Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5a/81d68a-536c-4442-b852-bbd311186950/1/o2mLAQU5EWB-2yp2CQpqztlaPtU.mft
File: o2mLAQU5EWB-2yp2CQpqztlaPtU.mft (raw, json)
Hash identifier: 79DVQiU1EXAoZv4L3O0kOgVm7FpOJ/RfEBR4oDVA6pA=
Subject key identifier: B6:EB:D6:D1:1F:09:7E:D8:89:42:CD:1D:72:B6:47:83:A1:4F:82:57
Authority key identifier: A3:69:8B:01:05:39:11:60:7E:DB:2A:76:09:0A:6A:CE:D9:5A:3E:D5
Certificate issuer: /CN=a3698b01053911607edb2a76090a6aced95a3ed5
Certificate serial: 01967E33BB99AA64D470F0AAC778731D9E65
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/o2mLAQU5EWB-2yp2CQpqztlaPtU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5a/81d68a-536c-4442-b852-bbd311186950/1/o2mLAQU5EWB-2yp2CQpqztlaPtU.mft
Manifest number: 1513
Signing time: Mon 28 Apr 2025 21:00:41 +0000
Manifest this update: Mon 28 Apr 2025 21:00:41 +0000
Manifest next update: Tue 29 Apr 2025 21:00:41 +0000
Files and hashes: 1: R8ht10VeSoVhydPFwGD77r1yDU0.roa (hash: ofWmsTQNmoPWiH0DZLija6UpuCRIgTv7LLQ8ZzQiLho=)
2: iJkNbGwAvDr3zDBvNNp3PJrPffk.roa (hash: oWcx7oCuY2xi/nWkXX5PcJkqGrpEdipcr6e/fE61Yrk=)
3: o2mLAQU5EWB-2yp2CQpqztlaPtU.crl (hash: Ma5rplh4JeIyzdUwx+vy2+XIGbAH8OeCXsup23t5m0k=)
4: tWQ9cnFy3imrP2HUU-YNNesXz-M.roa (hash: keNfuumhLj0esV6ivUODGor64VRXrwZusUQrseCHziI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5a/81d68a-536c-4442-b852-bbd311186950/1/o2mLAQU5EWB-2yp2CQpqztlaPtU.crl
rsync://rpki.ripe.net/repository/DEFAULT/5a/81d68a-536c-4442-b852-bbd311186950/1/o2mLAQU5EWB-2yp2CQpqztlaPtU.mft
rsync://rpki.ripe.net/repository/DEFAULT/o2mLAQU5EWB-2yp2CQpqztlaPtU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 29 Apr 2025 21:00:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:7e:33:bb:99:aa:64:d4:70:f0:aa:c7:78:73:1d:9e:65
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a3698b01053911607edb2a76090a6aced95a3ed5
Validity
Not Before: Apr 28 21:00:41 2025 GMT
Not After : Apr 29 21:00:41 2025 GMT
Subject: CN=b6ebd6d11f097ed88942cd1d72b64783a14f8257
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:3a:92:28:d8:17:fc:f8:46:df:12:2c:59:e3:
c0:5d:2a:b7:81:fa:b1:dc:51:8b:24:8a:e4:03:3b:
c8:8c:02:bd:78:5b:61:22:8e:9e:89:30:1b:ae:26:
53:3a:d3:5c:92:16:67:03:15:79:40:b6:dd:52:21:
22:32:23:d7:2d:49:3f:f2:82:8a:de:8c:63:fb:0b:
8c:eb:8b:06:ea:81:e8:8c:b4:04:24:9c:6e:04:4e:
f3:a3:64:34:47:93:ef:ff:13:41:24:1c:98:1b:75:
57:6a:7a:3b:17:6f:be:8c:9e:bc:51:e3:13:f1:df:
26:e3:34:ae:e6:73:30:93:60:d5:cd:28:cc:31:e8:
88:3a:b2:5f:71:6b:6f:62:40:bb:93:08:82:ad:81:
50:90:84:94:90:cb:69:5c:89:7e:91:fe:3a:01:ba:
e8:f7:67:6d:89:db:45:e4:e1:2d:5f:00:bc:19:e5:
c3:08:7d:bc:70:13:f0:59:2d:0d:54:ec:0e:af:48:
e6:a9:74:2c:c6:d9:e7:87:ba:7c:69:7e:02:9f:e2:
1b:fa:85:ba:15:a8:1c:86:89:f7:3f:4c:d0:7f:43:
ad:f8:85:f3:d6:ff:c0:52:b4:c2:af:77:73:90:c3:
24:c7:4d:fc:ea:ad:3d:8d:9c:6a:eb:28:df:bc:fa:
fd:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B6:EB:D6:D1:1F:09:7E:D8:89:42:CD:1D:72:B6:47:83:A1:4F:82:57
X509v3 Authority Key Identifier:
keyid:A3:69:8B:01:05:39:11:60:7E:DB:2A:76:09:0A:6A:CE:D9:5A:3E:D5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/o2mLAQU5EWB-2yp2CQpqztlaPtU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/81d68a-536c-4442-b852-bbd311186950/1/o2mLAQU5EWB-2yp2CQpqztlaPtU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/81d68a-536c-4442-b852-bbd311186950/1/o2mLAQU5EWB-2yp2CQpqztlaPtU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5a:75:83:37:9c:a4:16:ca:a3:16:1d:aa:c4:19:5c:b2:75:a6:
16:bb:44:9e:cb:f1:bb:73:ad:4f:59:6c:fe:de:84:d7:45:d6:
38:4a:98:36:c8:ef:cb:ba:0a:ce:ec:d3:4f:71:c8:14:50:6f:
54:86:c9:78:2f:37:cd:d6:72:ac:3c:8d:05:10:55:e5:64:1f:
58:15:25:d0:e8:27:bb:c8:84:6e:54:e9:1d:66:d9:1e:e5:a0:
cf:42:98:2f:88:ca:11:fb:d9:ca:04:74:81:30:1e:c1:71:a4:
dd:23:eb:78:15:00:24:c0:21:c5:8e:82:35:5b:0c:7c:07:d5:
99:8b:9f:b8:2a:c7:de:a5:2f:05:e5:c6:87:78:e0:38:5b:53:
80:2e:83:d2:ea:c2:02:58:8b:81:8e:78:54:15:3f:30:7a:88:
94:f9:1b:ee:4f:f6:84:65:56:6b:ba:09:21:1c:2f:cd:18:fd:
51:65:af:72:60:a9:aa:9d:a2:77:b3:ed:4b:15:86:e6:bf:f7:
d0:06:ab:92:d1:80:70:3e:95:86:6a:7d:db:7a:ce:b8:af:a3:
62:a2:89:04:83:60:8d:6a:47:e5:a3:53:37:16:60:5f:d2:40:
14:5a:14:88:12:6b:f5:99:cc:8a:7d:35:47:fa:5c:80:60:4a:
68:48:4e:9e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 29 04:09:39 2025 by rpki-client