Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/eb/a2787e-c4bb-4dfd-83cd-bdfa7c4f8b0a/1/Onb8XJAQtBEZymjca5lQul_3Mn4.mft
File: Onb8XJAQtBEZymjca5lQul_3Mn4.mft (raw, json)
Hash identifier: yUZ8c/1AtXug/CRu6roBKp+gd4ZHc+oAxu7J9Ayf5Ng=
Subject key identifier: 51:F5:F9:36:73:F4:7A:52:25:1B:99:94:64:1F:82:76:53:CA:57:7C
Authority key identifier: 3A:76:FC:5C:90:10:B4:11:19:CA:68:DC:6B:99:50:BA:5F:F7:32:7E
Certificate issuer: /CN=3a76fc5c9010b41119ca68dc6b9950ba5ff7327e
Certificate serial: 019675D531F7D7736751664D59B2897CBD10
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Onb8XJAQtBEZymjca5lQul_3Mn4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/eb/a2787e-c4bb-4dfd-83cd-bdfa7c4f8b0a/1/Onb8XJAQtBEZymjca5lQul_3Mn4.mft
Manifest number: 0EEB
Signing time: Sun 27 Apr 2025 06:00:28 +0000
Manifest this update: Sun 27 Apr 2025 06:00:28 +0000
Manifest next update: Mon 28 Apr 2025 06:00:28 +0000
Files and hashes: 1: Onb8XJAQtBEZymjca5lQul_3Mn4.crl (hash: nZTsv4Bm3VtDxqaaH/7CkiVqhm8nHPXcmY2vGhXqYlo=)
2: aLeS6kJNMMsXR_fWm4nfBJc0RbY.roa (hash: 2eZg5Esd5JZxUzRdKZEfMd9ilMWbL+Zmx8dFdFF5esA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/eb/a2787e-c4bb-4dfd-83cd-bdfa7c4f8b0a/1/Onb8XJAQtBEZymjca5lQul_3Mn4.crl
rsync://rpki.ripe.net/repository/DEFAULT/eb/a2787e-c4bb-4dfd-83cd-bdfa7c4f8b0a/1/Onb8XJAQtBEZymjca5lQul_3Mn4.mft
rsync://rpki.ripe.net/repository/DEFAULT/Onb8XJAQtBEZymjca5lQul_3Mn4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Apr 2025 02:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:75:d5:31:f7:d7:73:67:51:66:4d:59:b2:89:7c:bd:10
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3a76fc5c9010b41119ca68dc6b9950ba5ff7327e
Validity
Not Before: Apr 27 06:00:28 2025 GMT
Not After : Apr 28 06:00:28 2025 GMT
Subject: CN=51f5f93673f47a52251b9994641f827653ca577c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:af:b5:08:a1:c7:ee:85:7d:bb:d1:08:fe:03:
42:cc:a6:44:83:b5:08:e5:23:af:29:db:d7:33:47:
21:9c:f0:96:b9:9c:54:53:2b:0c:44:cc:01:e5:b1:
3b:fd:37:a2:bd:b1:a7:dd:33:85:a5:ee:4a:4a:9b:
e2:43:a0:b3:f1:20:a0:7c:cb:78:90:e7:c9:c6:f2:
6c:74:44:78:59:cf:3c:ab:22:c4:19:fa:e8:31:d7:
dc:bb:f7:ff:08:4c:7d:0b:3c:d2:86:91:73:23:e4:
40:d2:b8:14:1b:99:96:4c:48:38:61:48:11:10:42:
75:d7:08:b9:b5:ac:3e:cd:c5:d1:f9:9d:d9:0b:03:
38:e5:b1:fe:f5:ef:61:82:47:5b:e0:0b:e2:4c:ce:
b8:b3:bc:82:08:6e:c2:a3:ec:5a:2c:a9:10:97:25:
f4:a5:c5:bc:08:5a:be:81:8f:4e:2c:a8:8d:5d:30:
3c:ea:34:64:68:03:27:2b:0d:90:f6:63:79:be:52:
84:a7:64:6b:cd:dc:45:fb:7a:58:73:18:5f:87:ab:
fd:5e:6e:3a:e7:45:10:5f:af:0c:34:8f:b1:66:b3:
19:6c:a1:70:a3:26:2c:b5:f7:d2:e1:a3:5b:e8:93:
9d:62:91:9f:42:74:c6:4b:77:53:98:a2:c0:89:9a:
8b:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
51:F5:F9:36:73:F4:7A:52:25:1B:99:94:64:1F:82:76:53:CA:57:7C
X509v3 Authority Key Identifier:
keyid:3A:76:FC:5C:90:10:B4:11:19:CA:68:DC:6B:99:50:BA:5F:F7:32:7E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Onb8XJAQtBEZymjca5lQul_3Mn4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/a2787e-c4bb-4dfd-83cd-bdfa7c4f8b0a/1/Onb8XJAQtBEZymjca5lQul_3Mn4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/a2787e-c4bb-4dfd-83cd-bdfa7c4f8b0a/1/Onb8XJAQtBEZymjca5lQul_3Mn4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
72:2a:35:c3:35:c9:5a:9a:3d:f9:6f:30:1d:26:d6:db:60:b5:
98:d4:2d:9a:b5:20:f9:b1:be:92:f7:51:e2:fc:bb:32:af:c9:
16:40:42:51:3b:81:ea:ef:74:3a:39:06:89:d7:58:15:06:a4:
c8:ba:b7:b3:cc:f2:19:14:0a:db:23:14:cb:6a:f8:62:f2:89:
fc:7b:22:48:87:92:2e:b0:38:ee:1c:60:ac:1f:46:e6:76:d6:
0c:73:3d:16:f3:5b:7a:c8:a1:4d:7a:c6:64:01:01:f2:73:3e:
a8:c0:93:46:42:0c:61:0f:49:f4:d2:3e:52:88:0e:cb:bf:bf:
ea:2c:36:c0:49:d0:87:e7:bd:d3:a0:7c:ce:0a:8a:18:2a:4f:
36:d3:de:ea:14:6b:02:49:83:d3:ad:21:c1:ff:35:22:7e:28:
0b:16:b5:5d:91:66:4c:c8:23:0d:1a:04:ea:cb:71:87:d2:84:
66:9b:5a:8f:aa:85:94:1c:55:b7:30:c9:43:47:83:14:e7:0b:
b6:91:86:0f:fd:67:8c:d3:a1:7c:f3:f6:7d:bb:cf:b7:55:d2:
52:82:d2:29:82:0c:f7:5f:31:1d:7f:48:85:8e:3b:37:4f:43:
c6:4d:48:50:e5:de:d7:84:27:39:56:85:b9:5d:87:e2:45:eb:
89:e2:16:6b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 07:42:08 2025 by rpki-client