Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/92/f5a8b1-6e22-4961-b38b-fe01eec40ec1/1/O_xkMfUzO23dMeg7aWgtjo7gb8E.mft
File: O_xkMfUzO23dMeg7aWgtjo7gb8E.mft (raw, json)
Hash identifier: tphkhDOE9MsUEezKVgYNPxkYRR7AHQwkx8Dd9mEIiYc=
Subject key identifier: 3B:AB:57:4D:15:E2:C2:8F:62:1D:FA:EB:D2:F2:7F:CB:94:55:46:96
Authority key identifier: 3B:FC:64:31:F5:33:3B:6D:DD:31:E8:3B:69:68:2D:8E:8E:E0:6F:C1
Certificate issuer: /CN=3bfc6431f5333b6ddd31e83b69682d8e8ee06fc1
Certificate serial: 019684360416F2CB6DE70A9D87E038930965
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/O_xkMfUzO23dMeg7aWgtjo7gb8E.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/92/f5a8b1-6e22-4961-b38b-fe01eec40ec1/1/O_xkMfUzO23dMeg7aWgtjo7gb8E.mft
Manifest number: 1517
Signing time: Wed 30 Apr 2025 01:00:54 +0000
Manifest this update: Wed 30 Apr 2025 01:00:54 +0000
Manifest next update: Thu 01 May 2025 01:00:54 +0000
Files and hashes: 1: O_xkMfUzO23dMeg7aWgtjo7gb8E.crl (hash: I6ae8yJ0DnjofU0ip7K2/GHTPTB32HCvlAO3JNYOr5U=)
2: nEwnWGMzytbCFQz7rWdabIS9yB0.roa (hash: 02h618IubyXzMPvUxA826AJsgMoOVyOdwoqacffXAD8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/92/f5a8b1-6e22-4961-b38b-fe01eec40ec1/1/O_xkMfUzO23dMeg7aWgtjo7gb8E.crl
rsync://rpki.ripe.net/repository/DEFAULT/92/f5a8b1-6e22-4961-b38b-fe01eec40ec1/1/O_xkMfUzO23dMeg7aWgtjo7gb8E.mft
rsync://rpki.ripe.net/repository/DEFAULT/O_xkMfUzO23dMeg7aWgtjo7gb8E.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 01 May 2025 00:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:84:36:04:16:f2:cb:6d:e7:0a:9d:87:e0:38:93:09:65
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3bfc6431f5333b6ddd31e83b69682d8e8ee06fc1
Validity
Not Before: Apr 30 01:00:54 2025 GMT
Not After : May 1 01:00:54 2025 GMT
Subject: CN=3bab574d15e2c28f621dfaebd2f27fcb94554696
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:ec:40:22:4a:c6:8d:c2:fe:f8:98:d1:2e:0d:
aa:96:5f:63:c6:00:2b:82:21:ba:e9:29:cf:9f:43:
23:c4:cb:c6:93:23:31:29:9b:43:6b:b9:96:cf:cf:
b6:a0:fb:10:28:d0:65:66:b4:e5:ae:31:c1:3e:0c:
30:0e:5c:85:24:7d:6b:f6:b7:8f:bd:96:26:de:6a:
3f:71:7a:17:51:87:c6:19:3d:87:0d:0e:3e:33:9f:
8b:3e:0d:9d:1f:e0:c6:36:74:85:46:9c:a2:8b:76:
08:ce:17:c2:05:3a:99:db:69:a0:68:2f:15:a2:3e:
51:c0:e7:1c:aa:b0:3a:66:7d:75:55:b7:69:19:f4:
84:80:00:ff:c0:40:c6:86:3c:65:1c:29:50:f0:96:
ae:cc:72:92:ec:8a:d3:a4:bf:c4:48:83:91:b7:08:
4c:a9:45:e7:58:69:9c:88:38:05:fb:d4:5c:d3:1f:
8c:1b:59:ce:3e:bd:72:ab:f9:9c:18:d0:a9:de:50:
2f:3a:26:a0:04:7c:89:2e:a1:b8:56:bb:fe:cb:90:
31:49:db:ce:1f:2a:cb:8e:04:00:86:2f:fb:6e:2a:
8f:b7:26:7c:c6:9b:2e:7e:b8:7e:04:18:b2:e0:d8:
ad:ba:7a:5d:47:cb:85:46:cc:ef:8e:0d:74:2a:8c:
f4:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3B:AB:57:4D:15:E2:C2:8F:62:1D:FA:EB:D2:F2:7F:CB:94:55:46:96
X509v3 Authority Key Identifier:
keyid:3B:FC:64:31:F5:33:3B:6D:DD:31:E8:3B:69:68:2D:8E:8E:E0:6F:C1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/O_xkMfUzO23dMeg7aWgtjo7gb8E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/f5a8b1-6e22-4961-b38b-fe01eec40ec1/1/O_xkMfUzO23dMeg7aWgtjo7gb8E.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/92/f5a8b1-6e22-4961-b38b-fe01eec40ec1/1/O_xkMfUzO23dMeg7aWgtjo7gb8E.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
16:ec:14:2a:99:b1:f5:bf:87:de:9c:f1:ec:67:19:51:b0:8d:
6c:62:2d:e6:15:c0:cb:c8:6d:81:54:20:28:05:f0:b7:a7:4e:
79:cd:56:21:e5:14:46:1d:47:7e:c7:3b:1d:c3:82:09:b9:07:
8b:30:8b:d5:2b:66:65:4c:15:9f:07:b1:f0:85:d5:26:1a:97:
1f:fb:d3:18:e1:87:b6:a7:6b:44:45:80:46:1f:1f:2b:62:e9:
0f:cf:7b:be:f9:e1:0a:97:1b:9f:34:a2:aa:34:ca:a9:f8:33:
ac:98:ad:1c:ec:ad:c4:2b:2d:74:9b:ae:66:aa:57:41:3c:04:
ac:1f:f4:bf:8c:58:b0:b8:80:f8:04:4b:df:d3:87:14:d3:db:
ef:3d:b3:a7:33:03:8a:47:e4:37:63:75:f2:52:72:8d:d1:cc:
7a:58:6a:cf:91:74:33:fd:9d:86:01:4d:98:7d:9d:6a:b9:bd:
79:73:08:0e:8d:76:57:a4:b8:0d:a8:a9:52:27:1a:95:67:7d:
e4:db:b9:7a:d1:a9:de:bc:01:9f:60:96:01:08:5e:62:f6:e4:
ba:9e:d1:22:2f:9f:ee:2c:5d:c4:71:67:c6:97:5a:40:bf:3c:
2d:a4:09:5f:53:b8:64:e9:fa:e8:57:65:10:88:7f:82:a0:55:
3b:8d:a3:fe
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 30 04:53:17 2025 by rpki-client