Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/60/a5f150-3d83-42cb-9a47-e3cfe6cec0ac/1/OLW9ObdPI9doPRI46prKPGamMaM.mft
File: OLW9ObdPI9doPRI46prKPGamMaM.mft (raw, json)
Hash identifier: RzX1/uRZMO34euubFwmUrYNJtLVHzx2i2I09ZEs4RIY=
Subject key identifier: 6B:64:D0:63:72:6B:6F:00:57:CA:B8:41:82:42:9F:4F:03:26:8F:B4
Authority key identifier: 38:B5:BD:39:B7:4F:23:D7:68:3D:12:38:EA:9A:CA:3C:66:A6:31:A3
Certificate issuer: /CN=38b5bd39b74f23d7683d1238ea9aca3c66a631a3
Certificate serial: 019675D5091E7FCD09E16F49983B8818907F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OLW9ObdPI9doPRI46prKPGamMaM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/60/a5f150-3d83-42cb-9a47-e3cfe6cec0ac/1/OLW9ObdPI9doPRI46prKPGamMaM.mft
Manifest number: 1512
Signing time: Sun 27 Apr 2025 06:00:17 +0000
Manifest this update: Sun 27 Apr 2025 06:00:17 +0000
Manifest next update: Mon 28 Apr 2025 06:00:17 +0000
Files and hashes: 1: 6kCBLIZL1Utyl61fy1p6EW7akTU.roa (hash: NMn7Jz/myMcH5rlH91oLz3Top7oHGVHXBAR/Jc98yhE=)
2: OLW9ObdPI9doPRI46prKPGamMaM.crl (hash: jNebegF+OfhCZwgfIRMS4L8eR51DaKZuK6wWUMKLbFs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/60/a5f150-3d83-42cb-9a47-e3cfe6cec0ac/1/OLW9ObdPI9doPRI46prKPGamMaM.crl
rsync://rpki.ripe.net/repository/DEFAULT/60/a5f150-3d83-42cb-9a47-e3cfe6cec0ac/1/OLW9ObdPI9doPRI46prKPGamMaM.mft
rsync://rpki.ripe.net/repository/DEFAULT/OLW9ObdPI9doPRI46prKPGamMaM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Apr 2025 05:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:75:d5:09:1e:7f:cd:09:e1:6f:49:98:3b:88:18:90:7f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=38b5bd39b74f23d7683d1238ea9aca3c66a631a3
Validity
Not Before: Apr 27 06:00:17 2025 GMT
Not After : Apr 28 06:00:17 2025 GMT
Subject: CN=6b64d063726b6f0057cab84182429f4f03268fb4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:1d:e8:03:a4:19:74:9a:af:9f:8e:5a:ec:50:
7a:99:32:d7:2b:c9:f3:18:21:bd:47:88:b6:a6:1b:
59:2b:2c:88:4f:34:96:a2:60:bb:e3:c0:e8:67:82:
17:a1:1d:47:ea:4e:2c:15:3b:39:e7:f5:e4:a0:c1:
67:10:69:3b:b0:72:af:9f:0e:65:9f:78:57:d1:08:
fa:fa:f9:d7:8a:85:3e:b5:a7:b0:57:76:41:2f:e9:
31:94:9d:e7:a7:75:f3:f7:27:0a:d9:d9:2f:58:42:
10:e5:84:f4:cb:7a:59:8b:a7:96:51:e4:5b:0a:0f:
7a:e1:1d:19:19:cd:8d:91:d9:96:48:1e:09:36:b7:
22:2f:fd:1b:5f:cb:a4:8f:d5:b9:fe:fe:99:40:e4:
0b:b1:46:63:7b:0f:08:a8:9d:0b:48:76:d1:d5:dd:
ed:b1:d1:83:02:58:d3:bd:3a:02:d0:62:7b:fc:33:
39:a2:d2:f5:7a:84:64:f7:4e:80:7f:be:c4:2f:ce:
68:5e:d3:cd:b1:98:80:05:e8:24:b4:70:5f:86:71:
4b:be:42:02:c6:4b:11:24:28:24:07:58:d9:cf:33:
d4:ff:28:0d:4d:6f:a1:1f:8f:36:e1:05:6f:09:ea:
62:b7:b3:5b:56:47:a6:13:2f:84:d4:87:ab:c7:2d:
c1:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6B:64:D0:63:72:6B:6F:00:57:CA:B8:41:82:42:9F:4F:03:26:8F:B4
X509v3 Authority Key Identifier:
keyid:38:B5:BD:39:B7:4F:23:D7:68:3D:12:38:EA:9A:CA:3C:66:A6:31:A3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OLW9ObdPI9doPRI46prKPGamMaM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/60/a5f150-3d83-42cb-9a47-e3cfe6cec0ac/1/OLW9ObdPI9doPRI46prKPGamMaM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/60/a5f150-3d83-42cb-9a47-e3cfe6cec0ac/1/OLW9ObdPI9doPRI46prKPGamMaM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
19:7e:4f:cd:cf:b4:2f:46:09:70:d4:e5:86:cc:1a:5b:e8:49:
a3:c6:a4:fb:7a:e7:82:f5:67:89:0a:06:ac:23:b0:10:eb:b9:
46:1e:6e:60:ff:89:fc:b8:da:1e:69:19:78:54:40:62:05:71:
03:2c:7f:95:26:1e:d1:e0:06:f0:ec:b1:27:37:5f:d9:11:28:
26:02:b9:30:11:a1:e8:06:83:06:66:0e:99:c2:6d:a5:8b:90:
83:ca:87:06:74:f1:37:7a:5f:df:6a:d1:2f:97:f8:11:40:d2:
f5:53:e4:6f:d4:ee:04:ab:d2:86:f0:22:35:fa:87:b3:3d:ad:
a0:65:b4:a1:bc:8a:1f:78:c5:de:97:04:04:65:ad:fc:0e:87:
2a:07:4f:e6:4a:a8:ec:35:ed:81:67:51:9c:ee:7b:2d:dd:e4:
70:d3:c8:71:1c:6a:59:24:2f:30:08:a2:21:65:dc:8d:a9:41:
26:c5:b3:c2:c6:ac:9c:9b:3f:fa:4d:59:4a:d1:37:7b:99:4d:
59:d9:17:7a:fe:c0:22:bd:54:ad:fa:8d:78:d0:6d:a4:7a:9e:
ed:19:a3:35:23:7f:f7:18:da:ea:c5:82:fe:f8:86:72:da:90:
a6:f5:71:3e:17:78:fa:00:0b:db:d4:f8:98:21:1f:8c:e9:89:
b0:5b:83:76
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 12:57:57 2025 by rpki-client