Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cb/d4c891-4bc0-4a3e-8457-44276f604233/1/O1T6YLMnoIA9yF6XCpt2pFFM614.mft
File: O1T6YLMnoIA9yF6XCpt2pFFM614.mft (raw, json)
Hash identifier: JTlsTBvYynX/nvhWJshbGPACxk/B1fZM1HWnuTPJcWk=
Subject key identifier: 0A:E7:D7:10:B6:26:7D:EE:69:5B:2F:51:AD:EC:40:4D:95:73:D2:70
Authority key identifier: 3B:54:FA:60:B3:27:A0:80:3D:C8:5E:97:0A:9B:76:A4:51:4C:EB:5E
Certificate issuer: /CN=3b54fa60b327a0803dc85e970a9b76a4514ceb5e
Certificate serial: 01967530A0EE2A517412D58690884D94B86D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/O1T6YLMnoIA9yF6XCpt2pFFM614.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cb/d4c891-4bc0-4a3e-8457-44276f604233/1/O1T6YLMnoIA9yF6XCpt2pFFM614.mft
Manifest number: 0CD4
Signing time: Sun 27 Apr 2025 03:00:43 +0000
Manifest this update: Sun 27 Apr 2025 03:00:43 +0000
Manifest next update: Mon 28 Apr 2025 03:00:43 +0000
Files and hashes: 1: O1T6YLMnoIA9yF6XCpt2pFFM614.crl (hash: z+GsjXnD4UQZu0qceChh8A3cipq1VmVz/8oyOvvTF98=)
2: r00HzRw-RqO0vBCmPGerjiL7MBo.roa (hash: ZpMQBjz3xj36yREzwpqIfQv4H2OQrwN6wQoa/nm5NNo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cb/d4c891-4bc0-4a3e-8457-44276f604233/1/O1T6YLMnoIA9yF6XCpt2pFFM614.crl
rsync://rpki.ripe.net/repository/DEFAULT/cb/d4c891-4bc0-4a3e-8457-44276f604233/1/O1T6YLMnoIA9yF6XCpt2pFFM614.mft
rsync://rpki.ripe.net/repository/DEFAULT/O1T6YLMnoIA9yF6XCpt2pFFM614.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Apr 2025 02:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:75:30:a0:ee:2a:51:74:12:d5:86:90:88:4d:94:b8:6d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3b54fa60b327a0803dc85e970a9b76a4514ceb5e
Validity
Not Before: Apr 27 03:00:43 2025 GMT
Not After : Apr 28 03:00:43 2025 GMT
Subject: CN=0ae7d710b6267dee695b2f51adec404d9573d270
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:62:98:f8:e9:2b:95:d5:de:4a:d0:f9:20:58:
b7:db:a9:9c:a3:f0:c3:4d:b0:d5:a5:2a:af:1f:65:
86:1d:1f:41:cb:d7:52:d4:2f:ab:8e:c2:ec:ac:bf:
9e:30:7f:a9:51:5b:ad:0e:03:10:d4:75:3a:fa:fe:
97:38:cc:f1:49:26:6f:92:ff:fb:5f:4a:43:0e:b6:
0e:46:fd:f8:43:7a:6f:9f:c2:7d:cc:b0:f9:0c:9c:
a5:39:7a:35:7e:b2:a1:bc:ee:a2:46:1f:75:83:8a:
36:73:e2:07:f7:fa:f7:3f:f4:9d:48:5d:8d:34:3d:
1e:32:57:e9:b3:5c:ca:aa:d8:1c:e1:35:3d:f9:36:
d8:ef:0d:3a:02:4f:a2:dd:ff:8f:d5:93:ec:f6:29:
bf:de:0d:ea:bb:ec:36:4b:cf:6c:7a:a2:c0:b1:0b:
5c:83:bc:ec:ae:3a:94:f8:1c:27:20:ac:6c:7d:0f:
0c:c3:a2:37:91:37:4a:c9:8c:ce:96:06:d2:7a:63:
1e:f5:fb:3a:71:14:da:23:d4:1e:66:9e:c5:1f:d0:
92:fd:9e:86:b2:39:6d:49:8b:9b:4a:6d:57:bb:1e:
77:aa:81:fb:8b:64:b4:2d:fd:3b:16:9e:2f:b8:f9:
b0:9c:d2:b3:01:74:2f:df:06:f6:0d:a9:5b:91:50:
0b:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0A:E7:D7:10:B6:26:7D:EE:69:5B:2F:51:AD:EC:40:4D:95:73:D2:70
X509v3 Authority Key Identifier:
keyid:3B:54:FA:60:B3:27:A0:80:3D:C8:5E:97:0A:9B:76:A4:51:4C:EB:5E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/O1T6YLMnoIA9yF6XCpt2pFFM614.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cb/d4c891-4bc0-4a3e-8457-44276f604233/1/O1T6YLMnoIA9yF6XCpt2pFFM614.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cb/d4c891-4bc0-4a3e-8457-44276f604233/1/O1T6YLMnoIA9yF6XCpt2pFFM614.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7d:42:53:c7:35:90:f8:8a:d2:6d:3d:c1:db:94:75:0a:0a:79:
9c:64:9e:2b:42:6a:42:7e:b1:a0:77:8c:a6:50:d4:40:42:fa:
b4:05:06:98:92:a1:0d:49:70:a2:60:4c:68:46:f7:f1:ba:e4:
20:08:6e:6a:46:fc:e2:56:d1:2a:97:08:2b:9c:16:f8:0e:99:
5f:86:ed:4b:57:6c:d8:5d:0e:82:d6:83:2d:e3:c9:b7:e1:1e:
1b:12:02:d3:41:fd:22:0c:0b:5a:bf:e7:d0:b9:eb:14:b2:a8:
19:e5:29:2b:15:72:5b:5f:83:dc:04:e4:82:6f:be:00:1c:1e:
a2:2f:67:8b:7a:9b:59:a3:30:fa:f3:67:25:31:fe:c2:d0:ca:
9e:f8:73:7f:16:c7:ca:f0:0e:78:b8:94:85:12:56:a2:0b:78:
76:d8:de:7d:a7:07:02:b6:ae:9b:9f:35:df:9a:07:93:4a:43:
aa:fd:ba:51:9a:9f:84:3f:d9:c7:f0:78:de:64:39:6b:55:18:
b7:e1:25:a2:9b:0f:7c:9a:53:9c:ae:3f:99:8f:b9:73:39:c3:
81:ae:8e:38:bd:43:5a:45:e4:74:52:25:0d:98:27:e1:31:25:
28:c6:f1:4a:b4:c5:21:7a:7d:88:f4:15:7e:75:94:4d:b2:ab:
85:e1:39:7d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 07:04:33 2025 by rpki-client