Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/70/b66429-4f20-4b90-a6b8-4c10e3360577/1/o8AxWK7YEWHU9XwXQtRgg0Fzp54.mft
File: o8AxWK7YEWHU9XwXQtRgg0Fzp54.mft (raw, json)
Hash identifier: s7rrB0XimlloVjmvz7anAiHkbkGtQF+SHZUlNJW4g3I=
Subject key identifier: C5:9C:E4:21:73:CA:AA:BB:D0:8F:E3:59:4B:0D:34:04:A1:63:A5:42
Authority key identifier: A3:C0:31:58:AE:D8:11:61:D4:F5:7C:17:42:D4:60:83:41:73:A7:9E
Certificate issuer: /CN=a3c03158aed81161d4f57c1742d460834173a79e
Certificate serial: 0196737960F5B44AE298586B2E1A8F1ABCE3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/o8AxWK7YEWHU9XwXQtRgg0Fzp54.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/70/b66429-4f20-4b90-a6b8-4c10e3360577/1/o8AxWK7YEWHU9XwXQtRgg0Fzp54.mft
Manifest number: 14A5
Signing time: Sat 26 Apr 2025 19:00:56 +0000
Manifest this update: Sat 26 Apr 2025 19:00:56 +0000
Manifest next update: Sun 27 Apr 2025 19:00:56 +0000
Files and hashes: 1: M5VBoueFwyiZ7y6LqhtMdkXqTgA.roa (hash: KvER2HIUGSx1EcSqGbNB9cVOLanNeLf/MKB2z89H4ZY=)
2: UvojC1ENhPbEF8CWrIQdqvN_EPk.roa (hash: M3fEcWwNkOYKiYYPvaWdy7xS9Gzd5XLhj8l6RknzTeQ=)
3: o8AxWK7YEWHU9XwXQtRgg0Fzp54.crl (hash: FxDJvvBUJIaEboTr6SbO4LhiMDJqpFo1+2OMqYXWpz4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/70/b66429-4f20-4b90-a6b8-4c10e3360577/1/o8AxWK7YEWHU9XwXQtRgg0Fzp54.crl
rsync://rpki.ripe.net/repository/DEFAULT/70/b66429-4f20-4b90-a6b8-4c10e3360577/1/o8AxWK7YEWHU9XwXQtRgg0Fzp54.mft
rsync://rpki.ripe.net/repository/DEFAULT/o8AxWK7YEWHU9XwXQtRgg0Fzp54.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Apr 2025 17:20:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:73:79:60:f5:b4:4a:e2:98:58:6b:2e:1a:8f:1a:bc:e3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a3c03158aed81161d4f57c1742d460834173a79e
Validity
Not Before: Apr 26 19:00:56 2025 GMT
Not After : Apr 27 19:00:56 2025 GMT
Subject: CN=c59ce42173caaabbd08fe3594b0d3404a163a542
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:ff:e7:f1:29:ff:e7:14:4f:d8:27:de:8d:28:
2b:cf:36:ec:aa:d3:81:05:61:80:c6:58:2e:72:fa:
39:53:a8:fa:6c:30:e9:5b:ef:b7:25:ff:62:cc:ed:
e4:86:fd:77:4b:42:55:7d:0e:d8:15:04:09:3c:84:
f3:12:82:e6:02:74:ec:02:e8:1a:ae:21:2f:0a:0b:
36:8b:5d:89:e0:0b:7b:25:c0:d7:93:2a:94:75:6f:
8b:52:54:2b:cb:8d:b6:85:62:eb:81:47:aa:fd:37:
5f:37:45:65:dd:4d:bb:bd:0a:ee:c6:95:9c:22:6d:
72:a9:39:97:9b:e6:e7:e3:5c:ea:ff:4a:23:70:8b:
f4:5c:a3:a2:e8:57:09:ac:18:e9:b1:32:0b:be:d6:
a4:88:6b:ab:36:d9:8f:f6:79:7e:8f:41:e7:38:a2:
58:5b:76:d8:ee:a2:ec:ba:e1:94:a8:8e:6b:42:f1:
39:94:91:1b:fb:e3:6a:44:07:05:01:ff:36:27:57:
94:ca:90:f9:85:f3:98:b6:a4:23:be:eb:29:87:99:
db:b3:4d:cc:3c:9f:eb:22:c3:a9:6d:22:b0:bf:e2:
2d:20:83:78:ae:8c:f3:ac:17:0d:c9:d1:8a:a7:f6:
7f:d9:6b:2b:16:b1:4f:1b:da:9f:0e:03:34:65:51:
a1:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C5:9C:E4:21:73:CA:AA:BB:D0:8F:E3:59:4B:0D:34:04:A1:63:A5:42
X509v3 Authority Key Identifier:
keyid:A3:C0:31:58:AE:D8:11:61:D4:F5:7C:17:42:D4:60:83:41:73:A7:9E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/o8AxWK7YEWHU9XwXQtRgg0Fzp54.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/70/b66429-4f20-4b90-a6b8-4c10e3360577/1/o8AxWK7YEWHU9XwXQtRgg0Fzp54.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/70/b66429-4f20-4b90-a6b8-4c10e3360577/1/o8AxWK7YEWHU9XwXQtRgg0Fzp54.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
80:22:37:f6:21:22:2a:ca:f1:52:9a:f0:43:90:6c:ab:44:a3:
04:86:8f:60:b5:9f:4c:bb:80:88:2b:13:f1:06:66:b8:0b:4e:
c3:36:51:08:d3:81:f5:90:f2:38:08:e4:a2:d7:11:0c:f8:44:
13:76:05:e9:ea:c2:ef:ed:1c:27:e7:05:4d:39:cd:d4:cd:98:
c7:63:02:82:20:b9:20:9e:38:15:ee:d5:67:5d:b8:ef:15:bb:
0e:73:18:4d:de:74:66:68:68:20:8b:3a:41:20:00:56:14:e1:
92:f5:ca:98:74:6a:14:98:77:36:fb:1e:25:c5:8a:92:32:29:
e0:30:e7:be:10:fc:eb:c8:bb:0f:71:b2:19:94:65:95:9d:60:
1c:ce:04:83:48:f0:46:f8:a5:5c:01:36:db:1b:8f:62:ab:2f:
f8:da:06:85:21:bf:5a:80:e4:d3:a7:b7:ed:44:6e:2e:d3:c0:
f4:25:84:6d:cf:43:e4:3f:21:71:a1:f0:de:c8:4a:a1:3d:1c:
45:7b:92:ab:5c:c4:62:52:92:97:5e:b9:c0:b6:00:84:71:22:
52:d0:c9:1d:84:b3:d5:b7:b4:01:fb:c0:05:4e:1d:6d:ac:be:
4b:20:90:27:94:1a:9f:10:37:0e:d6:28:c5:07:ac:c2:c3:68:
ae:b1:89:0f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 22:49:26 2025 by rpki-client