Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c5/4c9fbe-1725-4116-9ef3-0af2c5c4cc0f/1/o95MO22qWmmL8wfMORKCqymH1hc.mft
File: o95MO22qWmmL8wfMORKCqymH1hc.mft (raw, json)
Hash identifier: 8EYeQsV2jjoweWD3OC6SxpwOjyI0qSEfNc8J7fl0DTI=
Subject key identifier: 20:CF:B4:7D:2B:A9:39:B9:8C:E9:81:F0:47:00:AB:4A:D6:EB:A7:8F
Authority key identifier: A3:DE:4C:3B:6D:AA:5A:69:8B:F3:07:CC:39:12:82:AB:29:87:D6:17
Certificate issuer: /CN=a3de4c3b6daa5a698bf307cc391282ab2987d617
Certificate serial: 019677C34E8890C621E3003DE3099756CA27
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/o95MO22qWmmL8wfMORKCqymH1hc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c5/4c9fbe-1725-4116-9ef3-0af2c5c4cc0f/1/o95MO22qWmmL8wfMORKCqymH1hc.mft
Manifest number: 0A5A
Signing time: Sun 27 Apr 2025 15:00:10 +0000
Manifest this update: Sun 27 Apr 2025 15:00:10 +0000
Manifest next update: Mon 28 Apr 2025 15:00:10 +0000
Files and hashes: 1: aaz13NJRzQSWik1cFJTAx8gsPnU.roa (hash: CsCDTEtayCoWB3zZSGEuzJzCmVEA7r5a08XAY8x/Hbg=)
2: o95MO22qWmmL8wfMORKCqymH1hc.crl (hash: LRvRx45+LRPqMXhHFBmauHYRNOy+dkJI1Yv0PogI8Tw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c5/4c9fbe-1725-4116-9ef3-0af2c5c4cc0f/1/o95MO22qWmmL8wfMORKCqymH1hc.crl
rsync://rpki.ripe.net/repository/DEFAULT/c5/4c9fbe-1725-4116-9ef3-0af2c5c4cc0f/1/o95MO22qWmmL8wfMORKCqymH1hc.mft
rsync://rpki.ripe.net/repository/DEFAULT/o95MO22qWmmL8wfMORKCqymH1hc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Apr 2025 15:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:77:c3:4e:88:90:c6:21:e3:00:3d:e3:09:97:56:ca:27
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a3de4c3b6daa5a698bf307cc391282ab2987d617
Validity
Not Before: Apr 27 15:00:10 2025 GMT
Not After : Apr 28 15:00:10 2025 GMT
Subject: CN=20cfb47d2ba939b98ce981f04700ab4ad6eba78f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:36:03:b6:14:9f:8f:28:42:71:29:f7:b0:06:
18:e9:ac:9e:18:7d:2e:bd:87:ea:e5:51:2d:03:75:
53:0c:74:7e:62:82:00:06:ab:df:db:2e:38:40:39:
b4:4f:11:47:ab:e1:3d:bd:7e:9d:d9:22:b3:e9:33:
73:fe:66:b2:66:5a:8c:a5:fa:8e:2b:c8:56:80:bf:
10:8b:40:ce:0a:8a:39:2b:f8:20:5e:06:10:55:b8:
a7:ca:70:93:0b:9e:e4:dc:9d:54:6f:27:94:ab:2a:
00:43:c8:0f:5b:44:e9:15:4e:d6:8b:62:f5:45:2b:
75:23:8d:1b:49:cd:58:73:82:0f:d0:4f:eb:27:52:
c3:12:2c:b7:74:ba:cd:06:cb:0c:64:75:64:a6:d9:
cf:2b:47:af:cd:bf:09:64:bb:2a:e4:23:f0:35:be:
2a:b7:0c:38:9b:ec:9a:19:fe:f7:58:f8:95:49:bf:
14:42:14:82:9f:ff:8e:08:0e:a9:17:ce:38:3c:38:
f1:b9:37:bf:a0:18:48:fa:f8:36:a5:63:9e:1a:88:
26:ea:c3:2c:d2:f8:ce:f9:06:5f:ec:06:3e:62:19:
75:5e:74:ca:be:3b:40:75:8a:ae:a3:15:92:b5:9e:
e9:6f:ee:12:b5:3e:1a:f7:85:cf:27:02:58:be:34:
4c:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
20:CF:B4:7D:2B:A9:39:B9:8C:E9:81:F0:47:00:AB:4A:D6:EB:A7:8F
X509v3 Authority Key Identifier:
keyid:A3:DE:4C:3B:6D:AA:5A:69:8B:F3:07:CC:39:12:82:AB:29:87:D6:17
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/o95MO22qWmmL8wfMORKCqymH1hc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/4c9fbe-1725-4116-9ef3-0af2c5c4cc0f/1/o95MO22qWmmL8wfMORKCqymH1hc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/4c9fbe-1725-4116-9ef3-0af2c5c4cc0f/1/o95MO22qWmmL8wfMORKCqymH1hc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
57:17:10:7e:a1:2a:81:a2:3f:69:18:40:f7:79:34:02:8d:64:
4f:3c:dc:34:c7:cb:18:ea:7a:9a:b2:06:ca:af:7f:25:9b:a4:
2b:2a:40:d4:4c:2c:2e:dc:00:58:6a:2b:12:e8:0a:08:36:7d:
a9:88:04:ce:ba:a2:7f:ef:cb:29:1d:93:e5:58:bd:df:76:2b:
75:36:b5:6d:41:ff:4e:47:ea:6c:55:b7:d0:e9:1e:44:4d:7c:
b9:31:0f:e2:50:a4:12:c8:0f:8c:ad:68:54:4b:b9:bc:c1:7a:
12:2c:6c:e9:87:fc:fb:bc:48:31:b6:77:dd:32:27:62:3e:ee:
b5:2f:a9:ec:75:e8:f3:cc:81:42:5b:24:be:d5:c2:03:62:eb:
93:bd:e7:46:9b:b7:bd:5a:8f:26:fe:8e:94:80:97:f9:b0:02:
9c:fa:f4:25:51:58:ad:c1:a5:26:52:df:77:c8:8e:a1:43:2b:
fb:95:5a:44:44:1f:ea:18:61:c6:93:f1:6a:60:e8:03:11:7c:
a8:d0:10:0d:63:d3:4a:dc:0d:5d:16:d6:f4:5e:11:aa:b9:c1:
20:b4:d7:00:74:1c:46:ff:7e:d7:c0:b2:28:95:0b:bf:c1:45:
4f:06:cc:5c:04:37:6f:3c:63:98:a9:89:ef:d0:98:96:c5:b7:
e4:9a:cf:c6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 01:16:03 2025 by rpki-client