Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/46/18a1bc-967c-4931-85b5-00f00af1c8d7/1/o-boI_bdpn0oOp9BpykJkGrJqDc.mft
File: o-boI_bdpn0oOp9BpykJkGrJqDc.mft (raw, json)
Hash identifier: /fib1faRaf+ewdRd/bIEY8ELm/laU2SvgJUIVukwWb8=
Subject key identifier: ED:48:31:EC:35:07:1C:FA:89:2F:53:9E:B4:F7:41:CA:1A:EA:35:F4
Authority key identifier: A3:E6:E8:23:F6:DD:A6:7D:28:3A:9F:41:A7:29:09:90:6A:C9:A8:37
Certificate issuer: /CN=a3e6e823f6dda67d283a9f41a72909906ac9a837
Certificate serial: 0196846C5D53B9EFC9B973E0830B27ECBF98
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/o-boI_bdpn0oOp9BpykJkGrJqDc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/46/18a1bc-967c-4931-85b5-00f00af1c8d7/1/o-boI_bdpn0oOp9BpykJkGrJqDc.mft
Manifest number: 151C
Signing time: Wed 30 Apr 2025 02:00:16 +0000
Manifest this update: Wed 30 Apr 2025 02:00:16 +0000
Manifest next update: Thu 01 May 2025 02:00:16 +0000
Files and hashes: 1: 6_a-aeOKvfIVcw7qcE2cQDyNLOY.roa (hash: WdgelCFy5E02aPpURS4UTgXi3wN5eWjkYjrBc+OZPSI=)
2: 8WHNdpvFKOcR1NYdd7sGV-5deCM.roa (hash: 1JOP6RuQiDJQnqR2UlsIBnEE2gJbfnp6EUOaKdVsJlw=)
3: aJfMXR0KgD85hp2B5m_o11nFhQY.roa (hash: KbbBuzotL/jgzy+EpOCalbhLtTBDf/lVI3VgkQVW38s=)
4: o-boI_bdpn0oOp9BpykJkGrJqDc.crl (hash: 0JgmCbWXRYUbDeL4EaPqF2eN1X4WkNbCUpz1NgcG8jo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/46/18a1bc-967c-4931-85b5-00f00af1c8d7/1/o-boI_bdpn0oOp9BpykJkGrJqDc.crl
rsync://rpki.ripe.net/repository/DEFAULT/46/18a1bc-967c-4931-85b5-00f00af1c8d7/1/o-boI_bdpn0oOp9BpykJkGrJqDc.mft
rsync://rpki.ripe.net/repository/DEFAULT/o-boI_bdpn0oOp9BpykJkGrJqDc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 01 May 2025 00:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:84:6c:5d:53:b9:ef:c9:b9:73:e0:83:0b:27:ec:bf:98
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a3e6e823f6dda67d283a9f41a72909906ac9a837
Validity
Not Before: Apr 30 02:00:16 2025 GMT
Not After : May 1 02:00:16 2025 GMT
Subject: CN=ed4831ec35071cfa892f539eb4f741ca1aea35f4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:ce:b7:bc:4d:e1:07:8e:e8:32:73:4e:09:58:
99:0c:13:4d:15:39:3f:6e:49:2e:42:c9:f7:42:9f:
8f:90:86:e3:e8:00:46:93:00:b1:a0:67:c2:bd:15:
8f:8a:67:9b:8f:f2:6c:68:23:b1:4d:a3:0d:00:f2:
d1:b3:f2:74:54:93:1c:ab:23:80:71:48:c4:32:40:
6f:67:0e:b3:09:dc:43:ac:d6:2b:72:17:6e:96:3a:
98:d3:59:6d:16:ff:b2:71:fd:ea:0c:10:b2:2e:67:
96:cd:a1:95:b0:a8:be:68:b9:be:6a:51:9d:a1:7f:
69:b4:b7:35:cd:98:1c:27:07:84:fb:94:da:b8:bc:
45:6c:29:d0:fd:e5:80:1b:09:78:d4:a8:15:fd:72:
b0:26:34:e0:d0:7a:86:cc:55:ad:fb:b9:6f:02:b9:
9c:9e:11:7c:e0:38:2f:b7:1d:8f:d9:61:d5:e6:cf:
99:fb:42:23:1b:5e:eb:3e:87:c9:39:03:90:0b:f6:
e4:d0:0b:0e:9b:64:8e:5b:24:15:c2:98:a9:7c:07:
98:02:0e:e6:cf:a9:77:66:9e:d4:21:ae:b7:2b:a3:
f3:09:da:91:db:c1:35:67:c4:33:05:dc:36:e7:6c:
57:03:35:3a:6b:4b:47:06:0e:1c:f7:b1:90:bf:09:
81:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
ED:48:31:EC:35:07:1C:FA:89:2F:53:9E:B4:F7:41:CA:1A:EA:35:F4
X509v3 Authority Key Identifier:
keyid:A3:E6:E8:23:F6:DD:A6:7D:28:3A:9F:41:A7:29:09:90:6A:C9:A8:37
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/o-boI_bdpn0oOp9BpykJkGrJqDc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/46/18a1bc-967c-4931-85b5-00f00af1c8d7/1/o-boI_bdpn0oOp9BpykJkGrJqDc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/46/18a1bc-967c-4931-85b5-00f00af1c8d7/1/o-boI_bdpn0oOp9BpykJkGrJqDc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9c:55:4b:6b:45:95:36:55:46:9c:a9:ee:51:29:52:e4:46:85:
ca:3e:ed:c1:5f:91:66:8d:c1:a9:a5:a9:e7:65:a8:9f:00:a0:
73:a7:0b:a8:aa:57:fd:f6:09:a7:67:91:69:f6:58:15:64:3e:
c5:85:9e:ba:98:b0:23:da:12:da:bf:e7:cb:df:b0:81:5b:ec:
e5:96:24:a2:ee:18:1b:bd:ce:98:bf:91:21:80:69:b0:a9:5e:
54:a1:ae:f5:57:f5:5f:bd:02:3d:8e:37:4b:7d:d4:88:fc:0c:
09:c5:87:0c:cd:00:3d:a4:00:03:ca:72:7f:ae:04:22:56:93:
de:70:6e:88:02:d0:0c:f4:7b:c9:d1:80:eb:e0:14:8c:63:5c:
d2:c6:93:f7:4d:0e:01:37:6b:a0:8b:ad:4e:f4:b5:d8:57:78:
35:9d:5f:cc:80:40:14:42:e2:fc:01:41:d6:c1:cc:7b:92:ac:
bb:84:bb:62:5a:5e:2d:14:47:2b:61:1b:1b:1c:d8:a1:01:d1:
54:63:a7:74:b3:7c:fc:f1:86:16:32:12:fd:88:c1:4f:0a:02:
59:17:07:22:e2:69:31:3c:d5:1e:fd:c7:c7:71:39:9a:2d:d1:
df:27:ae:89:6d:2d:2c:0b:0c:d0:5d:d1:1a:9d:31:a2:f6:93:
ee:5b:21:9f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 30 07:47:04 2025 by rpki-client