Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3f/3b4d8e-06e8-4ea2-927b-a79630b06d93/1/OndQiZTKTSzBidNfM4KiqKtXuEs.mft
File: OndQiZTKTSzBidNfM4KiqKtXuEs.mft (raw, json)
Hash identifier: lvKujPtddHJZQjgHb0Ld8O58D2SYMADNr77/o0OxDIM=
Subject key identifier: AC:A9:2B:EA:57:42:56:66:8C:05:B3:E0:5C:28:1D:44:D4:36:56:84
Authority key identifier: 3A:77:50:89:94:CA:4D:2C:C1:89:D3:5F:33:82:A2:A8:AB:57:B8:4B
Certificate issuer: /CN=3a77508994ca4d2cc189d35f3382a2a8ab57b84b
Certificate serial: 01969BD012981C5E85006B74D081EEBDEF57
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OndQiZTKTSzBidNfM4KiqKtXuEs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3f/3b4d8e-06e8-4ea2-927b-a79630b06d93/1/OndQiZTKTSzBidNfM4KiqKtXuEs.mft
Manifest number: 0607
Signing time: Sun 04 May 2025 15:00:26 +0000
Manifest this update: Sun 04 May 2025 15:00:26 +0000
Manifest next update: Mon 05 May 2025 15:00:26 +0000
Files and hashes: 1: OndQiZTKTSzBidNfM4KiqKtXuEs.crl (hash: XsnnYCI1xqQ01cZcunDI+6z9F/F/8F//jTfIgS5kWJU=)
2: Wwk65fWkkC0KWWHed6RDHU5zdWE.roa (hash: OdE2ZmnpDqD8iDsUuCtPuylwN6Gs7CMSGI3EhFPXcxg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3f/3b4d8e-06e8-4ea2-927b-a79630b06d93/1/OndQiZTKTSzBidNfM4KiqKtXuEs.crl
rsync://rpki.ripe.net/repository/DEFAULT/3f/3b4d8e-06e8-4ea2-927b-a79630b06d93/1/OndQiZTKTSzBidNfM4KiqKtXuEs.mft
rsync://rpki.ripe.net/repository/DEFAULT/OndQiZTKTSzBidNfM4KiqKtXuEs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 05 May 2025 13:58:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:9b:d0:12:98:1c:5e:85:00:6b:74:d0:81:ee:bd:ef:57
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3a77508994ca4d2cc189d35f3382a2a8ab57b84b
Validity
Not Before: May 4 15:00:26 2025 GMT
Not After : May 5 15:00:26 2025 GMT
Subject: CN=aca92bea574256668c05b3e05c281d44d4365684
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:75:14:e3:71:6d:34:d4:2c:54:d9:8a:7c:f7:
5b:83:29:ea:29:0f:56:84:64:f6:22:38:a0:ac:43:
94:f2:b9:b3:9e:05:c0:09:8c:a5:a0:4d:e2:22:f3:
86:50:0d:1e:eb:2c:15:f7:e3:b5:6c:94:34:99:46:
05:07:c5:95:74:d6:0a:c8:56:f2:b9:59:82:dd:21:
16:56:34:70:6c:06:9f:41:d2:e0:1f:21:86:d8:be:
54:b8:c9:e0:29:ed:3d:88:37:1f:97:91:15:e0:7e:
11:09:13:c5:44:86:c3:26:07:ec:f2:a9:f1:51:be:
4f:63:58:aa:d8:a7:80:f7:37:e2:f6:c6:fe:ee:ee:
00:bb:56:22:da:54:d4:a1:a7:3f:89:78:b9:fb:69:
a9:26:9c:c4:79:0a:2b:f7:95:27:3c:4a:68:11:38:
3d:b8:5c:4b:22:b7:48:e9:e9:0e:19:20:62:4f:a1:
4b:c3:8e:2b:61:8f:f6:5a:16:5d:66:7a:84:a1:ac:
06:63:7d:f3:7a:4d:2c:f7:36:8a:d4:e4:a6:3b:e9:
b1:24:67:2c:61:bc:f0:78:9b:c3:2d:b2:13:24:12:
ce:20:51:58:15:94:86:5f:1d:a9:08:12:50:9e:30:
55:29:bb:10:f7:77:5f:3e:c2:fe:88:d2:7d:06:7f:
8f:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AC:A9:2B:EA:57:42:56:66:8C:05:B3:E0:5C:28:1D:44:D4:36:56:84
X509v3 Authority Key Identifier:
keyid:3A:77:50:89:94:CA:4D:2C:C1:89:D3:5F:33:82:A2:A8:AB:57:B8:4B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OndQiZTKTSzBidNfM4KiqKtXuEs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3f/3b4d8e-06e8-4ea2-927b-a79630b06d93/1/OndQiZTKTSzBidNfM4KiqKtXuEs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3f/3b4d8e-06e8-4ea2-927b-a79630b06d93/1/OndQiZTKTSzBidNfM4KiqKtXuEs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8a:77:c8:6f:7f:bf:ec:cf:d1:71:c3:32:5b:a6:b7:26:e0:09:
0a:cc:56:1a:d2:5a:4c:da:19:6b:0b:eb:3f:b9:dc:e4:f8:9e:
28:63:35:eb:70:5d:48:6f:69:ce:36:f1:ef:cf:53:47:54:1b:
c7:a7:51:f3:72:c8:c4:41:e3:0f:a3:e1:d1:84:49:d7:82:b1:
dd:a0:24:06:90:d5:32:65:e4:9d:81:e4:7a:8c:ba:6b:80:51:
2b:16:9a:6d:8d:45:0e:7d:69:5b:5f:0e:b0:89:14:ac:dd:cb:
55:ca:c7:ea:7a:ab:18:db:4a:49:81:79:d3:36:a9:63:b6:ee:
49:3c:96:b2:92:fa:08:35:fa:d8:0b:c8:11:43:e7:a5:aa:3a:
73:6d:fa:55:21:69:6c:36:17:8a:36:17:e6:af:0f:6d:93:88:
5c:a3:a1:e5:6b:71:24:41:a6:35:cb:1e:46:29:f5:ab:25:53:
ff:98:2e:46:42:d6:eb:d9:b7:83:60:55:33:20:ed:6c:10:e0:
5d:83:ac:a8:c2:e8:02:25:24:31:c6:ee:bf:6a:95:18:0e:72:
5b:15:0a:79:9a:8c:0e:7e:a8:e9:79:53:ff:1d:2f:b8:0c:3f:
57:2b:4d:5f:bc:83:ed:44:3c:7c:31:63:19:f8:be:af:dd:76:
e0:69:80:81
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 4 18:40:28 2025 by rpki-client