Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7a/a8aaff-12a1-4641-8b9d-24d272ce11e3/1/o_GyKyBUUCv9OIkTgpEQPYO2pQ4.mft
File: o_GyKyBUUCv9OIkTgpEQPYO2pQ4.mft (raw, json)
Hash identifier: N5dx2gdfO3lh9bEwa2Dbj+XGfXJDq30IBLEYEN8lhoo=
Subject key identifier: 9B:5C:57:0B:06:28:A6:5C:ED:F5:B9:E9:E4:68:7A:0F:5F:B0:28:43
Authority key identifier: A3:F1:B2:2B:20:54:50:2B:FD:38:89:13:82:91:10:3D:83:B6:A5:0E
Certificate issuer: /CN=a3f1b22b2054502bfd3889138291103d83b6a50e
Certificate serial: 0196745470FDC9A6D546433963ABE0A3F23F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/o_GyKyBUUCv9OIkTgpEQPYO2pQ4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7a/a8aaff-12a1-4641-8b9d-24d272ce11e3/1/o_GyKyBUUCv9OIkTgpEQPYO2pQ4.mft
Manifest number: 0449
Signing time: Sat 26 Apr 2025 23:00:12 +0000
Manifest this update: Sat 26 Apr 2025 23:00:12 +0000
Manifest next update: Sun 27 Apr 2025 23:00:12 +0000
Files and hashes: 1: Q8iIFORrHQ7CVyF0u573RC5AZpM.roa (hash: Ui1Waa5hGdzZs2TY0/Jb8NUdFKitTzOn1OfpI/V2JIY=)
2: o_GyKyBUUCv9OIkTgpEQPYO2pQ4.crl (hash: 8QeKjZTtlAskUoJN0kVtIdwnPvE4YlXeFyxOqedpioI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7a/a8aaff-12a1-4641-8b9d-24d272ce11e3/1/o_GyKyBUUCv9OIkTgpEQPYO2pQ4.crl
rsync://rpki.ripe.net/repository/DEFAULT/7a/a8aaff-12a1-4641-8b9d-24d272ce11e3/1/o_GyKyBUUCv9OIkTgpEQPYO2pQ4.mft
rsync://rpki.ripe.net/repository/DEFAULT/o_GyKyBUUCv9OIkTgpEQPYO2pQ4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Apr 2025 23:00:12 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:74:54:70:fd:c9:a6:d5:46:43:39:63:ab:e0:a3:f2:3f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a3f1b22b2054502bfd3889138291103d83b6a50e
Validity
Not Before: Apr 26 23:00:12 2025 GMT
Not After : Apr 27 23:00:12 2025 GMT
Subject: CN=9b5c570b0628a65cedf5b9e9e4687a0f5fb02843
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:c9:cf:dc:fa:94:ea:49:12:32:82:05:1f:72:
21:5e:5d:da:ee:95:e3:13:4f:14:c3:31:a1:f3:45:
62:4f:4a:0b:58:3f:12:60:dd:e6:1d:cf:6e:b7:7c:
0b:2d:d7:f6:a3:2c:2e:fa:94:2a:b9:09:b1:8e:15:
ea:c0:30:e3:82:01:a3:5d:13:04:eb:a7:ba:52:bd:
4e:35:a1:61:c2:54:4b:43:2a:b9:90:2e:06:88:ba:
f1:33:7f:ea:5b:6c:34:bb:d8:63:97:a9:33:27:3c:
af:bc:36:e2:6f:79:be:dd:b1:99:0a:c8:44:73:95:
91:ea:c7:03:c1:9d:4d:f8:4f:28:d2:88:52:7f:ff:
c3:b8:47:30:64:ae:1e:9b:bf:7c:12:57:3f:33:95:
43:fc:5a:78:87:3b:25:59:4e:fa:f5:34:73:75:d7:
a3:7d:c1:c4:d5:03:f5:92:27:85:44:62:1c:e6:ec:
8f:2e:95:21:ee:94:a1:ce:16:c7:a0:8e:b1:a7:c5:
4f:dd:82:e4:53:ec:29:27:fe:0b:a4:ba:01:10:41:
95:ce:af:2c:02:e3:d6:da:b4:f9:44:03:51:ed:a4:
94:83:5d:78:db:e5:d1:e4:7b:93:ac:71:21:ed:73:
b3:8f:14:8a:04:9e:8f:3e:e4:62:03:26:cc:47:e5:
3c:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9B:5C:57:0B:06:28:A6:5C:ED:F5:B9:E9:E4:68:7A:0F:5F:B0:28:43
X509v3 Authority Key Identifier:
keyid:A3:F1:B2:2B:20:54:50:2B:FD:38:89:13:82:91:10:3D:83:B6:A5:0E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/o_GyKyBUUCv9OIkTgpEQPYO2pQ4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7a/a8aaff-12a1-4641-8b9d-24d272ce11e3/1/o_GyKyBUUCv9OIkTgpEQPYO2pQ4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7a/a8aaff-12a1-4641-8b9d-24d272ce11e3/1/o_GyKyBUUCv9OIkTgpEQPYO2pQ4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2b:bf:82:a8:25:87:3c:83:8a:82:d0:42:1b:e4:21:47:9b:ed:
c4:b7:13:57:40:51:40:f1:b8:4c:7f:7a:42:7b:a6:3b:42:b1:
f3:2f:d5:22:d8:e6:a0:8c:ee:f9:ed:6e:e3:0a:6c:77:54:20:
d0:62:7c:48:0a:dc:9e:4f:6d:5f:7e:fc:01:82:56:ed:fe:cd:
77:26:8a:76:10:f6:37:ab:5a:e7:7f:e5:ca:49:5c:6d:56:ee:
19:45:3b:cc:85:7f:fa:b3:c6:61:fa:95:d6:80:8d:3c:68:f3:
d1:79:37:46:83:8b:c1:64:c8:81:71:48:d9:c7:be:b9:c6:1f:
2c:33:ca:80:31:2a:bb:3e:7a:17:c0:38:95:b8:f8:5e:63:37:
42:f6:bf:c1:29:9f:be:5a:b3:71:6e:73:9c:91:30:56:63:29:
b4:2c:52:e7:88:0c:c9:68:ff:cc:42:03:4b:96:e0:7d:79:66:
b9:b1:42:db:be:b5:da:96:2d:d3:31:5b:05:0e:a8:7e:4a:34:
c0:0f:58:bc:89:92:45:70:4a:b1:ad:c9:aa:f6:f9:fa:b0:99:
81:11:d5:3c:bd:c9:d9:e7:25:ae:9a:1c:64:b0:2d:f5:dc:45:
07:de:f3:41:75:2a:fc:84:be:b3:6d:e3:87:f5:62:a2:1c:b6:
88:f6:23:79
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 08:02:57 2025 by rpki-client