Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d0/7a806c-2f08-47d9-9cc9-658d4c4628ad/1/oI5By_3vrQuw4pckeswaIB0t9KA.mft
File: oI5By_3vrQuw4pckeswaIB0t9KA.mft (raw, json)
Hash identifier: 3bCHbt5PgNCzuthEVGiCQrkyGl2TAXf59LrQua0u+Qo=
Subject key identifier: D6:E8:31:65:CD:84:E3:73:C7:55:81:21:FA:4A:9E:84:10:45:C9:04
Authority key identifier: A0:8E:41:CB:FD:EF:AD:0B:B0:E2:97:24:7A:CC:1A:20:1D:2D:F4:A0
Certificate issuer: /CN=a08e41cbfdefad0bb0e297247acc1a201d2df4a0
Certificate serial: 019676B0C15E90600F3827515FD57375A46B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/oI5By_3vrQuw4pckeswaIB0t9KA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d0/7a806c-2f08-47d9-9cc9-658d4c4628ad/1/oI5By_3vrQuw4pckeswaIB0t9KA.mft
Manifest number: 10A3
Signing time: Sun 27 Apr 2025 10:00:17 +0000
Manifest this update: Sun 27 Apr 2025 10:00:17 +0000
Manifest next update: Mon 28 Apr 2025 10:00:17 +0000
Files and hashes: 1: kaGph50MrnZk9_Ae5Md0JZHkmEM.roa (hash: KOuavh84jne4Oayx4KsSyaMHm/sNkEEba6rU0bPnEbc=)
2: oI5By_3vrQuw4pckeswaIB0t9KA.crl (hash: /etXARLxJ50so3p2IFAYL7ipj91UJCtiUF2Exjq/rZo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d0/7a806c-2f08-47d9-9cc9-658d4c4628ad/1/oI5By_3vrQuw4pckeswaIB0t9KA.crl
rsync://rpki.ripe.net/repository/DEFAULT/d0/7a806c-2f08-47d9-9cc9-658d4c4628ad/1/oI5By_3vrQuw4pckeswaIB0t9KA.mft
rsync://rpki.ripe.net/repository/DEFAULT/oI5By_3vrQuw4pckeswaIB0t9KA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Apr 2025 10:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:76:b0:c1:5e:90:60:0f:38:27:51:5f:d5:73:75:a4:6b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a08e41cbfdefad0bb0e297247acc1a201d2df4a0
Validity
Not Before: Apr 27 10:00:17 2025 GMT
Not After : Apr 28 10:00:17 2025 GMT
Subject: CN=d6e83165cd84e373c7558121fa4a9e841045c904
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:6d:82:b9:c2:a6:22:52:d9:cc:55:5f:3d:a7:
98:c8:66:23:b2:9c:fb:ed:69:db:23:d3:22:58:f3:
21:d3:0d:a7:18:88:6c:dc:e7:85:84:41:12:08:87:
f2:5d:b2:47:93:b6:8e:0c:a6:4b:af:8c:d0:90:5a:
53:44:8c:ac:e5:25:3d:4f:89:32:d5:7d:88:47:6c:
b9:3d:c8:26:f7:b3:64:cf:a9:52:1f:fb:df:47:29:
3e:d4:56:8e:95:88:f2:c8:33:83:41:9c:0c:a3:9d:
aa:d0:3b:7c:f2:dd:20:dd:af:d6:40:38:14:87:da:
2c:56:ff:ac:17:4a:83:43:18:b7:e5:f8:2c:e5:0a:
f7:41:c6:ad:cb:01:3a:50:4e:5b:4b:f3:3c:f9:c0:
ab:05:37:8c:cc:60:36:2b:bc:5a:d7:78:5d:a2:5e:
3f:bd:0a:34:c3:60:b1:1d:8d:41:73:38:0a:1e:8d:
60:61:c2:c8:58:b1:b6:c2:08:73:b7:6b:1c:a1:9a:
02:13:e6:c8:ea:97:fe:2d:40:28:0a:de:1a:a0:11:
b7:ba:b3:a0:d7:b4:71:27:e0:df:c1:77:c8:07:ba:
c4:7c:a5:0f:d1:0f:ab:2a:ee:91:9f:94:9d:1b:aa:
dd:88:8d:78:b3:2c:b6:ee:d5:9c:a1:86:93:fb:24:
d3:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D6:E8:31:65:CD:84:E3:73:C7:55:81:21:FA:4A:9E:84:10:45:C9:04
X509v3 Authority Key Identifier:
keyid:A0:8E:41:CB:FD:EF:AD:0B:B0:E2:97:24:7A:CC:1A:20:1D:2D:F4:A0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/oI5By_3vrQuw4pckeswaIB0t9KA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/7a806c-2f08-47d9-9cc9-658d4c4628ad/1/oI5By_3vrQuw4pckeswaIB0t9KA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/7a806c-2f08-47d9-9cc9-658d4c4628ad/1/oI5By_3vrQuw4pckeswaIB0t9KA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
06:2d:f7:5c:62:c9:64:a1:76:09:1e:15:71:2d:26:bb:9f:f6:
44:73:66:4b:67:12:f4:8f:43:1d:95:46:42:17:8d:54:53:e0:
20:2e:58:ac:31:5a:af:34:e3:d6:6f:70:fa:a9:26:90:ec:f8:
c2:c4:74:41:4e:0e:a4:96:2f:db:9d:2b:54:69:b3:a2:35:9d:
40:16:cb:54:dc:fd:88:d6:1a:3a:b0:e4:57:46:fc:72:c3:17:
e2:92:1d:de:d8:51:15:24:4a:f5:58:ba:57:b1:5f:19:3d:13:
60:a0:85:cd:a1:d3:70:a6:e4:e5:0d:49:0c:28:70:83:27:97:
1a:8e:bb:ad:ca:c8:01:a5:cb:db:a8:95:7b:a5:00:ba:c4:2f:
89:7d:51:69:84:92:9a:31:d8:4d:91:fe:84:e4:15:33:b8:12:
7b:ed:94:54:b4:77:dc:47:f7:8a:b5:97:30:08:e6:9f:32:0d:
3f:f6:32:6d:c2:60:78:3b:d1:a7:d1:06:8d:fe:8a:1c:eb:a3:
7d:6d:06:a1:38:33:a2:90:07:f7:38:60:b7:0a:ad:e0:82:b2:
f7:9a:bc:dd:8f:30:28:68:61:9b:96:2f:9b:85:6b:5d:30:3d:
19:65:9c:35:e1:72:a2:ad:0b:db:19:06:1c:41:53:0e:32:2b:
b8:ed:20:1e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 19:09:29 2025 by rpki-client