Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/81/834407-163d-410c-b949-786cb1296e58/1/o3oSbXhU7NVlroKXDGk_M1n4Xzc.mft
File: o3oSbXhU7NVlroKXDGk_M1n4Xzc.mft (raw, json)
Hash identifier: sCjIwGL0KVbxuAZXGDpT2ndXrq+dobjx7hA/zrJYnRo=
Subject key identifier: 43:C9:98:4A:64:E7:2D:6E:4D:F1:73:50:E5:9E:44:00:75:1D:02:67
Authority key identifier: A3:7A:12:6D:78:54:EC:D5:65:AE:82:97:0C:69:3F:33:59:F8:5F:37
Certificate issuer: /CN=a37a126d7854ecd565ae82970c693f3359f85f37
Certificate serial: 01968E82A90E3DF466358AE9714F94E4C68A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/o3oSbXhU7NVlroKXDGk_M1n4Xzc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/81/834407-163d-410c-b949-786cb1296e58/1/o3oSbXhU7NVlroKXDGk_M1n4Xzc.mft
Manifest number: 151C
Signing time: Fri 02 May 2025 01:00:49 +0000
Manifest this update: Fri 02 May 2025 01:00:49 +0000
Manifest next update: Sat 03 May 2025 01:00:49 +0000
Files and hashes: 1: mCmdogU3kH7W3vnMnxNLVbtvTa4.roa (hash: gDJzKrp4zR1sht7C5P/Tek0HKRIcYsUf9kyhRMAnCbI=)
2: o3oSbXhU7NVlroKXDGk_M1n4Xzc.crl (hash: D/Cm2Onbdu2Z0iZXqpRk8m3eoUDoZMjXtxkGTzVdVSw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/81/834407-163d-410c-b949-786cb1296e58/1/o3oSbXhU7NVlroKXDGk_M1n4Xzc.crl
rsync://rpki.ripe.net/repository/DEFAULT/81/834407-163d-410c-b949-786cb1296e58/1/o3oSbXhU7NVlroKXDGk_M1n4Xzc.mft
rsync://rpki.ripe.net/repository/DEFAULT/o3oSbXhU7NVlroKXDGk_M1n4Xzc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 03 May 2025 01:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:8e:82:a9:0e:3d:f4:66:35:8a:e9:71:4f:94:e4:c6:8a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a37a126d7854ecd565ae82970c693f3359f85f37
Validity
Not Before: May 2 01:00:49 2025 GMT
Not After : May 3 01:00:49 2025 GMT
Subject: CN=43c9984a64e72d6e4df17350e59e4400751d0267
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:de:2f:7d:b8:3f:8f:d0:3b:09:2c:e7:ab:cc:9a:
fd:4a:fc:63:5b:e0:df:7f:06:69:42:ca:25:74:19:
bb:e3:9a:d9:93:ff:8f:c0:5c:16:23:d3:60:b3:a6:
13:7d:65:12:ea:50:56:71:2b:75:67:21:8a:f0:ad:
57:ff:b2:2d:2d:bc:08:db:87:32:89:46:3f:13:e7:
21:44:c8:0c:7d:73:f4:82:47:12:e5:c8:c7:37:16:
f7:a2:b5:fb:cc:a3:1b:90:e5:49:64:fa:4b:62:4e:
75:e5:38:e2:d4:fb:6f:f6:4a:8a:dc:0d:e4:27:27:
1d:8b:c0:2c:a0:37:27:d1:5c:1e:0d:e5:2d:50:5f:
47:ad:b6:be:b8:94:c0:5c:f5:c1:fb:74:fa:e6:b0:
a1:bc:fc:97:df:5c:34:85:64:a6:b7:4f:ec:1f:88:
fa:93:40:b2:b3:76:e9:40:32:26:9e:f4:d4:8a:9e:
2e:1a:9d:76:3a:62:2e:d1:4d:59:41:05:2f:f4:19:
5e:d5:c7:9e:c7:44:52:8a:70:31:1e:23:bb:18:ed:
be:8f:10:f7:10:69:f0:98:4b:96:88:5c:e1:60:35:
d4:3e:0d:bb:79:5a:31:ee:ab:4d:ad:6e:b9:3f:ff:
c6:ca:ef:2a:18:c6:46:92:7a:a9:9e:5c:56:6b:95:
02:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
43:C9:98:4A:64:E7:2D:6E:4D:F1:73:50:E5:9E:44:00:75:1D:02:67
X509v3 Authority Key Identifier:
keyid:A3:7A:12:6D:78:54:EC:D5:65:AE:82:97:0C:69:3F:33:59:F8:5F:37
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/o3oSbXhU7NVlroKXDGk_M1n4Xzc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/81/834407-163d-410c-b949-786cb1296e58/1/o3oSbXhU7NVlroKXDGk_M1n4Xzc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/81/834407-163d-410c-b949-786cb1296e58/1/o3oSbXhU7NVlroKXDGk_M1n4Xzc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
43:31:29:5f:e1:97:b3:01:91:2a:6a:d9:ca:15:d8:cf:57:08:
01:5f:72:5e:04:d5:80:77:d9:dc:25:f4:f5:86:3c:1c:8a:50:
c2:83:53:d5:ef:56:88:a2:50:67:a8:a0:80:69:48:08:56:8d:
86:24:ef:63:1d:9c:1a:80:0b:96:0c:42:15:36:7c:63:69:f1:
1d:28:95:65:d7:b0:2a:66:78:dc:26:60:52:7c:2a:9e:cf:c7:
e9:46:c6:b4:57:dd:63:48:08:b8:d0:3f:a1:83:1d:c9:a0:7a:
a7:d9:76:e4:00:44:7b:88:b5:9d:57:cc:b0:fb:d7:20:3d:c8:
bc:59:95:dc:a9:4a:9d:72:b7:fc:7c:3c:43:90:44:47:db:ac:
86:65:a5:87:14:4a:55:35:fa:54:39:09:d0:00:f3:8c:ea:a4:
8e:75:29:f5:b6:61:2d:3a:ef:bf:ad:bd:ae:1b:13:13:1a:35:
b2:66:48:6c:7b:6d:a5:9e:11:8b:f0:67:dd:60:9a:c9:01:7d:
ac:07:88:26:bd:42:bd:00:a7:b5:61:58:bd:10:ea:64:b6:81:
77:68:80:d5:6c:29:3d:7d:e5:f0:3e:77:e0:39:ea:7b:9d:60:
eb:8c:5b:9c:a7:36:71:f9:b6:80:fc:85:91:03:5f:9c:fd:46:
d4:5d:7f:7f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 2 12:03:56 2025 by rpki-client