Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f5/cce012-2cb9-4be6-a1b6-d5167e6756b6/1/o_AJmtht2ENOUvjG_d7rLD7Wxso.mft
File: o_AJmtht2ENOUvjG_d7rLD7Wxso.mft (raw, json)
Hash identifier: RY3aVyGNJLSGOjmzufZXYlANS5hGMmPGI6RzQeCGHIA=
Subject key identifier: FD:8D:99:A1:30:C2:32:C3:69:2B:37:5E:D7:F5:16:64:AF:11:3B:59
Authority key identifier: A3:F0:09:9A:D8:6D:D8:43:4E:52:F8:C6:FD:DE:EB:2C:3E:D6:C6:CA
Certificate issuer: /CN=a3f0099ad86dd8434e52f8c6fddeeb2c3ed6c6ca
Certificate serial: 01967454734C99B0F426FC29826F101B0D80
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/o_AJmtht2ENOUvjG_d7rLD7Wxso.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f5/cce012-2cb9-4be6-a1b6-d5167e6756b6/1/o_AJmtht2ENOUvjG_d7rLD7Wxso.mft
Manifest number: 0A3B
Signing time: Sat 26 Apr 2025 23:00:13 +0000
Manifest this update: Sat 26 Apr 2025 23:00:13 +0000
Manifest next update: Sun 27 Apr 2025 23:00:13 +0000
Files and hashes: 1: o_AJmtht2ENOUvjG_d7rLD7Wxso.crl (hash: WCK2/ZIwEzWZFJbR/vO9U9asTPt0WxxSNZQCMr+qdlM=)
2: rwuE2HeUale_KAQK1oOeIO9teNQ.roa (hash: 1njSxFnxGZ0NzAHsH1imJbJ+hQrmgk75hjXn6T/fBr0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f5/cce012-2cb9-4be6-a1b6-d5167e6756b6/1/o_AJmtht2ENOUvjG_d7rLD7Wxso.crl
rsync://rpki.ripe.net/repository/DEFAULT/f5/cce012-2cb9-4be6-a1b6-d5167e6756b6/1/o_AJmtht2ENOUvjG_d7rLD7Wxso.mft
rsync://rpki.ripe.net/repository/DEFAULT/o_AJmtht2ENOUvjG_d7rLD7Wxso.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Apr 2025 23:00:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:74:54:73:4c:99:b0:f4:26:fc:29:82:6f:10:1b:0d:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a3f0099ad86dd8434e52f8c6fddeeb2c3ed6c6ca
Validity
Not Before: Apr 26 23:00:13 2025 GMT
Not After : Apr 27 23:00:13 2025 GMT
Subject: CN=fd8d99a130c232c3692b375ed7f51664af113b59
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:7c:0d:35:e8:b3:7e:a6:57:dc:9f:4e:de:2b:
01:89:3b:73:83:14:fd:4f:6b:31:34:d5:48:eb:58:
1f:c8:c6:07:dd:e8:30:0d:9d:e3:c6:80:82:df:52:
2c:e9:e4:21:fa:3b:c3:57:88:92:d1:1a:be:ee:4b:
58:77:3c:43:cc:31:c4:89:72:9c:77:75:8a:dd:bf:
46:18:24:ab:9d:71:72:44:1f:0d:78:b1:2a:1d:77:
c9:4d:a0:d8:39:c2:8d:48:4d:5e:74:61:5e:80:1b:
4a:54:c0:8b:d8:5a:88:20:d1:92:1a:17:3b:58:7b:
f3:4c:c6:ed:5f:62:d6:88:17:03:13:49:8d:88:68:
78:87:85:f3:ce:17:53:be:aa:34:e5:cb:a2:54:c1:
13:ca:00:53:4b:22:35:bf:27:44:24:d5:76:82:f9:
f3:0e:50:06:4d:59:fb:59:0d:e7:27:f4:59:34:6a:
c0:2c:92:81:c9:8f:c3:3c:44:46:99:2f:0c:f8:76:
50:dc:38:ce:fb:6c:5a:b6:a0:c9:09:10:32:c9:8d:
8f:59:28:31:7c:79:fa:8e:2e:5e:d3:f8:17:e4:7c:
2f:85:48:1b:1c:d8:64:fe:1c:a5:08:f8:6b:ea:7d:
50:1e:c2:41:f7:dd:d4:7b:ba:66:d9:b9:96:90:5a:
e8:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FD:8D:99:A1:30:C2:32:C3:69:2B:37:5E:D7:F5:16:64:AF:11:3B:59
X509v3 Authority Key Identifier:
keyid:A3:F0:09:9A:D8:6D:D8:43:4E:52:F8:C6:FD:DE:EB:2C:3E:D6:C6:CA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/o_AJmtht2ENOUvjG_d7rLD7Wxso.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/cce012-2cb9-4be6-a1b6-d5167e6756b6/1/o_AJmtht2ENOUvjG_d7rLD7Wxso.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/cce012-2cb9-4be6-a1b6-d5167e6756b6/1/o_AJmtht2ENOUvjG_d7rLD7Wxso.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2a:ac:dd:d3:9a:81:6e:13:e9:2d:8f:81:b5:12:b7:88:05:99:
5c:22:e3:b0:a4:09:d1:d5:05:4d:33:6d:af:a7:b7:21:39:84:
02:2b:0d:ac:f4:bb:00:f4:2e:73:12:8b:68:50:91:ad:71:14:
65:38:d1:95:49:ea:c8:44:49:55:4c:d1:22:5d:cb:8b:e8:10:
2a:5e:f5:ba:80:40:50:cc:c6:45:cb:09:67:25:b4:48:de:07:
ba:3f:0c:90:87:5d:fb:f3:90:02:41:32:55:7e:db:c9:a6:3e:
4c:d8:fd:49:51:48:8e:43:53:58:df:eb:3d:8f:b4:20:1a:7f:
98:d6:d8:cc:47:e7:4f:4a:57:1c:19:ee:69:9c:24:83:b4:b7:
58:77:e0:ce:29:c0:f0:9d:fa:a9:b5:e4:2d:eb:c9:07:b8:e6:
78:9a:09:24:3e:36:f5:f0:41:ec:67:dc:45:81:1d:27:81:f1:
7c:ff:7e:ff:d8:c9:bb:43:23:c1:c1:55:74:96:cb:82:66:ef:
d4:a7:e7:1e:36:b0:50:31:a5:5e:64:cc:e5:35:bf:1c:0e:67:
fb:2a:a6:6f:16:00:5e:dc:18:08:36:30:e6:44:13:3b:28:ac:
2d:d2:ca:5e:f8:b4:aa:ea:9b:75:52:3b:06:b6:56:95:8e:f5:
26:ff:b0:7b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 07:06:44 2025 by rpki-client