Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/59/b548d5-82fe-46c2-b997-157ad0ac520a/1/o3F-pUuVlC-tgalD7bHBD535Svs.mft
File: o3F-pUuVlC-tgalD7bHBD535Svs.mft (raw, json)
Hash identifier: 7xmZAYj2nHWxiK61LcXT8qMQRzGnKMW9zffN31LXB1E=
Subject key identifier: 7E:16:02:72:EF:EB:35:56:18:64:71:17:7C:DE:D2:AF:78:23:5C:33
Authority key identifier: A3:71:7E:A5:4B:95:94:2F:AD:81:A9:43:ED:B1:C1:0F:9D:F9:4A:FB
Certificate issuer: /CN=a3717ea54b95942fad81a943edb1c10f9df94afb
Certificate serial: 01967AFBAD9679B357331958EEA378C46329
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/o3F-pUuVlC-tgalD7bHBD535Svs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/59/b548d5-82fe-46c2-b997-157ad0ac520a/1/o3F-pUuVlC-tgalD7bHBD535Svs.mft
Manifest number: 1499
Signing time: Mon 28 Apr 2025 06:00:36 +0000
Manifest this update: Mon 28 Apr 2025 06:00:36 +0000
Manifest next update: Tue 29 Apr 2025 06:00:36 +0000
Files and hashes: 1: o3F-pUuVlC-tgalD7bHBD535Svs.crl (hash: JhqKkDwwcbj1yEHYAf8+11WybhnLf3hue/PF/k6AeHk=)
2: pg44eaa6uLO77ZBpldSyzPpFh88.roa (hash: 0sb9vGZUz6J5OEzKPCflxf4EwPkYpEMJhVhuM9KBJfs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/59/b548d5-82fe-46c2-b997-157ad0ac520a/1/o3F-pUuVlC-tgalD7bHBD535Svs.crl
rsync://rpki.ripe.net/repository/DEFAULT/59/b548d5-82fe-46c2-b997-157ad0ac520a/1/o3F-pUuVlC-tgalD7bHBD535Svs.mft
rsync://rpki.ripe.net/repository/DEFAULT/o3F-pUuVlC-tgalD7bHBD535Svs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 29 Apr 2025 06:00:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:7a:fb:ad:96:79:b3:57:33:19:58:ee:a3:78:c4:63:29
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a3717ea54b95942fad81a943edb1c10f9df94afb
Validity
Not Before: Apr 28 06:00:36 2025 GMT
Not After : Apr 29 06:00:36 2025 GMT
Subject: CN=7e160272efeb3556186471177cded2af78235c33
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:59:aa:c0:ee:05:a1:54:02:ec:31:dd:60:90:
32:3c:96:88:11:c9:38:1c:7c:14:b2:44:b2:e1:66:
4a:de:df:34:32:86:34:0f:fe:6a:44:7c:c3:d3:41:
f2:a2:ee:08:d1:98:6c:d0:58:3c:68:fa:6d:d4:45:
87:e5:f4:d4:ba:85:be:70:d0:d7:c6:63:91:f6:f4:
91:8f:5c:49:dc:ac:97:06:47:d6:4d:0a:96:5c:fa:
4f:e9:58:ce:7c:28:83:00:c2:d2:8a:5a:7f:9c:8e:
7f:b1:b6:b7:95:01:f3:ec:c8:d1:c0:44:7a:5e:0a:
d3:f3:8c:fe:62:10:0c:13:1a:a9:aa:41:93:7b:e1:
98:2d:c5:e0:84:e4:f2:d9:c6:68:15:fc:ef:35:f2:
f2:1e:d4:1b:d7:88:4f:04:71:67:2c:03:73:20:80:
8b:e5:90:41:e6:20:07:dd:85:8d:38:79:b7:5e:f9:
65:d5:95:6b:80:b8:f3:a3:3f:28:8a:52:f1:54:04:
e4:90:63:c9:67:0a:0e:a7:46:6b:20:b8:48:57:02:
d6:1b:bd:d8:de:34:7a:a9:b0:31:ac:ce:0d:1f:82:
bb:43:0e:0c:d0:d6:62:c5:78:c9:4d:ba:2c:10:db:
05:99:fb:d9:2f:58:66:ff:fd:e2:53:f1:b5:ff:27:
4b:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7E:16:02:72:EF:EB:35:56:18:64:71:17:7C:DE:D2:AF:78:23:5C:33
X509v3 Authority Key Identifier:
keyid:A3:71:7E:A5:4B:95:94:2F:AD:81:A9:43:ED:B1:C1:0F:9D:F9:4A:FB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/o3F-pUuVlC-tgalD7bHBD535Svs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/59/b548d5-82fe-46c2-b997-157ad0ac520a/1/o3F-pUuVlC-tgalD7bHBD535Svs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/59/b548d5-82fe-46c2-b997-157ad0ac520a/1/o3F-pUuVlC-tgalD7bHBD535Svs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3f:f7:b7:8b:0c:05:39:0f:8c:da:95:a9:55:6a:54:46:0d:c9:
b3:d0:0d:e5:a9:5f:e3:7e:10:78:7d:5e:4a:ca:8b:0c:28:4d:
ec:d5:43:04:b8:e4:39:95:0d:11:41:a5:31:bd:81:bd:0c:cf:
0e:39:fb:7d:1a:4e:a1:08:2f:52:39:98:de:e6:f5:00:d0:0d:
f0:6f:1a:f3:2d:37:3d:42:75:02:fb:fc:cd:6b:17:84:fd:6e:
30:b6:7f:a5:6e:50:13:52:33:20:bb:7f:cb:4f:e1:e0:58:81:
75:1c:01:f4:4a:70:b3:53:ac:fd:4b:91:bd:04:26:0d:c7:df:
ab:0a:ea:4c:27:b6:49:45:e9:8a:71:b5:e7:b5:f2:4e:98:27:
6a:8c:99:c8:b1:60:5a:35:2f:7b:a0:03:82:e8:5e:3d:ff:3c:
b1:7b:ee:42:ca:3b:ea:0d:11:cf:c6:0b:b2:40:be:7c:2f:7e:
65:13:e9:2b:ec:a8:dc:a4:bf:00:78:21:88:50:e7:4a:b0:01:
e5:0e:0e:8d:44:69:9c:9c:31:74:ee:ca:b0:02:63:0d:7f:0b:
63:7a:c7:d7:b9:54:b9:44:5a:78:92:51:6d:33:17:29:63:2f:
ae:24:b0:94:39:12:a1:58:ca:f5:bc:fc:b7:65:59:29:df:5f:
8b:e0:d9:1b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 16:07:09 2025 by rpki-client