Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5f/09ec83-85e2-4e9c-a79c-4c959f6077a0/1/O6BcspZx0wpXo-hET0H-A0z3UjE.mft
File: O6BcspZx0wpXo-hET0H-A0z3UjE.mft (raw, json)
Hash identifier: 0UnMXZPwQLAJ25yj5WOsBlU6gKLmy/86i/4pbfQs6Xg=
Subject key identifier: 78:49:2F:A2:48:71:72:39:59:D9:62:A0:AC:0F:72:67:C5:0D:D6:93
Authority key identifier: 3B:A0:5C:B2:96:71:D3:0A:57:A3:E8:44:4F:41:FE:03:4C:F7:52:31
Certificate issuer: /CN=3ba05cb29671d30a57a3e8444f41fe034cf75231
Certificate serial: 01967AFBAD066BA96335E2368A573D431E8C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/O6BcspZx0wpXo-hET0H-A0z3UjE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5f/09ec83-85e2-4e9c-a79c-4c959f6077a0/1/O6BcspZx0wpXo-hET0H-A0z3UjE.mft
Manifest number: 03D6
Signing time: Mon 28 Apr 2025 06:00:36 +0000
Manifest this update: Mon 28 Apr 2025 06:00:36 +0000
Manifest next update: Tue 29 Apr 2025 06:00:36 +0000
Files and hashes: 1: O6BcspZx0wpXo-hET0H-A0z3UjE.crl (hash: spAj2Rszu9bFzaJfNjpzUJAn1BC0jvGbmh1C3DPhKG0=)
2: Rz-Vh9z4e03dlNgqerpia1XRL-k.roa (hash: 264nJ8QiwzT6QaHmYoFKRNYp0Sy9/H1JZeP4RPKrOd4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5f/09ec83-85e2-4e9c-a79c-4c959f6077a0/1/O6BcspZx0wpXo-hET0H-A0z3UjE.crl
rsync://rpki.ripe.net/repository/DEFAULT/5f/09ec83-85e2-4e9c-a79c-4c959f6077a0/1/O6BcspZx0wpXo-hET0H-A0z3UjE.mft
rsync://rpki.ripe.net/repository/DEFAULT/O6BcspZx0wpXo-hET0H-A0z3UjE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 29 Apr 2025 06:00:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:7a:fb:ad:06:6b:a9:63:35:e2:36:8a:57:3d:43:1e:8c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3ba05cb29671d30a57a3e8444f41fe034cf75231
Validity
Not Before: Apr 28 06:00:36 2025 GMT
Not After : Apr 29 06:00:36 2025 GMT
Subject: CN=78492fa24871723959d962a0ac0f7267c50dd693
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:87:13:16:fe:33:7b:09:c0:3a:5f:29:71:b8:
f2:ce:41:2f:f8:a3:af:04:f4:c5:74:69:08:04:8f:
09:15:de:43:e6:08:41:37:7b:ad:7a:30:21:c3:ed:
5a:25:62:fb:82:65:06:88:fb:a7:fa:05:01:53:01:
36:1a:79:2b:80:9e:20:0a:17:84:e9:71:a7:77:89:
cc:7d:09:20:1c:7a:d3:db:af:93:57:95:e5:94:5a:
d1:73:99:28:40:d2:c5:38:cb:ff:67:50:de:42:6b:
7e:78:a9:10:98:07:25:33:37:65:0b:ce:0a:69:32:
78:7c:db:2e:58:03:15:c5:3c:33:cf:6e:ce:6b:32:
6b:03:5c:89:18:e3:6a:99:ad:8e:2e:8d:7b:84:26:
25:1a:00:70:46:41:3b:ec:88:f9:3c:ec:00:89:bc:
ba:fd:39:dc:86:b2:53:58:69:bd:f0:78:9a:3e:a0:
d7:65:3f:30:68:71:1a:11:28:16:87:86:30:15:76:
d5:49:61:33:b7:ac:e6:81:aa:e4:5a:93:ab:24:a1:
17:2e:f8:0e:36:93:90:dc:e7:ab:3e:d5:e3:f5:b1:
71:09:96:f0:c0:af:d1:8b:1e:19:bb:f8:b2:e5:2b:
17:2a:7f:a1:76:5d:0a:bc:55:cb:b5:5d:cd:0f:72:
57:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
78:49:2F:A2:48:71:72:39:59:D9:62:A0:AC:0F:72:67:C5:0D:D6:93
X509v3 Authority Key Identifier:
keyid:3B:A0:5C:B2:96:71:D3:0A:57:A3:E8:44:4F:41:FE:03:4C:F7:52:31
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/O6BcspZx0wpXo-hET0H-A0z3UjE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/09ec83-85e2-4e9c-a79c-4c959f6077a0/1/O6BcspZx0wpXo-hET0H-A0z3UjE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/09ec83-85e2-4e9c-a79c-4c959f6077a0/1/O6BcspZx0wpXo-hET0H-A0z3UjE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b0:df:58:49:58:59:08:1b:10:1c:d1:64:e4:8e:5d:41:f6:51:
5c:4b:47:65:b7:e3:1d:5d:6e:97:e7:55:bc:b4:c9:2f:64:b4:
40:f5:ed:10:1d:e9:85:8e:ae:95:e6:b8:ff:9b:a3:63:45:59:
ea:ed:04:9a:eb:f7:97:fa:db:9e:fa:f3:bc:89:a1:bc:32:e4:
09:7d:49:75:fe:2d:d8:9c:d8:eb:05:dd:ba:25:f3:0b:e7:90:
a6:f1:12:55:53:a9:f7:bc:91:96:a8:3e:9d:72:8d:ec:dd:86:
c3:db:17:d0:53:c3:82:46:64:cd:6f:94:de:d2:3e:22:70:c1:
c4:9c:87:17:1e:6e:0c:09:61:05:53:2f:9d:47:e5:b7:63:59:
38:fe:e4:cb:b7:b7:a5:f7:fc:52:56:b3:00:54:25:11:95:8d:
76:4d:eb:e9:2b:18:c6:37:1c:40:85:32:71:8e:2a:cd:6d:c5:
96:c2:ac:0c:19:71:6f:65:47:9a:15:e4:03:cf:ae:47:b8:aa:
7f:13:f6:65:cd:4d:d6:2a:a2:1a:d6:a9:fa:7f:b0:10:c9:91:
1a:82:3d:76:0f:69:54:e4:61:a8:4d:f2:62:26:4b:4e:70:d5:
51:dd:f7:f2:c7:18:73:d2:85:51:2f:cf:e7:ae:75:ca:95:53:
c0:ce:73:ef
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 13:18:39 2025 by rpki-client