Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/59/a9fe99-a535-44ab-a1bb-5e30b86fd1ab/1/oDaKdBx6xoll6Q1ObLJoSOs7mSs.mft
File: oDaKdBx6xoll6Q1ObLJoSOs7mSs.mft (raw, json)
Hash identifier: XbsaBXTdMTcVT8Or+iDkQxLC7wTkQGdZy/qIdqbbcrQ=
Subject key identifier: F5:75:D4:85:D3:61:CB:98:46:4F:01:CB:97:28:B0:14:4C:DA:44:79
Authority key identifier: A0:36:8A:74:1C:7A:C6:89:65:E9:0D:4E:6C:B2:68:48:EB:3B:99:2B
Certificate issuer: /CN=a0368a741c7ac68965e90d4e6cb26848eb3b992b
Certificate serial: 019684A38DABD67E35E77EFCF7323946FC67
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/oDaKdBx6xoll6Q1ObLJoSOs7mSs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/59/a9fe99-a535-44ab-a1bb-5e30b86fd1ab/1/oDaKdBx6xoll6Q1ObLJoSOs7mSs.mft
Manifest number: 0F12
Signing time: Wed 30 Apr 2025 03:00:33 +0000
Manifest this update: Wed 30 Apr 2025 03:00:33 +0000
Manifest next update: Thu 01 May 2025 03:00:33 +0000
Files and hashes: 1: oDaKdBx6xoll6Q1ObLJoSOs7mSs.crl (hash: xz/oyccm1raSrsMHy7hMWwJ0WVc2FTEWnFsVXW8NVVI=)
2: vIvVsHJ0xm9KWsOKo8t7mvzJhUY.roa (hash: A8A1HwLzG1pGgLrLpP5xuPgKXEc1TOEplW6JXucAwjk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/59/a9fe99-a535-44ab-a1bb-5e30b86fd1ab/1/oDaKdBx6xoll6Q1ObLJoSOs7mSs.crl
rsync://rpki.ripe.net/repository/DEFAULT/59/a9fe99-a535-44ab-a1bb-5e30b86fd1ab/1/oDaKdBx6xoll6Q1ObLJoSOs7mSs.mft
rsync://rpki.ripe.net/repository/DEFAULT/oDaKdBx6xoll6Q1ObLJoSOs7mSs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 01 May 2025 00:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:84:a3:8d:ab:d6:7e:35:e7:7e:fc:f7:32:39:46:fc:67
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a0368a741c7ac68965e90d4e6cb26848eb3b992b
Validity
Not Before: Apr 30 03:00:33 2025 GMT
Not After : May 1 03:00:33 2025 GMT
Subject: CN=f575d485d361cb98464f01cb9728b0144cda4479
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:6e:27:02:ff:66:54:65:3c:65:fa:03:53:8a:
27:05:24:ee:49:7f:f7:08:21:76:fd:ff:e0:cc:e0:
eb:c5:49:4a:4a:49:b5:98:97:c7:c4:e9:cd:a0:64:
97:9c:c7:4d:37:f6:81:24:4a:99:cf:65:1d:a5:0a:
f2:12:1c:2d:19:ea:e8:db:61:f2:c0:ed:76:72:b8:
ff:0d:12:59:8d:59:81:55:e4:8e:1b:6d:24:0e:71:
72:11:77:59:c1:3e:30:bd:7a:e3:34:21:4e:04:85:
56:5b:91:ad:57:0d:55:a7:ab:ed:58:1a:31:d6:8e:
54:d7:b0:31:9a:d7:bb:d5:81:35:09:28:c5:1d:44:
f6:c3:7a:5e:24:6c:60:09:66:c5:c3:22:2b:ff:bb:
57:af:ad:43:0f:d3:46:29:58:7d:f0:7f:24:b6:67:
52:bb:44:62:f5:94:bc:b8:44:38:06:87:b2:fc:95:
47:0e:c3:31:b6:40:00:70:41:06:50:51:c8:b5:4b:
e3:45:20:39:36:39:36:74:c2:db:d7:69:21:f0:56:
cc:20:ae:78:0e:97:99:e8:19:a8:d6:e3:cf:fd:aa:
f2:2b:bd:67:9c:17:17:69:bb:4f:0e:30:d9:b0:76:
24:e6:0c:ed:0a:c1:77:68:10:d6:67:af:57:26:0c:
37:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F5:75:D4:85:D3:61:CB:98:46:4F:01:CB:97:28:B0:14:4C:DA:44:79
X509v3 Authority Key Identifier:
keyid:A0:36:8A:74:1C:7A:C6:89:65:E9:0D:4E:6C:B2:68:48:EB:3B:99:2B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/oDaKdBx6xoll6Q1ObLJoSOs7mSs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/59/a9fe99-a535-44ab-a1bb-5e30b86fd1ab/1/oDaKdBx6xoll6Q1ObLJoSOs7mSs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/59/a9fe99-a535-44ab-a1bb-5e30b86fd1ab/1/oDaKdBx6xoll6Q1ObLJoSOs7mSs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
34:da:15:25:9f:2d:ab:c3:e2:78:80:08:6d:37:f3:cc:a6:de:
67:f6:23:0e:62:85:87:e8:a6:46:27:4b:d4:0a:7a:0a:4f:e4:
c5:18:be:0e:3d:e4:f3:61:d3:72:2b:cf:59:e4:7f:b8:3a:97:
a1:5e:09:3c:c2:4d:24:8c:69:f3:5a:36:79:f8:61:90:98:54:
d5:74:e1:76:7c:7a:6d:c0:d1:5e:ce:c0:f7:f0:54:39:24:68:
30:61:1f:3b:2b:14:be:d2:3d:51:c1:7d:89:1b:88:07:a5:e9:
b2:e8:e8:fd:82:5b:d9:d4:de:a4:50:46:70:25:45:f1:75:6c:
07:76:16:4c:cf:ad:d3:74:db:5a:30:28:09:3d:ec:d0:45:16:
44:64:71:cf:f6:06:82:f1:f7:3e:63:35:2e:70:54:bf:fe:a9:
8e:6c:08:20:ba:0a:9f:eb:3a:1a:99:8a:f9:aa:e9:0d:20:71:
dd:70:36:52:4e:2f:c1:b0:6a:0d:87:40:61:f2:49:8f:6a:fa:
56:bd:99:8d:7a:0f:2b:a5:64:03:12:f4:66:d2:87:8a:11:fd:
1b:66:8c:5d:da:01:f0:6c:33:ab:09:d0:ea:71:20:44:e2:23:
dc:e5:cc:16:e7:d8:16:1a:b0:ad:9c:f8:b8:d3:c2:20:4c:89:
5f:bd:b2:f0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 30 05:22:22 2025 by rpki-client