Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/df/8c83ca-2278-4d56-bce8-450d2295ba49/1/o6OfHbhYsVXyW8NDdZ9b4rc2yBg.mft
File: o6OfHbhYsVXyW8NDdZ9b4rc2yBg.mft (raw, json)
Hash identifier: 3W2N7JqLIApiXHhuKC8pKbsw0HI06isAs6DpkXJz1ZI=
Subject key identifier: 41:08:FB:C0:D4:3B:22:E0:BC:83:3D:22:10:C2:87:56:7F:83:AE:95
Authority key identifier: A3:A3:9F:1D:B8:58:B1:55:F2:5B:C3:43:75:9F:5B:E2:B7:36:C8:18
Certificate issuer: /CN=a3a39f1db858b155f25bc343759f5be2b736c818
Certificate serial: 0196869229020F4C124823B46B5A3647065E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/o6OfHbhYsVXyW8NDdZ9b4rc2yBg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/df/8c83ca-2278-4d56-bce8-450d2295ba49/1/o6OfHbhYsVXyW8NDdZ9b4rc2yBg.mft
Manifest number: 0E96
Signing time: Wed 30 Apr 2025 12:00:47 +0000
Manifest this update: Wed 30 Apr 2025 12:00:47 +0000
Manifest next update: Thu 01 May 2025 12:00:47 +0000
Files and hashes: 1: 1gXM5D3Y0GBi3FbOxC76Tbkj0Qc.roa (hash: GOT5movWxVskxoFlITVT8JKb8WEyioA1Mn3nxWwt5ow=)
2: o6OfHbhYsVXyW8NDdZ9b4rc2yBg.crl (hash: y/mGxvhbpTqvnXNDJBNNflCrQIEQcOWhlIkVUrxdOHM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/df/8c83ca-2278-4d56-bce8-450d2295ba49/1/o6OfHbhYsVXyW8NDdZ9b4rc2yBg.crl
rsync://rpki.ripe.net/repository/DEFAULT/df/8c83ca-2278-4d56-bce8-450d2295ba49/1/o6OfHbhYsVXyW8NDdZ9b4rc2yBg.mft
rsync://rpki.ripe.net/repository/DEFAULT/o6OfHbhYsVXyW8NDdZ9b4rc2yBg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 01 May 2025 12:00:47 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:86:92:29:02:0f:4c:12:48:23:b4:6b:5a:36:47:06:5e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a3a39f1db858b155f25bc343759f5be2b736c818
Validity
Not Before: Apr 30 12:00:47 2025 GMT
Not After : May 1 12:00:47 2025 GMT
Subject: CN=4108fbc0d43b22e0bc833d2210c287567f83ae95
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:e5:ce:b2:bd:90:45:e8:23:ee:1e:1c:0b:c6:
37:8a:d2:84:56:fd:6b:79:f0:f6:9e:b4:2c:f4:55:
29:b7:58:63:4a:62:94:02:71:09:12:8a:0d:19:58:
9d:68:11:93:3e:f4:d2:90:3d:70:8a:1b:10:18:ab:
bb:f6:af:66:f8:a7:7c:fb:c2:4f:fe:3c:ed:72:9f:
d8:9d:3c:93:fa:cb:10:11:c2:72:74:7a:85:d5:78:
59:d2:03:f4:b8:d1:dd:1b:88:f6:95:00:d5:d7:d6:
ac:1f:08:0d:3d:45:b8:80:1e:76:34:67:2c:04:58:
9a:63:7d:50:da:38:61:7a:07:35:92:e2:93:78:96:
43:64:74:0b:85:90:49:a5:7f:1e:45:94:39:30:eb:
6f:8d:11:9c:5a:86:dd:ed:07:70:3e:61:b5:b6:52:
93:b9:0e:ae:fd:aa:4b:d4:81:d2:3e:92:00:e3:98:
02:5d:82:7d:9f:38:34:23:06:6f:4a:49:47:31:d6:
28:eb:27:f8:a7:27:fb:fa:bc:71:ad:4f:a3:bd:3b:
5b:41:fd:f4:87:ea:d5:53:c2:bc:57:a2:8b:dc:2e:
1d:4e:26:14:2d:64:04:47:98:bb:b9:72:dd:6d:2f:
76:4c:cc:05:c9:3f:03:ae:d6:4e:24:ad:1d:f9:87:
0b:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
41:08:FB:C0:D4:3B:22:E0:BC:83:3D:22:10:C2:87:56:7F:83:AE:95
X509v3 Authority Key Identifier:
keyid:A3:A3:9F:1D:B8:58:B1:55:F2:5B:C3:43:75:9F:5B:E2:B7:36:C8:18
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/o6OfHbhYsVXyW8NDdZ9b4rc2yBg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/df/8c83ca-2278-4d56-bce8-450d2295ba49/1/o6OfHbhYsVXyW8NDdZ9b4rc2yBg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/df/8c83ca-2278-4d56-bce8-450d2295ba49/1/o6OfHbhYsVXyW8NDdZ9b4rc2yBg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
41:cf:d5:7c:ad:cc:24:8f:d4:ad:a1:01:8e:6f:3a:4e:57:cb:
e1:cb:d2:f3:25:f0:37:2d:f5:41:9d:98:26:09:14:24:04:f4:
df:be:5c:b4:c9:88:b9:a9:e6:20:d3:73:77:2f:75:a3:92:ea:
b3:70:9b:d3:84:25:cb:a0:98:3d:07:e5:75:4c:da:ff:2e:bb:
e0:04:83:64:fb:b5:e8:93:bb:cb:73:be:ed:05:87:f9:ff:49:
c6:79:47:ed:19:ef:00:b7:27:0d:22:74:82:9a:1c:26:12:11:
dc:cc:41:64:6f:f9:fe:b2:fc:6b:97:a9:d7:82:19:a2:7b:01:
b1:cf:e8:e6:f3:50:fa:8a:3c:f7:7d:e4:f5:f9:ac:66:55:3a:
b0:34:b6:2e:88:26:9d:de:73:b9:95:db:aa:d8:00:be:48:30:
da:07:2c:4f:68:af:4d:3e:58:2c:56:ce:e0:75:85:6b:36:2a:
d9:4b:4f:62:3e:29:9d:5f:c3:79:8e:08:1b:76:24:f6:90:19:
9d:3b:4d:d0:71:9f:45:d2:2a:41:90:de:b4:1e:6d:fd:b1:1a:
8e:67:55:cb:32:36:6e:3a:f6:9b:25:08:73:ab:31:b9:34:5c:
f4:11:45:03:96:18:50:20:9b:43:6b:1b:fc:46:bd:5c:23:0e:
65:e8:ab:0f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 30 20:27:08 2025 by rpki-client