Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c7/9c5c1f-f4b6-45a8-9c9f-30733d370df3/1/O2N8zzk_UuC1b7WO41r1RBHa9kQ.mft
File: O2N8zzk_UuC1b7WO41r1RBHa9kQ.mft (raw, json)
Hash identifier: Pr7k2oMJV7YbLOdi6u8oiZpOQab3EXD/CiFfvA3mSy0=
Subject key identifier: B7:1E:E0:45:DC:80:AC:F5:F9:EA:96:8B:33:E7:80:D9:CD:D8:B7:31
Authority key identifier: 3B:63:7C:CF:39:3F:52:E0:B5:6F:B5:8E:E3:5A:F5:44:11:DA:F6:44
Certificate issuer: /CN=3b637ccf393f52e0b56fb58ee35af54411daf644
Certificate serial: 019676B0B87F488EBAAFCD9B1F674D63497F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/O2N8zzk_UuC1b7WO41r1RBHa9kQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c7/9c5c1f-f4b6-45a8-9c9f-30733d370df3/1/O2N8zzk_UuC1b7WO41r1RBHa9kQ.mft
Manifest number: 0A09
Signing time: Sun 27 Apr 2025 10:00:14 +0000
Manifest this update: Sun 27 Apr 2025 10:00:14 +0000
Manifest next update: Mon 28 Apr 2025 10:00:14 +0000
Files and hashes: 1: B_LnlrHFLDYdboiRTTX-o67316g.roa (hash: /s1mWUis0Ft8zGqbhZQCKScqMXaiERmijyCGapgBJDo=)
2: O2N8zzk_UuC1b7WO41r1RBHa9kQ.crl (hash: j8OctBK2NcnBn8q8uJSiu6WSRfkyXktbJEpgX+hzfX8=)
3: t25kiIn1E1JaqushvudH22_Oin8.roa (hash: MldHzVCGVwkubjlvJvGtIUqXljxX6Z5QiyeDzunyRNg=)
4: x5hcCT_pnCegVho4bWAxZzf2qpw.roa (hash: Dn/NH4vuyRdNLuvR+t3zMheYrsd6ixnhzcIiKC8V59s=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c7/9c5c1f-f4b6-45a8-9c9f-30733d370df3/1/O2N8zzk_UuC1b7WO41r1RBHa9kQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/c7/9c5c1f-f4b6-45a8-9c9f-30733d370df3/1/O2N8zzk_UuC1b7WO41r1RBHa9kQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/O2N8zzk_UuC1b7WO41r1RBHa9kQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Apr 2025 07:29:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:76:b0:b8:7f:48:8e:ba:af:cd:9b:1f:67:4d:63:49:7f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3b637ccf393f52e0b56fb58ee35af54411daf644
Validity
Not Before: Apr 27 10:00:14 2025 GMT
Not After : Apr 28 10:00:14 2025 GMT
Subject: CN=b71ee045dc80acf5f9ea968b33e780d9cdd8b731
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:59:f6:e8:b0:07:a7:71:ec:12:e0:b9:76:9d:
48:99:0a:0c:53:2a:34:90:41:46:36:0a:11:fd:f0:
95:ac:a3:ee:e9:ee:5d:08:21:a2:81:29:6d:75:ae:
87:c8:92:ee:3a:81:ea:4a:b7:4d:59:2f:48:f3:5f:
40:f3:c5:0d:e2:51:f4:b1:4c:cc:7b:21:b3:8c:1b:
90:56:17:90:64:4c:d3:a6:3b:ee:56:bf:28:99:d8:
8f:9f:4c:4c:25:04:cc:e8:ae:32:b6:4d:94:50:e1:
db:5c:27:8e:9f:37:27:71:f2:b4:91:8b:ee:43:f0:
1c:f1:2a:12:05:78:e9:a2:19:dd:6e:6e:1b:ae:e0:
f7:da:55:b6:4e:32:79:48:b0:fc:6f:ee:53:ca:94:
68:a3:a5:96:90:fe:ba:ee:03:7b:be:1e:bf:e6:3d:
58:ce:67:e5:42:ec:b3:25:8c:ad:f9:4a:eb:9d:cb:
40:e1:b0:4c:d0:3a:d5:a9:ef:c1:a7:96:a0:49:6d:
db:60:06:b4:9b:be:13:f1:45:4a:0f:22:60:9e:16:
ca:84:60:ec:0f:22:86:77:11:81:6d:56:35:a0:32:
25:b7:78:d0:91:b2:50:fa:27:70:df:ce:e1:92:e6:
d9:81:db:de:51:da:9c:93:0e:74:c0:e4:3a:5c:cc:
b0:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B7:1E:E0:45:DC:80:AC:F5:F9:EA:96:8B:33:E7:80:D9:CD:D8:B7:31
X509v3 Authority Key Identifier:
keyid:3B:63:7C:CF:39:3F:52:E0:B5:6F:B5:8E:E3:5A:F5:44:11:DA:F6:44
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/O2N8zzk_UuC1b7WO41r1RBHa9kQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/9c5c1f-f4b6-45a8-9c9f-30733d370df3/1/O2N8zzk_UuC1b7WO41r1RBHa9kQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/9c5c1f-f4b6-45a8-9c9f-30733d370df3/1/O2N8zzk_UuC1b7WO41r1RBHa9kQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0e:21:39:a3:46:be:e8:91:0a:12:8c:75:74:e5:b3:13:db:9e:
59:a2:8a:bd:ba:d1:98:9d:1b:ba:49:9e:a0:f8:0b:50:d6:c2:
b4:73:b8:80:d6:a1:50:76:c7:96:ce:6d:f0:a9:89:ff:dc:1d:
fe:6a:99:a9:bf:b7:5a:08:65:ff:50:51:98:dc:1a:57:37:1a:
47:85:d1:16:90:c6:5f:a4:5b:97:11:3f:eb:23:b5:49:26:6c:
0c:52:c5:3b:d3:94:2e:09:16:b1:64:08:57:6a:84:55:42:e2:
17:5d:e4:57:e2:9f:54:8e:75:73:03:90:ce:cb:bf:82:78:08:
80:99:4c:9d:98:28:3c:84:44:5e:2e:bf:c4:1c:bb:0f:fc:99:
45:06:c3:1e:4e:de:27:ff:e5:5a:a4:70:35:2c:8d:a9:39:bd:
c1:46:8a:f4:0c:fa:bf:d3:ea:c1:e1:b7:ac:23:c0:31:5e:7b:
79:71:3a:45:5b:f9:2c:bb:8c:0c:c1:ad:66:3f:d8:bd:41:29:
bc:58:5b:ca:4b:e7:e4:b7:92:8b:49:20:66:18:90:98:c3:a5:
27:a1:63:f3:a6:72:58:83:c5:6a:d5:66:47:90:14:60:7d:e1:
4d:b6:e1:e8:f7:54:37:1d:7c:ab:42:a0:15:64:3a:f6:85:8e:
7c:2e:1f:10
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 17:13:30 2025 by rpki-client