Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/8dc2c7-3fc0-446d-807c-ef6c9ead611c/1/O9_XYE36DriuIOkPzxMDk7ioVko.mft
File: O9_XYE36DriuIOkPzxMDk7ioVko.mft (raw, json)
Hash identifier: coez0ayZnF3cVL3k/xVvZf6IdWjVJ290awd1R2pkZb4=
Subject key identifier: 9C:FC:8D:F9:DC:0D:27:CE:D9:A4:3D:7A:AD:4C:63:8A:7F:B8:F9:CB
Authority key identifier: 3B:DF:D7:60:4D:FA:0E:B8:AE:20:E9:0F:CF:13:03:93:B8:A8:56:4A
Certificate issuer: /CN=3bdfd7604dfa0eb8ae20e90fcf130393b8a8564a
Certificate serial: 019677C3F401D8C79D4AF82942410D10ADE2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/O9_XYE36DriuIOkPzxMDk7ioVko.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/8dc2c7-3fc0-446d-807c-ef6c9ead611c/1/O9_XYE36DriuIOkPzxMDk7ioVko.mft
Manifest number: 1510
Signing time: Sun 27 Apr 2025 15:00:52 +0000
Manifest this update: Sun 27 Apr 2025 15:00:52 +0000
Manifest next update: Mon 28 Apr 2025 15:00:52 +0000
Files and hashes: 1: O9_XYE36DriuIOkPzxMDk7ioVko.crl (hash: MCRvRYei3+3b4jLZiHqUO8lMlun5Co6Qpq3O39Ws8oo=)
2: m0kgiTT_WYsp23pJuD7SLX4KQwM.roa (hash: VIdUf2MaaJNNuBUU6XlHsX2gourJRTd5TApzwygVz+Y=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5e/8dc2c7-3fc0-446d-807c-ef6c9ead611c/1/O9_XYE36DriuIOkPzxMDk7ioVko.crl
rsync://rpki.ripe.net/repository/DEFAULT/5e/8dc2c7-3fc0-446d-807c-ef6c9ead611c/1/O9_XYE36DriuIOkPzxMDk7ioVko.mft
rsync://rpki.ripe.net/repository/DEFAULT/O9_XYE36DriuIOkPzxMDk7ioVko.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Apr 2025 14:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:77:c3:f4:01:d8:c7:9d:4a:f8:29:42:41:0d:10:ad:e2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3bdfd7604dfa0eb8ae20e90fcf130393b8a8564a
Validity
Not Before: Apr 27 15:00:52 2025 GMT
Not After : Apr 28 15:00:52 2025 GMT
Subject: CN=9cfc8df9dc0d27ced9a43d7aad4c638a7fb8f9cb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:c0:9b:a5:83:6a:04:46:1d:cf:a2:9c:2e:7f:
44:d1:ee:db:7a:ad:5a:a6:8d:4d:0e:a9:22:74:37:
c3:a2:d3:09:93:36:e2:1f:7a:69:ca:ea:ff:4e:c3:
bb:f3:47:ed:4d:1d:df:a9:76:3a:8b:21:ea:23:d7:
09:7b:5b:a1:46:de:32:d4:ef:11:63:d9:8b:87:35:
1a:1c:9a:c0:dd:b0:ca:7b:f2:d8:4d:9a:68:5e:64:
6a:24:17:fa:e7:5f:0f:84:eb:94:c6:37:89:71:df:
8f:c1:eb:20:7c:d0:5b:b7:84:fe:3e:60:e5:ef:df:
c6:ae:a2:b2:e9:e4:6f:9b:70:77:61:a2:c0:4d:d4:
5e:11:67:0f:a1:99:32:6d:1b:29:a0:2c:89:19:ef:
3e:73:0c:50:fe:b2:10:7f:aa:a0:36:da:0d:62:48:
05:b6:41:ed:f4:44:3b:c9:36:3b:7d:45:da:ae:98:
48:52:4c:f0:6f:dc:8b:70:39:c6:28:03:4c:20:71:
1b:ba:f7:02:88:ac:f6:ae:0b:bb:8a:d6:02:46:18:
b9:5d:62:fe:5e:d2:d5:40:bb:f2:5f:7e:a6:9b:f4:
31:3d:38:d3:2b:28:46:dd:9a:c6:c8:35:55:2d:6a:
99:11:a7:56:c8:07:cb:8a:8d:50:c2:18:8e:f8:a7:
63:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9C:FC:8D:F9:DC:0D:27:CE:D9:A4:3D:7A:AD:4C:63:8A:7F:B8:F9:CB
X509v3 Authority Key Identifier:
keyid:3B:DF:D7:60:4D:FA:0E:B8:AE:20:E9:0F:CF:13:03:93:B8:A8:56:4A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/O9_XYE36DriuIOkPzxMDk7ioVko.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/8dc2c7-3fc0-446d-807c-ef6c9ead611c/1/O9_XYE36DriuIOkPzxMDk7ioVko.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/8dc2c7-3fc0-446d-807c-ef6c9ead611c/1/O9_XYE36DriuIOkPzxMDk7ioVko.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
25:ed:47:a4:3a:43:59:fd:ff:84:cc:6e:6b:82:0f:0f:9f:91:
80:81:bd:b7:20:6a:89:2f:97:5b:d0:9d:3f:2a:ba:31:0a:24:
d3:7d:a5:c6:a4:c6:5f:69:b4:d3:fd:22:93:4c:8c:67:c9:3f:
e9:b8:ec:7c:a6:b5:36:fd:5a:94:38:d5:83:c3:fd:6f:57:de:
a7:10:41:bd:3d:3c:25:e6:11:be:c4:54:93:69:cc:b4:c7:55:
8b:e4:80:c0:c6:d4:56:a7:07:5b:39:f8:55:fd:e7:4b:bf:59:
09:4e:4a:9a:a9:4f:36:50:3a:26:89:7b:ba:cb:cb:2b:19:a1:
8e:6a:7d:bf:ab:03:f7:45:ea:f6:4a:cd:8a:0b:97:e3:4d:c6:
60:ff:90:81:98:6d:d5:76:b0:54:8e:90:66:66:7b:96:3e:3e:
44:d6:13:57:6f:eb:f0:b5:d9:2b:9d:b3:a9:33:a9:86:5a:7d:
fd:e3:b6:cc:70:73:05:c1:f5:d8:37:4e:cc:6f:92:49:6e:2d:
9f:23:d7:98:d8:e9:84:43:70:ac:78:20:80:b6:d4:70:b9:cd:
12:cb:a4:4f:c1:88:06:ba:35:4b:09:66:e2:bd:5c:c9:03:e4:
b8:8f:85:7f:bb:71:c0:cd:bb:11:dd:d2:3a:6d:92:d0:7a:e9:
2a:47:7f:df
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 00:03:05 2025 by rpki-client