Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c7/7d9854-969e-4e34-a1df-a302f6a74b08/1/o9oBlglsEcIx5JuzCJZwuU2_XoA.mft
File: o9oBlglsEcIx5JuzCJZwuU2_XoA.mft (raw, json)
Hash identifier: wyhp7Ao+r7qviwRstZwnX6NdQhZbvOXOgLk3c1HK1bI=
Subject key identifier: A9:D2:0D:AD:A9:15:84:CB:CD:E2:16:3A:EE:45:C7:56:58:8C:11:94
Authority key identifier: A3:DA:01:96:09:6C:11:C2:31:E4:9B:B3:08:96:70:B9:4D:BF:5E:80
Certificate issuer: /CN=a3da0196096c11c231e49bb3089670b94dbf5e80
Certificate serial: 019674C2BE42ECE29F6F8BDAEC322F026EED
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/o9oBlglsEcIx5JuzCJZwuU2_XoA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c7/7d9854-969e-4e34-a1df-a302f6a74b08/1/o9oBlglsEcIx5JuzCJZwuU2_XoA.mft
Manifest number: 1152
Signing time: Sun 27 Apr 2025 01:00:41 +0000
Manifest this update: Sun 27 Apr 2025 01:00:41 +0000
Manifest next update: Mon 28 Apr 2025 01:00:41 +0000
Files and hashes: 1: 6qcJyLkGHGKYEWJcRiN4L6Z8qn8.roa (hash: 5OQd3tPQBKWKRhlqwep2BEZpe6x6xAIuVkUwGHnZJ7w=)
2: o9oBlglsEcIx5JuzCJZwuU2_XoA.crl (hash: yUx/LxqaN/xtMETHGZoz7jQSl4OF5sWPDvcAgkcsIAQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c7/7d9854-969e-4e34-a1df-a302f6a74b08/1/o9oBlglsEcIx5JuzCJZwuU2_XoA.crl
rsync://rpki.ripe.net/repository/DEFAULT/c7/7d9854-969e-4e34-a1df-a302f6a74b08/1/o9oBlglsEcIx5JuzCJZwuU2_XoA.mft
rsync://rpki.ripe.net/repository/DEFAULT/o9oBlglsEcIx5JuzCJZwuU2_XoA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Apr 2025 01:00:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:74:c2:be:42:ec:e2:9f:6f:8b:da:ec:32:2f:02:6e:ed
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a3da0196096c11c231e49bb3089670b94dbf5e80
Validity
Not Before: Apr 27 01:00:41 2025 GMT
Not After : Apr 28 01:00:41 2025 GMT
Subject: CN=a9d20dada91584cbcde2163aee45c756588c1194
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:8f:b9:bf:45:2d:80:31:f7:3b:50:73:dc:21:
c6:98:8a:77:12:53:2b:a5:3a:c4:96:f4:16:8d:09:
a3:ce:06:31:3e:3e:c6:53:e0:af:84:b3:a3:fc:83:
4f:b9:d8:9b:0b:72:3c:83:06:50:26:7a:4a:dc:da:
e0:39:73:1e:70:db:49:8b:4e:9f:55:59:ec:0f:26:
d8:fb:64:9a:b3:7d:a5:81:81:71:40:96:90:13:58:
f5:73:43:44:67:77:56:5f:fa:d7:f7:82:cb:9c:a9:
30:76:d9:80:06:da:01:3a:30:86:b5:0f:0f:4d:aa:
40:d6:7e:22:31:0f:aa:6a:68:c3:b7:b6:aa:db:56:
79:fe:d7:9b:b0:e0:e9:c5:b6:92:a9:5c:7d:2d:31:
bf:8e:93:3a:70:e6:75:d8:1c:ae:19:dd:93:6b:d3:
e2:f8:84:ae:60:70:9c:bb:2e:39:ae:fd:08:30:5c:
b0:50:e4:74:fa:18:00:b9:cd:1c:14:fa:de:f8:30:
62:3e:d3:26:b8:70:58:dd:f7:18:7a:6d:95:b9:98:
8d:7b:7c:b9:a2:ec:6a:df:cf:11:0a:f3:ca:92:b3:
12:1c:d8:bc:64:37:6e:29:9b:dc:4a:14:f1:bc:aa:
0b:6b:71:5a:7f:c2:91:10:48:a3:33:76:59:0c:00:
80:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A9:D2:0D:AD:A9:15:84:CB:CD:E2:16:3A:EE:45:C7:56:58:8C:11:94
X509v3 Authority Key Identifier:
keyid:A3:DA:01:96:09:6C:11:C2:31:E4:9B:B3:08:96:70:B9:4D:BF:5E:80
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/o9oBlglsEcIx5JuzCJZwuU2_XoA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/7d9854-969e-4e34-a1df-a302f6a74b08/1/o9oBlglsEcIx5JuzCJZwuU2_XoA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/7d9854-969e-4e34-a1df-a302f6a74b08/1/o9oBlglsEcIx5JuzCJZwuU2_XoA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
09:bd:56:53:ee:8e:84:45:8c:26:71:60:61:7b:6b:a8:8c:7d:
ea:30:c4:b8:b2:bd:c8:fa:42:21:a0:30:25:d5:bb:94:16:e9:
ef:a1:0c:09:22:ee:f9:d1:f5:62:91:d1:97:35:82:36:ca:ac:
cc:43:a7:dc:08:42:a0:23:9a:45:bb:a8:7e:3a:dd:b7:55:24:
7a:33:74:f8:c3:6c:ba:28:d3:d9:e2:36:86:36:35:c0:c5:61:
f4:5e:81:da:91:87:78:39:3a:8d:b3:c7:37:b8:c1:f9:ea:f6:
d1:87:ee:a0:0f:a5:c5:bd:ed:e9:13:7d:74:e4:d2:a8:7a:07:
af:9b:bf:6f:36:84:c6:cc:83:0c:6e:4a:b3:3c:0c:32:7f:f7:
8f:0b:b5:42:23:b1:3b:96:c1:cd:f3:8f:a5:b7:aa:8a:46:41:
24:45:02:25:d0:fc:3e:41:0b:12:64:c0:86:bb:e7:c5:78:c5:
60:85:3d:e0:2b:71:01:c1:4d:20:d8:c5:8e:52:ee:c6:8c:15:
90:b3:81:8e:6b:f0:01:75:da:f9:05:c3:46:67:b2:cf:e2:ff:
12:a0:33:4d:2e:ef:ad:44:86:a7:58:49:8d:6d:e3:66:e2:aa:
49:28:b3:62:7b:22:3e:4d:19:f3:8d:f5:a0:cc:3c:b4:4e:fa:
1c:62:0e:8b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 09:17:23 2025 by rpki-client