Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e8/89abb8-636d-4084-81a0-c63adb6ee5d9/1/m-o6Oko2Bsc5bxX1AaxcZBeFdQw.mft
File: m-o6Oko2Bsc5bxX1AaxcZBeFdQw.mft (raw, json)
Hash identifier: QCZOQoOKVHFANZphGeadyUwb56iexyNSqOP7Hrm8/g0=
Subject key identifier: DF:A7:63:A5:0D:EA:04:D0:40:66:AD:D1:23:49:AE:CC:A6:BD:C2:B2
Authority key identifier: 9B:EA:3A:3A:4A:36:06:C7:39:6F:15:F5:01:AC:5C:64:17:85:75:0C
Certificate issuer: /CN=9bea3a3a4a3606c7396f15f501ac5c641785750c
Certificate serial: 019679445F205D54B777D375EAF496501F0D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/m-o6Oko2Bsc5bxX1AaxcZBeFdQw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e8/89abb8-636d-4084-81a0-c63adb6ee5d9/1/m-o6Oko2Bsc5bxX1AaxcZBeFdQw.mft
Manifest number: 08A9
Signing time: Sun 27 Apr 2025 22:00:46 +0000
Manifest this update: Sun 27 Apr 2025 22:00:46 +0000
Manifest next update: Mon 28 Apr 2025 22:00:46 +0000
Files and hashes: 1: 7dGZOPsa1FU0C36WBDwIw7gL1Bo.roa (hash: 5etpC4MaJX7LndBCS5De3y9ecFGJX8+EfQl3ZBJ8rb8=)
2: m-o6Oko2Bsc5bxX1AaxcZBeFdQw.crl (hash: LpkxzPC4fa4hO10d4MBLljv5g8QA0wRyOpFaPNivwZk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e8/89abb8-636d-4084-81a0-c63adb6ee5d9/1/m-o6Oko2Bsc5bxX1AaxcZBeFdQw.crl
rsync://rpki.ripe.net/repository/DEFAULT/e8/89abb8-636d-4084-81a0-c63adb6ee5d9/1/m-o6Oko2Bsc5bxX1AaxcZBeFdQw.mft
rsync://rpki.ripe.net/repository/DEFAULT/m-o6Oko2Bsc5bxX1AaxcZBeFdQw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Apr 2025 16:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:79:44:5f:20:5d:54:b7:77:d3:75:ea:f4:96:50:1f:0d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9bea3a3a4a3606c7396f15f501ac5c641785750c
Validity
Not Before: Apr 27 22:00:46 2025 GMT
Not After : Apr 28 22:00:46 2025 GMT
Subject: CN=dfa763a50dea04d04066add12349aecca6bdc2b2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:fd:b7:6f:d8:38:7e:4b:37:aa:13:5a:89:10:
72:4c:71:dc:48:fe:3a:4b:fe:ed:76:59:73:57:74:
48:f3:24:61:d3:0d:89:e1:ce:60:9b:6b:f2:56:7f:
8b:de:5e:c4:7e:bc:2e:14:a5:1e:84:ba:5b:04:47:
ed:0e:17:2f:a4:e9:e7:70:f5:3f:29:5e:b5:dd:74:
fd:c6:71:05:05:1d:4a:77:90:ba:d2:1b:b7:22:4f:
91:23:ea:64:7d:81:24:16:89:a1:dc:cd:11:3b:36:
92:d3:0a:81:73:43:f6:da:23:4d:67:d8:80:4b:6f:
3f:13:4c:5a:12:fc:a7:9e:a8:c3:2b:55:9c:d2:a4:
6d:0c:66:4a:4c:99:75:6f:8c:8f:d0:3f:06:0a:45:
92:03:70:67:11:55:fe:a2:e2:69:59:0d:67:96:3b:
c3:39:32:18:1a:e4:6c:a1:46:c1:a4:3c:97:e4:2a:
c8:71:49:9f:5f:0c:f3:a0:96:8c:4e:d2:69:46:11:
d7:bd:6d:c2:7b:41:6b:ac:d5:9e:30:67:23:88:9c:
cd:52:bd:89:8b:8f:03:81:79:c8:13:b4:27:44:a8:
56:26:df:f7:9b:d8:97:fa:ca:4c:2b:ab:15:cb:cc:
0f:b1:f2:17:b4:2f:d8:0c:d9:76:fd:0c:19:50:18:
f1:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DF:A7:63:A5:0D:EA:04:D0:40:66:AD:D1:23:49:AE:CC:A6:BD:C2:B2
X509v3 Authority Key Identifier:
keyid:9B:EA:3A:3A:4A:36:06:C7:39:6F:15:F5:01:AC:5C:64:17:85:75:0C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/m-o6Oko2Bsc5bxX1AaxcZBeFdQw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/89abb8-636d-4084-81a0-c63adb6ee5d9/1/m-o6Oko2Bsc5bxX1AaxcZBeFdQw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/89abb8-636d-4084-81a0-c63adb6ee5d9/1/m-o6Oko2Bsc5bxX1AaxcZBeFdQw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
14:cd:66:77:0f:d0:6a:ad:47:7c:36:12:f4:8b:5d:b5:65:fe:
25:07:5d:29:b6:18:eb:f2:61:a6:72:c0:d9:b2:96:f2:e9:75:
79:e2:83:81:e1:fb:ce:b8:da:dc:87:eb:2e:03:70:26:61:e1:
ca:32:a0:4c:c8:65:65:a4:ce:7b:9c:c3:ea:d9:2e:58:2e:40:
90:44:bc:3a:55:fb:73:d9:7e:28:0d:0a:f5:e6:60:c9:1a:b1:
81:8b:01:38:e0:98:b9:6c:eb:e6:46:d2:9f:5a:a5:a6:3f:e4:
9b:6d:f5:2a:a2:8b:22:23:94:ae:ba:23:49:3d:e7:77:d2:72:
01:f7:3c:38:e2:f1:b7:da:72:f9:81:74:83:b1:f7:f3:64:b9:
14:f4:fb:47:2d:1f:d9:77:13:9e:a3:e1:eb:fd:06:88:6b:40:
f8:4b:08:15:9a:4c:6a:ab:4d:cc:ab:1f:3a:a0:18:85:8c:7b:
37:3f:e2:cd:5e:85:37:b6:ac:0d:e1:44:02:8a:ad:9e:a2:5e:
4b:24:cc:bc:6e:03:28:ff:12:94:d4:44:9c:de:4a:b1:5a:28:
80:cf:67:83:30:e6:5c:df:38:f0:9e:a1:b2:ef:bb:0e:ce:c4:
3a:ae:b6:fe:09:60:56:e1:0d:65:6d:b8:49:f5:11:2f:eb:85:
fc:51:79:3a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 02:10:18 2025 by rpki-client