Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/80/416bc7-ce87-42b6-8c68-4ba5f206f65a/1/O62c1QNPgVWPg9I47KQGMyvXuoU.mft
File: O62c1QNPgVWPg9I47KQGMyvXuoU.mft (raw, json)
Hash identifier: 1WjIG81fb7bDbg55ArszjmKcrnlTT+/bPaA/I8vKngU=
Subject key identifier: CA:7F:B0:E5:C5:F8:72:95:E9:EF:6D:61:4D:AF:98:BB:2A:45:9A:FC
Authority key identifier: 3B:AD:9C:D5:03:4F:81:55:8F:83:D2:38:EC:A4:06:33:2B:D7:BA:85
Certificate issuer: /CN=3bad9cd5034f81558f83d238eca406332bd7ba85
Certificate serial: 01967F4603BEAC7EE670C72D6900C0C61E9D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/O62c1QNPgVWPg9I47KQGMyvXuoU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/80/416bc7-ce87-42b6-8c68-4ba5f206f65a/1/O62c1QNPgVWPg9I47KQGMyvXuoU.mft
Manifest number: 0755
Signing time: Tue 29 Apr 2025 02:00:16 +0000
Manifest this update: Tue 29 Apr 2025 02:00:16 +0000
Manifest next update: Wed 30 Apr 2025 02:00:16 +0000
Files and hashes: 1: 9v4uAwYJrvb2Yfzwn7vUGRJFfrA.roa (hash: Q7fvWDsdQ9HQh+wgSlc858kuPmBuOrnOtrTzOH5aOA4=)
2: I7dpcVjAHE5hGJn0EYmp-wUevik.roa (hash: eOwI5yLF5oxr8SKT6hK3RCMgVUO2F6SCJ9PKWEwThMs=)
3: O62c1QNPgVWPg9I47KQGMyvXuoU.crl (hash: JmInaphA8vJf0DvOy//gN/e6ssKU7ic2RwIJpmIolbo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/80/416bc7-ce87-42b6-8c68-4ba5f206f65a/1/O62c1QNPgVWPg9I47KQGMyvXuoU.crl
rsync://rpki.ripe.net/repository/DEFAULT/80/416bc7-ce87-42b6-8c68-4ba5f206f65a/1/O62c1QNPgVWPg9I47KQGMyvXuoU.mft
rsync://rpki.ripe.net/repository/DEFAULT/O62c1QNPgVWPg9I47KQGMyvXuoU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 30 Apr 2025 02:00:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:7f:46:03:be:ac:7e:e6:70:c7:2d:69:00:c0:c6:1e:9d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3bad9cd5034f81558f83d238eca406332bd7ba85
Validity
Not Before: Apr 29 02:00:16 2025 GMT
Not After : Apr 30 02:00:16 2025 GMT
Subject: CN=ca7fb0e5c5f87295e9ef6d614daf98bb2a459afc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:d5:cf:ef:e6:0b:2c:7d:44:cc:ab:2e:3d:f2:
45:7e:8a:56:7d:47:ab:c6:81:30:6f:fb:ed:08:fc:
ba:b1:6a:c3:65:d0:b8:20:74:1f:ee:8b:58:a6:a0:
a8:e2:10:d8:ab:f3:0b:10:eb:43:7f:26:3e:71:27:
a5:eb:4b:1e:93:8f:91:92:48:5b:c6:01:0a:d1:15:
c1:00:b9:63:fc:3e:d6:0f:85:99:f0:c6:2c:06:33:
97:ae:57:60:37:d5:6f:ba:b7:45:68:1a:e9:14:12:
3d:5d:6f:56:9f:ec:e3:a5:80:3f:85:5a:1b:57:d6:
40:72:87:dd:b0:85:1f:a8:91:b1:b7:13:28:31:83:
d0:3a:90:74:d3:72:50:fc:d7:b7:1b:7b:2c:3a:55:
8b:e6:eb:33:b8:9d:82:8c:71:30:80:4f:23:2b:c2:
ad:db:5f:27:4a:e1:6f:ef:1b:be:71:5c:f4:fd:93:
79:0a:18:f6:81:c7:33:d9:c7:3b:16:07:00:82:3c:
5c:67:e1:bc:98:4e:bd:48:88:45:d0:58:fc:22:0e:
a8:57:f3:9c:53:54:5b:28:7e:ef:ef:15:ba:b6:95:
c5:12:b0:d5:c0:a4:ed:87:76:f4:d7:94:2f:74:c7:
f9:08:6e:32:71:77:5f:c7:57:7f:3b:a5:30:e4:b5:
c4:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CA:7F:B0:E5:C5:F8:72:95:E9:EF:6D:61:4D:AF:98:BB:2A:45:9A:FC
X509v3 Authority Key Identifier:
keyid:3B:AD:9C:D5:03:4F:81:55:8F:83:D2:38:EC:A4:06:33:2B:D7:BA:85
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/O62c1QNPgVWPg9I47KQGMyvXuoU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/80/416bc7-ce87-42b6-8c68-4ba5f206f65a/1/O62c1QNPgVWPg9I47KQGMyvXuoU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/80/416bc7-ce87-42b6-8c68-4ba5f206f65a/1/O62c1QNPgVWPg9I47KQGMyvXuoU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
21:61:57:46:31:38:b9:89:cf:8d:49:f7:d7:ff:ee:70:2a:52:
18:ff:92:1f:b8:30:3b:fa:01:78:b1:e0:5c:97:5d:a9:f9:e7:
a2:d7:0a:c4:8d:2b:19:b5:3a:59:0b:91:dd:2c:5b:40:d3:0d:
60:73:55:9b:aa:0b:6c:e7:7a:c9:4c:b1:c7:b9:b4:d2:1e:08:
eb:10:f1:18:27:3c:d0:36:28:4e:1e:05:cb:8e:2f:82:19:f2:
45:48:45:4b:51:4f:f2:ef:4e:be:1e:9a:61:54:e7:39:59:23:
41:d3:9a:11:18:30:19:2d:f6:f0:92:d4:3a:01:59:7b:33:65:
d2:8e:cc:82:22:12:68:2d:d8:59:13:af:aa:e8:a3:27:e1:e0:
4c:02:3d:ea:73:6e:73:fa:c9:10:bc:50:b0:13:ec:57:3e:8f:
51:83:a8:4e:d9:7c:c8:d5:54:e0:1b:11:36:be:b4:b1:43:63:
9b:df:a6:c4:2f:8a:ee:d0:ab:09:f6:60:16:af:c3:cd:8c:f1:
d0:84:66:7e:71:a9:d9:d1:d7:63:ed:47:1d:59:7d:02:4a:4e:
37:f0:9b:10:ad:27:cd:8a:d3:65:af:88:c9:c1:40:9c:f7:58:
72:41:00:22:3b:52:6b:7a:dc:67:9e:44:0a:2f:fd:5d:85:05:
5c:f9:7a:27
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 29 11:25:34 2025 by rpki-client