Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/73/42c355-585a-48bb-9e4a-a47540fed4b9/1/1olx6h0itezaGpdZ8FwmyMVqRow.mft
File: 1olx6h0itezaGpdZ8FwmyMVqRow.mft (raw, json)
Hash identifier: sEpZq4PV73ODRAPzuDBWJEmvHT8ew2XwNwGT0udx5Qc=
Subject key identifier: 95:E4:BB:61:7B:A7:0C:17:9E:F3:FC:F0:E0:A5:E9:FE:F3:E2:F8:44
Authority key identifier: D6:89:71:EA:1D:22:B5:EC:DA:1A:97:59:F0:5C:26:C8:C5:6A:46:8C
Certificate issuer: /CN=d68971ea1d22b5ecda1a9759f05c26c8c56a468c
Certificate serial: 019673E6C235DB56543D1D40495C9B2E64DF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1olx6h0itezaGpdZ8FwmyMVqRow.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/73/42c355-585a-48bb-9e4a-a47540fed4b9/1/1olx6h0itezaGpdZ8FwmyMVqRow.mft
Manifest number: 0CFD
Signing time: Sat 26 Apr 2025 21:00:24 +0000
Manifest this update: Sat 26 Apr 2025 21:00:24 +0000
Manifest next update: Sun 27 Apr 2025 21:00:24 +0000
Files and hashes: 1: 1olx6h0itezaGpdZ8FwmyMVqRow.crl (hash: XHMSofBRYMp/V5RT7coSSGBFqRVCzjC6gAca998S5iU=)
2: BN10iJQINkqqQbCXE2ZsJo5PDg0.roa (hash: dLiu8pKhhmUdKMIv3bdjJ619GvxkAvZ9+W0bGvQ4ymQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/73/42c355-585a-48bb-9e4a-a47540fed4b9/1/1olx6h0itezaGpdZ8FwmyMVqRow.crl
rsync://rpki.ripe.net/repository/DEFAULT/73/42c355-585a-48bb-9e4a-a47540fed4b9/1/1olx6h0itezaGpdZ8FwmyMVqRow.mft
rsync://rpki.ripe.net/repository/DEFAULT/1olx6h0itezaGpdZ8FwmyMVqRow.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Apr 2025 20:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:73:e6:c2:35:db:56:54:3d:1d:40:49:5c:9b:2e:64:df
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d68971ea1d22b5ecda1a9759f05c26c8c56a468c
Validity
Not Before: Apr 26 21:00:24 2025 GMT
Not After : Apr 27 21:00:24 2025 GMT
Subject: CN=95e4bb617ba70c179ef3fcf0e0a5e9fef3e2f844
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:50:2b:d3:ac:38:e4:35:cf:2f:87:ed:6e:ce:
2e:d7:be:97:d2:33:e0:ea:e8:e5:8f:6a:e9:fb:79:
04:02:0b:06:ae:54:f7:4b:5e:07:f0:44:86:d5:51:
a0:dd:b2:ea:a9:2c:40:a8:d7:1e:18:ce:86:6f:eb:
89:d8:79:a5:42:60:bb:cf:6f:ed:e3:b4:0e:f8:46:
9e:9a:98:5a:30:5f:b4:e9:8c:64:51:ff:d2:db:ce:
e1:fd:8e:e8:15:c1:bd:f5:da:bf:cc:3b:d3:62:6d:
ea:f0:8d:bd:ef:5d:30:10:af:4d:18:f5:7a:c7:94:
70:ab:8e:af:c5:e8:78:11:f9:01:48:5a:b9:ed:a9:
56:13:36:e2:64:a5:cd:f7:79:f7:16:e2:81:f1:e4:
b2:10:93:29:83:d7:ed:b2:a3:b5:62:68:5b:f7:19:
2e:17:72:e1:9b:e0:77:16:54:4c:90:3b:16:87:3d:
b4:d0:d4:43:66:39:76:6d:09:53:e9:97:6d:b2:b2:
04:9e:bb:62:52:46:95:79:ee:2a:b0:07:d9:d1:f6:
70:f6:7b:7e:18:0c:aa:8f:c5:03:84:92:10:df:63:
9f:d9:46:a5:7b:6f:32:59:60:8d:97:8c:37:5b:9b:
a2:66:38:c4:bf:a1:26:dc:48:2e:90:81:df:bf:31:
ec:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
95:E4:BB:61:7B:A7:0C:17:9E:F3:FC:F0:E0:A5:E9:FE:F3:E2:F8:44
X509v3 Authority Key Identifier:
keyid:D6:89:71:EA:1D:22:B5:EC:DA:1A:97:59:F0:5C:26:C8:C5:6A:46:8C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1olx6h0itezaGpdZ8FwmyMVqRow.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/73/42c355-585a-48bb-9e4a-a47540fed4b9/1/1olx6h0itezaGpdZ8FwmyMVqRow.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/73/42c355-585a-48bb-9e4a-a47540fed4b9/1/1olx6h0itezaGpdZ8FwmyMVqRow.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
80:6f:42:8c:04:a9:14:b6:40:c4:02:b5:b2:2b:9c:8a:21:f5:
c5:a4:32:e1:a9:ec:09:e2:4c:12:fb:52:90:70:2e:f6:ed:ba:
f6:bb:c7:60:14:f2:c9:9d:53:12:16:af:11:94:31:4e:38:f8:
f4:af:69:39:e1:5f:e6:c3:4e:8c:e2:9b:71:7e:43:e4:12:ad:
74:f6:1e:8c:b2:f7:44:e5:ba:f0:9b:48:67:d2:0f:0f:a1:e1:
48:a9:34:99:bc:37:b6:0a:97:dd:6b:44:e8:b4:6f:77:50:7c:
a1:34:f4:b3:0a:e8:f0:eb:4c:73:f7:d2:86:1e:5d:fc:28:2b:
a9:b2:3b:c9:9d:ae:66:7e:86:69:7d:7a:36:07:04:48:a4:20:
e5:c8:4d:91:fe:de:a5:04:e8:f8:48:38:02:68:fe:05:db:bc:
a5:e1:20:62:d6:66:72:e9:41:30:a0:ee:0c:80:9f:7b:7c:28:
9e:d1:69:0a:d2:2c:1a:da:61:f3:b9:fe:df:0e:75:6f:0a:b9:
53:d6:3b:c5:91:31:e9:bb:26:39:b0:3c:7d:80:2b:8f:ab:9d:
9f:62:72:75:c3:8c:54:2c:e7:6b:b2:18:05:ba:99:80:e4:ed:
4a:5e:0e:66:01:c1:5e:39:9f:10:6d:1b:8a:4e:5d:ee:e9:bc:
58:93:1f:4e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 05:51:48 2025 by rpki-client