Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/36/164d34-125f-4c60-8635-7d6f53889d57/1/osUThqzwWzqrYYEEdHjW7qG_AGI.mft
File: osUThqzwWzqrYYEEdHjW7qG_AGI.mft (raw, json)
Hash identifier: Vg17LYyKRqgcXXsaUDWpVZzmQXOsCL0+m0/vd2nSnAY=
Subject key identifier: 9B:CA:AC:8E:E6:13:8B:AD:62:E0:96:EE:9A:B4:C1:27:30:32:4F:2D
Authority key identifier: A2:C5:13:86:AC:F0:5B:3A:AB:61:81:04:74:78:D6:EE:A1:BF:00:62
Certificate issuer: /CN=a2c51386acf05b3aab6181047478d6eea1bf0062
Certificate serial: 0196974EEF7BC320F38BAF128BFBDEF13AC3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/osUThqzwWzqrYYEEdHjW7qG_AGI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/36/164d34-125f-4c60-8635-7d6f53889d57/1/osUThqzwWzqrYYEEdHjW7qG_AGI.mft
Manifest number: 010B
Signing time: Sat 03 May 2025 18:00:54 +0000
Manifest this update: Sat 03 May 2025 18:00:54 +0000
Manifest next update: Sun 04 May 2025 18:00:54 +0000
Files and hashes: 1: 0cFm87h5GkHalEGqmJaLcd0Qqo8.roa (hash: jMxPSL+zdsv3eh4JmgehYYH5Kp/WnR56mTqAfCb0p0E=)
2: osUThqzwWzqrYYEEdHjW7qG_AGI.crl (hash: 530NLhGqQ2lE5ShkdhdGUqL3eDjYcYZVxW0OpQETMSo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/36/164d34-125f-4c60-8635-7d6f53889d57/1/osUThqzwWzqrYYEEdHjW7qG_AGI.crl
rsync://rpki.ripe.net/repository/DEFAULT/36/164d34-125f-4c60-8635-7d6f53889d57/1/osUThqzwWzqrYYEEdHjW7qG_AGI.mft
rsync://rpki.ripe.net/repository/DEFAULT/osUThqzwWzqrYYEEdHjW7qG_AGI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 04 May 2025 18:00:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:97:4e:ef:7b:c3:20:f3:8b:af:12:8b:fb:de:f1:3a:c3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a2c51386acf05b3aab6181047478d6eea1bf0062
Validity
Not Before: May 3 18:00:54 2025 GMT
Not After : May 4 18:00:54 2025 GMT
Subject: CN=9bcaac8ee6138bad62e096ee9ab4c12730324f2d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:11:40:4b:e7:68:59:f8:f7:eb:b0:3f:f4:24:
20:8d:07:6c:21:38:5d:48:fb:a9:2a:e3:ae:c7:ed:
c9:8e:38:41:88:eb:80:ec:d8:69:8a:7b:5a:8b:68:
33:46:b0:9a:e2:27:31:af:63:db:a9:7f:f7:40:2d:
2e:f6:72:f0:3f:35:ac:56:21:fc:88:cc:ea:b1:23:
ae:4f:cc:81:7e:22:64:0a:f3:a4:15:3b:a1:7e:d9:
a7:6f:7f:ea:c1:15:bc:2c:92:0d:98:0c:04:b3:5b:
35:d8:53:fd:d7:8c:f6:66:33:6f:15:89:ab:6b:c1:
55:2e:2e:32:b9:03:bc:db:15:43:38:36:a0:6d:2b:
6a:c6:d1:02:c0:ba:93:c8:e5:fe:f8:8d:95:1a:a2:
1a:cb:d0:e7:03:a5:88:a2:36:b2:51:ea:3f:dc:80:
da:c3:50:ee:6e:38:54:fc:fc:da:ad:3b:02:33:d5:
56:c8:be:4d:42:78:0f:9f:31:b9:3c:c7:e1:a7:80:
56:88:44:23:b5:dd:09:b2:92:04:1f:eb:08:fe:ec:
58:4c:68:31:b7:4c:0a:cc:38:b6:7a:81:a5:d7:73:
8e:24:09:a5:bc:be:bc:fa:95:96:f5:61:62:65:4c:
9b:fe:c7:6e:7c:93:d6:bf:1e:09:de:1e:f9:6f:8b:
57:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9B:CA:AC:8E:E6:13:8B:AD:62:E0:96:EE:9A:B4:C1:27:30:32:4F:2D
X509v3 Authority Key Identifier:
keyid:A2:C5:13:86:AC:F0:5B:3A:AB:61:81:04:74:78:D6:EE:A1:BF:00:62
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/osUThqzwWzqrYYEEdHjW7qG_AGI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/36/164d34-125f-4c60-8635-7d6f53889d57/1/osUThqzwWzqrYYEEdHjW7qG_AGI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/36/164d34-125f-4c60-8635-7d6f53889d57/1/osUThqzwWzqrYYEEdHjW7qG_AGI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
21:80:30:28:4c:74:5d:2b:c9:6d:85:80:e1:56:bc:67:47:1b:
ec:96:7b:7d:41:e3:c7:89:e4:80:d8:68:1f:83:9b:fe:5a:a3:
7b:b9:65:17:4b:6e:b6:2b:60:33:30:05:5d:94:41:8f:a6:09:
36:98:27:da:1e:41:76:ad:14:d2:4a:94:37:40:a8:12:24:8d:
23:46:08:db:7c:35:09:7f:e4:ac:db:c2:da:cc:73:8e:50:9f:
32:11:31:c3:54:38:e6:ae:b9:e1:c8:cd:42:94:19:43:04:e8:
84:67:e4:98:24:18:24:95:30:6d:4e:44:67:53:30:37:fd:1c:
71:70:3f:f6:f2:f5:cc:7d:af:51:cf:bb:9f:be:b8:b6:ec:59:
2b:3c:dc:1f:f4:48:bd:1c:d8:45:95:57:ed:fc:d9:93:ea:5f:
bf:69:c3:63:fc:46:ff:eb:fc:bf:7f:8d:a3:4e:21:37:ac:cd:
ae:da:57:2e:c3:a4:70:91:f2:78:6b:87:94:86:10:f6:3f:09:
66:a8:81:b4:e4:e8:e6:0d:f1:16:71:6e:e4:49:72:93:bd:30:
8b:cf:fa:1c:2c:af:29:5b:23:c0:cc:1e:49:69:3f:3b:bc:ad:
aa:ec:b2:92:b0:dd:84:cb:75:17:c3:93:eb:44:29:75:ba:c8:
ed:79:88:14
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 4 02:33:51 2025 by rpki-client