Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/67/36fd43-b5f3-40cf-8631-518e7a35660a/1/0OgEFLlH8ZMfIrych4wXt9IweOs.mft
File: 0OgEFLlH8ZMfIrych4wXt9IweOs.mft (raw, json)
Hash identifier: Nt4mGrAzo2RJvr2kI0BbldcqhTUP8rWcTWbj21RcauE=
Subject key identifier: 29:DD:C9:93:9C:44:11:85:AB:D1:7A:F1:42:E7:67:71:7C:21:77:11
Authority key identifier: D0:E8:04:14:B9:47:F1:93:1F:22:BC:9C:87:8C:17:B7:D2:30:78:EB
Certificate issuer: /CN=d0e80414b947f1931f22bc9c878c17b7d23078eb
Certificate serial: 0196933B0FA0B401C364DF4C0C540C6CF238
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0OgEFLlH8ZMfIrych4wXt9IweOs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/67/36fd43-b5f3-40cf-8631-518e7a35660a/1/0OgEFLlH8ZMfIrych4wXt9IweOs.mft
Manifest number: 13E3
Signing time: Fri 02 May 2025 23:00:43 +0000
Manifest this update: Fri 02 May 2025 23:00:43 +0000
Manifest next update: Sat 03 May 2025 23:00:43 +0000
Files and hashes: 1: 0OgEFLlH8ZMfIrych4wXt9IweOs.crl (hash: WLONQKQinN5qx6arh6jIrdTDz68peZ0h8VOp+H71Qng=)
2: SEFQEUahukCO25CLynieJYFwZgg.roa (hash: X7nkM3WeHmcxHA7JwfIjXwagYEA1ZAkZsVPWtjQPu3E=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/67/36fd43-b5f3-40cf-8631-518e7a35660a/1/0OgEFLlH8ZMfIrych4wXt9IweOs.crl
rsync://rpki.ripe.net/repository/DEFAULT/67/36fd43-b5f3-40cf-8631-518e7a35660a/1/0OgEFLlH8ZMfIrych4wXt9IweOs.mft
rsync://rpki.ripe.net/repository/DEFAULT/0OgEFLlH8ZMfIrych4wXt9IweOs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 03 May 2025 19:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:93:3b:0f:a0:b4:01:c3:64:df:4c:0c:54:0c:6c:f2:38
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d0e80414b947f1931f22bc9c878c17b7d23078eb
Validity
Not Before: May 2 23:00:43 2025 GMT
Not After : May 3 23:00:43 2025 GMT
Subject: CN=29ddc9939c441185abd17af142e767717c217711
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:87:0c:c2:74:17:cb:82:c3:9f:15:2f:0e:f9:
d3:ee:59:29:2a:9b:30:33:a4:f2:bd:5b:95:c0:17:
34:c2:04:36:7f:eb:dd:76:32:fa:ea:b8:0e:3b:0b:
cf:a6:fe:1a:05:2c:a7:7a:38:32:77:9d:0e:c4:6b:
5f:94:ef:99:82:1b:e4:0c:56:1c:dd:21:df:fc:25:
a9:cc:28:4f:5b:d8:7e:76:3c:8e:03:f8:b6:5f:c9:
cb:a0:63:2c:9d:a0:c1:de:43:17:82:75:3d:3b:1d:
07:a9:63:2f:bc:ab:28:7b:e0:0e:5c:6b:3d:38:df:
d5:c4:9e:35:31:50:24:21:bb:21:7d:ff:1a:05:62:
2c:e6:a2:cb:ba:94:96:91:7a:a2:20:f6:90:5f:2c:
45:ca:11:40:53:ac:df:7b:d8:77:da:61:f1:eb:e5:
08:46:b9:54:e8:2f:0a:46:21:cc:13:1e:93:07:94:
c3:bf:02:0d:6e:6a:6f:99:c4:99:e9:79:ca:e8:77:
e9:f1:89:0e:a0:21:c8:05:fb:1a:8a:11:54:8f:f9:
09:2b:4d:58:a7:f9:00:c3:fb:b7:d4:1a:0a:a8:18:
70:75:81:1f:eb:dc:33:12:e9:7f:3f:1e:36:43:62:
1a:bf:0b:49:d1:ca:ba:74:dc:2d:e8:cc:94:01:71:
36:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
29:DD:C9:93:9C:44:11:85:AB:D1:7A:F1:42:E7:67:71:7C:21:77:11
X509v3 Authority Key Identifier:
keyid:D0:E8:04:14:B9:47:F1:93:1F:22:BC:9C:87:8C:17:B7:D2:30:78:EB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0OgEFLlH8ZMfIrych4wXt9IweOs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/67/36fd43-b5f3-40cf-8631-518e7a35660a/1/0OgEFLlH8ZMfIrych4wXt9IweOs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/67/36fd43-b5f3-40cf-8631-518e7a35660a/1/0OgEFLlH8ZMfIrych4wXt9IweOs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7f:4f:71:bd:85:fd:f7:0a:47:e1:d0:a7:83:80:24:c4:1f:d7:
a3:3a:e0:da:c5:21:c9:4f:81:87:ae:a0:cc:33:b7:f0:39:00:
61:b4:18:7e:d0:99:a3:b6:4a:22:67:82:51:89:17:e7:30:b9:
de:55:c5:b1:6d:6c:c5:c8:3e:62:04:0d:77:e3:74:84:d8:a7:
4a:a9:8f:db:32:22:4f:6e:2c:8e:63:d8:6e:18:07:87:3d:fa:
d1:3a:0c:cd:f1:c1:9e:3c:42:e6:53:49:70:2b:ca:3a:57:ab:
5c:4b:96:93:d8:0f:e7:53:07:cd:15:1b:56:89:04:51:39:fa:
73:d9:42:23:79:be:33:8a:95:e6:5c:23:9b:27:12:ac:07:e3:
13:f3:43:2f:ba:e8:7e:64:71:dd:79:ad:c6:5a:96:f8:8e:bb:
b2:38:45:03:72:04:12:56:9f:8f:37:a1:ce:0a:e3:3c:b7:29:
a5:bb:26:79:66:b4:31:7f:45:22:61:95:ee:36:26:97:bc:fa:
b6:db:ed:a4:05:89:e1:f3:df:8f:40:84:62:bd:97:db:d2:70:
ce:97:dc:ec:a2:f3:56:f4:98:24:5c:f3:9b:6c:de:9a:75:7e:
b8:7c:d4:f7:85:0d:56:79:d2:6a:d8:86:ba:9b:35:3e:b3:e0:
a9:84:9a:0f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 3 02:23:47 2025 by rpki-client