Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6e/e99082-659e-49e2-ad91-76bb71eb0a5a/1/o7hf4rLCaZGx8xxm_GesDIoQl0Y.mft
File: o7hf4rLCaZGx8xxm_GesDIoQl0Y.mft (raw, json)
Hash identifier: j+PNVtxafTR+irODXtaoRbPCY+5IFD510n9tV4snQ4Y=
Subject key identifier: 23:C4:D2:B5:7D:09:44:AB:E7:09:0E:79:C0:71:B3:E9:F5:D4:7A:AF
Authority key identifier: A3:B8:5F:E2:B2:C2:69:91:B1:F3:1C:66:FC:67:AC:0C:8A:10:97:46
Certificate issuer: /CN=a3b85fe2b2c26991b1f31c66fc67ac0c8a109746
Certificate serial: 019691834EEA866EB42828C420BD8D4748F4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/o7hf4rLCaZGx8xxm_GesDIoQl0Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6e/e99082-659e-49e2-ad91-76bb71eb0a5a/1/o7hf4rLCaZGx8xxm_GesDIoQl0Y.mft
Manifest number: 11B8
Signing time: Fri 02 May 2025 15:00:23 +0000
Manifest this update: Fri 02 May 2025 15:00:23 +0000
Manifest next update: Sat 03 May 2025 15:00:23 +0000
Files and hashes: 1: 6bKOaNTOD26M5DPQmaAIN6UyW0c.roa (hash: n/Tx+likKaNH/PY72I+EbFWla5M5IP5SB9HyRpTSt7g=)
2: QufC61fw7pK87dB-kx4RiKifXlM.roa (hash: r+1QwPLgLXThXyY70R3A0vn9kct3kVdr0ohpYgp0VlA=)
3: o7hf4rLCaZGx8xxm_GesDIoQl0Y.crl (hash: tLs2uCH27KfN/JJY1UfZzrGi46mMSLCc+CpGcPQ2CzQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6e/e99082-659e-49e2-ad91-76bb71eb0a5a/1/o7hf4rLCaZGx8xxm_GesDIoQl0Y.crl
rsync://rpki.ripe.net/repository/DEFAULT/6e/e99082-659e-49e2-ad91-76bb71eb0a5a/1/o7hf4rLCaZGx8xxm_GesDIoQl0Y.mft
rsync://rpki.ripe.net/repository/DEFAULT/o7hf4rLCaZGx8xxm_GesDIoQl0Y.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 03 May 2025 14:24:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:91:83:4e:ea:86:6e:b4:28:28:c4:20:bd:8d:47:48:f4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a3b85fe2b2c26991b1f31c66fc67ac0c8a109746
Validity
Not Before: May 2 15:00:23 2025 GMT
Not After : May 3 15:00:23 2025 GMT
Subject: CN=23c4d2b57d0944abe7090e79c071b3e9f5d47aaf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:89:ec:85:17:fc:c2:a7:0f:1e:09:fa:08:7b:70:
28:0e:b7:6f:c4:97:a4:72:44:1c:85:23:08:5d:93:
f0:c5:97:99:41:7a:dc:b1:63:b6:09:89:54:9c:34:
70:e7:9d:15:40:fd:16:c8:6b:73:eb:ad:3e:69:12:
ff:7c:ff:2d:d3:f1:5d:a7:68:40:1d:68:52:0d:04:
e8:f8:9f:cc:40:8b:2c:78:82:07:c0:fc:ef:3c:0c:
2c:7b:d7:8a:69:4b:f2:4e:25:7d:8c:65:46:99:66:
f2:c4:9b:1c:e4:e9:49:05:1f:82:43:d8:89:89:fc:
09:d4:ea:e8:35:0a:62:15:0a:00:1a:20:26:56:fb:
41:f9:87:e6:40:1a:fd:7c:cf:bc:e2:f8:b4:4e:53:
2a:eb:d6:41:61:74:f2:ab:fc:0e:0f:ad:fd:2f:1f:
d3:55:7b:23:f9:db:c4:bb:16:f1:3d:0d:e7:e4:56:
fa:8c:ba:5c:a3:47:26:79:9a:2f:21:be:73:b1:77:
24:79:b6:bc:2b:d5:89:4f:1c:ca:e0:69:ea:3b:00:
69:91:ea:8a:b3:09:5c:47:ae:45:f3:c3:19:25:b5:
36:ef:ca:81:d2:6c:7c:ef:97:90:be:84:a5:b3:04:
30:fe:21:42:cd:af:55:0f:0e:c7:6a:e2:01:7e:e8:
ea:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
23:C4:D2:B5:7D:09:44:AB:E7:09:0E:79:C0:71:B3:E9:F5:D4:7A:AF
X509v3 Authority Key Identifier:
keyid:A3:B8:5F:E2:B2:C2:69:91:B1:F3:1C:66:FC:67:AC:0C:8A:10:97:46
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/o7hf4rLCaZGx8xxm_GesDIoQl0Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6e/e99082-659e-49e2-ad91-76bb71eb0a5a/1/o7hf4rLCaZGx8xxm_GesDIoQl0Y.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6e/e99082-659e-49e2-ad91-76bb71eb0a5a/1/o7hf4rLCaZGx8xxm_GesDIoQl0Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
29:c2:d7:df:0b:17:82:40:d5:09:02:28:a5:be:fd:fa:ef:b8:
b7:d9:c1:61:36:ff:2c:fa:d6:8a:ac:cf:e1:6b:c5:3d:da:6d:
9a:df:e7:9a:0a:0d:0b:fb:21:b8:53:31:46:d0:ba:24:9e:6b:
5c:48:d3:d2:19:85:ef:89:a3:78:46:b4:4c:86:ab:92:8b:55:
e6:86:e5:af:6d:68:08:8a:23:49:ef:13:b8:e3:59:fb:7e:c9:
46:34:9a:11:16:0f:07:7f:17:bf:52:1b:eb:b7:86:cb:ee:03:
9d:11:00:2a:1d:09:ab:20:f3:f6:74:34:b8:5c:3d:88:f9:cd:
3d:89:59:24:7d:d2:47:ac:d7:4d:9b:4e:25:37:f6:76:5e:3a:
7a:4a:70:5c:9c:cf:0b:23:d5:2c:e1:35:80:30:fa:1f:e1:a4:
c4:9e:e1:f3:ef:bf:96:4b:8e:18:53:8c:b7:14:8c:1e:45:ff:
d2:b1:2e:e8:15:65:bf:d8:76:43:39:42:8e:68:83:c3:49:e7:
15:7f:38:fb:6e:ff:46:93:19:70:e5:44:29:ab:73:db:04:28:
7b:a9:e1:49:ca:81:93:50:b8:b5:1b:48:76:f8:5e:c5:b6:84:
3f:db:44:be:28:a4:52:b2:df:54:8b:f0:67:36:99:aa:60:5e:
93:dd:71:14
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 2 22:40:24 2025 by rpki-client