Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/45/0ddff3-9e70-4d63-b5a0-c6632cc014b0/1/O5olHl0dO6vkxXnJHrPgrDf3vyo.mft
File: O5olHl0dO6vkxXnJHrPgrDf3vyo.mft (raw, json)
Hash identifier: Y4ULfeezusbAlpMB1LHLN+K3otREAoP73pnCaPctai4=
Subject key identifier: 70:D8:FC:22:22:D1:E0:A8:D3:9F:B6:57:42:5F:E7:92:26:D6:5C:B9
Authority key identifier: 3B:9A:25:1E:5D:1D:3B:AB:E4:C5:79:C9:1E:B3:E0:AC:37:F7:BF:2A
Certificate issuer: /CN=3b9a251e5d1d3babe4c579c91eb3e0ac37f7bf2a
Certificate serial: 019671F8442D7EEE8792FE9FDF47CB3749B8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/O5olHl0dO6vkxXnJHrPgrDf3vyo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/45/0ddff3-9e70-4d63-b5a0-c6632cc014b0/1/O5olHl0dO6vkxXnJHrPgrDf3vyo.mft
Manifest number: 0A99
Signing time: Sat 26 Apr 2025 12:00:17 +0000
Manifest this update: Sat 26 Apr 2025 12:00:17 +0000
Manifest next update: Sun 27 Apr 2025 12:00:17 +0000
Files and hashes: 1: AwwB5IzEiG1Llx5yPnasYM8MO2Y.roa (hash: 7G8UolHLHJ6PE/s9cw2uAH1EfqGha5+Hkph4tWqL8U4=)
2: C1az3rJwjcR-YTlJxXpC5icVqE4.roa (hash: PI5Gh4dLNT0MSthDWw2SO00ZqeW1Mb5HaAinAwH/Ka4=)
3: O5olHl0dO6vkxXnJHrPgrDf3vyo.crl (hash: ZC/bNbsLOFhCHI/YfW0E4857C+jLaPbCXdeBgN/BBuw=)
4: uSGhwqa1EaWC0O0u-4TI5idqWHY.roa (hash: T46XwP8D/bRE5BaimIUEAgaKKz/Apcp0pmUzAH68V3Q=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/45/0ddff3-9e70-4d63-b5a0-c6632cc014b0/1/O5olHl0dO6vkxXnJHrPgrDf3vyo.crl
rsync://rpki.ripe.net/repository/DEFAULT/45/0ddff3-9e70-4d63-b5a0-c6632cc014b0/1/O5olHl0dO6vkxXnJHrPgrDf3vyo.mft
rsync://rpki.ripe.net/repository/DEFAULT/O5olHl0dO6vkxXnJHrPgrDf3vyo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Apr 2025 11:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:71:f8:44:2d:7e:ee:87:92:fe:9f:df:47:cb:37:49:b8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3b9a251e5d1d3babe4c579c91eb3e0ac37f7bf2a
Validity
Not Before: Apr 26 12:00:17 2025 GMT
Not After : Apr 27 12:00:17 2025 GMT
Subject: CN=70d8fc2222d1e0a8d39fb657425fe79226d65cb9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:4b:a8:9b:17:fd:ac:27:f2:70:a4:49:04:43:
a1:5e:3f:56:37:26:60:d5:b3:b6:9f:c8:5d:8c:51:
6c:82:ba:81:21:57:b6:f5:4a:4f:9d:cb:82:45:ae:
42:a8:cd:c8:8f:d9:9f:64:cd:54:b5:4b:65:2f:14:
80:ae:57:99:4d:26:93:09:b5:b1:0d:36:05:27:93:
53:a1:69:18:91:72:01:cf:90:a9:ce:58:c5:28:c3:
61:b5:0e:21:7c:1a:58:30:bd:7f:f4:ca:ae:6c:22:
64:ad:e0:fd:d4:3f:34:26:d2:47:8a:a5:d8:42:b8:
e1:b8:50:60:c3:67:49:18:17:4c:4d:0e:78:b7:7a:
cc:d6:96:d8:49:37:33:d6:1c:29:d1:3b:c1:75:9d:
6a:88:d9:77:7c:c6:7c:77:06:de:20:2e:f4:fc:fa:
f9:d4:9e:84:0d:e1:61:85:f2:d9:07:be:78:1c:33:
21:94:a4:e2:5d:3e:1a:1a:2f:f5:17:16:4c:a6:94:
7c:3b:6b:cc:72:04:8d:9f:be:4b:c4:f9:b5:dd:63:
39:5f:4f:a7:13:63:04:85:18:f1:19:97:fc:55:0b:
97:6b:e3:01:86:73:71:f9:39:14:79:51:a1:88:07:
f3:30:c3:bb:9e:f5:34:40:5b:6c:29:70:91:b2:3f:
e9:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
70:D8:FC:22:22:D1:E0:A8:D3:9F:B6:57:42:5F:E7:92:26:D6:5C:B9
X509v3 Authority Key Identifier:
keyid:3B:9A:25:1E:5D:1D:3B:AB:E4:C5:79:C9:1E:B3:E0:AC:37:F7:BF:2A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/O5olHl0dO6vkxXnJHrPgrDf3vyo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/45/0ddff3-9e70-4d63-b5a0-c6632cc014b0/1/O5olHl0dO6vkxXnJHrPgrDf3vyo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/45/0ddff3-9e70-4d63-b5a0-c6632cc014b0/1/O5olHl0dO6vkxXnJHrPgrDf3vyo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
68:59:29:1d:6d:38:52:e2:6d:bf:12:2e:6e:e4:fd:18:61:46:
f6:c9:51:55:e4:54:16:c1:4b:b5:e6:e0:0e:c7:cd:15:f1:75:
33:a3:ae:41:61:a7:b1:20:1d:a7:2a:01:5a:55:ec:10:89:8b:
24:e9:64:0e:e6:f7:df:06:87:70:13:a5:09:04:9c:14:23:78:
8e:7a:8c:08:3a:84:e8:29:3b:6c:61:6e:9c:d8:e9:fa:68:dc:
bb:52:d5:00:71:f3:32:fd:bc:ea:91:2d:d5:50:93:65:d2:96:
ce:95:75:73:45:ce:51:8f:94:9a:fe:96:4a:59:83:66:b9:4f:
ec:51:d6:70:1d:c1:8c:01:4e:db:d0:40:dd:af:50:ee:61:2e:
c9:9e:86:93:62:6c:6d:f6:7a:d5:5a:e6:fd:ee:b3:5b:f5:5e:
26:33:06:66:4a:65:9f:dc:58:01:ed:2d:52:5a:ea:12:0a:10:
5e:8d:6a:4b:61:aa:79:a4:e1:ab:e4:58:20:d0:f7:73:7c:27:
9a:8c:5b:89:19:0b:bc:ac:5b:5f:86:df:c3:63:bc:4e:72:cf:
2f:0c:71:d9:fe:20:4e:ed:27:36:dd:a1:8a:89:c0:6b:cb:de:
67:ad:ea:12:1f:55:2d:83:c1:cd:9e:f8:b3:d6:76:53:55:d6:
9a:88:6e:8b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 19:11:18 2025 by rpki-client