Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2d/a6831e-f3ae-455f-a395-5db851d6f086/1/o860BZh6Oqi75ZnY70ZjySQqNLg.mft
File: o860BZh6Oqi75ZnY70ZjySQqNLg.mft (raw, json)
Hash identifier: +3NnAj+iu7DlbuXNJs2XzaH9uIB5LTECoB8jMuuMaRY=
Subject key identifier: 3C:0E:3F:7D:A2:8C:06:61:B1:6B:0A:C8:4E:49:8A:F2:92:67:D8:9B
Authority key identifier: A3:CE:B4:05:98:7A:3A:A8:BB:E5:99:D8:EF:46:63:C9:24:2A:34:B8
Certificate issuer: /CN=a3ceb405987a3aa8bbe599d8ef4663c9242a34b8
Certificate serial: 01967F464AB5DA34B043810361CF1DA7BB7D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/o860BZh6Oqi75ZnY70ZjySQqNLg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2d/a6831e-f3ae-455f-a395-5db851d6f086/1/o860BZh6Oqi75ZnY70ZjySQqNLg.mft
Manifest number: 1162
Signing time: Tue 29 Apr 2025 02:00:35 +0000
Manifest this update: Tue 29 Apr 2025 02:00:35 +0000
Manifest next update: Wed 30 Apr 2025 02:00:35 +0000
Files and hashes: 1: o860BZh6Oqi75ZnY70ZjySQqNLg.crl (hash: 7bcRCuu56p0LDUQpGpWIcJUFnRU8ovqFF5cyNaKp2QU=)
2: uvI_GRIq2GyJoG31og82hOgTWrg.roa (hash: OrH6axib8qnAg3xAnrBLPJ8IdTDHwClsXRZdDBToyxU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2d/a6831e-f3ae-455f-a395-5db851d6f086/1/o860BZh6Oqi75ZnY70ZjySQqNLg.crl
rsync://rpki.ripe.net/repository/DEFAULT/2d/a6831e-f3ae-455f-a395-5db851d6f086/1/o860BZh6Oqi75ZnY70ZjySQqNLg.mft
rsync://rpki.ripe.net/repository/DEFAULT/o860BZh6Oqi75ZnY70ZjySQqNLg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 30 Apr 2025 00:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:7f:46:4a:b5:da:34:b0:43:81:03:61:cf:1d:a7:bb:7d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a3ceb405987a3aa8bbe599d8ef4663c9242a34b8
Validity
Not Before: Apr 29 02:00:35 2025 GMT
Not After : Apr 30 02:00:35 2025 GMT
Subject: CN=3c0e3f7da28c0661b16b0ac84e498af29267d89b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:89:ad:f8:ee:c6:fc:11:a9:01:e3:9f:2f:46:21:
77:d5:65:c6:97:58:82:a4:cb:d9:46:3d:41:a4:6c:
cf:18:bb:0f:f0:a7:84:fe:ba:ec:73:1a:a2:64:7c:
ab:50:49:aa:eb:f4:52:ff:47:9d:0a:88:22:57:c5:
34:f6:8c:2f:10:b6:9b:f3:ca:aa:71:9f:ef:3f:87:
df:61:38:38:d1:a6:ce:14:3e:d8:bc:17:21:2b:71:
ee:bd:b1:cc:92:4a:c1:d2:a7:be:1d:39:04:52:45:
e2:98:b8:3b:0c:9f:39:e6:29:6a:49:d1:f7:e2:2c:
46:97:50:fc:52:2f:82:ef:ab:8c:7c:cd:9f:a4:c1:
8c:08:62:3a:b3:94:22:f8:2f:44:5c:c4:8c:f6:87:
99:65:6b:4e:24:ad:11:12:41:71:e0:49:ff:73:53:
31:7a:b8:37:e1:2d:c9:36:ac:bc:20:3b:28:af:c4:
d8:98:aa:59:d1:9b:cf:96:4f:4f:31:aa:5a:dc:b6:
fd:b3:32:98:c7:ab:4d:91:42:1a:e3:44:9c:31:29:
1d:9f:e1:af:7a:12:8a:26:27:88:2c:dd:44:30:3b:
56:cb:d6:f6:ef:76:f7:2b:e9:5e:f8:72:7e:56:b7:
ec:9f:57:a5:44:45:a2:4f:fe:58:d4:d9:ce:72:b6:
cc:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3C:0E:3F:7D:A2:8C:06:61:B1:6B:0A:C8:4E:49:8A:F2:92:67:D8:9B
X509v3 Authority Key Identifier:
keyid:A3:CE:B4:05:98:7A:3A:A8:BB:E5:99:D8:EF:46:63:C9:24:2A:34:B8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/o860BZh6Oqi75ZnY70ZjySQqNLg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/a6831e-f3ae-455f-a395-5db851d6f086/1/o860BZh6Oqi75ZnY70ZjySQqNLg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/a6831e-f3ae-455f-a395-5db851d6f086/1/o860BZh6Oqi75ZnY70ZjySQqNLg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ba:0f:54:37:93:0f:79:76:fd:22:0d:6a:73:c3:db:6c:de:5e:
ad:f5:a7:16:f0:7b:38:32:07:3c:37:32:cb:51:cc:c1:30:90:
e8:59:19:db:c3:24:d6:7b:2c:0c:70:61:51:26:6e:08:29:bc:
c9:5c:aa:b5:9d:73:ad:ed:3b:e0:e0:33:b8:81:74:7a:52:1d:
8d:93:ce:97:34:f0:c5:d9:2c:ea:90:10:68:a5:d5:ed:10:5d:
7b:ba:f7:80:3d:53:f9:e5:8d:94:3a:b4:84:a9:c5:5f:57:5c:
72:2a:d8:10:65:ce:15:ac:0f:96:10:f5:56:14:df:8e:1a:80:
aa:61:b5:75:87:f9:17:2c:ec:3c:e9:38:6f:b0:71:28:70:14:
69:4a:38:08:f6:6f:72:50:e6:50:c9:68:78:24:8e:35:09:9a:
c9:50:2d:c4:3f:a6:00:1c:2c:aa:a4:b7:c5:27:53:d0:ec:0f:
3e:54:ae:db:cf:7e:5a:f6:cf:e4:56:ce:37:fb:08:7a:6d:b6:
c6:c6:f1:7d:d5:25:95:1c:a5:03:b8:32:66:0d:96:70:67:e8:
61:34:25:ef:d2:50:a9:85:cc:b0:e6:14:86:3c:c7:b8:0c:d6:
a9:0d:5d:b8:e5:42:4d:68:0f:2b:29:d5:de:5a:d5:b5:b5:38:
c0:91:ab:67
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 29 09:43:43 2025 by rpki-client