Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5a/c53a3e-f90d-4742-84fb-db319a31bdf7/1/O94s1SFek7-gym34ssH17SyUr3Q.mft
File: O94s1SFek7-gym34ssH17SyUr3Q.mft (raw, json)
Hash identifier: 231ky4GK6I5NMG83C3hcACM5OB/d6K/FB2EPbQyDhKU=
Subject key identifier: A0:D6:14:83:2B:B4:17:82:F4:30:E6:68:C0:3F:4E:D8:DB:A0:65:20
Authority key identifier: 3B:DE:2C:D5:21:5E:93:BF:A0:CA:6D:F8:B2:C1:F5:ED:2C:94:AF:74
Certificate issuer: /CN=3bde2cd5215e93bfa0ca6df8b2c1f5ed2c94af74
Certificate serial: 019678685844B2FD3809951BC7808B5609C7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/O94s1SFek7-gym34ssH17SyUr3Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5a/c53a3e-f90d-4742-84fb-db319a31bdf7/1/O94s1SFek7-gym34ssH17SyUr3Q.mft
Manifest number: 1511
Signing time: Sun 27 Apr 2025 18:00:26 +0000
Manifest this update: Sun 27 Apr 2025 18:00:26 +0000
Manifest next update: Mon 28 Apr 2025 18:00:26 +0000
Files and hashes: 1: O94s1SFek7-gym34ssH17SyUr3Q.crl (hash: W4ex3CfhbVl2NCuqv1qEnI8VNvlam4j1EeNPZ2229pg=)
2: q9xJeN8PofnE74G9SyXfTH60ZME.roa (hash: yftwsdAWhtCdoWRv+jAeZvxiXWe//Rf4F2VF/Lbsjio=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5a/c53a3e-f90d-4742-84fb-db319a31bdf7/1/O94s1SFek7-gym34ssH17SyUr3Q.crl
rsync://rpki.ripe.net/repository/DEFAULT/5a/c53a3e-f90d-4742-84fb-db319a31bdf7/1/O94s1SFek7-gym34ssH17SyUr3Q.mft
rsync://rpki.ripe.net/repository/DEFAULT/O94s1SFek7-gym34ssH17SyUr3Q.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Apr 2025 14:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:78:68:58:44:b2:fd:38:09:95:1b:c7:80:8b:56:09:c7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3bde2cd5215e93bfa0ca6df8b2c1f5ed2c94af74
Validity
Not Before: Apr 27 18:00:26 2025 GMT
Not After : Apr 28 18:00:26 2025 GMT
Subject: CN=a0d614832bb41782f430e668c03f4ed8dba06520
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:57:8f:04:d2:20:62:e2:b3:6f:c2:3b:03:73:
46:1c:87:9e:c5:54:4c:7f:6a:21:8c:c5:be:34:5d:
8f:8f:fd:a0:ab:f0:1b:65:fe:ee:0a:d5:40:d3:ef:
8c:33:c6:13:60:1f:50:c5:dc:6e:17:67:21:6a:78:
65:15:dd:ee:2e:64:52:81:f3:60:a3:0a:dc:60:ae:
28:3a:6a:99:ad:54:0f:d5:64:1a:73:0e:83:21:f6:
31:98:28:39:a6:8b:36:72:b0:5f:51:3d:b2:b9:ba:
74:84:0b:71:e8:b3:db:87:6e:1e:26:b9:b2:f0:69:
59:71:e0:2d:9c:96:aa:c3:5b:a6:6a:3c:5d:3c:76:
2a:99:cf:21:e3:bf:a5:ce:d1:ae:84:53:e6:11:28:
70:cb:39:b9:5e:cf:d5:6c:a4:1a:d2:ea:2a:0c:f2:
1a:06:03:4c:20:83:35:e8:b8:08:ee:82:7e:75:34:
e1:a9:03:36:e5:ee:1a:e3:4e:5e:b5:73:4f:b4:bf:
d5:04:d9:ea:ef:7a:97:6a:0a:31:7e:36:10:01:e9:
15:3c:60:5b:6d:16:7a:3a:40:7b:ca:7e:26:20:d9:
45:bc:57:36:92:3b:23:97:db:63:ec:42:9c:c4:4b:
15:f3:4b:80:78:35:d5:7f:1a:1c:92:2d:e9:12:d2:
00:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A0:D6:14:83:2B:B4:17:82:F4:30:E6:68:C0:3F:4E:D8:DB:A0:65:20
X509v3 Authority Key Identifier:
keyid:3B:DE:2C:D5:21:5E:93:BF:A0:CA:6D:F8:B2:C1:F5:ED:2C:94:AF:74
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/O94s1SFek7-gym34ssH17SyUr3Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/c53a3e-f90d-4742-84fb-db319a31bdf7/1/O94s1SFek7-gym34ssH17SyUr3Q.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/c53a3e-f90d-4742-84fb-db319a31bdf7/1/O94s1SFek7-gym34ssH17SyUr3Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
07:99:67:20:7d:f9:ad:a0:eb:fc:1e:a6:9d:7c:52:c5:12:c3:
22:a9:0e:01:f5:bb:96:5d:c0:eb:69:8f:a1:c1:8e:38:02:12:
06:1f:6a:df:f5:ff:83:5a:91:39:5f:e6:85:3e:19:03:4a:8f:
b7:9b:3c:91:91:3a:33:49:3a:d0:d7:62:ba:01:5a:d0:51:19:
33:5b:3f:57:9c:f6:9b:c8:9c:7e:cb:97:8a:77:94:af:38:99:
4f:73:b9:db:8d:8d:fc:df:88:ce:d9:63:e0:34:b1:5b:cc:41:
c8:cb:08:28:8a:68:d9:06:08:3c:aa:50:2c:02:58:70:f3:31:
9d:04:b9:b0:e1:58:27:2f:bd:7f:64:99:6e:7a:d6:5e:02:31:
ef:e7:db:7f:6e:b2:90:f3:d0:aa:5a:94:e5:50:86:a7:dc:22:
cc:1f:9e:95:ce:5a:1f:80:0b:74:e5:e4:19:63:80:44:39:19:
54:0e:ec:aa:04:9c:78:87:15:c4:71:c5:14:fd:4d:b3:80:61:
61:8c:5c:66:22:7b:dd:4c:92:33:11:0d:51:7c:4d:fd:74:a9:
1a:58:bf:b2:ff:7b:17:06:01:b8:f0:67:d4:27:72:c8:2e:d6:
b9:0a:1a:ce:a7:62:50:73:56:fa:d7:65:a3:55:f7:c5:7f:d8:
40:fe:f0:3b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 23:16:50 2025 by rpki-client