Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/22/ec6905-b0f7-424f-8a84-28bec7b99929/1/o3U2my1LsuLe3maGRTE-NE5vHMA.mft
File: o3U2my1LsuLe3maGRTE-NE5vHMA.mft (raw, json)
Hash identifier: /wQ6xCtBHCHj/9X2tB0WYO2zOVz7yt/+YR2EjoTHFWU=
Subject key identifier: 13:E8:75:CB:C6:DF:93:48:4C:0E:EF:87:FA:2C:B8:F7:F0:3B:E4:25
Authority key identifier: A3:75:36:9B:2D:4B:B2:E2:DE:DE:66:86:45:31:3E:34:4E:6F:1C:C0
Certificate issuer: /CN=a375369b2d4bb2e2dede668645313e344e6f1cc0
Certificate serial: 01968849A7CB2FE171A8DB12A7C9D141DF8E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/o3U2my1LsuLe3maGRTE-NE5vHMA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/22/ec6905-b0f7-424f-8a84-28bec7b99929/1/o3U2my1LsuLe3maGRTE-NE5vHMA.mft
Manifest number: 151C
Signing time: Wed 30 Apr 2025 20:00:50 +0000
Manifest this update: Wed 30 Apr 2025 20:00:50 +0000
Manifest next update: Thu 01 May 2025 20:00:50 +0000
Files and hashes: 1: DyAD9klcag15NhnplKEMXi8dKqg.roa (hash: Zvr5j/JLyl2kQb4eL63NQCTsndBLbuYPjEiWULmfej8=)
2: o3U2my1LsuLe3maGRTE-NE5vHMA.crl (hash: MyLootTQ35fWZlQObRVYI/ADpWo01X0VkEUReheHiik=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/22/ec6905-b0f7-424f-8a84-28bec7b99929/1/o3U2my1LsuLe3maGRTE-NE5vHMA.crl
rsync://rpki.ripe.net/repository/DEFAULT/22/ec6905-b0f7-424f-8a84-28bec7b99929/1/o3U2my1LsuLe3maGRTE-NE5vHMA.mft
rsync://rpki.ripe.net/repository/DEFAULT/o3U2my1LsuLe3maGRTE-NE5vHMA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 01 May 2025 20:00:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:88:49:a7:cb:2f:e1:71:a8:db:12:a7:c9:d1:41:df:8e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a375369b2d4bb2e2dede668645313e344e6f1cc0
Validity
Not Before: Apr 30 20:00:50 2025 GMT
Not After : May 1 20:00:50 2025 GMT
Subject: CN=13e875cbc6df93484c0eef87fa2cb8f7f03be425
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:4b:e0:f9:64:92:85:26:e4:03:a3:b4:ac:36:
5f:95:09:2c:df:17:79:ab:fe:bd:c8:7e:88:c9:78:
77:f2:4d:08:7d:6b:80:f4:5d:29:b8:7a:c3:28:8e:
e7:f0:2d:98:53:12:ca:94:ce:85:83:4a:64:75:50:
1b:04:0f:12:3d:d6:a6:21:fc:f0:aa:60:25:5e:11:
48:0a:c3:f9:23:54:80:3a:5c:6c:97:f1:b5:87:96:
0b:36:e4:2b:03:6d:b8:f9:ad:b6:00:d3:22:a1:b4:
ef:71:01:e4:de:11:9b:6f:49:28:13:d2:bd:51:dc:
d6:7c:14:a6:d1:76:00:37:10:ff:c0:75:cc:cb:3b:
b8:18:19:12:96:8d:fd:36:26:18:e2:61:eb:e7:c7:
96:f6:22:18:38:65:21:5a:6e:f2:df:c2:d1:2c:2e:
64:cb:46:54:34:bf:27:79:6c:5b:7d:af:58:cb:2c:
a1:9d:42:6b:11:0d:4d:36:ed:d1:8f:42:48:46:b7:
cc:c2:e4:16:88:c5:68:7c:24:47:7f:36:cd:8d:dd:
70:9a:bf:a5:c3:28:0a:28:d8:64:04:79:1f:e9:6f:
6c:bc:d2:04:d6:ca:15:60:a7:88:d8:0e:da:a4:ee:
32:e4:43:09:7a:f0:28:34:1f:91:7d:e2:98:7c:6c:
e8:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
13:E8:75:CB:C6:DF:93:48:4C:0E:EF:87:FA:2C:B8:F7:F0:3B:E4:25
X509v3 Authority Key Identifier:
keyid:A3:75:36:9B:2D:4B:B2:E2:DE:DE:66:86:45:31:3E:34:4E:6F:1C:C0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/o3U2my1LsuLe3maGRTE-NE5vHMA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/22/ec6905-b0f7-424f-8a84-28bec7b99929/1/o3U2my1LsuLe3maGRTE-NE5vHMA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/22/ec6905-b0f7-424f-8a84-28bec7b99929/1/o3U2my1LsuLe3maGRTE-NE5vHMA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
30:c2:51:da:80:1f:84:40:22:83:70:55:0c:ae:73:d4:94:a6:
6c:ae:cf:87:d7:6c:7b:a1:c8:b1:69:13:56:c1:9b:be:ec:c2:
b8:6b:04:17:dc:b2:d3:1f:d6:04:e9:a8:f8:d4:b3:9c:e2:b9:
12:fe:b2:b9:66:93:e5:b2:51:97:e6:8c:7a:7d:15:6a:68:8a:
d9:4e:b3:f2:33:4f:db:a9:b4:ab:f4:64:cb:c9:3b:2d:a2:c5:
cb:a2:41:60:5b:43:0e:85:f4:de:4a:00:be:1e:b2:cd:9b:76:
f7:1b:1d:59:3d:0d:4c:f4:56:81:65:8f:a5:fc:78:60:fb:b5:
be:d3:2f:0d:0a:56:57:96:77:0c:67:76:a1:57:9a:37:20:37:
bc:e5:bf:17:f4:33:8a:02:b7:19:a3:dd:99:e5:a5:24:23:f7:
46:d5:ac:97:bb:80:b2:1e:8b:0e:00:60:1d:c6:34:fa:d5:80:
c4:eb:e2:25:9c:8e:59:e7:db:a0:88:d6:77:47:f3:92:89:28:
17:ce:5c:2c:8c:8a:f9:f7:22:b9:c6:82:c0:e7:79:9b:7b:87:
8a:08:b4:a1:6d:bb:53:91:ad:3e:de:78:1a:30:82:6f:b6:62:
89:b0:5d:70:bf:23:06:c5:7e:9b:c1:82:10:ce:48:b5:1e:17:
e2:38:24:04
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 30 23:37:32 2025 by rpki-client