Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cd/c740f5-4f2b-4119-bd32-e159cd6f3654/1/OhZp0d72mq2VjU5W4b_5xk01DF8.mft
File: OhZp0d72mq2VjU5W4b_5xk01DF8.mft (raw, json)
Hash identifier: Hdef+Ygp8C0GwOjh0k9DOdq6HUhQtWsRMOcx2NXhd9g=
Subject key identifier: 8F:A2:3C:BE:9B:70:09:BF:0D:C6:83:FF:30:89:EB:EC:B2:E1:FE:C0
Authority key identifier: 3A:16:69:D1:DE:F6:9A:AD:95:8D:4E:56:E1:BF:F9:C6:4D:35:0C:5F
Certificate issuer: /CN=3a1669d1def69aad958d4e56e1bff9c64d350c5f
Certificate serial: 0196760CA8DD7E58445007C46AF395BFBC0A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OhZp0d72mq2VjU5W4b_5xk01DF8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cd/c740f5-4f2b-4119-bd32-e159cd6f3654/1/OhZp0d72mq2VjU5W4b_5xk01DF8.mft
Manifest number: 150E
Signing time: Sun 27 Apr 2025 07:01:03 +0000
Manifest this update: Sun 27 Apr 2025 07:01:03 +0000
Manifest next update: Mon 28 Apr 2025 07:01:03 +0000
Files and hashes: 1: OhZp0d72mq2VjU5W4b_5xk01DF8.crl (hash: MNsoyYnYjpk1p+zBdblVjy9Hr46dhGV3RZp7Uk2TdfM=)
2: noyu-6tYZVHLrDpPGxAJtnQSh_U.roa (hash: nKGQEFiiWYGJZ59iiIKbp3yXCuzw4v74qvYho/+7XMY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cd/c740f5-4f2b-4119-bd32-e159cd6f3654/1/OhZp0d72mq2VjU5W4b_5xk01DF8.crl
rsync://rpki.ripe.net/repository/DEFAULT/cd/c740f5-4f2b-4119-bd32-e159cd6f3654/1/OhZp0d72mq2VjU5W4b_5xk01DF8.mft
rsync://rpki.ripe.net/repository/DEFAULT/OhZp0d72mq2VjU5W4b_5xk01DF8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Apr 2025 05:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:76:0c:a8:dd:7e:58:44:50:07:c4:6a:f3:95:bf:bc:0a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3a1669d1def69aad958d4e56e1bff9c64d350c5f
Validity
Not Before: Apr 27 07:01:03 2025 GMT
Not After : Apr 28 07:01:03 2025 GMT
Subject: CN=8fa23cbe9b7009bf0dc683ff3089ebecb2e1fec0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:56:b4:ce:0c:a3:cb:7d:04:0b:91:2e:fb:83:
6d:b1:e9:e6:00:6b:0c:be:c5:ce:4c:be:55:92:05:
8a:e2:a3:89:a5:39:57:0b:8d:01:14:9e:79:5d:8d:
da:89:c2:d7:4f:9a:71:ad:30:36:d3:57:23:90:97:
fb:7d:06:5f:35:cf:b1:62:2f:18:20:41:7d:3a:ca:
bc:7d:c5:20:90:ff:77:76:e3:a8:4c:dc:11:02:85:
e7:8d:87:c3:fc:01:a5:f1:d1:2e:b0:19:8f:1f:6b:
8a:f7:20:32:7d:7c:eb:7e:84:c7:87:1d:a8:b1:6e:
39:a6:93:3d:ef:12:c0:c5:78:c8:93:ce:31:2c:0f:
c6:7c:2e:53:5e:c8:3c:17:e3:c3:28:d0:f8:b3:15:
a6:69:99:69:c8:55:68:c7:e1:8d:b6:44:36:b8:10:
f3:3e:c8:45:1e:ca:06:b3:8e:c7:00:1a:0e:ed:ce:
79:e7:73:1d:29:88:21:2e:39:c8:16:17:b6:b2:3e:
ea:a8:b6:34:e0:cd:f1:50:56:f4:fb:e3:be:5c:07:
65:f3:f7:94:a7:43:52:65:a9:38:fb:58:19:f6:4b:
51:17:9c:ca:52:68:f1:68:8f:46:c6:47:2d:4d:6e:
e3:41:8a:ca:19:48:7b:d8:e7:9b:ef:38:69:7c:cb:
0a:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8F:A2:3C:BE:9B:70:09:BF:0D:C6:83:FF:30:89:EB:EC:B2:E1:FE:C0
X509v3 Authority Key Identifier:
keyid:3A:16:69:D1:DE:F6:9A:AD:95:8D:4E:56:E1:BF:F9:C6:4D:35:0C:5F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OhZp0d72mq2VjU5W4b_5xk01DF8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/c740f5-4f2b-4119-bd32-e159cd6f3654/1/OhZp0d72mq2VjU5W4b_5xk01DF8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/c740f5-4f2b-4119-bd32-e159cd6f3654/1/OhZp0d72mq2VjU5W4b_5xk01DF8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
90:d5:96:6e:74:45:83:54:5a:b3:bd:27:95:23:7e:e5:8f:4b:
d5:3c:70:78:3a:42:c3:9e:5c:1e:6d:f3:f6:69:bb:09:47:a2:
49:07:c9:60:19:72:2d:ef:ac:5a:ae:4d:4b:49:7b:1b:b5:e2:
bb:02:f1:f0:a8:49:cf:82:e4:82:84:56:05:25:09:50:49:5f:
41:0e:32:6a:cc:1c:91:cf:b0:fc:f2:d1:c8:22:a7:82:b8:e4:
55:42:cd:82:35:ae:15:97:25:c1:07:e6:df:fe:f3:70:ba:c2:
ca:ae:67:a3:63:08:ee:05:35:9c:28:12:51:6a:e6:ff:51:cf:
4e:b1:4f:ed:2d:2f:b2:ea:04:66:71:7c:97:08:9f:5e:2d:b1:
4c:4c:c8:8d:b8:d8:5a:11:ed:d6:ae:06:4e:cb:d6:f5:a9:41:
36:30:4f:0f:71:c8:d1:ac:4b:75:49:25:8a:77:a3:34:19:73:
11:0f:2f:a2:8d:e5:9a:0a:90:ae:76:e1:db:aa:94:54:f9:a0:
19:b4:bc:1b:d5:b8:6b:d8:0a:c4:13:2c:dc:ad:bb:d8:dc:38:
06:fc:78:de:28:9b:e0:fc:e6:4f:21:6c:b8:ef:2a:04:77:57:
dd:98:d0:91:cc:e3:6f:2c:c2:45:f1:e7:38:68:73:d6:ec:5e:
d5:e7:fe:bb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 12:14:36 2025 by rpki-client