Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c9/f95969-67ef-408e-a743-e1eb79899242/1/OFIGrAjYQMKL9KxWiZ8qKPj9zMU.mft
File: OFIGrAjYQMKL9KxWiZ8qKPj9zMU.mft (raw, json)
Hash identifier: 5pY1faFllQvv5EUNCspmWJ0+RcsDhaVpw5u5iBvX9h4=
Subject key identifier: C2:47:F7:50:B0:1C:E5:41:8C:A1:9A:AE:26:B0:7F:42:AE:71:8D:6A
Authority key identifier: 38:52:06:AC:08:D8:40:C2:8B:F4:AC:56:89:9F:2A:28:F8:FD:CC:C5
Certificate issuer: /CN=385206ac08d840c28bf4ac56899f2a28f8fdccc5
Certificate serial: 019676E8132844EBE6ACBDB760CE7A2D1E41
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OFIGrAjYQMKL9KxWiZ8qKPj9zMU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c9/f95969-67ef-408e-a743-e1eb79899242/1/OFIGrAjYQMKL9KxWiZ8qKPj9zMU.mft
Manifest number: 1510
Signing time: Sun 27 Apr 2025 11:00:42 +0000
Manifest this update: Sun 27 Apr 2025 11:00:42 +0000
Manifest next update: Mon 28 Apr 2025 11:00:42 +0000
Files and hashes: 1: BnrxL-Ur42kihA32O4JXiXZBN8E.roa (hash: au6tBTrdwYycWLV+cOCZ8jXfmlb22WJOhmDS5f3OYxY=)
2: OFIGrAjYQMKL9KxWiZ8qKPj9zMU.crl (hash: +0ylmIg503bMJ7yC6yF27UZ6rVa/Pn/UjcMSY2uMhRc=)
3: eMQhZAA1BBjlcx0eTkggms08VQo.roa (hash: xi+ujT09IBX2cdfgWniCY7aqnXMFDpXhE7QErRO6YQ4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c9/f95969-67ef-408e-a743-e1eb79899242/1/OFIGrAjYQMKL9KxWiZ8qKPj9zMU.crl
rsync://rpki.ripe.net/repository/DEFAULT/c9/f95969-67ef-408e-a743-e1eb79899242/1/OFIGrAjYQMKL9KxWiZ8qKPj9zMU.mft
rsync://rpki.ripe.net/repository/DEFAULT/OFIGrAjYQMKL9KxWiZ8qKPj9zMU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Apr 2025 07:29:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:76:e8:13:28:44:eb:e6:ac:bd:b7:60:ce:7a:2d:1e:41
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=385206ac08d840c28bf4ac56899f2a28f8fdccc5
Validity
Not Before: Apr 27 11:00:42 2025 GMT
Not After : Apr 28 11:00:42 2025 GMT
Subject: CN=c247f750b01ce5418ca19aae26b07f42ae718d6a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:c7:d8:2e:a7:ea:ef:a3:d6:77:6e:5a:0d:a7:
f4:b6:8d:ad:b0:ec:3f:d1:4f:46:9b:bd:89:0c:5e:
41:28:54:bb:95:0e:65:d8:61:f7:c7:ac:79:f3:29:
a1:26:a4:2a:b5:5e:f4:5b:4e:50:5b:00:49:a8:78:
34:98:d9:c0:7e:f1:93:73:93:e0:fa:2a:62:66:95:
88:7f:44:a7:4b:b2:0f:e0:f6:4f:69:80:48:80:41:
3e:9b:0f:f4:c1:cd:ef:8b:3a:d1:62:77:b5:29:ef:
29:af:37:12:3c:73:a2:53:3e:3e:b2:7f:9f:a5:49:
1c:c6:26:14:5d:4b:40:8d:69:96:dc:d1:e3:5a:83:
52:84:10:7e:e0:6e:a6:1e:8f:7d:b0:46:25:02:bc:
12:91:a3:7b:f5:54:4c:4d:77:b2:05:aa:4f:87:55:
3b:8c:1e:7c:ce:f8:0b:76:83:70:8c:64:b4:b1:47:
7b:85:18:9d:36:af:86:59:85:eb:b6:c9:b1:43:07:
45:3e:59:84:d4:05:8c:21:00:7d:03:b2:75:30:97:
7d:53:e3:79:62:97:08:37:b3:98:43:f2:db:90:e7:
5d:20:bc:e0:59:81:7e:72:44:70:08:4b:10:5f:e5:
13:5d:53:f0:97:1b:06:31:4d:d5:4e:0f:e9:e6:78:
54:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C2:47:F7:50:B0:1C:E5:41:8C:A1:9A:AE:26:B0:7F:42:AE:71:8D:6A
X509v3 Authority Key Identifier:
keyid:38:52:06:AC:08:D8:40:C2:8B:F4:AC:56:89:9F:2A:28:F8:FD:CC:C5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OFIGrAjYQMKL9KxWiZ8qKPj9zMU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c9/f95969-67ef-408e-a743-e1eb79899242/1/OFIGrAjYQMKL9KxWiZ8qKPj9zMU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c9/f95969-67ef-408e-a743-e1eb79899242/1/OFIGrAjYQMKL9KxWiZ8qKPj9zMU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3b:cf:3d:1e:eb:00:9a:54:9f:87:2b:ee:17:d0:81:28:64:99:
82:70:d8:51:61:4e:49:76:18:4e:af:f5:44:7b:76:a4:74:e1:
b8:cb:e2:bd:f2:3a:93:29:e2:06:9f:c0:96:06:d5:04:84:b9:
8a:62:fa:eb:07:3c:f6:99:7d:cd:82:65:5c:68:f3:8f:f0:b6:
4f:04:cb:60:23:d0:cc:f1:32:f1:de:6b:b8:38:22:36:b7:24:
0b:f6:26:0f:e4:d1:72:d7:e2:a8:eb:c1:79:1d:95:a9:10:09:
3b:11:80:d5:b8:63:e3:a2:87:79:f0:0e:97:d6:a3:7b:25:9a:
23:3e:11:a3:d1:8e:3a:ac:4f:f7:ca:17:77:db:c4:6b:a7:dd:
fe:25:e5:e5:a1:f0:b6:5c:b0:38:ca:7c:b5:20:3f:61:7d:91:
24:ce:48:e3:3e:93:93:b5:ea:db:c5:10:70:70:c8:98:85:b7:
0d:5e:13:9f:40:6d:4f:2c:de:99:71:0a:7f:08:98:fb:2a:7b:
ff:fa:83:dd:ef:28:8b:b9:92:f4:83:59:bc:47:38:4a:10:60:
3c:68:f9:6b:34:56:c5:61:66:70:b1:95:b1:27:9b:de:88:b3:
2e:46:b8:cf:d8:96:ec:0e:ed:4c:2b:40:53:42:ee:cd:8e:34:
0d:d5:a7:c7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 17:31:01 2025 by rpki-client