Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d8/388522-5df8-4963-9c2c-cf305c54393e/1/x-oItp98MM16CBOuuRCffnXSqjg.mft
File: x-oItp98MM16CBOuuRCffnXSqjg.mft (raw, json)
Hash identifier: gSlN38xY3+1nXgnMC99BY8lp+cPGvkkLQ6jdqkGsoUg=
Subject key identifier: E3:09:9F:36:8D:AF:D0:29:76:31:E5:5B:AC:BA:27:30:CC:E5:07:4F
Authority key identifier: C7:EA:08:B6:9F:7C:30:CD:7A:08:13:AE:B9:10:9F:7E:75:D2:AA:38
Certificate issuer: /CN=c7ea08b69f7c30cd7a0813aeb9109f7e75d2aa38
Certificate serial: 01967943EFDC78BDEB0616009C2542B885FA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/x-oItp98MM16CBOuuRCffnXSqjg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d8/388522-5df8-4963-9c2c-cf305c54393e/1/x-oItp98MM16CBOuuRCffnXSqjg.mft
Manifest number: 80
Signing time: Sun 27 Apr 2025 22:00:17 +0000
Manifest this update: Sun 27 Apr 2025 22:00:17 +0000
Manifest next update: Mon 28 Apr 2025 22:00:17 +0000
Files and hashes: 1: knx-k64K8qtPJdpjfbdBly0qzMA.roa (hash: IMguB5nM9IcQmXJ0qeK17lHUHskMg+lyEigOOYrzZIY=)
2: x-oItp98MM16CBOuuRCffnXSqjg.crl (hash: QBN2bjXz7p3pPyPHI5Vk2XlyfW2JxfsGkTEfs7qGDxo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d8/388522-5df8-4963-9c2c-cf305c54393e/1/x-oItp98MM16CBOuuRCffnXSqjg.crl
rsync://rpki.ripe.net/repository/DEFAULT/d8/388522-5df8-4963-9c2c-cf305c54393e/1/x-oItp98MM16CBOuuRCffnXSqjg.mft
rsync://rpki.ripe.net/repository/DEFAULT/x-oItp98MM16CBOuuRCffnXSqjg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Apr 2025 16:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:79:43:ef:dc:78:bd:eb:06:16:00:9c:25:42:b8:85:fa
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c7ea08b69f7c30cd7a0813aeb9109f7e75d2aa38
Validity
Not Before: Apr 27 22:00:17 2025 GMT
Not After : Apr 28 22:00:17 2025 GMT
Subject: CN=e3099f368dafd0297631e55bacba2730cce5074f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:20:96:70:80:64:b1:ea:aa:1f:f4:63:10:23:
06:0d:90:78:ed:7d:60:66:71:a1:fd:17:af:b6:6f:
ea:6a:c5:30:27:86:4d:63:39:60:b5:8b:7f:93:a1:
d1:41:30:97:6a:f8:be:ea:2c:91:14:c1:06:57:a8:
db:c3:e6:6f:c2:62:5f:03:ee:7b:88:37:d2:99:05:
f9:9b:12:fe:a3:f0:74:fe:28:65:f4:e9:63:8f:34:
21:09:fa:02:2e:01:e2:80:16:fe:fe:65:1d:58:c2:
40:5f:6b:b0:33:d4:f4:3a:d5:eb:4c:f6:bd:63:e0:
4b:98:ce:08:c7:44:c8:4d:fe:d8:07:44:4e:3d:35:
4c:2a:fd:20:67:96:8e:f7:39:7c:08:48:82:e2:a0:
68:81:8d:b1:5f:d6:e1:7d:cb:77:01:86:be:3b:74:
97:6d:66:e5:1c:7c:ea:57:b2:ee:1a:9e:f6:5c:f7:
ef:ba:06:08:87:38:4a:0f:39:32:5e:9b:ca:49:ac:
ad:d8:62:77:9f:19:76:09:0b:72:0b:0e:42:c2:12:
bb:ba:4a:8d:56:9b:e7:62:81:73:e7:36:d0:87:fd:
3a:b7:0c:d5:b8:ac:7b:fa:e5:2b:21:cc:54:26:64:
54:ec:e1:50:46:44:ab:fc:0a:c4:09:27:5d:fc:1d:
82:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E3:09:9F:36:8D:AF:D0:29:76:31:E5:5B:AC:BA:27:30:CC:E5:07:4F
X509v3 Authority Key Identifier:
keyid:C7:EA:08:B6:9F:7C:30:CD:7A:08:13:AE:B9:10:9F:7E:75:D2:AA:38
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/x-oItp98MM16CBOuuRCffnXSqjg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/388522-5df8-4963-9c2c-cf305c54393e/1/x-oItp98MM16CBOuuRCffnXSqjg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/388522-5df8-4963-9c2c-cf305c54393e/1/x-oItp98MM16CBOuuRCffnXSqjg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7d:ff:6c:fa:c2:11:6f:35:30:0d:6d:48:20:dc:82:98:18:70:
e7:8c:dd:f7:e8:82:62:1d:1e:7c:04:5c:37:fd:87:a1:e9:a7:
d9:53:3c:ce:2e:06:27:b0:1d:e5:4f:f3:3f:11:53:22:58:cb:
f3:61:98:7e:68:7b:74:bb:72:61:1c:7f:05:8b:4b:0d:0c:ca:
ed:6b:61:aa:94:d1:e9:31:6b:1f:55:ab:69:7a:3c:64:7b:fc:
85:9d:ef:4d:ea:27:25:87:11:17:3c:3f:f7:02:6d:a2:86:a4:
89:8f:5c:67:50:49:c5:31:d6:fa:d8:33:cf:e5:73:27:bc:4f:
1e:9a:cf:99:e3:85:69:42:e5:0a:07:60:9a:01:36:fb:b8:a3:
7d:cf:3c:1c:e0:9a:21:da:38:30:f5:23:b1:39:a2:4b:d6:55:
7e:0d:e0:e6:1e:83:f3:87:82:cb:41:3b:a1:90:d3:e7:ef:1e:
43:7b:03:71:99:d6:5f:34:c8:f0:9b:c7:ac:41:d2:90:75:28:
74:37:06:6e:2f:87:a9:e2:94:2f:1c:0c:10:71:17:a1:6e:89:
b9:8b:ea:3b:1e:d9:79:66:09:7c:98:20:82:67:91:5b:10:b2:
43:d8:b8:da:2c:05:7d:29:5b:52:68:6d:c8:16:b8:3d:52:a8:
e1:7e:e5:b6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 02:16:12 2025 by rpki-client