Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/46/04975c-ef49-4754-96f9-9812d7cfd694/1/O035pUYMvUULTnU4A5OoIehcdNg.mft
File: O035pUYMvUULTnU4A5OoIehcdNg.mft (raw, json)
Hash identifier: mDrKohZyQuXkbze32hjOSrhFeAMuVdyjfmNXqAQQvPo=
Subject key identifier: D1:F3:58:3A:B0:9C:30:9B:08:B9:27:52:E1:EC:9A:3E:13:9C:8E:27
Authority key identifier: 3B:4D:F9:A5:46:0C:BD:45:0B:4E:75:38:03:93:A8:21:E8:5C:74:D8
Certificate issuer: /CN=3b4df9a5460cbd450b4e75380393a821e85c74d8
Certificate serial: 019680FD6E67575A8DCAC294AEA12AD43229
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/O035pUYMvUULTnU4A5OoIehcdNg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/46/04975c-ef49-4754-96f9-9812d7cfd694/1/O035pUYMvUULTnU4A5OoIehcdNg.mft
Manifest number: 1515
Signing time: Tue 29 Apr 2025 10:00:14 +0000
Manifest this update: Tue 29 Apr 2025 10:00:14 +0000
Manifest next update: Wed 30 Apr 2025 10:00:14 +0000
Files and hashes: 1: O035pUYMvUULTnU4A5OoIehcdNg.crl (hash: qUNedN7G2ZZfW/kEfQ7cQ09JqcUP8UAIUTOK8VUWNhI=)
2: d0vd09ijftZxQ36MggmGV19KbF8.roa (hash: qQnSCjOjuDvlDGOH0RwUYDIFq1N35gmrsquQwH69sXM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/46/04975c-ef49-4754-96f9-9812d7cfd694/1/O035pUYMvUULTnU4A5OoIehcdNg.crl
rsync://rpki.ripe.net/repository/DEFAULT/46/04975c-ef49-4754-96f9-9812d7cfd694/1/O035pUYMvUULTnU4A5OoIehcdNg.mft
rsync://rpki.ripe.net/repository/DEFAULT/O035pUYMvUULTnU4A5OoIehcdNg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 30 Apr 2025 10:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:80:fd:6e:67:57:5a:8d:ca:c2:94:ae:a1:2a:d4:32:29
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3b4df9a5460cbd450b4e75380393a821e85c74d8
Validity
Not Before: Apr 29 10:00:14 2025 GMT
Not After : Apr 30 10:00:14 2025 GMT
Subject: CN=d1f3583ab09c309b08b92752e1ec9a3e139c8e27
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:c0:2d:7e:e5:e3:5c:49:3e:99:6f:b3:49:a9:
48:17:01:3b:9f:35:b6:dc:4c:ef:03:da:78:b5:a8:
3e:75:fe:72:20:39:a1:82:7a:34:43:47:54:57:66:
d1:b1:9d:67:33:bc:14:94:a0:80:9e:77:dd:32:06:
c1:ff:b7:8f:01:8d:79:dd:2e:8c:8f:e0:1f:c5:ca:
39:78:ba:25:aa:6d:35:bf:5b:e2:c3:73:3f:d0:2a:
9f:33:6f:05:37:7d:18:cc:be:28:96:21:ba:ab:46:
23:dc:35:08:87:ae:8f:b4:8a:32:d3:a1:98:9e:cf:
02:07:66:b2:6f:a2:f1:83:60:d8:fa:01:b1:b6:7f:
a0:34:14:19:b7:fa:50:4e:52:27:e3:3e:bc:a5:9c:
b0:d9:16:57:37:ba:e7:f9:09:c6:93:34:07:4c:99:
0f:1f:cc:5c:93:3c:d2:76:d7:1c:41:a7:73:dc:e2:
ba:93:9b:87:8e:94:0e:4e:c0:15:c1:bb:a0:30:8e:
05:ff:32:3b:a0:8f:72:c9:d6:80:61:ef:8c:c7:af:
10:12:b6:ea:90:80:5f:c0:e0:3b:6e:0d:cd:6c:17:
79:c5:b1:86:d1:8b:eb:a5:1c:5f:fd:81:92:0f:2b:
66:a1:29:f5:bd:4c:6f:dc:93:4e:4c:a6:47:68:a8:
e9:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D1:F3:58:3A:B0:9C:30:9B:08:B9:27:52:E1:EC:9A:3E:13:9C:8E:27
X509v3 Authority Key Identifier:
keyid:3B:4D:F9:A5:46:0C:BD:45:0B:4E:75:38:03:93:A8:21:E8:5C:74:D8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/O035pUYMvUULTnU4A5OoIehcdNg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/46/04975c-ef49-4754-96f9-9812d7cfd694/1/O035pUYMvUULTnU4A5OoIehcdNg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/46/04975c-ef49-4754-96f9-9812d7cfd694/1/O035pUYMvUULTnU4A5OoIehcdNg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
49:d4:f3:08:66:0a:e5:d8:0a:7a:98:91:2a:72:69:48:e1:a7:
6d:9a:99:4e:d4:66:76:a4:fd:cd:68:a3:42:da:74:26:86:f2:
b0:19:c5:fb:e3:d4:56:29:da:7f:e8:e5:0f:92:c2:11:4a:3d:
49:9b:4e:0e:60:60:4d:32:fc:92:37:b7:e6:49:7f:10:01:0c:
ba:c8:b7:92:64:7a:2a:0c:58:fc:a4:89:71:d4:2c:1d:88:4f:
a2:09:1a:ae:f9:0c:b1:f4:9a:04:d9:75:67:6a:6b:d9:d5:67:
7b:87:76:a8:76:a3:4e:a3:9a:aa:f9:4d:e3:87:3e:68:9d:c5:
cb:23:fa:81:fb:94:9e:01:89:57:dd:db:a6:46:02:58:01:92:
4b:73:3b:cd:00:ae:6b:4f:31:fd:91:0a:06:38:0d:d1:6b:42:
5e:c4:6b:3c:a1:14:a4:d4:8c:9a:02:88:8a:f6:a8:32:20:dc:
b0:27:37:82:50:9c:80:3e:c3:95:f8:85:45:aa:0d:66:33:25:
92:95:1d:ab:ae:09:5d:3f:3e:dd:fe:63:40:c6:eb:a0:8b:70:
af:53:0a:45:38:6a:56:e3:8b:4c:aa:0a:fe:e0:99:c3:9d:55:
4b:62:1d:f2:ce:ec:5e:0b:85:9b:b3:6b:ad:53:45:a9:20:b6:
12:95:00:30
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 29 17:30:14 2025 by rpki-client