Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cf/347c34-96d8-4184-a668-870acfecbcdf/1/OcpQZQQ9KKKtw2ODod99O-yBzo0.mft
File: OcpQZQQ9KKKtw2ODod99O-yBzo0.mft (raw, json)
Hash identifier: ORJh72+8z7y0rJSYcPqW8aiYKZwYgbbg8JPbvF0vKNM=
Subject key identifier: 26:0D:56:47:56:CB:2B:E8:A1:B1:06:32:9E:B0:2E:59:BB:97:3C:01
Authority key identifier: 39:CA:50:65:04:3D:28:A2:AD:C3:63:83:A1:DF:7D:3B:EC:81:CE:8D
Certificate issuer: /CN=39ca5065043d28a2adc36383a1df7d3bec81ce8d
Certificate serial: 019684A3781B40873EB1A72F6F73887622FC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OcpQZQQ9KKKtw2ODod99O-yBzo0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cf/347c34-96d8-4184-a668-870acfecbcdf/1/OcpQZQQ9KKKtw2ODod99O-yBzo0.mft
Manifest number: 1110
Signing time: Wed 30 Apr 2025 03:00:27 +0000
Manifest this update: Wed 30 Apr 2025 03:00:27 +0000
Manifest next update: Thu 01 May 2025 03:00:27 +0000
Files and hashes: 1: EZv_Oz18_ep5ks2EcgzgLDMuntA.roa (hash: lBizg0TLw4IiTc/RnpBc57fyU2N8mObQpuT7b6/poBM=)
2: OcpQZQQ9KKKtw2ODod99O-yBzo0.crl (hash: goaBNjcsPCizjF4KJjQYsYAcTRoRSdA4Eevu3yEZPXI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cf/347c34-96d8-4184-a668-870acfecbcdf/1/OcpQZQQ9KKKtw2ODod99O-yBzo0.crl
rsync://rpki.ripe.net/repository/DEFAULT/cf/347c34-96d8-4184-a668-870acfecbcdf/1/OcpQZQQ9KKKtw2ODod99O-yBzo0.mft
rsync://rpki.ripe.net/repository/DEFAULT/OcpQZQQ9KKKtw2ODod99O-yBzo0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 01 May 2025 03:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:84:a3:78:1b:40:87:3e:b1:a7:2f:6f:73:88:76:22:fc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=39ca5065043d28a2adc36383a1df7d3bec81ce8d
Validity
Not Before: Apr 30 03:00:27 2025 GMT
Not After : May 1 03:00:27 2025 GMT
Subject: CN=260d564756cb2be8a1b106329eb02e59bb973c01
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:91:a7:40:37:24:e3:4e:88:95:32:35:cb:70:17:
50:5b:dc:0a:33:c6:35:89:17:c3:91:ec:d9:66:e4:
fc:bf:93:3d:c9:1d:07:70:98:d4:a0:3f:29:71:0b:
48:e9:14:00:5e:45:01:c8:c0:d2:ef:f8:dc:4e:74:
cf:c6:80:89:96:46:ac:24:2a:6d:19:73:e7:1d:50:
c3:4d:f2:4f:b9:94:7e:af:25:91:92:9a:3c:55:2e:
6d:67:28:6f:c4:88:51:ff:1f:24:c2:e8:28:46:a7:
01:4d:49:ee:3f:ea:62:2a:05:19:4d:20:8f:05:4b:
46:78:f6:da:22:0e:74:06:31:5e:6e:33:28:fe:a8:
74:5d:58:19:c9:62:db:f4:63:40:e5:1a:85:73:41:
5e:22:c0:09:f6:b3:45:c6:5d:31:dd:d3:6c:fa:1b:
1e:f6:ab:3f:1e:bd:98:39:d8:2f:6b:2a:02:ed:41:
a4:93:ee:42:2b:f6:f8:20:43:5c:5b:f4:34:92:af:
11:e6:41:bb:ca:ac:71:0f:ce:23:a9:6c:bd:ed:62:
77:a9:38:a6:18:58:17:b5:28:dd:84:a1:20:dc:27:
ef:3d:72:cf:68:5c:a5:c5:84:67:bc:5f:c1:3f:e0:
2f:fa:f8:e4:6d:db:c6:fa:59:e8:57:8e:64:ba:0e:
8b:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
26:0D:56:47:56:CB:2B:E8:A1:B1:06:32:9E:B0:2E:59:BB:97:3C:01
X509v3 Authority Key Identifier:
keyid:39:CA:50:65:04:3D:28:A2:AD:C3:63:83:A1:DF:7D:3B:EC:81:CE:8D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OcpQZQQ9KKKtw2ODod99O-yBzo0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cf/347c34-96d8-4184-a668-870acfecbcdf/1/OcpQZQQ9KKKtw2ODod99O-yBzo0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cf/347c34-96d8-4184-a668-870acfecbcdf/1/OcpQZQQ9KKKtw2ODod99O-yBzo0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
63:62:91:86:ff:37:21:83:73:4e:36:33:1b:c5:3c:f4:2d:2d:
56:1d:be:74:22:8d:95:61:fb:19:32:54:4f:32:98:59:aa:17:
34:d2:e0:5e:46:0c:f1:5c:ef:47:46:a6:cb:56:a7:4e:e2:1b:
04:85:83:68:c1:8c:61:7a:89:aa:bf:39:5a:df:ba:32:2c:8e:
db:bf:0e:ca:17:d1:54:fe:e1:d1:d9:9e:85:f9:be:3c:d1:10:
84:b3:97:4b:a6:fd:2b:98:9f:83:3b:51:7a:fb:56:98:ba:90:
cf:ae:48:5a:27:b5:82:97:af:eb:2b:55:d6:56:54:55:c2:e0:
ba:72:a4:9d:f2:f8:c1:38:40:13:be:d3:6c:58:36:61:e8:90:
52:3a:8b:85:94:bf:f9:97:68:90:e0:7f:4d:46:ba:08:4e:9d:
78:97:90:78:26:b7:00:9e:3f:56:88:d8:56:2e:48:06:90:2f:
57:94:f0:5a:4d:11:6a:27:73:aa:6e:f2:57:24:99:b5:7c:4e:
0c:09:84:8e:28:3d:ea:2f:d1:17:75:ff:89:d8:8d:c7:82:ca:
b0:4d:d6:24:8f:9b:62:00:45:4f:05:60:8e:31:a6:35:1b:2c:
1c:f2:71:2b:46:66:4e:7f:0e:6c:d6:59:4d:7b:f6:db:b6:c8:
94:d5:17:c5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 30 13:02:25 2025 by rpki-client