Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/76/40e405-a38f-4781-8d55-0c9e0cf7e9fc/1/od5FbU1AXG9CktY2iGds4VDn8H4.mft
File: od5FbU1AXG9CktY2iGds4VDn8H4.mft (raw, json)
Hash identifier: vN8le+oHD+mMSKfYvVP50UUA5hL814KVKlAsu+LbI7Q=
Subject key identifier: 47:41:5D:B9:52:16:F6:7A:C0:C0:AB:BC:F6:36:AF:01:9C:41:EF:8E
Authority key identifier: A1:DE:45:6D:4D:40:5C:6F:42:92:D6:36:88:67:6C:E1:50:E7:F0:7E
Certificate issuer: /CN=a1de456d4d405c6f4292d63688676ce150e7f07e
Certificate serial: 0196778CEFA494F433E9E340E0A695752305
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/od5FbU1AXG9CktY2iGds4VDn8H4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/76/40e405-a38f-4781-8d55-0c9e0cf7e9fc/1/od5FbU1AXG9CktY2iGds4VDn8H4.mft
Manifest number: 0A81
Signing time: Sun 27 Apr 2025 14:00:47 +0000
Manifest this update: Sun 27 Apr 2025 14:00:47 +0000
Manifest next update: Mon 28 Apr 2025 14:00:47 +0000
Files and hashes: 1: dqExZg0GTgu9TOznJg-Erf9mkrI.roa (hash: h4iiYtbEAvUkqkzgU+RKRv7Gvi0HY66tI3dhqgvZQ0E=)
2: od5FbU1AXG9CktY2iGds4VDn8H4.crl (hash: bjfBaLEF1F4cBI5q8RwZJDNHAWhyVUZuHLUP+Ui6+bM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/76/40e405-a38f-4781-8d55-0c9e0cf7e9fc/1/od5FbU1AXG9CktY2iGds4VDn8H4.crl
rsync://rpki.ripe.net/repository/DEFAULT/76/40e405-a38f-4781-8d55-0c9e0cf7e9fc/1/od5FbU1AXG9CktY2iGds4VDn8H4.mft
rsync://rpki.ripe.net/repository/DEFAULT/od5FbU1AXG9CktY2iGds4VDn8H4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Apr 2025 14:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:77:8c:ef:a4:94:f4:33:e9:e3:40:e0:a6:95:75:23:05
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a1de456d4d405c6f4292d63688676ce150e7f07e
Validity
Not Before: Apr 27 14:00:47 2025 GMT
Not After : Apr 28 14:00:47 2025 GMT
Subject: CN=47415db95216f67ac0c0abbcf636af019c41ef8e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:cc:94:e3:76:a7:c0:c6:14:81:43:1a:62:b6:
77:cc:5d:b9:c2:d0:15:2f:d8:29:e1:9c:a8:ab:f5:
9d:53:35:1c:c9:3e:fd:6d:cf:de:dd:75:0c:d0:11:
ff:0c:87:15:d3:85:01:9a:cc:db:70:ff:d7:22:ff:
7f:95:8e:6b:f3:41:eb:8a:57:35:db:ff:34:49:d2:
b1:6d:b6:c1:8d:7f:ba:5b:f8:33:d3:98:b8:5c:03:
01:64:86:74:78:7c:34:30:26:7d:c8:56:1a:61:42:
80:f8:fe:40:35:aa:22:d3:6d:9c:28:d6:f7:93:d8:
7d:e1:9f:7f:53:ed:bb:b6:76:10:82:20:c2:3a:72:
38:8f:dd:eb:d3:38:48:4e:c1:a2:e4:a7:18:69:8e:
20:05:d2:85:12:7f:2b:5e:57:35:03:b5:7a:1a:70:
e3:6d:b1:b9:45:bd:ca:9b:6c:cd:08:4a:e4:78:0d:
ab:0b:0e:8a:36:9d:64:28:1b:58:ff:25:63:e2:6b:
fc:a3:a8:c6:17:d3:90:70:de:37:3d:af:b9:d5:d3:
7a:27:b7:32:68:cc:28:20:9d:41:59:01:c9:25:de:
d7:0a:ca:57:98:5b:4b:9a:d8:42:0f:a4:22:a8:d9:
1c:a5:c7:56:27:b6:5d:cd:3a:73:75:7a:80:81:57:
48:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
47:41:5D:B9:52:16:F6:7A:C0:C0:AB:BC:F6:36:AF:01:9C:41:EF:8E
X509v3 Authority Key Identifier:
keyid:A1:DE:45:6D:4D:40:5C:6F:42:92:D6:36:88:67:6C:E1:50:E7:F0:7E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/od5FbU1AXG9CktY2iGds4VDn8H4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/76/40e405-a38f-4781-8d55-0c9e0cf7e9fc/1/od5FbU1AXG9CktY2iGds4VDn8H4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/76/40e405-a38f-4781-8d55-0c9e0cf7e9fc/1/od5FbU1AXG9CktY2iGds4VDn8H4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
00:b3:4f:9f:b8:e3:0a:38:2b:84:63:9e:55:fa:f7:15:f6:16:
8b:b5:d4:cd:0b:74:af:59:10:86:d1:2c:0e:76:83:41:b8:a7:
73:e2:5a:82:78:7b:92:15:1d:76:f6:b9:71:42:e3:0d:8a:92:
11:d5:c2:c1:90:8f:1c:84:7b:a7:34:5a:ec:21:17:11:af:ce:
2c:2b:07:fb:ac:3a:75:f8:e2:8a:77:ab:b7:09:f5:47:c5:a3:
f6:ac:f1:fe:25:81:3a:87:f5:82:7d:dc:19:d5:0c:bc:85:ef:
98:e1:30:ab:f5:32:b9:29:48:5a:94:04:9e:b5:31:87:f7:8f:
5c:cb:15:3b:e9:48:a9:2b:40:c0:0f:b6:49:c3:79:dd:4b:71:
d5:dd:a2:4a:aa:58:38:19:c2:e7:fa:ec:2d:ca:7f:71:59:42:
14:f8:93:d4:3d:f8:ce:3a:83:e5:94:50:84:7b:69:bd:bf:76:
99:20:cb:65:cb:f0:5e:11:cf:c7:d8:e9:73:44:bf:ad:e9:d6:
81:89:7a:1a:af:fb:66:8c:2f:87:94:81:5c:38:36:26:78:05:
ba:41:b7:89:5b:f0:55:b5:a3:b3:76:5f:29:2c:1b:34:a2:11:
1c:f7:4f:71:a7:b1:2f:7b:b6:d5:84:5c:39:d9:c0:69:7a:ab:
6f:38:10:26
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 21:54:34 2025 by rpki-client