Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cd/d4b7f3-40ce-42ed-a93b-5e8dedac9cb7/1/OoTf7z1RB7hPx3xW3PeeBf6cc1E.mft
File: OoTf7z1RB7hPx3xW3PeeBf6cc1E.mft (raw, json)
Hash identifier: snK7p3Z/R7obwrwPma3x5Bz5gpB0A1oNk6BJql+bCm4=
Subject key identifier: A2:DF:09:6F:45:B9:4E:98:65:82:D6:B2:AA:86:DA:FF:1C:17:9A:9A
Authority key identifier: 3A:84:DF:EF:3D:51:07:B8:4F:C7:7C:56:DC:F7:9E:05:FE:9C:73:51
Certificate issuer: /CN=3a84dfef3d5107b84fc77c56dcf79e05fe9c7351
Certificate serial: 019676433237324708BCA939ECD841701BA1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OoTf7z1RB7hPx3xW3PeeBf6cc1E.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cd/d4b7f3-40ce-42ed-a93b-5e8dedac9cb7/1/OoTf7z1RB7hPx3xW3PeeBf6cc1E.mft
Manifest number: 0F29
Signing time: Sun 27 Apr 2025 08:00:37 +0000
Manifest this update: Sun 27 Apr 2025 08:00:37 +0000
Manifest next update: Mon 28 Apr 2025 08:00:37 +0000
Files and hashes: 1: OoTf7z1RB7hPx3xW3PeeBf6cc1E.crl (hash: 1Y/0Z6SOAeUX1amGj+PQas/oUZrQpeWYEq3StSUIakA=)
2: fmsKsNJsScyYZyH8RUfSLeG-UJA.roa (hash: XWgPxzT1eqv4he1A7biAZG6QqWis59ng7mldQueWS0g=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cd/d4b7f3-40ce-42ed-a93b-5e8dedac9cb7/1/OoTf7z1RB7hPx3xW3PeeBf6cc1E.crl
rsync://rpki.ripe.net/repository/DEFAULT/cd/d4b7f3-40ce-42ed-a93b-5e8dedac9cb7/1/OoTf7z1RB7hPx3xW3PeeBf6cc1E.mft
rsync://rpki.ripe.net/repository/DEFAULT/OoTf7z1RB7hPx3xW3PeeBf6cc1E.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Apr 2025 05:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:76:43:32:37:32:47:08:bc:a9:39:ec:d8:41:70:1b:a1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3a84dfef3d5107b84fc77c56dcf79e05fe9c7351
Validity
Not Before: Apr 27 08:00:37 2025 GMT
Not After : Apr 28 08:00:37 2025 GMT
Subject: CN=a2df096f45b94e986582d6b2aa86daff1c179a9a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e5:6e:e8:da:a4:69:6d:0a:87:28:31:55:39:ca:
3a:a3:16:b5:ee:5a:16:ee:66:b5:6c:d0:ec:9c:dc:
a4:80:94:b0:84:05:70:55:10:df:6b:6c:25:ae:4b:
b1:4f:d9:a1:32:c4:a2:d9:03:77:fd:56:02:a8:a5:
16:2b:92:47:4a:3d:83:2b:e2:79:4d:1b:9a:78:c7:
c1:22:a6:29:c7:d5:b8:8b:aa:12:59:b7:9f:0e:7a:
8e:17:dd:ab:3c:db:4d:c6:7e:63:7f:1e:ca:b6:55:
a5:d5:92:b0:87:0f:62:49:8f:8e:f4:6a:02:b8:ff:
fa:30:ec:31:50:db:ca:65:b8:91:2d:45:cd:1d:32:
be:e0:d9:a3:9d:33:17:37:05:b9:c9:94:fe:db:6f:
1b:90:31:14:f6:41:3e:a6:79:5d:50:42:ee:95:a7:
7a:ef:51:b7:82:d5:2a:5e:e4:e0:22:86:71:1f:c8:
9b:19:bf:11:66:07:a6:4b:9c:42:08:fa:ed:54:8c:
b8:6a:96:3c:19:55:91:25:79:f3:f2:9f:3f:04:46:
72:a0:b0:b6:78:fa:e2:45:43:1a:df:f9:23:19:68:
89:b6:69:82:99:30:a2:3b:20:b1:7a:59:06:c8:c2:
ce:be:67:44:d6:56:32:2b:0a:57:bd:39:53:60:7f:
03:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A2:DF:09:6F:45:B9:4E:98:65:82:D6:B2:AA:86:DA:FF:1C:17:9A:9A
X509v3 Authority Key Identifier:
keyid:3A:84:DF:EF:3D:51:07:B8:4F:C7:7C:56:DC:F7:9E:05:FE:9C:73:51
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OoTf7z1RB7hPx3xW3PeeBf6cc1E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/d4b7f3-40ce-42ed-a93b-5e8dedac9cb7/1/OoTf7z1RB7hPx3xW3PeeBf6cc1E.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/d4b7f3-40ce-42ed-a93b-5e8dedac9cb7/1/OoTf7z1RB7hPx3xW3PeeBf6cc1E.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
52:48:e5:1f:c1:73:f1:07:b7:ad:8e:7e:ba:e4:9a:ed:e0:14:
53:db:2d:6f:56:92:9f:be:03:80:e8:ea:08:34:ea:66:6c:95:
07:15:c3:9f:8e:9d:c7:b8:75:62:b2:fc:95:de:8d:0d:34:81:
7e:96:40:f1:f8:1f:05:38:d4:f2:ae:ff:23:21:2c:11:06:03:
0f:12:5d:71:75:c0:22:09:49:cd:45:71:a8:59:5a:02:5a:f5:
d6:b2:13:7b:97:7a:7e:8a:80:e3:31:9c:66:79:90:d9:23:68:
ec:8e:41:4d:66:dc:61:da:e3:66:db:14:0a:08:db:af:73:bc:
a7:40:86:4e:32:d2:71:89:f4:cb:6f:aa:a7:2d:00:c5:3d:7c:
8a:b3:35:25:bc:2f:62:39:89:89:13:2a:31:33:bc:43:10:39:
f4:cd:da:b0:f3:77:81:ef:25:09:9a:d6:37:6d:99:94:d7:af:
26:e8:61:88:81:9f:81:39:c1:9b:05:67:bd:ac:0d:bb:80:ac:
dd:6d:13:49:9d:8a:30:bd:6e:33:07:41:1f:ca:6d:50:cf:3b:
df:6f:b1:4d:2a:a5:d1:92:da:9e:ce:f5:b9:5b:67:b6:cf:35:
74:45:7e:ec:c5:36:32:da:f8:13:67:80:2d:77:54:5f:eb:59:
61:9f:e5:3d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 15:06:00 2025 by rpki-client