Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f6/b1a4e1-877b-4380-bfbf-b038db898b7e/1/OCnRMb5SgQ5Hycu_g6P_vU98vb8.mft
File: OCnRMb5SgQ5Hycu_g6P_vU98vb8.mft (raw, json)
Hash identifier: Ny8A3CQwzwMybRGizJHdxr9LfZmDLx7pqCOu01iMxwk=
Subject key identifier: 32:1B:4C:52:8C:01:8E:51:B0:59:1E:A8:E6:59:13:58:F6:27:3E:C7
Authority key identifier: 38:29:D1:31:BE:52:81:0E:47:C9:CB:BF:83:A3:FF:BD:4F:7C:BD:BF
Certificate issuer: /CN=3829d131be52810e47c9cbbf83a3ffbd4f7cbdbf
Certificate serial: 019682B4F1B0003BBBA46D29874E1E5FF6C0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OCnRMb5SgQ5Hycu_g6P_vU98vb8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f6/b1a4e1-877b-4380-bfbf-b038db898b7e/1/OCnRMb5SgQ5Hycu_g6P_vU98vb8.mft
Manifest number: 0C09
Signing time: Tue 29 Apr 2025 18:00:18 +0000
Manifest this update: Tue 29 Apr 2025 18:00:18 +0000
Manifest next update: Wed 30 Apr 2025 18:00:18 +0000
Files and hashes: 1: OCnRMb5SgQ5Hycu_g6P_vU98vb8.crl (hash: dPuPFM7Xa/oiFYvT3ctDZW8fZutPeotJz6RGQWqv98U=)
2: dxC4OOVdD7y8lzmmwGYNpdpf-D0.roa (hash: 1F32hSGI4pbAFMDzlkPoS+O8tvJxdYgPLvmfvhN+IXU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f6/b1a4e1-877b-4380-bfbf-b038db898b7e/1/OCnRMb5SgQ5Hycu_g6P_vU98vb8.crl
rsync://rpki.ripe.net/repository/DEFAULT/f6/b1a4e1-877b-4380-bfbf-b038db898b7e/1/OCnRMb5SgQ5Hycu_g6P_vU98vb8.mft
rsync://rpki.ripe.net/repository/DEFAULT/OCnRMb5SgQ5Hycu_g6P_vU98vb8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 30 Apr 2025 15:02:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:82:b4:f1:b0:00:3b:bb:a4:6d:29:87:4e:1e:5f:f6:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3829d131be52810e47c9cbbf83a3ffbd4f7cbdbf
Validity
Not Before: Apr 29 18:00:18 2025 GMT
Not After : Apr 30 18:00:18 2025 GMT
Subject: CN=321b4c528c018e51b0591ea8e6591358f6273ec7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:90:c7:5b:9c:42:43:c5:a0:59:7a:42:7f:b4:1b:
60:0c:8b:ca:89:ac:35:3c:e9:01:88:00:26:5c:72:
b2:83:27:8d:aa:97:01:d8:88:92:80:08:32:c0:45:
6a:f4:68:76:fb:48:99:e8:73:d3:67:36:55:33:67:
a2:cd:f4:c3:ea:c0:7a:b2:10:5e:e8:9a:a4:51:68:
0c:d8:fc:19:12:7b:61:3b:39:6a:0a:6a:3b:35:01:
72:33:bf:65:1c:d3:78:15:16:db:5c:8f:db:e6:44:
9c:87:a3:11:a8:e2:8a:09:0e:9d:af:e0:18:6b:c5:
94:e8:e6:29:9f:e8:b0:5f:b7:ee:55:67:7d:bf:1f:
25:4a:1c:2e:68:30:c9:4b:77:39:92:56:00:22:8f:
10:ec:c7:b9:2c:77:86:8e:53:aa:c6:36:27:d0:77:
a6:68:28:df:75:65:54:b5:63:c4:95:f1:54:65:df:
11:6b:10:91:51:04:a3:77:58:66:61:18:54:c0:1a:
42:ed:2b:17:d7:d7:48:57:b2:5c:7b:de:e9:c2:11:
c7:1a:3d:84:23:1d:fd:3b:48:28:c7:fc:b0:35:54:
c1:4f:2d:bb:c4:2d:37:4b:b9:e2:0a:ee:d1:84:9a:
9a:d9:07:7a:79:3f:f6:f5:f3:46:c2:06:98:ac:26:
51:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
32:1B:4C:52:8C:01:8E:51:B0:59:1E:A8:E6:59:13:58:F6:27:3E:C7
X509v3 Authority Key Identifier:
keyid:38:29:D1:31:BE:52:81:0E:47:C9:CB:BF:83:A3:FF:BD:4F:7C:BD:BF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OCnRMb5SgQ5Hycu_g6P_vU98vb8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/b1a4e1-877b-4380-bfbf-b038db898b7e/1/OCnRMb5SgQ5Hycu_g6P_vU98vb8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/b1a4e1-877b-4380-bfbf-b038db898b7e/1/OCnRMb5SgQ5Hycu_g6P_vU98vb8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
32:38:81:ed:6b:56:62:c3:e8:df:6b:53:ea:aa:6e:36:38:82:
16:93:e3:cd:00:2c:1a:b1:cf:32:79:57:ef:2e:3a:60:e9:f7:
5d:70:c7:d9:4b:1e:71:c0:7f:c0:30:17:5a:4a:6e:77:86:b8:
24:24:71:7c:38:1c:07:c3:77:ed:8b:79:5f:af:14:79:40:bd:
ba:6a:6c:ff:8a:a5:49:f0:71:90:6a:19:4e:60:2a:36:9b:f1:
ba:53:7c:41:92:3a:7d:e5:36:83:50:6e:b4:11:bc:7d:83:2f:
88:3f:06:68:7f:5e:29:86:50:97:cb:7e:de:c3:ac:23:ff:a5:
38:ae:42:2a:bb:41:cd:e3:05:ad:84:76:32:5d:8d:d5:83:de:
b3:76:d1:b6:0c:b4:b9:a4:70:f7:2e:5b:87:47:76:da:1d:d3:
7d:c7:a2:d0:64:ae:24:45:e3:a7:cc:bf:c7:d0:d0:8d:a1:7e:
86:76:f3:19:cd:83:d9:d7:27:d0:19:06:99:0a:7b:bb:7b:0e:
c7:b8:d6:28:15:79:90:1c:79:d8:2c:d1:4d:36:19:88:48:6a:
09:6b:89:73:87:5f:06:64:48:25:7b:50:f3:1c:3f:24:33:0f:
6b:a3:42:18:bb:0b:05:26:29:f8:13:a3:46:7f:64:30:2d:3c:
2b:4c:39:b6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 29 21:05:34 2025 by rpki-client