Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/78/c53c3e-aa2d-41ab-a312-2637d13338f1/1/O9lDbSE1wISJe3TGrTbaFwCnqY0.mft
File: O9lDbSE1wISJe3TGrTbaFwCnqY0.mft (raw, json)
Hash identifier: 9Trbjwepxii9O/HF3Zwi+R2DS5j38djkkC9HtwxeAUw=
Subject key identifier: C6:B0:D8:B3:9E:9E:B6:EE:F5:5C:B4:F0:69:CC:86:D0:0C:FA:BB:EE
Authority key identifier: 3B:D9:43:6D:21:35:C0:84:89:7B:74:C6:AD:36:DA:17:00:A7:A9:8D
Certificate issuer: /CN=3bd9436d2135c084897b74c6ad36da1700a7a98d
Certificate serial: 01967944778EE3E246C4F8D568C4875AE1CC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/O9lDbSE1wISJe3TGrTbaFwCnqY0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/78/c53c3e-aa2d-41ab-a312-2637d13338f1/1/O9lDbSE1wISJe3TGrTbaFwCnqY0.mft
Manifest number: 12F7
Signing time: Sun 27 Apr 2025 22:00:52 +0000
Manifest this update: Sun 27 Apr 2025 22:00:52 +0000
Manifest next update: Mon 28 Apr 2025 22:00:52 +0000
Files and hashes: 1: MkGUvFc5JSBVNeM_VILad8s5zXE.roa (hash: y7TqFtSF44B35KxghjCNu7WMj5pJpzLxmoZgRpNM7r8=)
2: O9lDbSE1wISJe3TGrTbaFwCnqY0.crl (hash: sj7QXxNIBWdTzRkuI/5Oq0kI+SfLgULQ8L6QUf2ifRs=)
3: VekG2JeXHUDy0fRDzXtFdNU8lfE.roa (hash: S50KN9jOHHSMt2/wCQRFtxbSHAYvoJTEJC1VbDgG6ns=)
4: XlsfqVnPq85M-ZJSh02UMv7bAq8.roa (hash: RvxcNQlHBl5xgY24wu2zM7ZcwbvvsV992ncfxEdC62I=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/78/c53c3e-aa2d-41ab-a312-2637d13338f1/1/O9lDbSE1wISJe3TGrTbaFwCnqY0.crl
rsync://rpki.ripe.net/repository/DEFAULT/78/c53c3e-aa2d-41ab-a312-2637d13338f1/1/O9lDbSE1wISJe3TGrTbaFwCnqY0.mft
rsync://rpki.ripe.net/repository/DEFAULT/O9lDbSE1wISJe3TGrTbaFwCnqY0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Apr 2025 22:00:52 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:79:44:77:8e:e3:e2:46:c4:f8:d5:68:c4:87:5a:e1:cc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3bd9436d2135c084897b74c6ad36da1700a7a98d
Validity
Not Before: Apr 27 22:00:52 2025 GMT
Not After : Apr 28 22:00:52 2025 GMT
Subject: CN=c6b0d8b39e9eb6eef55cb4f069cc86d00cfabbee
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:93:aa:b6:9c:0d:df:d7:3e:27:ec:d3:06:12:6c:
13:0e:1c:89:7d:b9:34:d2:c9:c8:7e:83:0a:80:77:
44:3a:a6:ed:9a:02:cc:27:88:ba:77:9b:ad:79:97:
14:6b:1c:1b:cd:b7:e7:af:9b:5c:5e:eb:f7:cd:df:
f5:c9:4e:2c:d0:db:27:8a:7c:3c:73:44:ab:6c:32:
fd:66:08:b0:28:79:69:9c:fd:dc:88:bf:11:0c:a8:
30:00:8d:48:d7:c2:20:51:11:21:eb:6a:fb:09:e1:
ce:c4:1d:39:39:f5:85:1d:3b:36:cf:c2:67:58:eb:
84:1a:b9:63:d3:a1:7d:ea:47:05:6f:10:31:6c:a6:
99:1b:8d:41:e8:a0:cd:c5:e2:dd:f9:af:64:53:c7:
54:f2:5e:59:bd:86:61:74:a3:f4:7c:a3:58:ea:5c:
85:5d:76:6c:49:5e:77:c3:0b:fe:37:e2:88:3d:ef:
a2:40:09:3a:d6:d2:42:e1:bf:b6:2a:41:c2:e9:24:
72:cb:da:51:7e:41:0e:75:c4:bb:2d:fa:eb:c1:be:
e4:60:f6:72:1f:4b:f1:a1:a5:f1:f2:dd:e6:fe:fb:
a8:5b:ce:50:e8:7d:25:15:88:92:a1:af:17:88:bd:
4c:d5:aa:1d:f3:55:e4:b3:c9:68:fa:07:fd:23:93:
fd:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C6:B0:D8:B3:9E:9E:B6:EE:F5:5C:B4:F0:69:CC:86:D0:0C:FA:BB:EE
X509v3 Authority Key Identifier:
keyid:3B:D9:43:6D:21:35:C0:84:89:7B:74:C6:AD:36:DA:17:00:A7:A9:8D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/O9lDbSE1wISJe3TGrTbaFwCnqY0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/78/c53c3e-aa2d-41ab-a312-2637d13338f1/1/O9lDbSE1wISJe3TGrTbaFwCnqY0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/78/c53c3e-aa2d-41ab-a312-2637d13338f1/1/O9lDbSE1wISJe3TGrTbaFwCnqY0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1e:07:b0:76:96:10:dc:c5:d6:af:41:25:29:01:50:fb:62:60:
2a:c1:58:48:94:12:65:1e:cd:9e:46:9a:0d:da:7e:58:f0:63:
2d:ef:cc:93:83:7c:70:18:4b:40:f3:8c:2e:2b:75:c1:ae:01:
36:7a:9b:2a:8a:54:9e:6a:c0:88:1a:ec:64:b5:8e:68:15:3d:
7e:b7:54:1c:20:14:23:73:ff:ee:b8:77:41:84:3f:36:c7:b3:
14:a4:db:98:67:d8:9f:02:7a:be:d0:5b:c4:59:0d:7a:0f:5d:
61:bb:b0:80:73:99:1c:de:50:42:1d:cf:a1:e7:f5:97:ad:c4:
01:21:f6:8c:0c:04:49:0b:2b:76:4f:bd:43:2a:79:49:04:bf:
1a:49:e8:a2:e3:b9:53:6e:5e:65:ab:ad:ae:0c:4c:ec:ac:d8:
8f:8a:4d:eb:8f:d2:2d:f5:52:ee:6d:d9:1e:ff:94:05:40:eb:
0e:6b:1e:09:50:14:80:8d:2f:91:19:2c:70:58:bd:2e:fb:bb:
cb:8b:d5:a6:13:87:49:78:54:6f:46:c3:94:a2:12:b0:0d:f8:
d7:40:db:74:7e:1b:ed:d7:03:ce:66:35:18:2c:28:a0:66:a7:
78:95:d3:5b:e9:4b:c1:6d:20:c9:f2:7b:a2:41:65:8d:0a:96:
48:20:0e:f5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 08:31:14 2025 by rpki-client