Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/09/0f355a-3a0a-46ec-b07f-866607af2fa5/1/o3gRjbBeTJPnb6HxyVZ5xwW-sgg.mft
File: o3gRjbBeTJPnb6HxyVZ5xwW-sgg.mft (raw, json)
Hash identifier: 7Favj5vd0QdWYkX7RA2nlqVK4+rzqMJ8y1zBobs2Qv4=
Subject key identifier: BE:67:48:B9:0A:33:80:9E:E7:88:FE:09:F6:33:08:3C:C0:09:A1:A1
Authority key identifier: A3:78:11:8D:B0:5E:4C:93:E7:6F:A1:F1:C9:56:79:C7:05:BE:B2:08
Certificate issuer: /CN=a378118db05e4c93e76fa1f1c95679c705beb208
Certificate serial: 01968849511A12378D0D6B1D4AAC9FCE9128
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/o3gRjbBeTJPnb6HxyVZ5xwW-sgg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/09/0f355a-3a0a-46ec-b07f-866607af2fa5/1/o3gRjbBeTJPnb6HxyVZ5xwW-sgg.mft
Manifest number: 151B
Signing time: Wed 30 Apr 2025 20:00:28 +0000
Manifest this update: Wed 30 Apr 2025 20:00:28 +0000
Manifest next update: Thu 01 May 2025 20:00:28 +0000
Files and hashes: 1: 44FBBoaP1hY4HlkyJxoeqw82Ez0.roa (hash: Ij/VEJNQIjQvvNrHY8dRfRHlSxSYc7lDRay7etVRtiI=)
2: Vwp4sUHwufYyD-bPptLzOvd6WdQ.roa (hash: YWIoCXXcHFga0/3pa1NcRYE9BSy/d2UDiqjf+NsI2BE=)
3: o3gRjbBeTJPnb6HxyVZ5xwW-sgg.crl (hash: rTY+xEmPDaZcdHBsqD1N2Y8PVmCwD/1gxUr0lUjShtI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/09/0f355a-3a0a-46ec-b07f-866607af2fa5/1/o3gRjbBeTJPnb6HxyVZ5xwW-sgg.crl
rsync://rpki.ripe.net/repository/DEFAULT/09/0f355a-3a0a-46ec-b07f-866607af2fa5/1/o3gRjbBeTJPnb6HxyVZ5xwW-sgg.mft
rsync://rpki.ripe.net/repository/DEFAULT/o3gRjbBeTJPnb6HxyVZ5xwW-sgg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 01 May 2025 20:00:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:88:49:51:1a:12:37:8d:0d:6b:1d:4a:ac:9f:ce:91:28
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a378118db05e4c93e76fa1f1c95679c705beb208
Validity
Not Before: Apr 30 20:00:28 2025 GMT
Not After : May 1 20:00:28 2025 GMT
Subject: CN=be6748b90a33809ee788fe09f633083cc009a1a1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:77:9b:84:b2:9e:a5:3c:22:89:96:f9:a3:f5:
cc:6d:8d:0b:83:6c:86:b9:59:a5:8b:08:bd:a6:01:
92:c2:78:3f:9b:b4:22:a4:a6:41:98:68:8a:2e:f2:
69:a8:7c:18:5b:d5:8a:ba:1c:10:0b:80:64:a3:e0:
64:f1:be:84:37:b2:f4:5c:17:9e:ce:c6:d6:d6:bb:
56:f6:86:16:7f:c0:78:48:01:86:71:6b:e9:7c:43:
73:a4:e9:4a:d2:5f:d3:87:04:85:24:21:53:c2:7f:
97:12:51:ec:d1:21:68:17:c2:08:43:97:4d:49:b0:
c3:9b:11:36:78:a1:55:6b:6b:b7:6c:d1:3f:04:21:
4f:7e:22:7c:da:10:d2:14:3b:3b:44:6e:96:2f:12:
d3:2d:b3:35:40:3b:53:71:7c:31:d1:45:e4:63:a3:
bb:7b:1c:34:9a:da:27:7f:a3:20:01:5b:79:55:c9:
28:fe:7d:23:c2:9f:3f:a1:93:78:2e:49:57:8e:ff:
0b:b2:9c:d2:e6:97:84:4b:b3:6e:eb:42:70:01:84:
a2:60:55:86:5e:0c:62:96:2a:f8:a9:54:53:ed:a6:
10:f3:69:cb:ac:2a:53:60:0d:2d:5e:17:21:bc:6d:
c6:c6:47:37:84:11:3f:15:59:ca:15:6f:08:8f:60:
1e:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BE:67:48:B9:0A:33:80:9E:E7:88:FE:09:F6:33:08:3C:C0:09:A1:A1
X509v3 Authority Key Identifier:
keyid:A3:78:11:8D:B0:5E:4C:93:E7:6F:A1:F1:C9:56:79:C7:05:BE:B2:08
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/o3gRjbBeTJPnb6HxyVZ5xwW-sgg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/09/0f355a-3a0a-46ec-b07f-866607af2fa5/1/o3gRjbBeTJPnb6HxyVZ5xwW-sgg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/09/0f355a-3a0a-46ec-b07f-866607af2fa5/1/o3gRjbBeTJPnb6HxyVZ5xwW-sgg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a7:50:55:bc:75:85:40:2b:a9:69:3b:62:59:3e:49:56:60:f9:
72:99:38:18:b0:3c:a5:12:0f:9d:96:dc:35:39:25:c9:ca:3c:
08:2a:0a:05:3f:e9:a3:78:9a:24:0f:df:c2:02:65:19:33:24:
0f:b0:7a:25:8c:54:ec:ab:cd:b8:7c:41:78:b8:4c:6f:88:ba:
e1:58:18:a3:fd:8e:89:ab:3b:e2:cc:69:12:ac:03:fe:80:f0:
de:9d:23:a1:c8:55:7b:0f:7b:9a:e8:49:2e:53:74:0d:7b:bc:
0d:f9:75:23:7b:11:47:31:63:c0:57:13:29:0d:2c:66:08:c4:
84:04:1a:c8:65:7b:2c:f1:0b:9f:7a:d0:d4:78:a9:be:7f:61:
a5:b2:94:ea:89:93:37:8f:bc:73:82:ad:dd:fe:84:bd:b1:4c:
66:38:e9:9f:60:30:e5:70:4f:04:3e:42:a0:e1:6f:77:06:cf:
05:9b:be:d1:d8:1b:44:a8:3d:7b:8c:e5:ef:af:5f:4e:25:cc:
8e:11:58:7b:63:9a:7c:34:f1:d2:37:89:3e:93:80:57:df:ff:
5e:6f:35:17:2d:53:b7:7c:73:bd:35:af:42:44:ef:b8:01:4c:
79:b7:83:5e:7f:1d:b5:fa:01:03:b7:29:f1:a2:67:5a:30:18:
ae:95:83:1a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 1 06:12:21 2025 by rpki-client