Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/62/14486a-a7e6-4113-93b1-15cdc9a8c38f/1/o0kR6dK76mamwkAxnd4wez3vSME.mft
File: o0kR6dK76mamwkAxnd4wez3vSME.mft (raw, json)
Hash identifier: fmeKGq314sBlTjf2yyeqk+V2FiIqOHZ2nOYpb1uPq4o=
Subject key identifier: 5A:2B:34:08:01:22:8C:96:D8:7E:3A:B0:EF:01:9D:46:51:7A:0D:EB
Authority key identifier: A3:49:11:E9:D2:BB:EA:66:A6:C2:40:31:9D:DE:30:7B:3D:EF:48:C1
Certificate issuer: /CN=a34911e9d2bbea66a6c240319dde307b3def48c1
Certificate serial: 019677FAC4A6114C0AFD5D68FBE5DF3D8595
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/o0kR6dK76mamwkAxnd4wez3vSME.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/62/14486a-a7e6-4113-93b1-15cdc9a8c38f/1/o0kR6dK76mamwkAxnd4wez3vSME.mft
Manifest number: 1511
Signing time: Sun 27 Apr 2025 16:00:45 +0000
Manifest this update: Sun 27 Apr 2025 16:00:45 +0000
Manifest next update: Mon 28 Apr 2025 16:00:45 +0000
Files and hashes: 1: o0kR6dK76mamwkAxnd4wez3vSME.crl (hash: 8U4yqpju/MhKMYWQF16Wfjx4cdE5mv8OWwHyW2u5VOw=)
2: xtKHi03X1rn73LOhmyBcH9uojR8.roa (hash: zBGWZf4vklDM0mAZkH6NtmjYXdkW+BEyoU8BQG385Gc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/62/14486a-a7e6-4113-93b1-15cdc9a8c38f/1/o0kR6dK76mamwkAxnd4wez3vSME.crl
rsync://rpki.ripe.net/repository/DEFAULT/62/14486a-a7e6-4113-93b1-15cdc9a8c38f/1/o0kR6dK76mamwkAxnd4wez3vSME.mft
rsync://rpki.ripe.net/repository/DEFAULT/o0kR6dK76mamwkAxnd4wez3vSME.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Apr 2025 16:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:77:fa:c4:a6:11:4c:0a:fd:5d:68:fb:e5:df:3d:85:95
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a34911e9d2bbea66a6c240319dde307b3def48c1
Validity
Not Before: Apr 27 16:00:45 2025 GMT
Not After : Apr 28 16:00:45 2025 GMT
Subject: CN=5a2b340801228c96d87e3ab0ef019d46517a0deb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:ab:47:30:d5:c2:1f:97:94:d4:37:b3:85:a3:
30:36:be:36:ac:1f:5b:b9:07:35:71:a4:0b:73:51:
5d:5e:0a:b8:1a:21:e6:91:fe:f7:7e:89:7c:36:24:
52:77:46:b2:28:bb:56:18:0b:6d:f9:27:fa:17:b6:
66:c6:30:b4:8e:bd:78:b2:05:24:d0:db:22:2c:aa:
81:b1:1e:45:af:b0:a5:fb:67:2a:64:90:2f:62:03:
e9:1a:a7:90:82:54:33:3e:c5:b2:de:78:9e:1c:63:
64:26:3f:67:5d:59:f8:e2:23:2d:90:4b:1c:8b:c5:
88:10:c7:93:79:aa:2e:47:1d:83:98:73:a3:ff:b0:
5a:0a:c3:14:97:5d:50:13:de:8b:26:dc:4e:2a:56:
44:ba:bf:c5:cd:24:a4:cb:89:f1:02:16:20:ce:02:
de:80:0d:c6:42:2c:af:04:97:a8:ca:08:1b:cc:6e:
8d:2c:74:01:ae:25:53:56:95:a9:d5:f1:32:e6:17:
60:17:2a:c4:be:56:d8:60:eb:44:11:0f:cb:6d:54:
2c:e0:fe:b4:bb:f7:5f:74:90:d3:6c:69:49:9e:f3:
dd:d0:51:44:5c:2f:85:f7:fa:8e:61:70:9b:f0:54:
92:0d:6c:30:4c:5a:87:16:11:10:7b:92:89:c0:94:
54:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5A:2B:34:08:01:22:8C:96:D8:7E:3A:B0:EF:01:9D:46:51:7A:0D:EB
X509v3 Authority Key Identifier:
keyid:A3:49:11:E9:D2:BB:EA:66:A6:C2:40:31:9D:DE:30:7B:3D:EF:48:C1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/o0kR6dK76mamwkAxnd4wez3vSME.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/62/14486a-a7e6-4113-93b1-15cdc9a8c38f/1/o0kR6dK76mamwkAxnd4wez3vSME.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/62/14486a-a7e6-4113-93b1-15cdc9a8c38f/1/o0kR6dK76mamwkAxnd4wez3vSME.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3e:19:17:07:db:04:48:a5:f0:db:3e:c4:99:ad:71:ff:41:d9:
5c:5c:cb:70:f2:3d:d3:de:83:9c:a4:39:56:20:9d:7a:bb:17:
8f:9f:49:71:33:78:94:3e:82:e7:17:3e:a4:56:b7:99:fb:ee:
20:60:64:01:1e:3f:79:d4:80:0b:45:d1:7a:b2:90:e7:bc:20:
7e:27:37:8f:21:9c:61:ad:7c:ab:5c:7c:18:a1:66:ab:7e:4e:
3d:f8:63:a9:7a:4b:43:11:91:c2:81:1d:93:a9:21:5d:b7:fb:
3e:82:6a:3e:05:80:fd:83:9e:43:62:6a:c8:a1:2d:08:7a:cc:
92:fc:67:85:e0:a3:1f:c0:67:07:0a:eb:1f:1b:99:50:63:f9:
91:ac:ad:ae:a3:a9:a8:72:61:79:2a:ec:56:52:17:20:6e:99:
16:f2:b5:65:e5:e1:5a:b3:90:d9:45:35:be:af:85:4d:24:ad:
45:f1:3e:22:71:b3:18:ab:e7:de:2e:b3:33:3b:21:25:d5:72:
b3:4b:83:10:2c:72:20:dd:6c:b2:5f:36:b0:9d:3b:fe:76:ae:
66:05:fa:bc:07:53:50:42:43:41:b0:d7:2b:7e:a7:15:d8:6d:
7a:2a:f4:1a:b8:7a:f5:9c:9f:3b:b8:c2:c3:cf:3a:96:1c:73:
cd:cb:18:d3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 02:03:05 2025 by rpki-client