Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f4/0fdf9e-f53f-467d-bc8c-3a563c210a55/1/o6mFw54-kRuYDpOgZkAVfp4FLSM.mft
File: o6mFw54-kRuYDpOgZkAVfp4FLSM.mft (raw, json)
Hash identifier: 48MG4zyJCq1IU/0mbC3YIXpmP0TZdwh+ez0bPqsxaeg=
Subject key identifier: AA:3E:A0:D0:2E:DF:40:D6:12:CA:90:65:A0:55:CB:D0:9F:56:FA:10
Authority key identifier: A3:A9:85:C3:9E:3E:91:1B:98:0E:93:A0:66:40:15:7E:9E:05:2D:23
Certificate issuer: /CN=a3a985c39e3e911b980e93a06640157e9e052d23
Certificate serial: 0196790D0C12AB276ADBE42EA0D644E7B8A3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/o6mFw54-kRuYDpOgZkAVfp4FLSM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f4/0fdf9e-f53f-467d-bc8c-3a563c210a55/1/o6mFw54-kRuYDpOgZkAVfp4FLSM.mft
Manifest number: 107C
Signing time: Sun 27 Apr 2025 21:00:20 +0000
Manifest this update: Sun 27 Apr 2025 21:00:20 +0000
Manifest next update: Mon 28 Apr 2025 21:00:20 +0000
Files and hashes: 1: 3REEAprnZIBusO6q6WWrCX9P-HM.roa (hash: vH8qgeYWcERpU9E7qeOHsrxBazYwgyfC550mI+D0FkE=)
2: o6mFw54-kRuYDpOgZkAVfp4FLSM.crl (hash: PAX+0kNmBvP+swkWlla/3xPxNzi8zJEzuShbPwstbjQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f4/0fdf9e-f53f-467d-bc8c-3a563c210a55/1/o6mFw54-kRuYDpOgZkAVfp4FLSM.crl
rsync://rpki.ripe.net/repository/DEFAULT/f4/0fdf9e-f53f-467d-bc8c-3a563c210a55/1/o6mFw54-kRuYDpOgZkAVfp4FLSM.mft
rsync://rpki.ripe.net/repository/DEFAULT/o6mFw54-kRuYDpOgZkAVfp4FLSM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Apr 2025 16:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:79:0d:0c:12:ab:27:6a:db:e4:2e:a0:d6:44:e7:b8:a3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a3a985c39e3e911b980e93a06640157e9e052d23
Validity
Not Before: Apr 27 21:00:20 2025 GMT
Not After : Apr 28 21:00:20 2025 GMT
Subject: CN=aa3ea0d02edf40d612ca9065a055cbd09f56fa10
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:0b:19:c9:44:dd:3b:34:f5:3d:c6:81:6a:47:
c5:45:a6:cf:1f:b0:7a:e9:22:b7:16:19:d8:1f:87:
48:10:60:1d:02:d6:23:94:64:13:50:11:ab:88:9b:
d5:21:57:09:18:9f:b6:1b:74:73:66:cc:b1:db:25:
51:10:e4:23:78:c1:40:75:5c:71:52:7a:52:7c:8c:
21:6e:19:15:2f:41:c2:00:5a:3e:66:d1:16:7f:ac:
ca:43:22:1e:d5:e1:2c:8f:d4:39:c4:47:4e:a1:b6:
a6:87:2e:6f:ef:05:59:0c:32:d4:eb:0e:c5:55:19:
99:20:55:e2:11:95:e2:c4:0a:8a:ac:8c:cf:86:3f:
cb:1a:27:ae:09:64:b7:c0:33:59:4f:c8:97:08:7a:
a3:3b:32:5f:91:dc:9b:57:7c:f5:68:ad:bf:7d:dd:
3c:e0:f9:96:27:59:08:7e:9b:78:46:d1:79:cc:8b:
0f:51:09:21:33:11:f9:3e:b4:13:34:eb:c5:ab:da:
be:5b:9d:a8:8e:eb:9e:ae:c7:2a:a8:db:02:95:8e:
a8:c4:ba:4a:4e:f2:0e:75:9c:76:f8:f0:fd:fb:e6:
e4:42:5d:8c:95:09:a0:cd:66:90:b5:3a:34:d9:49:
c1:13:24:a2:db:a9:54:3f:e0:4c:6a:78:85:60:70:
b6:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AA:3E:A0:D0:2E:DF:40:D6:12:CA:90:65:A0:55:CB:D0:9F:56:FA:10
X509v3 Authority Key Identifier:
keyid:A3:A9:85:C3:9E:3E:91:1B:98:0E:93:A0:66:40:15:7E:9E:05:2D:23
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/o6mFw54-kRuYDpOgZkAVfp4FLSM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/0fdf9e-f53f-467d-bc8c-3a563c210a55/1/o6mFw54-kRuYDpOgZkAVfp4FLSM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/0fdf9e-f53f-467d-bc8c-3a563c210a55/1/o6mFw54-kRuYDpOgZkAVfp4FLSM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
51:fe:fc:1a:0a:18:c0:16:f8:e9:fc:30:c8:dc:0f:b6:16:18:
66:ae:e5:dc:f5:a9:9f:1d:38:db:36:d0:73:8e:fd:1a:18:9d:
76:44:21:12:04:ff:25:44:06:1d:9a:32:44:f2:fb:35:81:d9:
bf:b2:ff:7c:a9:63:48:7f:45:c7:1e:d5:6a:11:2e:b7:32:65:
55:c6:ed:16:82:02:dd:0c:87:82:a2:f1:03:6a:0e:9b:ac:75:
44:44:1f:8a:57:e6:61:1b:70:de:e4:33:04:d9:94:64:5b:40:
4b:11:15:8f:a6:a6:03:82:7f:b5:cf:df:cb:b9:91:68:08:00:
dc:ad:86:31:57:38:95:13:50:9e:fe:a2:da:a5:64:0f:82:37:
cc:d4:f8:0f:53:c1:b4:ab:be:72:49:87:a4:28:e7:40:d7:8f:
78:c0:3a:80:e8:93:2a:91:fc:90:de:29:eb:6c:03:b3:91:e2:
f0:23:54:04:fe:01:b2:bb:e0:b6:52:bf:be:a4:dd:0a:36:84:
d9:05:3b:14:99:97:c7:d5:d6:06:5c:9c:56:82:79:2a:4d:15:
8e:93:8e:ee:1d:e8:1b:c4:e4:08:c7:a7:2e:cc:45:dd:f3:4b:
b0:e2:32:33:08:29:34:68:41:0b:24:dc:81:9a:3a:9a:19:42:
1b:73:d0:3b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 00:38:42 2025 by rpki-client