Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d9/7c6b2d-ac42-487e-9c19-1618776bdaae/1/O5Sh2IHdS-sv0xt2-g1dWFqbI48.mft
File: O5Sh2IHdS-sv0xt2-g1dWFqbI48.mft (raw, json)
Hash identifier: jzWKVVh0Bdws6fGPQj3eDWLfCx6cvXjBcYd91nZDmFE=
Subject key identifier: 6C:7C:33:BE:13:39:E8:B6:7C:FC:15:A0:64:CB:A6:46:5A:AF:06:FD
Authority key identifier: 3B:94:A1:D8:81:DD:4B:EB:2F:D3:1B:76:FA:0D:5D:58:5A:9B:23:8F
Certificate issuer: /CN=3b94a1d881dd4beb2fd31b76fa0d5d585a9b238f
Certificate serial: 019683C7CD014EA0F23582C6F5EAD69C0AF5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/O5Sh2IHdS-sv0xt2-g1dWFqbI48.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d9/7c6b2d-ac42-487e-9c19-1618776bdaae/1/O5Sh2IHdS-sv0xt2-g1dWFqbI48.mft
Manifest number: 1517
Signing time: Tue 29 Apr 2025 23:00:31 +0000
Manifest this update: Tue 29 Apr 2025 23:00:31 +0000
Manifest next update: Wed 30 Apr 2025 23:00:31 +0000
Files and hashes: 1: ETzMLJ9E8ekQKvTuSVRndgg_ftE.roa (hash: zxZL9sGsfFQCpFwlHr+nLeuc9weJmZjmaUU+udBc04c=)
2: O5Sh2IHdS-sv0xt2-g1dWFqbI48.crl (hash: 7FNZyE36/cP6u+/evX21QsZI6vezwKS1vpzYFHrP4Cg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d9/7c6b2d-ac42-487e-9c19-1618776bdaae/1/O5Sh2IHdS-sv0xt2-g1dWFqbI48.crl
rsync://rpki.ripe.net/repository/DEFAULT/d9/7c6b2d-ac42-487e-9c19-1618776bdaae/1/O5Sh2IHdS-sv0xt2-g1dWFqbI48.mft
rsync://rpki.ripe.net/repository/DEFAULT/O5Sh2IHdS-sv0xt2-g1dWFqbI48.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 30 Apr 2025 23:00:31 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:83:c7:cd:01:4e:a0:f2:35:82:c6:f5:ea:d6:9c:0a:f5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3b94a1d881dd4beb2fd31b76fa0d5d585a9b238f
Validity
Not Before: Apr 29 23:00:31 2025 GMT
Not After : Apr 30 23:00:31 2025 GMT
Subject: CN=6c7c33be1339e8b67cfc15a064cba6465aaf06fd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:51:bb:20:1c:ee:b1:1d:d5:bb:de:e8:96:2e:
92:3b:76:a5:e0:f2:8b:1f:27:4e:58:20:0c:99:27:
f7:b4:e3:ab:3c:e7:66:42:3b:46:d2:d1:08:18:74:
98:ea:0f:a3:5c:72:62:b5:90:67:ef:eb:7e:a9:ee:
2c:66:33:1b:bd:d5:5e:ab:a5:c7:c4:01:31:51:87:
00:08:f4:56:f4:01:ca:21:d5:e8:b5:3b:05:f3:b7:
a7:18:d9:80:4c:6b:2a:08:37:39:69:ca:dc:33:be:
98:77:e2:23:18:ee:c2:23:50:4a:5a:b4:fc:42:d3:
e8:4d:f3:d3:82:58:4d:ed:2d:dd:22:4f:d6:44:0a:
6b:8b:dc:3d:ea:3b:c5:e2:a5:db:9f:b2:00:13:55:
e1:a0:b5:ce:84:27:2b:5d:5a:c0:b3:c9:05:06:92:
f1:87:cd:d9:6f:91:c5:d8:b3:44:72:9c:c6:47:be:
b8:45:97:a2:d9:a4:92:a8:22:4c:7f:dc:95:02:dd:
48:72:62:3a:da:aa:63:85:10:bc:30:65:5e:28:8a:
bd:3f:c2:62:a7:36:38:28:df:5e:0b:c5:1c:94:96:
4b:60:83:97:9c:7d:fd:44:fd:2f:79:58:3b:ce:88:
fe:53:12:bc:8e:31:5e:09:02:6a:0d:3e:ce:2d:bc:
94:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6C:7C:33:BE:13:39:E8:B6:7C:FC:15:A0:64:CB:A6:46:5A:AF:06:FD
X509v3 Authority Key Identifier:
keyid:3B:94:A1:D8:81:DD:4B:EB:2F:D3:1B:76:FA:0D:5D:58:5A:9B:23:8F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/O5Sh2IHdS-sv0xt2-g1dWFqbI48.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/7c6b2d-ac42-487e-9c19-1618776bdaae/1/O5Sh2IHdS-sv0xt2-g1dWFqbI48.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/7c6b2d-ac42-487e-9c19-1618776bdaae/1/O5Sh2IHdS-sv0xt2-g1dWFqbI48.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
94:9f:cd:4e:c1:81:c2:8b:ef:7c:8e:c3:69:1e:ed:17:d0:bc:
14:cb:99:b4:fa:5e:26:e9:35:a9:6d:af:0c:0a:a2:9b:27:5b:
86:30:1e:90:1c:6c:3f:f8:8d:a7:a7:f3:d6:3d:82:e4:96:5a:
a5:8f:b1:d5:9c:95:be:f7:90:66:37:50:0a:3e:a0:5f:6f:bf:
44:2f:e3:a5:8e:dc:03:bf:1c:df:9a:cf:b3:6f:70:e5:19:cf:
3f:1f:aa:0e:8e:5b:d8:5a:5f:8f:4f:2e:32:eb:fa:5e:be:d2:
0a:dd:d6:d9:5e:ae:7a:29:f3:67:0f:c0:2e:d7:f1:ee:e4:71:
9a:6a:71:ec:91:97:a5:0b:dd:fc:d3:a7:69:d2:9b:93:82:a8:
0a:f6:fb:62:62:f4:cc:59:1d:ed:0f:04:7d:37:ea:65:f7:ce:
fd:b2:29:53:c9:45:2e:16:7a:2d:57:53:90:94:38:5b:d1:2a:
ef:fe:14:c9:1e:be:d8:98:d0:5c:e9:cb:cf:dc:85:70:0e:2a:
3a:1d:0b:e8:66:b2:e5:85:43:c0:8c:86:f5:89:30:72:3d:c9:
64:58:69:a8:ce:5d:9e:4e:d0:9d:c4:b6:dd:88:27:d6:b3:9b:
2f:46:39:a6:24:d7:18:70:32:6e:98:27:23:6e:63:e8:64:46:
90:b7:32:28
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 30 02:53:06 2025 by rpki-client