Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ec/ab3f36-7850-4266-b67a-023cc1fc1910/1/O5WuuspzMW3EaAyAi3k-aglWXxs.mft
File: O5WuuspzMW3EaAyAi3k-aglWXxs.mft (raw, json)
Hash identifier: k/NNhnr15AdIenpNCrmk/sk71d5QNpfAsv3er/w2PT4=
Subject key identifier: BC:BD:A1:1D:F7:AE:E1:98:44:76:66:86:CF:E7:30:04:42:4A:5D:A2
Authority key identifier: 3B:95:AE:BA:CA:73:31:6D:C4:68:0C:80:8B:79:3E:6A:09:56:5F:1B
Certificate issuer: /CN=3b95aebaca73316dc4680c808b793e6a09565f1b
Certificate serial: 0196B558F2114E557A621FCDA2361B532686
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/O5WuuspzMW3EaAyAi3k-aglWXxs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ec/ab3f36-7850-4266-b67a-023cc1fc1910/1/O5WuuspzMW3EaAyAi3k-aglWXxs.mft
Manifest number: 0386
Signing time: Fri 09 May 2025 14:00:27 +0000
Manifest this update: Fri 09 May 2025 14:00:27 +0000
Manifest next update: Sat 10 May 2025 14:00:27 +0000
Files and hashes: 1: O5WuuspzMW3EaAyAi3k-aglWXxs.crl (hash: li8/mys9vrThPgyQVT1MDBT1q8UVPwMIceHQiudlmTQ=)
2: tsimjRApcLdxNhZEKgAs63IqA5I.roa (hash: HrZUtgrX3ioBRBNFpZduF4ySYEUBH1QJ3tZ4kshDhvk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ec/ab3f36-7850-4266-b67a-023cc1fc1910/1/O5WuuspzMW3EaAyAi3k-aglWXxs.crl
rsync://rpki.ripe.net/repository/DEFAULT/ec/ab3f36-7850-4266-b67a-023cc1fc1910/1/O5WuuspzMW3EaAyAi3k-aglWXxs.mft
rsync://rpki.ripe.net/repository/DEFAULT/O5WuuspzMW3EaAyAi3k-aglWXxs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 10 May 2025 14:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:b5:58:f2:11:4e:55:7a:62:1f:cd:a2:36:1b:53:26:86
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3b95aebaca73316dc4680c808b793e6a09565f1b
Validity
Not Before: May 9 14:00:27 2025 GMT
Not After : May 10 14:00:27 2025 GMT
Subject: CN=bcbda11df7aee19844766686cfe73004424a5da2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ef:0a:f4:66:5a:82:44:2d:15:09:73:fb:1e:ff:
5c:a8:51:9e:5c:47:40:f3:8a:24:d6:0c:b0:79:b3:
65:9b:30:6d:96:8f:d2:83:88:1f:c1:17:80:b4:65:
53:be:c9:fc:3f:58:1e:7b:d8:9c:67:3a:07:3f:84:
a3:2d:51:fe:0d:80:a1:ab:24:66:2e:af:94:39:7d:
eb:fe:3f:b0:2e:ec:a2:be:06:20:85:83:28:59:55:
ea:c4:89:1e:48:89:4b:e9:72:9a:65:2e:5e:0d:b2:
c8:af:93:01:37:11:2c:ad:9e:ce:8f:ef:f1:fd:b0:
12:58:da:2c:5a:b9:53:6c:2c:4a:4c:ac:a7:71:29:
81:0d:9f:af:68:27:f4:ff:3b:ba:43:4d:c4:a5:b4:
8c:08:40:5e:18:a3:24:cf:5c:67:ef:d4:d2:96:30:
c8:49:ee:7d:4b:b8:c4:11:54:54:14:9a:dc:1f:8e:
2e:c4:1c:41:92:fc:0b:34:97:8e:58:a8:98:94:27:
c4:95:22:44:59:b9:63:bc:2f:74:c8:53:a2:a6:0d:
41:7a:64:98:73:bc:5d:e6:b6:fb:48:0e:73:4a:5a:
f9:c9:07:22:07:0d:07:2f:47:65:16:0a:06:71:da:
a7:7b:a4:50:18:0e:aa:6e:d6:77:8c:66:21:05:2c:
3a:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BC:BD:A1:1D:F7:AE:E1:98:44:76:66:86:CF:E7:30:04:42:4A:5D:A2
X509v3 Authority Key Identifier:
keyid:3B:95:AE:BA:CA:73:31:6D:C4:68:0C:80:8B:79:3E:6A:09:56:5F:1B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/O5WuuspzMW3EaAyAi3k-aglWXxs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ec/ab3f36-7850-4266-b67a-023cc1fc1910/1/O5WuuspzMW3EaAyAi3k-aglWXxs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ec/ab3f36-7850-4266-b67a-023cc1fc1910/1/O5WuuspzMW3EaAyAi3k-aglWXxs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a0:d0:00:df:94:05:29:ea:a4:a1:b9:9b:f5:e7:8b:95:90:3a:
8a:83:63:b6:72:43:0c:7a:12:9d:41:ec:93:38:b2:ac:23:5e:
8c:6b:c4:b5:e1:c3:b8:d9:ad:5f:43:18:42:75:0a:9d:17:26:
e7:fd:e4:24:a9:e7:db:43:67:60:e3:81:3f:66:0a:ee:b6:40:
0c:8c:13:3b:62:6a:10:43:03:ec:81:1f:c2:57:33:42:57:60:
23:8f:9c:8f:94:1f:7e:dd:8f:1b:5a:50:55:4d:e4:c3:eb:73:
08:b8:7d:dd:ea:d3:90:b0:b9:64:4f:a9:b4:a0:4f:0e:79:c8:
81:e5:38:dc:c5:a8:4c:b1:9b:f9:53:f4:f3:4e:37:a4:3a:d9:
7c:48:35:ad:1f:c6:f6:5e:a3:d0:e0:0b:7a:e5:8c:6b:1b:e3:
2c:01:73:fc:bf:c1:eb:d1:71:be:5e:e6:7a:51:62:d2:91:39:
33:e7:f4:34:13:52:1f:83:fd:38:80:e7:5a:76:17:ac:2a:9b:
80:49:7c:3d:52:38:84:ec:b5:19:af:dc:af:b8:ce:c8:c4:43:
27:69:fd:a4:47:41:7d:30:1f:e6:7c:97:5f:74:9f:ae:06:53:
b5:13:62:d4:a2:4c:bf:ba:8b:2a:1a:de:ff:0b:aa:6a:cb:58:
c2:1c:03:7a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 9 21:09:08 2025 by rpki-client