Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/09/0f355a-3a0a-46ec-b07f-866607af2fa5/1/o3gRjbBeTJPnb6HxyVZ5xwW-sgg.mft
File: o3gRjbBeTJPnb6HxyVZ5xwW-sgg.mft (raw, json)
Hash identifier: pi9fzEVwhj8/eHH0+ypyS05m/QCfJkZd+R5ZoWL6PMQ=
Subject key identifier: 25:C4:AB:DB:E6:84:6E:32:32:3D:B5:74:ED:98:9D:1E:33:35:0B:3C
Authority key identifier: A3:78:11:8D:B0:5E:4C:93:E7:6F:A1:F1:C9:56:79:C7:05:BE:B2:08
Certificate issuer: /CN=a378118db05e4c93e76fa1f1c95679c705beb208
Certificate serial: 0196C615F018D375DF307E8D179B5699A0DE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/o3gRjbBeTJPnb6HxyVZ5xwW-sgg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/09/0f355a-3a0a-46ec-b07f-866607af2fa5/1/o3gRjbBeTJPnb6HxyVZ5xwW-sgg.mft
Manifest number: 153B
Signing time: Mon 12 May 2025 20:00:48 +0000
Manifest this update: Mon 12 May 2025 20:00:48 +0000
Manifest next update: Tue 13 May 2025 20:00:48 +0000
Files and hashes: 1: 44FBBoaP1hY4HlkyJxoeqw82Ez0.roa (hash: Ij/VEJNQIjQvvNrHY8dRfRHlSxSYc7lDRay7etVRtiI=)
2: Vwp4sUHwufYyD-bPptLzOvd6WdQ.roa (hash: YWIoCXXcHFga0/3pa1NcRYE9BSy/d2UDiqjf+NsI2BE=)
3: o3gRjbBeTJPnb6HxyVZ5xwW-sgg.crl (hash: zoXJjLiOlRaILUzySkywoWg3Xtw1S8jI2PcYpSI6kPw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/09/0f355a-3a0a-46ec-b07f-866607af2fa5/1/o3gRjbBeTJPnb6HxyVZ5xwW-sgg.crl
rsync://rpki.ripe.net/repository/DEFAULT/09/0f355a-3a0a-46ec-b07f-866607af2fa5/1/o3gRjbBeTJPnb6HxyVZ5xwW-sgg.mft
rsync://rpki.ripe.net/repository/DEFAULT/o3gRjbBeTJPnb6HxyVZ5xwW-sgg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 13 May 2025 14:31:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:c6:15:f0:18:d3:75:df:30:7e:8d:17:9b:56:99:a0:de
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a378118db05e4c93e76fa1f1c95679c705beb208
Validity
Not Before: May 12 20:00:48 2025 GMT
Not After : May 13 20:00:48 2025 GMT
Subject: CN=25c4abdbe6846e32323db574ed989d1e33350b3c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dd:d0:45:da:8f:61:92:64:67:7f:75:da:fe:ec:
a1:ef:c4:c8:88:ec:22:e3:fb:ee:c8:da:2e:8b:ea:
5c:09:fb:4f:6d:b9:dd:31:21:30:c3:b8:27:6c:41:
16:df:8f:8a:a4:b6:52:da:a9:84:e6:37:40:98:b7:
b2:11:73:66:da:27:5e:26:15:f0:34:e5:12:a4:f2:
b8:a6:46:6a:81:64:17:70:62:7d:d6:ef:58:11:bc:
aa:e0:42:be:07:43:90:50:4d:04:82:9c:f9:8a:fd:
af:48:e3:f1:27:68:42:a1:ad:36:2f:a2:5b:1a:23:
a7:90:a7:e8:87:f4:fe:76:e9:86:06:61:fe:9e:a9:
d9:37:72:58:fb:56:d7:fb:d8:08:e4:f6:73:6e:1c:
95:35:13:aa:ab:42:87:bd:76:57:d3:87:1c:10:77:
3b:63:3b:83:6e:f2:7a:df:47:23:87:ae:32:9b:1f:
45:c8:9e:4a:aa:50:fc:19:07:57:f7:2b:b2:c7:1b:
c4:e7:94:ec:b7:11:33:e0:5a:1a:3b:cf:e5:74:76:
2d:60:20:9c:fd:82:ba:d5:84:8e:96:2c:23:f5:4a:
88:72:3b:f4:4b:99:4b:c8:c0:31:a0:42:78:29:29:
79:de:77:9a:67:78:15:9b:43:14:7a:9d:98:9b:fe:
66:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
25:C4:AB:DB:E6:84:6E:32:32:3D:B5:74:ED:98:9D:1E:33:35:0B:3C
X509v3 Authority Key Identifier:
keyid:A3:78:11:8D:B0:5E:4C:93:E7:6F:A1:F1:C9:56:79:C7:05:BE:B2:08
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/o3gRjbBeTJPnb6HxyVZ5xwW-sgg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/09/0f355a-3a0a-46ec-b07f-866607af2fa5/1/o3gRjbBeTJPnb6HxyVZ5xwW-sgg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/09/0f355a-3a0a-46ec-b07f-866607af2fa5/1/o3gRjbBeTJPnb6HxyVZ5xwW-sgg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
98:99:56:b1:72:bf:60:c1:c7:0b:20:31:ce:8b:86:e9:bd:a3:
7e:52:4f:f3:73:0a:c0:4f:f0:0c:e2:db:ac:42:4e:61:05:97:
dc:65:cd:59:45:10:bc:b1:a8:0e:14:d5:03:a9:a1:72:e7:ad:
32:f7:f0:ba:cf:cc:e8:eb:57:16:ba:c2:13:bd:8b:2d:60:b3:
09:20:91:83:1e:db:8e:99:fd:7b:29:e9:7d:8b:a0:72:0e:55:
c4:ce:86:84:b5:36:eb:4f:3a:a9:85:fb:fc:bd:7b:ba:14:e7:
83:fe:48:95:33:98:8d:6e:1f:57:41:c5:6c:ab:c3:1f:56:15:
b1:e5:93:94:b6:d9:48:f8:da:56:67:e6:5b:f0:26:f2:0d:7d:
c0:4a:e3:49:af:de:ad:04:43:49:84:c1:91:0c:ec:db:bd:6a:
4a:23:46:21:04:d6:df:74:fb:8b:5c:c0:53:33:18:60:cd:47:
d9:19:99:0e:3f:35:e8:04:1e:d6:34:5f:e1:66:0c:9c:76:4c:
5a:93:3f:91:12:57:3f:17:e3:8c:7d:5c:1c:80:ee:4e:d0:94:
0a:2f:b6:dd:66:d3:f5:13:ad:f9:18:dc:b2:04:37:76:fd:2d:
dc:8a:46:71:6d:73:dd:88:70:11:27:4c:fe:3f:97:3b:71:33:
1f:e0:5d:f9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 12 23:17:36 2025 by rpki-client