Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/b4ad85-16a8-487a-8a77-8852a532ad45/1/o3JENI5x7Bvl9QB8jV7-cSWSByI.mft
File: o3JENI5x7Bvl9QB8jV7-cSWSByI.mft (raw, json)
Hash identifier: P8EejlIwcYsf90LHWJzZpdgRqwjQDEgQTwcoolu1uI4=
Subject key identifier: C1:7D:F3:A1:CA:EB:47:12:17:27:CD:59:72:D2:23:3E:94:CC:58:14
Authority key identifier: A3:72:44:34:8E:71:EC:1B:E5:F5:00:7C:8D:5E:FE:71:25:92:07:22
Certificate issuer: /CN=a37244348e71ec1be5f5007c8d5efe7125920722
Certificate serial: 01968ADC55E54C662859A309193370CE085D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/o3JENI5x7Bvl9QB8jV7-cSWSByI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/51/b4ad85-16a8-487a-8a77-8852a532ad45/1/o3JENI5x7Bvl9QB8jV7-cSWSByI.mft
Manifest number: 0845
Signing time: Thu 01 May 2025 08:00:17 +0000
Manifest this update: Thu 01 May 2025 08:00:17 +0000
Manifest next update: Fri 02 May 2025 08:00:17 +0000
Files and hashes: 1: LRjWG2C0sY70ttFU6yLHd0oTEf4.roa (hash: gpuwglO/L9B/Dx0skWM1NYemBuVCYqyVGsOPd2w2KjA=)
2: o3JENI5x7Bvl9QB8jV7-cSWSByI.crl (hash: zGILX4hJnTB4SyreGSQGeGB7uEpiTrW07GTAYwyUuuA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/51/b4ad85-16a8-487a-8a77-8852a532ad45/1/o3JENI5x7Bvl9QB8jV7-cSWSByI.crl
rsync://rpki.ripe.net/repository/DEFAULT/51/b4ad85-16a8-487a-8a77-8852a532ad45/1/o3JENI5x7Bvl9QB8jV7-cSWSByI.mft
rsync://rpki.ripe.net/repository/DEFAULT/o3JENI5x7Bvl9QB8jV7-cSWSByI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 02 May 2025 07:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:8a:dc:55:e5:4c:66:28:59:a3:09:19:33:70:ce:08:5d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a37244348e71ec1be5f5007c8d5efe7125920722
Validity
Not Before: May 1 08:00:17 2025 GMT
Not After : May 2 08:00:17 2025 GMT
Subject: CN=c17df3a1caeb47121727cd5972d2233e94cc5814
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:dc:1d:d4:bb:c4:39:06:3e:ea:24:18:c4:38:
0b:fd:6b:2e:25:5b:24:c4:c5:d6:23:11:6e:bb:85:
d5:c9:9c:0a:17:48:a1:e5:ba:b8:1c:7f:5c:5b:c3:
67:6e:20:ba:31:ab:3c:28:c6:b3:11:c0:64:28:a4:
45:5d:ba:dc:f7:f2:18:a2:9c:0c:6b:3f:1a:6c:06:
ab:b5:65:1b:19:d0:70:0e:43:dc:0e:a6:f1:66:d4:
c7:b2:ef:30:aa:8e:40:61:78:9b:65:e3:42:4e:0d:
30:87:27:69:82:1e:a9:a3:14:88:55:ea:95:c4:ba:
a0:70:ab:76:ec:9c:50:a0:81:2a:6d:4e:f3:73:40:
7c:7f:8c:f0:47:65:79:d1:18:05:a4:c8:ff:c6:10:
f8:2e:0f:d6:82:26:fc:42:1f:1d:72:79:e3:e4:af:
79:bb:27:f9:fe:59:58:5e:0d:b7:24:67:91:86:ec:
c8:f4:05:b6:07:c8:c2:99:48:80:5f:68:f6:4e:e5:
d2:22:82:39:d1:58:e2:8e:fc:24:7b:3b:ad:69:47:
c5:33:e6:12:81:ca:cf:12:5a:57:22:ce:d6:35:e1:
3a:bb:82:4c:ed:14:ba:9a:df:0c:03:59:65:44:ce:
83:a8:8a:dc:b6:a3:15:43:53:eb:fa:b2:7d:34:fd:
df:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C1:7D:F3:A1:CA:EB:47:12:17:27:CD:59:72:D2:23:3E:94:CC:58:14
X509v3 Authority Key Identifier:
keyid:A3:72:44:34:8E:71:EC:1B:E5:F5:00:7C:8D:5E:FE:71:25:92:07:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/o3JENI5x7Bvl9QB8jV7-cSWSByI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/b4ad85-16a8-487a-8a77-8852a532ad45/1/o3JENI5x7Bvl9QB8jV7-cSWSByI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/51/b4ad85-16a8-487a-8a77-8852a532ad45/1/o3JENI5x7Bvl9QB8jV7-cSWSByI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
03:35:0d:85:76:56:63:02:4f:25:2c:c1:aa:f2:b9:59:af:0c:
15:18:bc:06:09:a1:83:57:63:46:7e:14:ba:f0:62:e3:a9:bb:
05:1b:be:6b:1c:a3:7f:ea:f2:f7:03:77:3d:2c:11:eb:09:23:
c8:53:b0:26:5f:cd:b9:92:55:b7:96:e6:38:a0:e2:b7:ae:2b:
9a:38:d0:7d:d1:a8:16:8b:0c:fc:62:be:d6:7b:29:9a:b2:2e:
d7:38:35:58:37:0b:fa:17:cd:85:16:2a:dc:71:50:d6:57:8f:
f9:d5:4d:88:c8:3e:72:50:72:63:95:13:32:72:41:39:ab:1b:
e7:14:00:77:53:f4:38:ee:3f:a9:0d:13:6a:0c:67:6c:17:7c:
90:ce:b7:4d:22:2f:0b:c3:09:4d:06:11:30:99:9f:86:87:00:
9b:87:7e:ed:64:b2:6f:8e:19:c5:6a:cc:c1:68:fd:a0:31:7e:
cd:6a:7b:49:9e:06:07:2d:44:15:d6:f8:d6:31:86:5a:04:c6:
8f:4a:82:b7:95:dd:e5:9f:be:33:4a:c9:8a:54:69:8b:dc:2c:
51:0c:51:a9:4e:30:2d:e3:6c:56:ba:6e:f0:e1:c4:6f:5f:de:
60:50:9a:7b:da:63:e4:65:ba:3e:86:4a:46:9b:ce:0c:4f:0e:
9d:78:d1:79
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 1 11:16:19 2025 by rpki-client