Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c1/4ef680-7c55-4a5b-8568-336ac9456464/1/OklF5GdkAp0lgdggwzc_pEWFVTk.mft
File: OklF5GdkAp0lgdggwzc_pEWFVTk.mft (raw, json)
Hash identifier: vCyeMHQJgprEYDH6vEuaOV2QU51X01QZlIjcSEi0Eto=
Subject key identifier: 82:89:2E:29:94:5D:43:56:42:00:1F:65:B9:53:3B:68:83:C3:12:B2
Authority key identifier: 3A:49:45:E4:67:64:02:9D:25:81:D8:20:C3:37:3F:A4:45:85:55:39
Certificate issuer: /CN=3a4945e46764029d2581d820c3373fa445855539
Certificate serial: 01968058EDA49CDF66B357661A5EB124FC59
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OklF5GdkAp0lgdggwzc_pEWFVTk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c1/4ef680-7c55-4a5b-8568-336ac9456464/1/OklF5GdkAp0lgdggwzc_pEWFVTk.mft
Manifest number: 1516
Signing time: Tue 29 Apr 2025 07:00:33 +0000
Manifest this update: Tue 29 Apr 2025 07:00:33 +0000
Manifest next update: Wed 30 Apr 2025 07:00:33 +0000
Files and hashes: 1: LHDFKCfWLJp2mBfByLfhuS_iDkY.roa (hash: hhocfI4M747eSln+lUvkyI8Ag+8FG16kwPY8wAbPOQk=)
2: OklF5GdkAp0lgdggwzc_pEWFVTk.crl (hash: 0pu5yJYEHCMWNGh277JHXKqq4jiEadu7m/owDFMQPBQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c1/4ef680-7c55-4a5b-8568-336ac9456464/1/OklF5GdkAp0lgdggwzc_pEWFVTk.crl
rsync://rpki.ripe.net/repository/DEFAULT/c1/4ef680-7c55-4a5b-8568-336ac9456464/1/OklF5GdkAp0lgdggwzc_pEWFVTk.mft
rsync://rpki.ripe.net/repository/DEFAULT/OklF5GdkAp0lgdggwzc_pEWFVTk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 30 Apr 2025 00:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:80:58:ed:a4:9c:df:66:b3:57:66:1a:5e:b1:24:fc:59
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3a4945e46764029d2581d820c3373fa445855539
Validity
Not Before: Apr 29 07:00:33 2025 GMT
Not After : Apr 30 07:00:33 2025 GMT
Subject: CN=82892e29945d435642001f65b9533b6883c312b2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:27:c2:1e:35:c4:40:b3:f5:f5:e7:50:99:f1:
f1:14:69:69:ac:c0:16:47:49:d5:8d:0d:ba:8d:36:
9b:67:d2:dd:58:66:5f:dd:0b:d8:d5:f6:22:b0:ea:
6a:6e:95:f4:6b:9b:96:1e:0a:54:f1:9f:c9:8f:10:
13:55:17:7b:99:3e:86:60:56:d3:44:c5:4b:6f:61:
4e:54:14:99:6c:5e:71:12:5c:ff:16:ed:6c:63:6f:
1b:35:82:7a:46:ce:3f:31:38:46:bd:24:04:eb:9a:
8a:90:4c:23:42:3e:41:63:46:8f:09:df:f7:59:80:
db:21:3a:67:38:34:3b:e2:67:e0:db:aa:ce:82:ca:
8c:12:97:4d:32:3a:ae:bb:0e:df:fd:95:de:c0:0f:
c4:c2:ca:24:ea:84:c8:fb:8d:34:82:a3:af:9d:c3:
d7:95:41:1b:b0:ce:1a:ae:76:f9:70:e7:cf:7e:86:
44:80:66:70:9b:ce:ac:c3:ec:5b:5a:76:2a:4a:20:
1a:ae:67:40:dd:fc:05:4e:53:9d:ed:55:49:44:b9:
bb:ab:e5:60:30:8e:35:31:a2:76:91:17:83:93:08:
ce:9c:78:3d:d6:cd:94:0b:96:43:f5:a3:07:50:36:
6e:41:2c:77:f2:3a:9f:82:c8:ba:3d:85:2f:06:06:
9a:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
82:89:2E:29:94:5D:43:56:42:00:1F:65:B9:53:3B:68:83:C3:12:B2
X509v3 Authority Key Identifier:
keyid:3A:49:45:E4:67:64:02:9D:25:81:D8:20:C3:37:3F:A4:45:85:55:39
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OklF5GdkAp0lgdggwzc_pEWFVTk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c1/4ef680-7c55-4a5b-8568-336ac9456464/1/OklF5GdkAp0lgdggwzc_pEWFVTk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c1/4ef680-7c55-4a5b-8568-336ac9456464/1/OklF5GdkAp0lgdggwzc_pEWFVTk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
43:31:4b:11:13:fc:84:a1:ce:2b:33:29:cf:f1:e2:54:a8:d3:
34:6b:17:d0:57:cc:28:26:19:ed:e8:f6:84:3b:aa:46:33:3d:
0c:a3:5b:e2:f7:d7:52:a5:91:ba:b4:44:7f:ef:1c:3d:84:ea:
9a:6e:ed:57:e8:a2:3f:23:f1:45:39:d5:44:dc:69:af:11:a1:
3a:a9:66:31:fc:ae:e5:24:b2:0a:b2:3c:41:b1:95:fc:88:8d:
2e:4e:53:83:20:5d:74:7f:1e:b5:2d:36:6b:0e:e5:da:b5:b6:
6c:9a:8f:4a:0a:3a:16:01:b3:cd:d3:8a:33:2a:53:48:87:8f:
28:32:56:80:8a:7c:85:64:54:e9:28:b8:98:ce:6f:8b:30:cc:
d7:3d:01:9f:0f:24:05:a1:6a:ba:ce:78:1f:e1:05:d9:ab:0a:
10:76:91:ed:6b:7f:79:0c:8a:b6:75:8b:b8:a7:c3:b9:af:f8:
aa:3d:18:96:82:62:b2:b1:fd:38:08:40:e2:61:ff:52:e8:68:
f4:ef:60:17:9d:83:8b:f1:d1:a8:fa:fc:2e:c1:2a:6c:cb:15:
61:28:c2:61:55:72:29:05:85:a8:99:10:cb:59:af:70:40:d7:
db:4d:ce:90:6e:82:74:67:0a:a8:19:ee:7b:94:aa:3e:f5:f1:
07:e8:ca:7e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 29 09:23:55 2025 by rpki-client