Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/57/c2fbe1-dd9d-4204-9066-e225a249378e/1/o4SlYxesgXmFG1cPDjp6oEToCKY.mft
File: o4SlYxesgXmFG1cPDjp6oEToCKY.mft (raw, json)
Hash identifier: sDR3oOAXQB8RFadvb388/KTy+MQfbl+22ase+fNFx2A=
Subject key identifier: 18:1A:EC:38:65:79:FA:AA:12:DC:87:23:49:6B:7D:CA:DD:13:63:41
Authority key identifier: A3:84:A5:63:17:AC:81:79:85:1B:57:0F:0E:3A:7A:A0:44:E8:08:A6
Certificate issuer: /CN=a384a56317ac8179851b570f0e3a7aa044e808a6
Certificate serial: 01967A200915F605B4F8570AE4BDDE8C59B7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/o4SlYxesgXmFG1cPDjp6oEToCKY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/57/c2fbe1-dd9d-4204-9066-e225a249378e/1/o4SlYxesgXmFG1cPDjp6oEToCKY.mft
Manifest number: 0332
Signing time: Mon 28 Apr 2025 02:00:41 +0000
Manifest this update: Mon 28 Apr 2025 02:00:41 +0000
Manifest next update: Tue 29 Apr 2025 02:00:41 +0000
Files and hashes: 1: K7qTK9pIyiEZfe3oYQ_ZP0X2yEA.roa (hash: aRm9dSDweAWyai2Lyi7lBDWMUI5ncN0CehfI1VhjASU=)
2: o4SlYxesgXmFG1cPDjp6oEToCKY.crl (hash: YDeEqzHqJb9ZCT5idsLiixfWSBooKwNhSSO2/5dg/0w=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/57/c2fbe1-dd9d-4204-9066-e225a249378e/1/o4SlYxesgXmFG1cPDjp6oEToCKY.crl
rsync://rpki.ripe.net/repository/DEFAULT/57/c2fbe1-dd9d-4204-9066-e225a249378e/1/o4SlYxesgXmFG1cPDjp6oEToCKY.mft
rsync://rpki.ripe.net/repository/DEFAULT/o4SlYxesgXmFG1cPDjp6oEToCKY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Apr 2025 23:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:7a:20:09:15:f6:05:b4:f8:57:0a:e4:bd:de:8c:59:b7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a384a56317ac8179851b570f0e3a7aa044e808a6
Validity
Not Before: Apr 28 02:00:41 2025 GMT
Not After : Apr 29 02:00:41 2025 GMT
Subject: CN=181aec386579faaa12dc8723496b7dcadd136341
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:c1:97:b5:a7:a9:dd:b6:8b:71:fd:71:69:5f:
59:21:eb:db:9f:c1:c1:1b:28:63:80:92:ba:80:ac:
ca:13:3c:84:5d:e2:29:40:98:90:03:7c:4e:f3:27:
b5:2f:e0:95:ef:27:c0:f6:ee:bf:e5:c3:17:b1:1b:
89:15:a7:80:1d:6f:6f:c2:57:f3:75:53:fd:57:61:
c4:57:98:69:18:54:c2:b2:b6:cd:e7:64:49:a6:f8:
ca:8c:58:b9:03:55:60:fe:b2:82:41:e2:a7:b1:8c:
df:bf:7b:7e:d0:48:cc:a5:8a:0c:4b:85:be:8d:9a:
dc:8c:14:12:40:e1:17:8c:8c:c7:92:49:75:ec:8c:
5b:f5:f5:5f:bd:48:ed:3b:be:d9:12:b8:09:39:e5:
01:48:76:0a:15:26:c5:4b:d0:70:ef:fb:ca:93:f4:
49:80:85:29:10:8f:9f:e8:c6:51:0b:c0:8b:e8:64:
16:d6:78:ac:22:fb:2a:70:7b:1d:fb:d6:0e:ef:72:
5c:53:7c:59:d8:87:c2:ce:01:74:c0:a4:bd:32:49:
16:e5:97:8c:15:97:9c:9f:3a:81:e9:c1:cc:5c:8a:
a2:b7:69:a8:9b:b7:c4:b6:cb:b1:52:16:de:49:f7:
66:85:54:96:e2:93:4a:59:f9:24:f0:84:d5:73:c5:
f2:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
18:1A:EC:38:65:79:FA:AA:12:DC:87:23:49:6B:7D:CA:DD:13:63:41
X509v3 Authority Key Identifier:
keyid:A3:84:A5:63:17:AC:81:79:85:1B:57:0F:0E:3A:7A:A0:44:E8:08:A6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/o4SlYxesgXmFG1cPDjp6oEToCKY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/57/c2fbe1-dd9d-4204-9066-e225a249378e/1/o4SlYxesgXmFG1cPDjp6oEToCKY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/57/c2fbe1-dd9d-4204-9066-e225a249378e/1/o4SlYxesgXmFG1cPDjp6oEToCKY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
29:b3:89:0c:6f:46:79:9b:08:2b:b3:bd:79:f6:8d:f4:55:2b:
34:29:7b:33:5a:33:fb:ad:d4:22:a3:5f:cb:86:0a:83:2f:9f:
52:54:78:95:35:1a:5b:73:eb:27:81:b1:c9:68:86:87:da:9f:
99:24:75:29:da:55:33:d9:cc:47:dd:a7:48:94:5b:7e:14:8a:
dc:a6:d2:26:fe:df:d8:2b:d5:39:05:d2:ed:00:ee:39:af:11:
c7:dc:2e:72:39:cf:71:d3:b5:fd:00:84:28:97:39:c6:b3:86:
b1:53:5e:7c:14:54:fc:d7:42:f8:e7:56:c8:ef:67:ae:c5:06:
61:ec:a5:02:38:f9:09:45:7f:9a:75:bf:f4:d3:28:66:a9:21:
ff:49:7d:ff:f9:73:28:f2:ee:2f:8b:d5:5e:74:3e:00:44:71:
6d:c5:53:f0:10:9b:72:37:95:4b:53:53:fc:d7:4d:fc:94:66:
f1:8c:1e:85:4b:e8:ab:13:1c:9f:fe:31:4e:be:9c:a9:9d:7b:
0d:c0:72:d3:1f:71:54:a9:d5:93:46:2f:3b:1e:35:cf:f7:43:
ec:81:64:58:73:73:a5:b9:cc:4f:74:60:70:a5:df:2a:ea:47:
86:4f:37:f4:a2:23:53:f6:2f:42:a2:d4:09:36:ed:75:a3:ff:
d1:9d:39:53
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 09:15:39 2025 by rpki-client