Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4e/f2e150-3e9e-4f18-a53d-72ac79d7bb09/1/O1jrWLXGGiPQ8kZsXNc86eyWW5Y.mft
File: O1jrWLXGGiPQ8kZsXNc86eyWW5Y.mft (raw, json)
Hash identifier: xyglXwDKJqNK2OzFcwfdo4elzDRd910nF+6fw281yrg=
Subject key identifier: 86:6F:07:8A:E1:B2:15:F7:46:AB:C1:08:87:33:AB:F7:5D:C7:F3:44
Authority key identifier: 3B:58:EB:58:B5:C6:1A:23:D0:F2:46:6C:5C:D7:3C:E9:EC:96:5B:96
Certificate issuer: /CN=3b58eb58b5c61a23d0f2466c5cd73ce9ec965b96
Certificate serial: 01969A1928C898431A26FB1F8F0A2E0DB435
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/O1jrWLXGGiPQ8kZsXNc86eyWW5Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4e/f2e150-3e9e-4f18-a53d-72ac79d7bb09/1/O1jrWLXGGiPQ8kZsXNc86eyWW5Y.mft
Manifest number: 012C
Signing time: Sun 04 May 2025 07:01:02 +0000
Manifest this update: Sun 04 May 2025 07:01:02 +0000
Manifest next update: Mon 05 May 2025 07:01:02 +0000
Files and hashes: 1: O1jrWLXGGiPQ8kZsXNc86eyWW5Y.crl (hash: Ir/T0nYowuKaffqGexLvijxRfRYYmfhvZNocTWTlN2s=)
2: f0dwYiFEnOu3_JgUSzuAzEREF1g.roa (hash: finZQb06qlnebE/7uJEc9oVyw8NWrlEdleXzIM/XsmQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4e/f2e150-3e9e-4f18-a53d-72ac79d7bb09/1/O1jrWLXGGiPQ8kZsXNc86eyWW5Y.crl
rsync://rpki.ripe.net/repository/DEFAULT/4e/f2e150-3e9e-4f18-a53d-72ac79d7bb09/1/O1jrWLXGGiPQ8kZsXNc86eyWW5Y.mft
rsync://rpki.ripe.net/repository/DEFAULT/O1jrWLXGGiPQ8kZsXNc86eyWW5Y.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 05 May 2025 04:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:9a:19:28:c8:98:43:1a:26:fb:1f:8f:0a:2e:0d:b4:35
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3b58eb58b5c61a23d0f2466c5cd73ce9ec965b96
Validity
Not Before: May 4 07:01:02 2025 GMT
Not After : May 5 07:01:02 2025 GMT
Subject: CN=866f078ae1b215f746abc1088733abf75dc7f344
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:06:b1:ce:3b:9d:4d:6a:5c:f6:41:b1:b5:f9:
b0:e9:8d:be:25:3b:13:9e:23:87:93:29:f3:ec:d2:
30:d4:63:d6:d5:71:46:49:20:30:24:d1:c0:27:64:
6a:0c:5f:5f:fe:3d:6a:96:da:34:23:3c:d7:76:f4:
04:ba:d5:46:ac:6a:6b:c5:8b:d7:d4:f2:6e:bf:c3:
4f:10:ca:66:0d:3b:6c:03:48:a2:a2:02:0a:c9:fd:
60:97:a5:ac:7a:50:93:78:05:26:9f:ff:64:51:9b:
be:97:2b:c5:d4:2e:88:36:50:87:a3:42:94:be:97:
61:ba:2b:9e:dd:8a:d1:1a:08:bc:c0:b7:e2:6c:ec:
1b:76:b8:63:0d:40:db:95:c9:76:4e:42:43:9d:a9:
a1:d1:bc:ba:05:38:39:d8:3a:40:ac:94:28:f5:8b:
dc:5b:6e:72:1f:e7:76:dc:c9:35:d6:6b:bb:23:c0:
00:e7:0a:54:f9:71:00:c3:86:ce:31:aa:95:a4:5c:
dc:d0:e5:b2:a6:31:3b:d4:0d:13:1e:08:74:84:af:
21:19:5e:f3:41:f9:e6:e5:81:16:dc:68:c5:bc:88:
7d:7f:36:bd:05:b8:b1:50:6c:a6:26:32:d2:66:59:
09:06:93:9c:b7:44:56:5a:13:a7:75:9a:75:95:c0:
5f:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
86:6F:07:8A:E1:B2:15:F7:46:AB:C1:08:87:33:AB:F7:5D:C7:F3:44
X509v3 Authority Key Identifier:
keyid:3B:58:EB:58:B5:C6:1A:23:D0:F2:46:6C:5C:D7:3C:E9:EC:96:5B:96
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/O1jrWLXGGiPQ8kZsXNc86eyWW5Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/f2e150-3e9e-4f18-a53d-72ac79d7bb09/1/O1jrWLXGGiPQ8kZsXNc86eyWW5Y.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/f2e150-3e9e-4f18-a53d-72ac79d7bb09/1/O1jrWLXGGiPQ8kZsXNc86eyWW5Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
44:8e:27:a0:fd:0c:a5:0b:1a:1f:31:1f:12:cb:d8:fd:e1:b5:
5a:87:66:73:fd:8e:24:9d:d5:c7:04:1b:8e:d1:c4:91:f7:62:
30:39:b0:ea:99:16:aa:62:ef:91:b2:9a:e8:0f:43:8d:0c:7d:
e0:d7:98:1a:b5:9c:b0:6e:fb:72:50:81:3c:e8:2d:94:89:c5:
2f:1d:74:37:11:04:1e:86:49:ca:29:e7:cc:d0:46:ae:a3:83:
e1:c1:24:d3:ab:c2:54:67:07:cf:9d:74:1c:17:0e:de:5f:3a:
b3:0c:ff:37:b6:07:f8:d7:9f:95:b3:1a:3e:c1:24:58:5b:d0:
1c:f6:e6:50:c7:93:7e:25:bc:8e:50:5c:09:eb:86:a2:27:3e:
30:83:6d:49:58:5b:23:b5:ec:e7:43:91:39:74:47:e3:9c:59:
c7:a4:c0:20:86:aa:39:7b:0b:7b:01:99:77:7d:3e:d8:5d:84:
11:71:fc:fb:98:6d:86:9c:33:09:32:ab:ea:40:f4:a0:eb:32:
56:56:90:13:37:ed:c5:97:87:fb:c1:dd:d9:d0:2b:93:21:98:
83:59:bf:11:6c:8e:6e:70:4e:c0:0c:72:b1:37:0c:e4:17:84:
f7:00:23:0d:9a:cf:27:b5:77:44:3e:62:3a:18:e6:22:96:0a:
c3:0e:bf:e6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 4 11:03:02 2025 by rpki-client