Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/61/3f5ea4-1868-4a0b-9218-87e9f21b418b/1/O2BOwM_ulmxBmzptXwgrVjwYaL0.mft
File: O2BOwM_ulmxBmzptXwgrVjwYaL0.mft (raw, json)
Hash identifier: BSKQgrmxX7MFwvVdB75/qRQXnLdPbg4LigPwVJPdX84=
Subject key identifier: 44:B1:FC:8B:36:E1:3C:0A:05:27:B9:26:48:03:FB:E1:61:60:ED:D4
Authority key identifier: 3B:60:4E:C0:CF:EE:96:6C:41:9B:3A:6D:5F:08:2B:56:3C:18:68:BD
Certificate issuer: /CN=3b604ec0cfee966c419b3a6d5f082b563c1868bd
Certificate serial: 0196789F3ABF925E19357A71CC0CEEC82234
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/O2BOwM_ulmxBmzptXwgrVjwYaL0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/61/3f5ea4-1868-4a0b-9218-87e9f21b418b/1/O2BOwM_ulmxBmzptXwgrVjwYaL0.mft
Manifest number: 08BD
Signing time: Sun 27 Apr 2025 19:00:23 +0000
Manifest this update: Sun 27 Apr 2025 19:00:23 +0000
Manifest next update: Mon 28 Apr 2025 19:00:23 +0000
Files and hashes: 1: O2BOwM_ulmxBmzptXwgrVjwYaL0.crl (hash: wDspOgwGHryon8nwlxv7OSpuPU/o4NQVxUBio08W+5Q=)
2: Uekfh-0K2vRcuzrLz8uBXFaOroQ.roa (hash: QN8HhWjjJPearCTxHxonyEJ2yJIbW9sXZXyp6RMDaE0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/61/3f5ea4-1868-4a0b-9218-87e9f21b418b/1/O2BOwM_ulmxBmzptXwgrVjwYaL0.crl
rsync://rpki.ripe.net/repository/DEFAULT/61/3f5ea4-1868-4a0b-9218-87e9f21b418b/1/O2BOwM_ulmxBmzptXwgrVjwYaL0.mft
rsync://rpki.ripe.net/repository/DEFAULT/O2BOwM_ulmxBmzptXwgrVjwYaL0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Apr 2025 14:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:78:9f:3a:bf:92:5e:19:35:7a:71:cc:0c:ee:c8:22:34
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3b604ec0cfee966c419b3a6d5f082b563c1868bd
Validity
Not Before: Apr 27 19:00:23 2025 GMT
Not After : Apr 28 19:00:23 2025 GMT
Subject: CN=44b1fc8b36e13c0a0527b9264803fbe16160edd4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:a6:a5:ce:be:f6:22:db:51:98:1c:27:bc:77:
84:12:01:62:91:12:bd:62:d4:48:64:4c:d3:49:1a:
73:5f:27:67:d7:29:e2:30:fe:e0:97:8a:5c:9e:4a:
e7:e0:55:de:cc:b0:90:78:ab:26:07:c4:b1:c7:97:
d5:f8:e9:15:57:86:7f:32:4c:50:2e:4d:70:d8:09:
ec:38:13:4c:d3:da:9f:19:67:7e:98:a0:6b:4f:cb:
cf:25:c0:66:29:a4:28:cc:6f:ed:04:86:26:73:12:
b0:54:db:9b:36:05:1a:b7:12:32:fa:8e:ed:51:9c:
93:20:cb:0d:41:2b:a1:b0:f6:0e:c5:1a:79:f3:0d:
44:ed:ec:cf:62:bc:a3:c2:68:af:fc:d4:d4:66:10:
5f:43:cc:a3:3b:e5:6c:69:f4:6f:db:f0:4c:8d:bc:
21:e7:29:3a:b8:23:04:6f:8c:19:c0:d2:03:0f:7b:
53:a6:47:d8:c7:fa:62:79:eb:a8:f1:5e:14:d7:a5:
bd:1e:39:07:45:02:07:ad:40:0e:40:65:fc:02:a6:
17:ab:97:82:df:00:d6:27:08:d0:64:e8:37:2e:e1:
ab:48:5c:18:a2:09:0e:e9:d5:40:6f:cb:e3:d0:a3:
b5:ad:0d:da:d5:81:35:1e:69:6b:ec:ce:f4:4c:7c:
c4:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
44:B1:FC:8B:36:E1:3C:0A:05:27:B9:26:48:03:FB:E1:61:60:ED:D4
X509v3 Authority Key Identifier:
keyid:3B:60:4E:C0:CF:EE:96:6C:41:9B:3A:6D:5F:08:2B:56:3C:18:68:BD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/O2BOwM_ulmxBmzptXwgrVjwYaL0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/61/3f5ea4-1868-4a0b-9218-87e9f21b418b/1/O2BOwM_ulmxBmzptXwgrVjwYaL0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/61/3f5ea4-1868-4a0b-9218-87e9f21b418b/1/O2BOwM_ulmxBmzptXwgrVjwYaL0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
88:35:a4:7b:c3:15:fe:0c:7c:e4:49:ef:f6:48:06:09:fb:d9:
40:b0:c2:6e:27:26:26:ac:12:ff:e4:ef:0d:bb:78:f6:e7:5e:
8c:42:77:db:78:aa:b2:2b:a8:15:c7:d4:32:0f:7b:f2:a1:ae:
0d:2a:0c:bc:07:b0:17:91:54:1f:da:ed:97:06:22:57:5e:61:
46:58:4b:16:61:dd:88:50:10:82:0f:4c:a2:55:ce:ce:1d:05:
ba:b9:ce:a7:e4:86:18:de:2b:02:5f:02:89:1a:3e:0a:74:89:
95:ec:5b:61:23:3f:32:e0:b2:37:2b:ad:9e:ee:1a:81:d8:51:
b7:b1:ed:1e:1e:c0:07:a0:6d:ef:d2:76:57:7d:83:2e:39:89:
55:d9:ad:ff:1e:99:ba:d7:fc:30:64:28:1b:06:4e:04:6b:3d:
57:87:49:72:b9:9c:80:6c:43:f8:9c:48:1c:e4:a0:25:ac:2b:
97:35:0f:3b:0c:38:68:51:c3:9a:80:e3:b6:a1:7c:1d:26:88:
98:ce:25:4a:ed:3d:cc:5e:d5:aa:1e:34:34:9d:8b:78:78:27:
0a:44:48:10:65:6b:f3:51:7c:2b:9b:d2:ca:20:eb:51:0d:0a:
06:b6:c4:d4:03:b3:3b:bc:63:0a:cb:65:1b:f3:a7:bd:ce:ea:
e3:f6:b7:1c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 22:58:54 2025 by rpki-client