Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c2/fff514-1e0e-493e-9ee5-6e99b79da520/1/O85exzYI4kiFKD6RDrh78e-COgI.mft
File: O85exzYI4kiFKD6RDrh78e-COgI.mft (raw, json)
Hash identifier: 8Z3Rleu4+Dz7hDrWiR/cCwJCupRsvfjYIuklRZT44sg=
Subject key identifier: DE:37:89:03:07:C6:E1:BC:A8:8C:3F:A8:B0:61:EA:34:C3:B9:86:48
Authority key identifier: 3B:CE:5E:C7:36:08:E2:48:85:28:3E:91:0E:B8:7B:F1:EF:82:3A:02
Certificate issuer: /CN=3bce5ec73608e24885283e910eb87bf1ef823a02
Certificate serial: 0196827DE7E2C446C6D1F98D17DDFF919138
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/O85exzYI4kiFKD6RDrh78e-COgI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c2/fff514-1e0e-493e-9ee5-6e99b79da520/1/O85exzYI4kiFKD6RDrh78e-COgI.mft
Manifest number: 0478
Signing time: Tue 29 Apr 2025 17:00:11 +0000
Manifest this update: Tue 29 Apr 2025 17:00:11 +0000
Manifest next update: Wed 30 Apr 2025 17:00:11 +0000
Files and hashes: 1: 7cL3elWEFj-zEjkndRVYAEQ9BU4.roa (hash: BiE9iKHIrEyTAK4OlfqCnHobFVMclVFQTAE1yqSmgDQ=)
2: O85exzYI4kiFKD6RDrh78e-COgI.crl (hash: LK0p1ioM7zsabY4TlslO2pejmaxVGz/DDBHg5IV8AYs=)
3: Wt4F1aNYpi_rzNFrCL_NrPrA99M.roa (hash: 7DVwsBm/G3K9SUMur3fB8M/J4z9MO5eSnY7FeGY9wFE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c2/fff514-1e0e-493e-9ee5-6e99b79da520/1/O85exzYI4kiFKD6RDrh78e-COgI.crl
rsync://rpki.ripe.net/repository/DEFAULT/c2/fff514-1e0e-493e-9ee5-6e99b79da520/1/O85exzYI4kiFKD6RDrh78e-COgI.mft
rsync://rpki.ripe.net/repository/DEFAULT/O85exzYI4kiFKD6RDrh78e-COgI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 30 Apr 2025 15:02:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:82:7d:e7:e2:c4:46:c6:d1:f9:8d:17:dd:ff:91:91:38
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3bce5ec73608e24885283e910eb87bf1ef823a02
Validity
Not Before: Apr 29 17:00:11 2025 GMT
Not After : Apr 30 17:00:11 2025 GMT
Subject: CN=de37890307c6e1bca88c3fa8b061ea34c3b98648
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:7c:e6:b8:47:bc:42:8d:5c:a2:14:6f:10:e3:
ba:0a:ea:26:d2:75:e0:dd:91:83:e5:76:ff:14:80:
30:a4:46:27:9a:55:3a:50:b7:db:2a:88:57:fe:de:
57:74:f1:78:68:c1:76:3b:54:25:57:ba:04:07:24:
f3:17:82:92:e5:ef:62:d2:fd:20:b7:16:43:48:0c:
ac:1e:dc:3e:9c:d4:23:c2:89:60:2c:9c:c9:57:c6:
66:f9:6b:08:fa:6b:36:6b:c3:04:be:9b:e7:1e:32:
a4:7a:71:5e:68:5e:6c:9b:42:9e:98:f7:34:4f:f3:
60:67:de:f5:30:61:62:b9:c1:24:6f:1c:c7:e9:10:
b5:10:87:2b:69:ce:ac:ae:ef:4f:16:63:a8:79:86:
23:34:59:9e:88:04:dd:00:74:3a:c8:b3:a5:d0:dc:
17:20:92:41:91:7b:c1:fb:4f:f5:1f:cd:4e:78:6f:
1d:90:d6:1b:7f:5d:9e:ef:77:f5:11:94:7e:e9:d1:
3f:66:88:f5:5b:d3:92:c4:3c:35:5b:8f:28:16:94:
28:51:cc:44:22:d3:fc:71:b2:30:e8:04:30:32:a1:
ad:e6:8a:1e:99:7b:fc:bc:8f:37:1c:cd:ac:94:a9:
47:11:65:45:c0:30:ed:0b:e5:1a:b4:45:8c:88:72:
65:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DE:37:89:03:07:C6:E1:BC:A8:8C:3F:A8:B0:61:EA:34:C3:B9:86:48
X509v3 Authority Key Identifier:
keyid:3B:CE:5E:C7:36:08:E2:48:85:28:3E:91:0E:B8:7B:F1:EF:82:3A:02
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/O85exzYI4kiFKD6RDrh78e-COgI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/fff514-1e0e-493e-9ee5-6e99b79da520/1/O85exzYI4kiFKD6RDrh78e-COgI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/fff514-1e0e-493e-9ee5-6e99b79da520/1/O85exzYI4kiFKD6RDrh78e-COgI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
72:6a:de:41:52:53:9d:1a:cf:68:59:81:f7:3d:1a:31:d1:00:
37:21:47:21:68:c9:d0:1f:e7:3c:72:78:a6:62:48:1f:09:9d:
d5:5d:22:74:f2:19:a0:47:e6:7a:cb:89:80:a3:a5:3e:5c:1f:
6d:11:f3:63:fa:1d:76:68:79:c6:b4:13:07:c6:b7:99:2c:75:
66:e8:37:55:40:01:5d:0f:88:71:f2:0d:13:62:cd:dd:c7:2c:
d3:61:76:78:6c:68:a3:db:f4:93:b3:92:b8:a8:e9:89:1a:02:
f5:e8:b9:11:e1:f1:6b:6d:21:20:30:04:a8:ef:cc:26:64:18:
92:c2:40:2b:ba:f5:b3:65:64:b3:c1:1a:09:64:09:13:80:7c:
8e:37:1a:8f:af:2d:da:7c:9d:6a:f8:20:56:8c:10:d8:fb:fe:
84:b1:b2:51:ba:1e:2d:3a:83:47:05:b2:e6:a7:7b:ba:f0:67:
72:5f:a6:33:f4:96:c7:c5:d3:0d:da:40:32:ea:05:01:1d:2b:
fc:a4:70:cc:a1:e0:96:51:96:db:2c:38:42:77:da:b7:7c:4d:
a1:b5:2e:8a:82:96:a1:b8:d6:53:17:e7:5e:82:1d:78:13:69:
23:b9:e2:bf:f5:cb:4d:1d:06:5f:df:78:ef:3f:6a:5c:12:74:
51:24:f9:09
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 29 23:54:39 2025 by rpki-client