Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/57/3f9158-6a90-4e57-a28f-3e06a0182614/1/odwGMOlglt5IItH1HvgMb_9UGRs.mft
File: odwGMOlglt5IItH1HvgMb_9UGRs.mft (raw, json)
Hash identifier: Wes2wghfreoSJEbc2kKwENGPGH+9QKuLvljO0v4kbrE=
Subject key identifier: 8D:34:12:11:86:9E:52:04:FE:D7:52:2A:61:86:0F:86:A4:55:5D:F1
Authority key identifier: A1:DC:06:30:E9:60:96:DE:48:22:D1:F5:1E:F8:0C:6F:FF:54:19:1B
Certificate issuer: /CN=a1dc0630e96096de4822d1f51ef80c6fff54191b
Certificate serial: 019679EA36EA7905A90E1BDEB22BC310C350
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/odwGMOlglt5IItH1HvgMb_9UGRs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/57/3f9158-6a90-4e57-a28f-3e06a0182614/1/odwGMOlglt5IItH1HvgMb_9UGRs.mft
Manifest number: 0458
Signing time: Mon 28 Apr 2025 01:01:54 +0000
Manifest this update: Mon 28 Apr 2025 01:01:54 +0000
Manifest next update: Tue 29 Apr 2025 01:01:54 +0000
Files and hashes: 1: o0oMTAuKIGHPPUAOzZr4Sk6LJKE.roa (hash: ZRg0HV5OEgSBlVNEZwtUfyiQ+K7sHVEJu9FVy+59lsM=)
2: odwGMOlglt5IItH1HvgMb_9UGRs.crl (hash: Jazu2CUmbaW6O057GXg2F4xYgxT4aAdB6ghA3m7LL0I=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/57/3f9158-6a90-4e57-a28f-3e06a0182614/1/odwGMOlglt5IItH1HvgMb_9UGRs.crl
rsync://rpki.ripe.net/repository/DEFAULT/57/3f9158-6a90-4e57-a28f-3e06a0182614/1/odwGMOlglt5IItH1HvgMb_9UGRs.mft
rsync://rpki.ripe.net/repository/DEFAULT/odwGMOlglt5IItH1HvgMb_9UGRs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 29 Apr 2025 01:01:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:79:ea:36:ea:79:05:a9:0e:1b:de:b2:2b:c3:10:c3:50
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a1dc0630e96096de4822d1f51ef80c6fff54191b
Validity
Not Before: Apr 28 01:01:54 2025 GMT
Not After : Apr 29 01:01:54 2025 GMT
Subject: CN=8d341211869e5204fed7522a61860f86a4555df1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:96:2a:a1:ec:4c:2b:85:d6:fe:22:44:6f:aa:
fd:0f:c1:64:a1:bc:16:37:10:f7:e4:f4:75:f4:c1:
69:b7:dd:e7:81:72:29:58:70:3f:90:9d:6a:3a:51:
1b:12:30:fb:68:4e:91:c9:18:c3:f6:f7:8f:89:d8:
e6:1a:4e:21:64:27:0b:ea:3b:41:53:4a:e2:97:9d:
fd:f0:12:40:91:3f:c7:00:96:13:19:63:07:19:b1:
f6:35:a4:5f:28:31:05:90:62:a5:fb:17:fa:a1:d7:
04:fd:bc:30:a5:b0:d2:c0:fa:74:e7:8a:e1:54:9e:
1d:3a:49:b5:5b:fc:bd:bb:92:81:f8:64:4d:78:31:
46:9e:f4:68:66:6a:75:d4:83:46:f8:f8:98:22:c5:
af:50:2b:26:91:57:da:24:3e:09:06:37:43:19:25:
e1:7d:48:ee:ef:56:2c:ff:50:d5:7c:e5:7b:0d:79:
12:01:5c:c0:33:97:fb:fb:d2:d6:13:1c:d9:20:9f:
b7:d7:1b:4c:7f:6f:e8:fa:ea:f0:bd:e8:92:d1:3a:
44:1f:dc:79:fb:d3:70:d0:6a:ab:92:05:ec:22:66:
3d:92:55:e1:23:f3:f1:43:02:a4:54:5f:cd:4b:e0:
86:ce:5a:9e:5d:e4:9a:6d:9a:ad:ea:99:7e:a3:29:
8f:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8D:34:12:11:86:9E:52:04:FE:D7:52:2A:61:86:0F:86:A4:55:5D:F1
X509v3 Authority Key Identifier:
keyid:A1:DC:06:30:E9:60:96:DE:48:22:D1:F5:1E:F8:0C:6F:FF:54:19:1B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/odwGMOlglt5IItH1HvgMb_9UGRs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/57/3f9158-6a90-4e57-a28f-3e06a0182614/1/odwGMOlglt5IItH1HvgMb_9UGRs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/57/3f9158-6a90-4e57-a28f-3e06a0182614/1/odwGMOlglt5IItH1HvgMb_9UGRs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
86:07:af:d5:e0:6c:4b:b6:01:3a:c1:bb:27:2d:2e:24:5b:a5:
37:6e:b4:c1:80:88:b2:1c:09:e0:09:c7:a9:43:92:4b:24:2d:
f5:8a:94:9c:bf:d3:ed:8c:33:91:a6:1b:ac:a5:2c:96:e6:fa:
a3:7c:31:e3:1d:2c:53:26:41:27:5c:f2:02:40:dd:e8:6c:7c:
33:5b:04:86:1e:dd:16:a5:e0:da:88:cf:79:03:ec:52:1c:94:
53:b2:db:88:1e:01:e7:e4:78:af:9d:4f:ab:bf:ae:a3:9d:21:
b9:65:57:cb:5d:4b:3d:46:85:16:cd:90:27:43:da:1e:a9:b0:
eb:b1:5a:d6:cc:49:7e:a3:90:4d:95:da:86:8d:62:a9:99:ac:
9a:64:81:2f:b7:b1:db:e0:c9:a8:95:d1:ef:32:69:af:15:7e:
53:71:4f:a7:13:92:ee:d8:e0:4a:6a:6a:30:0e:10:0e:1c:93:
ca:15:52:c0:c8:e9:4f:2d:1f:b4:a7:54:95:dc:e4:38:5a:0d:
49:69:8b:f5:c7:c6:ef:e9:74:e6:2e:14:d3:07:a3:0d:e1:92:
fd:f4:10:f8:da:3b:8f:a5:eb:54:92:e7:d5:e2:6c:55:cb:7f:
da:ae:e5:c3:65:e4:4f:c3:70:ca:02:99:91:f0:e8:fc:2d:eb:
91:c0:7d:a1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 11:52:04 2025 by rpki-client