Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/88/ba70f2-b7ac-4346-9d08-63ae0bfc169f/1/O_zNSgBCLIZfUJO4W7howrswxGk.mft
File: O_zNSgBCLIZfUJO4W7howrswxGk.mft (raw, json)
Hash identifier: 9iocSTRgIVFmYkthL+ksrK+ArQdNs+f5pBpheB7aX5M=
Subject key identifier: 09:10:A6:08:09:76:8E:9F:AE:71:A6:01:71:F2:F7:7E:F8:C8:35:E8
Authority key identifier: 3B:FC:CD:4A:00:42:2C:86:5F:50:93:B8:5B:B8:68:C2:BB:30:C4:69
Certificate issuer: /CN=3bfccd4a00422c865f5093b85bb868c2bb30c469
Certificate serial: 01968DDDB4AE87BA604DCE5044905F3BEAA0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/O_zNSgBCLIZfUJO4W7howrswxGk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/88/ba70f2-b7ac-4346-9d08-63ae0bfc169f/1/O_zNSgBCLIZfUJO4W7howrswxGk.mft
Manifest number: 151E
Signing time: Thu 01 May 2025 22:00:39 +0000
Manifest this update: Thu 01 May 2025 22:00:39 +0000
Manifest next update: Fri 02 May 2025 22:00:39 +0000
Files and hashes: 1: 3U1ZWgNoASiRwWRzOTs9a26_aSI.roa (hash: rfiPEMHu4Dy2ke39aiCtx6HNVMRJPDS81QuXHyTH8CQ=)
2: O_zNSgBCLIZfUJO4W7howrswxGk.crl (hash: CQ/sF5Mi+EGr+hU+dt3aeftHBtWpAFKqW12guAd5iWU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/88/ba70f2-b7ac-4346-9d08-63ae0bfc169f/1/O_zNSgBCLIZfUJO4W7howrswxGk.crl
rsync://rpki.ripe.net/repository/DEFAULT/88/ba70f2-b7ac-4346-9d08-63ae0bfc169f/1/O_zNSgBCLIZfUJO4W7howrswxGk.mft
rsync://rpki.ripe.net/repository/DEFAULT/O_zNSgBCLIZfUJO4W7howrswxGk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 02 May 2025 22:00:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:8d:dd:b4:ae:87:ba:60:4d:ce:50:44:90:5f:3b:ea:a0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3bfccd4a00422c865f5093b85bb868c2bb30c469
Validity
Not Before: May 1 22:00:39 2025 GMT
Not After : May 2 22:00:39 2025 GMT
Subject: CN=0910a60809768e9fae71a60171f2f77ef8c835e8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:70:42:04:b3:94:e5:c3:1c:cf:ca:98:ba:90:
cb:aa:bc:1b:71:5d:04:ec:1e:5f:2b:84:d9:bf:e6:
47:cb:eb:f2:6f:4e:2b:fc:5f:8e:73:b2:bf:e1:d9:
35:a2:ec:6c:20:c7:29:78:93:d2:02:2e:da:d9:de:
fa:9a:00:0b:11:b2:33:d0:aa:df:29:32:3b:27:e0:
7c:24:b8:d3:57:24:63:58:44:95:35:7a:5d:d5:f7:
f6:cf:6f:a8:d6:8a:92:56:44:78:10:ad:36:bc:34:
aa:1e:06:4b:65:2c:e0:ae:e3:6e:88:12:aa:c6:fb:
5f:14:54:1a:3f:d7:1e:5f:de:63:b4:9a:e6:fd:25:
3f:66:1d:04:af:75:31:b7:26:66:c0:c5:69:6d:0b:
90:a0:03:64:ae:2d:38:4a:68:b7:20:76:f1:3e:4c:
11:4c:07:70:6f:f4:99:80:31:84:27:77:71:ad:2d:
bf:1c:6a:32:31:e7:68:23:b6:0e:92:85:86:48:63:
fe:8c:4b:36:76:0f:39:78:eb:ec:0a:21:c4:35:29:
55:63:64:a8:19:3d:3b:5e:35:d2:a6:bd:6c:7f:5d:
14:e0:af:a7:51:6c:a2:7f:68:7a:cd:4f:41:87:c5:
1c:04:37:13:fb:d6:e9:c0:aa:fd:00:e5:f2:d4:e2:
3c:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
09:10:A6:08:09:76:8E:9F:AE:71:A6:01:71:F2:F7:7E:F8:C8:35:E8
X509v3 Authority Key Identifier:
keyid:3B:FC:CD:4A:00:42:2C:86:5F:50:93:B8:5B:B8:68:C2:BB:30:C4:69
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/O_zNSgBCLIZfUJO4W7howrswxGk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/88/ba70f2-b7ac-4346-9d08-63ae0bfc169f/1/O_zNSgBCLIZfUJO4W7howrswxGk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/88/ba70f2-b7ac-4346-9d08-63ae0bfc169f/1/O_zNSgBCLIZfUJO4W7howrswxGk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a0:5d:87:66:cc:09:c8:35:dd:c6:7c:d6:56:3f:5b:03:23:c1:
af:51:1b:9c:0a:a7:c7:4c:27:de:fc:5b:07:75:a3:a0:8b:2c:
68:b1:76:6a:07:a5:0c:f6:82:3d:00:db:bc:11:c7:5e:5a:9c:
34:67:72:ab:d7:d4:c8:c8:30:e6:58:dc:14:cc:c8:7f:56:af:
44:fe:d7:65:47:b2:55:63:29:1c:1c:6f:ca:4a:30:3d:23:ec:
02:bb:18:da:2c:7b:dd:77:20:44:db:f3:ad:a5:be:68:3c:18:
8b:16:88:e3:72:60:d3:4b:81:5c:ca:bb:87:0c:70:e5:48:c8:
44:2b:4c:20:45:0d:77:8e:0d:56:2a:cd:cc:d4:ff:5e:78:10:
7e:9d:12:08:30:6d:09:92:e2:d0:6a:b3:a9:ff:f2:5b:26:82:
62:4e:f3:2b:40:20:e4:44:ab:0f:e5:3e:e3:22:84:6f:67:27:
d8:51:d0:30:65:eb:84:24:a4:9d:70:80:32:67:7b:34:e8:e6:
be:b5:a9:b4:98:8d:e0:8b:a0:a5:ce:95:67:0e:53:32:f4:5d:
5a:74:f8:ab:2b:1b:02:25:c9:e4:49:a9:1b:46:f0:d4:fd:cd:
52:e0:2a:01:30:60:f9:98:03:40:b4:a6:09:09:0c:eb:ba:8d:
49:7a:09:21
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 2 07:36:15 2025 by rpki-client