:22:c3:1f:f8:46:98:
14:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2A:C1:0E:AB:34:9B:00:D6:C1:E6:AA:AD:0D:DA:2A:EF:FF:FB:7E:EE
X509v3 Authority Key Identifier:
keyid:A3:2B:61:8B:50:8E:C1:36:53:72:C2:AA:67:5F:36:01:29:3C:C6:24
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/oythi1COwTZTcsKqZ182ASk8xiQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/44/cfed0d-0fb0-4598-b365-65096dbcac30/1/oythi1COwTZTcsKqZ182ASk8xiQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/44/cfed0d-0fb0-4598-b365-65096dbcac30/1/oythi1COwTZTcsKqZ182ASk8xiQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3d:ca:50:5c:e0:d4:54:21:87:1e:6f:b6:bd:e0:15:10:a0:51:
dd:87:44:9b:43:d5:09:9b:91:70:d9:8b:5e:5b:e7:43:ee:50:
d9:15:75:18:1a:4b:da:e8:c8:9a:7c:82:b5:e6:95:65:68:d4:
33:eb:96:13:d7:8c:2a:1d:1b:02:69:ad:1f:31:76:e0:b3:79:
ee:78:55:b2:10:83:3a:59:8e:e0:b9:28:67:2c:e6:a1:94:65:
8a:01:eb:23:99:02:48:de:38:39:9c:1b:12:22:6a:b2:ed:b4:
55:48:11:ba:de:72:e3:36:7f:c1:00:34:fc:f0:44:68:a9:11:
ac:84:c9:cf:ba:ae:18:e3:37:be:b6:2c:aa:67:4a:f2:af:ac:
7a:0e:24:e6:9c:84:90:3e:93:47:34:c9:5e:74:66:70:72:17:
37:bf:e8:98:5d:7c:5f:7c:9b:0a:05:3c:3c:93:5d:56:c3:41:
51:ae:19:a8:17:59:ca:5d:1f:e3:fd:46:90:37:d2:d7:a3:c6:
69:b2:a5:49:52:b1:bd:04:d9:04:43:32:07:fd:0f:4a:6a:c8:
17:f2:eb:34:f8:5a:06:38:91:5b:f6:ab:1c:ea:5c:e8:2d:ff:
79:c0:6c:da:17:68:b3:26:de:aa:75:71:12:93:c9:9a:39:04:
f7:2f:e3:1b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 29 08:02:54 2025 by rpki-client