Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3c/bcdcca-f06b-40cf-8e21-2145220994ce/1/o8p7HBOn17MSMUErj7aUehdH250.mft
File: o8p7HBOn17MSMUErj7aUehdH250.mft (raw, json)
Hash identifier: vD9q22X0AmSMwNjLsKkArK6Gfp1XWkANCNKt3OHdzBU=
Subject key identifier: 7C:B8:51:9E:6F:20:E5:DE:5F:89:44:8A:60:A1:EC:60:E5:7F:D2:EA
Authority key identifier: A3:CA:7B:1C:13:A7:D7:B3:12:31:41:2B:8F:B6:94:7A:17:47:DB:9D
Certificate issuer: /CN=a3ca7b1c13a7d7b31231412b8fb6947a1747db9d
Certificate serial: 01967AC485DFE7DAC24E91025EA4289F9C46
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/o8p7HBOn17MSMUErj7aUehdH250.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3c/bcdcca-f06b-40cf-8e21-2145220994ce/1/o8p7HBOn17MSMUErj7aUehdH250.mft
Manifest number: 02FE
Signing time: Mon 28 Apr 2025 05:00:21 +0000
Manifest this update: Mon 28 Apr 2025 05:00:21 +0000
Manifest next update: Tue 29 Apr 2025 05:00:21 +0000
Files and hashes: 1: X0-Djm0vHdUiJwsWds74O566gnw.roa (hash: wptFaY0ZwFbGnw/VuRN3robTidxbKoo/tyvxKrOBB/E=)
2: o8p7HBOn17MSMUErj7aUehdH250.crl (hash: 6AJVZo3UemIDbTzISWn+wtrQNWcjOveijqFlL+ZCoNw=)
3: wfeH5shQb9p8-APifaQwZCuXjuw.roa (hash: i3m8mYv5PGE+aCaz85jAgzkj3ipmT/iJy2vmh07ZehU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3c/bcdcca-f06b-40cf-8e21-2145220994ce/1/o8p7HBOn17MSMUErj7aUehdH250.crl
rsync://rpki.ripe.net/repository/DEFAULT/3c/bcdcca-f06b-40cf-8e21-2145220994ce/1/o8p7HBOn17MSMUErj7aUehdH250.mft
rsync://rpki.ripe.net/repository/DEFAULT/o8p7HBOn17MSMUErj7aUehdH250.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 29 Apr 2025 05:00:21 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:7a:c4:85:df:e7:da:c2:4e:91:02:5e:a4:28:9f:9c:46
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a3ca7b1c13a7d7b31231412b8fb6947a1747db9d
Validity
Not Before: Apr 28 05:00:21 2025 GMT
Not After : Apr 29 05:00:21 2025 GMT
Subject: CN=7cb8519e6f20e5de5f89448a60a1ec60e57fd2ea
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:93:f6:71:df:69:80:36:27:1e:ed:86:a7:1d:75:
21:3b:0b:de:4a:da:e9:9a:16:78:20:31:fe:f0:db:
ae:9d:5f:25:58:9e:12:15:47:37:ef:ad:09:57:27:
e4:8e:a0:46:b5:bb:ee:c6:fb:3a:e8:28:21:59:53:
7d:f2:86:e1:be:3f:41:49:13:f0:9a:fd:c9:39:4d:
bd:69:98:fc:b4:2a:67:76:30:ec:c0:84:18:5e:69:
4a:1a:f8:cc:37:ac:06:8e:30:13:6f:ca:4b:20:09:
30:ee:fd:18:cd:33:4b:6c:5b:04:c8:c4:14:d9:8f:
86:fc:1c:9b:02:08:5e:1b:4c:91:ef:b7:46:0d:68:
6d:4e:6e:83:9a:76:fd:48:33:36:d2:4d:71:56:4e:
f1:2f:a7:d1:5d:ac:67:e8:27:eb:35:9e:10:9a:5d:
ad:86:0e:62:d9:85:9b:59:13:de:e4:37:e7:e8:49:
00:c1:fb:f7:42:2d:cb:c0:d0:43:31:ab:6e:3d:87:
80:d7:ea:ed:54:4f:66:a5:38:a9:8d:09:5b:76:48:
75:b1:11:c0:c8:73:88:df:6d:ef:11:f8:48:42:ad:
77:28:55:5f:ae:bc:11:70:72:a3:3f:d9:63:32:d1:
79:c0:da:7a:54:89:d1:1c:ff:7c:de:7f:00:a5:70:
a6:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7C:B8:51:9E:6F:20:E5:DE:5F:89:44:8A:60:A1:EC:60:E5:7F:D2:EA
X509v3 Authority Key Identifier:
keyid:A3:CA:7B:1C:13:A7:D7:B3:12:31:41:2B:8F:B6:94:7A:17:47:DB:9D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/o8p7HBOn17MSMUErj7aUehdH250.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3c/bcdcca-f06b-40cf-8e21-2145220994ce/1/o8p7HBOn17MSMUErj7aUehdH250.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3c/bcdcca-f06b-40cf-8e21-2145220994ce/1/o8p7HBOn17MSMUErj7aUehdH250.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
81:f1:d4:e8:ab:1f:fb:bb:a9:52:c3:f8:d2:5c:8b:ce:8b:69:
bd:37:6f:4d:0b:48:d8:ec:b1:db:80:b6:cf:34:3f:19:99:59:
d1:da:19:cb:26:9a:95:0d:f4:fc:2e:4f:3e:a4:bd:45:73:d4:
41:24:52:1e:05:ce:f7:6e:77:ab:db:5e:49:aa:32:87:2b:8c:
df:6c:87:0a:18:a1:a7:83:77:c5:bd:27:bd:ad:42:5e:58:94:
86:93:db:e0:89:66:cb:7d:da:0b:99:93:09:14:2b:d9:95:d8:
92:48:a8:2c:3f:cd:dc:b4:90:90:d8:73:35:b0:4f:61:76:e0:
c6:3e:a6:aa:c5:1a:bf:78:e4:7b:4d:67:07:f1:89:f2:4d:74:
3d:ae:a3:82:0e:2a:19:d6:55:5c:b8:59:f6:08:86:0f:e5:0a:
98:9d:9c:a2:ac:bc:22:75:62:d8:79:f4:4f:de:38:13:b3:ff:
e5:4c:69:50:25:85:61:82:00:23:16:0f:68:af:34:99:19:07:
9a:81:e9:f1:73:3f:2c:9a:a3:e7:5a:a0:14:17:55:31:63:19:
83:15:7d:d4:a2:a1:d4:31:60:ec:f7:8a:17:51:b1:cf:38:12:
b0:3a:1c:13:0f:65:47:1d:0b:6b:5a:7f:48:0f:f9:31:a7:dc:
23:75:93:31
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 11:52:50 2025 by rpki-client