Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4b/f76a83-ae09-411f-ae9f-5386a79ade80/1/odykS0q1RTP4tRls-S1o3rj8xeI.mft
File: odykS0q1RTP4tRls-S1o3rj8xeI.mft (raw, json)
Hash identifier: DPDZ7yE/GDPFPFhXm2XNGe3qTLKXNAQz2H1prrPjmHU=
Subject key identifier: 60:95:11:59:1D:ED:74:70:D2:15:FE:AD:56:86:8F:72:6D:C0:90:1D
Authority key identifier: A1:DC:A4:4B:4A:B5:45:33:F8:B5:19:6C:F9:2D:68:DE:B8:FC:C5:E2
Certificate issuer: /CN=a1dca44b4ab54533f8b5196cf92d68deb8fcc5e2
Certificate serial: 019685ED35CA9CBA70EA53A6384D38292CE6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/odykS0q1RTP4tRls-S1o3rj8xeI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4b/f76a83-ae09-411f-ae9f-5386a79ade80/1/odykS0q1RTP4tRls-S1o3rj8xeI.mft
Manifest number: 0963
Signing time: Wed 30 Apr 2025 09:00:37 +0000
Manifest this update: Wed 30 Apr 2025 09:00:37 +0000
Manifest next update: Thu 01 May 2025 09:00:37 +0000
Files and hashes: 1: l7zqJyhx90KkIt187BTrR3I9Tv0.roa (hash: uTJRzkaxY5dJDi+eLwZbT+EnLtQwTVbj1dknQK+ofuQ=)
2: odykS0q1RTP4tRls-S1o3rj8xeI.crl (hash: YFs9QNXepRvUfBhHwWfFy2SaPGZd2kPs2yo3PgViBVA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4b/f76a83-ae09-411f-ae9f-5386a79ade80/1/odykS0q1RTP4tRls-S1o3rj8xeI.crl
rsync://rpki.ripe.net/repository/DEFAULT/4b/f76a83-ae09-411f-ae9f-5386a79ade80/1/odykS0q1RTP4tRls-S1o3rj8xeI.mft
rsync://rpki.ripe.net/repository/DEFAULT/odykS0q1RTP4tRls-S1o3rj8xeI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 01 May 2025 09:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:85:ed:35:ca:9c:ba:70:ea:53:a6:38:4d:38:29:2c:e6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a1dca44b4ab54533f8b5196cf92d68deb8fcc5e2
Validity
Not Before: Apr 30 09:00:37 2025 GMT
Not After : May 1 09:00:37 2025 GMT
Subject: CN=609511591ded7470d215fead56868f726dc0901d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8a:6e:75:34:c3:51:87:af:cc:47:c3:3a:f6:da:
ab:7e:59:03:2c:4a:8e:70:98:6e:df:10:fa:3e:31:
6e:cf:88:37:e6:28:77:6b:8f:30:c7:ae:30:4f:bc:
bc:99:c9:31:76:93:28:f9:b3:61:58:77:51:ed:3a:
37:83:b3:fe:0f:2a:ad:97:ef:a5:0c:d4:e6:70:1b:
32:93:4a:92:23:a2:dd:46:89:8c:c5:cd:48:61:29:
98:32:51:af:0f:30:bc:ee:23:f4:40:78:bc:b0:26:
11:48:8d:8a:08:0a:c2:26:29:b3:8d:ca:8c:e9:49:
3f:e1:48:9e:4a:aa:f3:89:e4:97:e1:b7:e0:08:15:
b8:f7:1a:f6:ef:ba:34:06:49:76:0e:0b:77:5d:15:
7c:55:c5:25:c7:3e:be:57:b5:ec:f6:75:8a:25:31:
1d:ec:93:c7:76:fe:69:06:dc:ff:10:57:46:19:b2:
c8:b8:dc:ba:17:c7:2f:05:08:6c:46:e6:ab:bb:7d:
be:b6:14:8b:0f:83:b5:d0:b2:be:da:b2:92:05:c8:
0b:9b:fb:03:b0:84:dc:1e:4e:b7:0d:90:22:7c:d9:
f7:26:73:3c:b1:5f:e6:51:cc:e5:37:5e:d2:de:05:
64:98:ca:5a:76:71:16:0c:3b:25:12:03:16:af:15:
34:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
60:95:11:59:1D:ED:74:70:D2:15:FE:AD:56:86:8F:72:6D:C0:90:1D
X509v3 Authority Key Identifier:
keyid:A1:DC:A4:4B:4A:B5:45:33:F8:B5:19:6C:F9:2D:68:DE:B8:FC:C5:E2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/odykS0q1RTP4tRls-S1o3rj8xeI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4b/f76a83-ae09-411f-ae9f-5386a79ade80/1/odykS0q1RTP4tRls-S1o3rj8xeI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4b/f76a83-ae09-411f-ae9f-5386a79ade80/1/odykS0q1RTP4tRls-S1o3rj8xeI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
16:51:4d:46:2f:45:81:f8:46:4b:c7:87:ed:e4:74:c8:0b:c3:
4d:56:52:7b:3b:99:2c:04:97:84:d5:0e:51:ea:cd:85:f0:a0:
22:ac:e5:76:ab:49:ba:80:e4:5d:3f:4c:f4:dc:d1:57:26:e4:
0b:c9:69:8f:49:00:70:9a:90:e9:66:3f:48:77:e8:a1:d5:cf:
6b:cc:e4:b4:fd:b7:d0:a8:59:0f:9e:da:be:07:ee:25:ca:e0:
5f:f9:04:6b:20:78:b9:33:a1:df:92:f3:d4:19:fe:de:00:14:
62:ba:50:f2:4d:04:ab:93:5d:fa:e3:d6:c4:08:78:15:6c:b4:
bb:43:11:9c:80:06:98:e2:00:b1:9b:c2:56:cd:9c:84:fb:a9:
6e:f4:84:7c:6c:fa:d4:78:bc:b5:e5:f3:aa:49:c7:87:f1:2d:
a9:d2:16:fb:8a:37:87:ff:5f:e2:dd:7e:5b:66:6d:5d:7e:48:
78:ca:e0:6c:c3:05:d4:9f:06:da:12:fb:e4:c0:c8:ed:7a:e8:
c9:75:b6:39:e8:9b:50:b8:f8:92:a2:f8:13:70:29:a4:ab:72:
1c:39:4c:fe:19:9e:5b:d3:36:c2:fa:f1:bc:ef:1c:4c:5e:87:
3e:69:cf:98:4a:48:b6:a0:74:38:3b:9d:90:25:8b:1a:3d:4d:
1b:15:c0:26
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 30 12:58:41 2025 by rpki-client