Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cc/4656f7-0054-48d4-961a-6dbdec51168d/1/odmzW8Pp8kk8ZNBvWy1KmcXyUek.mft
File: odmzW8Pp8kk8ZNBvWy1KmcXyUek.mft (raw, json)
Hash identifier: qKz96aTzYBqdEwEtdU9VOyg4E3/6fjz5M4tmRLlSUyk=
Subject key identifier: A9:62:FF:4F:2A:62:41:8D:4F:72:FE:B5:1E:FE:DD:D4:69:A7:0E:BD
Authority key identifier: A1:D9:B3:5B:C3:E9:F2:49:3C:64:D0:6F:5B:2D:4A:99:C5:F2:51:E9
Certificate issuer: /CN=a1d9b35bc3e9f2493c64d06f5b2d4a99c5f251e9
Certificate serial: 0196790CFFE77BE87788720F5EDE2E8A3FAB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/odmzW8Pp8kk8ZNBvWy1KmcXyUek.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cc/4656f7-0054-48d4-961a-6dbdec51168d/1/odmzW8Pp8kk8ZNBvWy1KmcXyUek.mft
Manifest number: 1511
Signing time: Sun 27 Apr 2025 21:00:17 +0000
Manifest this update: Sun 27 Apr 2025 21:00:17 +0000
Manifest next update: Mon 28 Apr 2025 21:00:17 +0000
Files and hashes: 1: FGv164p9oNmasj4tz9FMT-yTJe8.roa (hash: 2RdxitfGw59b2KF3BO+RbESKDdD8hgmB641at2eVQlk=)
2: odmzW8Pp8kk8ZNBvWy1KmcXyUek.crl (hash: QQ5jY+EFlYOdMR81iYejG8vV8SCH3aIWOJrKx0BXnwU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cc/4656f7-0054-48d4-961a-6dbdec51168d/1/odmzW8Pp8kk8ZNBvWy1KmcXyUek.crl
rsync://rpki.ripe.net/repository/DEFAULT/cc/4656f7-0054-48d4-961a-6dbdec51168d/1/odmzW8Pp8kk8ZNBvWy1KmcXyUek.mft
rsync://rpki.ripe.net/repository/DEFAULT/odmzW8Pp8kk8ZNBvWy1KmcXyUek.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Apr 2025 21:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:79:0c:ff:e7:7b:e8:77:88:72:0f:5e:de:2e:8a:3f:ab
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a1d9b35bc3e9f2493c64d06f5b2d4a99c5f251e9
Validity
Not Before: Apr 27 21:00:17 2025 GMT
Not After : Apr 28 21:00:17 2025 GMT
Subject: CN=a962ff4f2a62418d4f72feb51efeddd469a70ebd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ec:d0:dd:ba:54:eb:10:9e:2f:ce:a4:64:1f:b6:
11:ba:ee:ac:22:e6:5c:67:1d:0c:c0:93:ea:0b:5b:
67:d6:76:ed:20:87:dd:f6:2d:58:c4:aa:0b:ed:f4:
21:50:c3:ba:3e:9b:7c:1a:62:94:6a:5e:de:54:f9:
45:01:d3:00:7b:91:0b:83:18:23:ca:5f:0a:84:2c:
80:e7:6a:e0:6a:a6:d7:89:2f:3a:bc:36:a3:51:de:
3f:29:ba:1c:e4:7a:27:8b:3f:fc:81:fb:83:18:38:
a5:d3:ec:8d:c4:81:88:62:f9:1a:9d:df:18:33:49:
57:f0:8c:e7:66:0a:f1:ee:9a:7d:f6:8d:c7:ac:0b:
dd:48:46:1e:61:e4:36:a5:14:3c:5a:57:31:97:8e:
b4:6a:9c:14:51:cd:93:48:c5:f2:0b:a3:35:fd:9c:
8d:db:25:a4:46:ed:7f:fd:5e:67:b3:68:39:17:e5:
68:29:ae:8c:9c:05:99:0e:55:ed:e3:1b:4a:42:d5:
27:e2:0c:74:6e:32:f9:6a:e1:33:89:87:8b:a6:e1:
75:52:c9:d7:a9:78:0d:3b:b0:f7:4a:53:8a:65:5e:
7f:7b:37:9c:25:6f:98:a9:f5:bd:d2:5e:69:c3:f8:
65:3b:d2:c6:ae:ae:f2:0e:10:67:9f:c3:6b:ae:64:
4e:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A9:62:FF:4F:2A:62:41:8D:4F:72:FE:B5:1E:FE:DD:D4:69:A7:0E:BD
X509v3 Authority Key Identifier:
keyid:A1:D9:B3:5B:C3:E9:F2:49:3C:64:D0:6F:5B:2D:4A:99:C5:F2:51:E9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/odmzW8Pp8kk8ZNBvWy1KmcXyUek.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/4656f7-0054-48d4-961a-6dbdec51168d/1/odmzW8Pp8kk8ZNBvWy1KmcXyUek.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/4656f7-0054-48d4-961a-6dbdec51168d/1/odmzW8Pp8kk8ZNBvWy1KmcXyUek.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
bd:a2:bf:f6:f5:13:75:94:bb:21:35:b6:fd:63:f1:4a:50:41:
9c:b2:dc:77:05:00:71:06:b9:3f:bd:7f:5b:73:b5:82:5c:70:
1f:2e:55:56:7b:8a:b1:ef:56:a9:7f:eb:62:db:05:f1:1b:f4:
ac:f6:34:d6:ce:fc:97:6f:53:e9:ec:a0:ac:1c:3a:a0:34:79:
d7:e2:c9:af:cd:2a:92:6e:11:d1:05:ac:e9:34:ea:12:cd:5b:
33:23:74:b5:f0:f5:15:71:2f:37:37:c2:00:7c:9e:2a:34:d4:
da:7b:56:3b:2c:98:65:34:9d:a2:46:74:09:b1:1b:47:84:67:
5d:9c:5d:19:f1:e7:28:ed:5d:f6:75:4c:aa:db:a0:25:67:5b:
56:6a:53:aa:32:5f:3c:a9:c1:84:b9:1c:d7:1c:8b:e0:df:aa:
89:99:1f:d7:a3:ca:51:55:f8:9f:7d:5a:8f:c3:24:c7:81:dc:
0e:a4:4d:54:69:bf:61:23:22:09:ca:c6:25:03:a3:c7:a5:52:
3d:72:61:a0:ce:ff:0a:63:e4:3f:0f:79:f9:ef:51:26:5a:10:
70:6c:79:f8:88:83:66:06:7a:f8:62:1d:2d:31:ed:75:3c:6d:
67:66:22:5f:2f:48:2d:2f:f6:86:78:0f:06:a6:93:07:0a:87:
46:9a:8f:4b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 06:08:46 2025 by rpki-client