Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9a/f565d7-32af-4be1-82ac-b602cedac36c/1/o3h9K-bqw2wdJ4D3hrh8nhU-gfE.mft
File: o3h9K-bqw2wdJ4D3hrh8nhU-gfE.mft (raw, json)
Hash identifier: Vjt7oJxwUD6ggrVJBOiJOyRBHLUWkIZND/PjGUEnz2o=
Subject key identifier: 9A:CA:52:D3:F3:79:73:CF:69:C5:31:5A:E9:C1:50:20:69:10:AB:B6
Authority key identifier: A3:78:7D:2B:E6:EA:C3:6C:1D:27:80:F7:86:B8:7C:9E:15:3E:81:F1
Certificate issuer: /CN=a3787d2be6eac36c1d2780f786b87c9e153e81f1
Certificate serial: 0196816B91F3C5E8FFB173A969C1E740BE9A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/o3h9K-bqw2wdJ4D3hrh8nhU-gfE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9a/f565d7-32af-4be1-82ac-b602cedac36c/1/o3h9K-bqw2wdJ4D3hrh8nhU-gfE.mft
Manifest number: 0EE8
Signing time: Tue 29 Apr 2025 12:00:32 +0000
Manifest this update: Tue 29 Apr 2025 12:00:32 +0000
Manifest next update: Wed 30 Apr 2025 12:00:32 +0000
Files and hashes: 1: 00IasE-o8chBNSoJdt3smuycCow.roa (hash: pV/5gFRP1JCOYIjBq4kIT8BYMxCvMc+8eXCSruPkrAc=)
2: OUfSr-obqja2htAQodOdBecQwpM.roa (hash: kYEhvKSYnyjKX9d+IlHmBvClGZqsfdLMn/6qKgbrz/8=)
3: lqiA_aAj9YiPmEY_ozKBdTXaK8U.roa (hash: FH++B616VrSvf6jbJ25EtMhVAMv/kHOEkuMZjWfUstA=)
4: o3h9K-bqw2wdJ4D3hrh8nhU-gfE.crl (hash: sibgQkSNEl3YMdUGB5ngiNh+BJjC1ZGEntX5sXW+o5E=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9a/f565d7-32af-4be1-82ac-b602cedac36c/1/o3h9K-bqw2wdJ4D3hrh8nhU-gfE.crl
rsync://rpki.ripe.net/repository/DEFAULT/9a/f565d7-32af-4be1-82ac-b602cedac36c/1/o3h9K-bqw2wdJ4D3hrh8nhU-gfE.mft
rsync://rpki.ripe.net/repository/DEFAULT/o3h9K-bqw2wdJ4D3hrh8nhU-gfE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 30 Apr 2025 12:00:32 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:81:6b:91:f3:c5:e8:ff:b1:73:a9:69:c1:e7:40:be:9a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a3787d2be6eac36c1d2780f786b87c9e153e81f1
Validity
Not Before: Apr 29 12:00:32 2025 GMT
Not After : Apr 30 12:00:32 2025 GMT
Subject: CN=9aca52d3f37973cf69c5315ae9c150206910abb6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:b8:d2:55:f5:74:ba:aa:38:09:64:bc:ef:8f:
6b:96:40:fe:ff:41:2d:5e:f0:05:e5:49:29:9d:7d:
c2:9e:7c:d2:a5:4e:fc:e6:a2:62:f7:b2:51:09:2f:
92:8a:43:3c:d1:f2:fe:54:e9:97:b3:55:15:ed:35:
a7:b3:d9:ec:aa:df:9f:88:70:df:51:01:6d:c9:12:
08:8c:7f:af:1f:24:25:1d:34:0e:9b:a9:13:3f:9f:
b6:e4:e6:63:1d:ce:70:69:aa:48:fc:68:fb:09:cb:
d4:cb:e8:6c:ab:3b:04:f6:fb:80:e1:7d:d0:56:2c:
89:4d:72:cc:9a:a8:80:af:56:7a:00:60:6e:69:ba:
65:7e:31:ff:5e:5d:5f:7c:a1:62:ab:b9:73:5c:af:
f9:e0:15:f1:bc:77:0b:05:0a:c6:1e:ce:85:8a:33:
63:76:2b:05:92:64:ea:05:04:15:1b:b4:7f:aa:f7:
df:ba:19:0d:2e:8f:63:ee:68:e8:08:97:60:59:57:
19:5c:1b:48:1d:45:c6:69:d9:8d:8e:08:93:5e:a8:
8e:92:7b:2a:e3:32:df:48:ac:24:cc:7f:95:9f:66:
02:ea:50:23:92:6a:b2:e6:9a:63:e0:e9:1b:a8:e7:
ce:43:92:fb:ca:9a:84:77:98:8c:e8:7e:ed:61:24:
e9:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9A:CA:52:D3:F3:79:73:CF:69:C5:31:5A:E9:C1:50:20:69:10:AB:B6
X509v3 Authority Key Identifier:
keyid:A3:78:7D:2B:E6:EA:C3:6C:1D:27:80:F7:86:B8:7C:9E:15:3E:81:F1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/o3h9K-bqw2wdJ4D3hrh8nhU-gfE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9a/f565d7-32af-4be1-82ac-b602cedac36c/1/o3h9K-bqw2wdJ4D3hrh8nhU-gfE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9a/f565d7-32af-4be1-82ac-b602cedac36c/1/o3h9K-bqw2wdJ4D3hrh8nhU-gfE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
25:cc:fc:8b:64:c2:93:7c:35:63:90:db:22:ff:6e:f8:cb:35:
0c:33:3b:16:2a:fe:fb:e1:26:59:f4:f3:18:e9:2d:6b:b3:1c:
a6:50:da:07:f6:24:f2:c3:7a:48:13:84:d3:c4:c4:66:d4:d5:
0a:4e:d3:a0:a5:e6:25:62:29:53:d3:7d:ac:76:71:5d:88:1f:
5b:d5:f8:db:e6:d5:ff:8d:b9:9c:e7:86:ec:cc:a7:8a:79:06:
d4:a7:ab:46:ff:d8:64:12:26:5d:2b:b3:35:c9:31:74:7b:86:
70:c3:e3:0a:a5:b9:5d:21:9e:07:c0:dc:bc:dc:48:26:38:df:
62:12:f9:40:8a:51:7e:47:22:4e:a5:15:fc:f1:ce:ce:7f:46:
01:81:c0:4a:c5:2d:00:df:54:f0:c2:61:52:6a:47:73:23:ed:
2c:47:3c:9d:6f:e2:a2:82:da:98:80:f2:d0:48:6f:3a:6a:9e:
f9:88:80:94:7c:ce:0b:57:75:c2:66:53:32:0c:d9:0a:87:4f:
34:cd:cb:fe:d9:1f:cb:72:7e:66:02:95:a1:51:f4:8a:7b:2c:
2f:c2:a3:b6:b9:18:4d:28:7b:73:b9:5f:f9:0f:e9:f8:9b:83:
63:13:e4:91:99:20:8b:5e:e4:7a:80:85:2f:9d:5f:fa:73:1d:
67:b8:8f:7b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 29 19:23:57 2025 by rpki-client