Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/20/d46e2b-de4d-4b6f-8dd7-69629c501943/1/0OMaFJwuaumsxynPesFwbePec5s.mft
File: 0OMaFJwuaumsxynPesFwbePec5s.mft (raw, json)
Hash identifier: 6ylF+QzcinIz803eeteWm8b8Tj6pMPHAxJcrZNKB9nc=
Subject key identifier: 0F:71:07:E9:84:0E:48:1C:9C:83:81:BD:ED:78:20:08:E6:32:40:2E
Authority key identifier: D0:E3:1A:14:9C:2E:6A:E9:AC:C7:29:CF:7A:C1:70:6D:E3:DE:73:9B
Certificate issuer: /CN=d0e31a149c2e6ae9acc729cf7ac1706de3de739b
Certificate serial: 0196C08186111A868134ED1F90C6D54E2873
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0OMaFJwuaumsxynPesFwbePec5s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/20/d46e2b-de4d-4b6f-8dd7-69629c501943/1/0OMaFJwuaumsxynPesFwbePec5s.mft
Manifest number: 0C9E
Signing time: Sun 11 May 2025 18:00:35 +0000
Manifest this update: Sun 11 May 2025 18:00:35 +0000
Manifest next update: Mon 12 May 2025 18:00:35 +0000
Files and hashes: 1: 0OMaFJwuaumsxynPesFwbePec5s.crl (hash: NlGNgLFRqCkqJukg9SGsObyXhWB0J+r5rgEcJU5m6as=)
2: lIbtDRQwlkkBZMdeQgJ8xj0YUi8.roa (hash: qmtm5lTuGIY7QCk9HhBMZ0EdWah1WvmsmlTlfIMZwP4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/20/d46e2b-de4d-4b6f-8dd7-69629c501943/1/0OMaFJwuaumsxynPesFwbePec5s.crl
rsync://rpki.ripe.net/repository/DEFAULT/20/d46e2b-de4d-4b6f-8dd7-69629c501943/1/0OMaFJwuaumsxynPesFwbePec5s.mft
rsync://rpki.ripe.net/repository/DEFAULT/0OMaFJwuaumsxynPesFwbePec5s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 12 May 2025 16:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:c0:81:86:11:1a:86:81:34:ed:1f:90:c6:d5:4e:28:73
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d0e31a149c2e6ae9acc729cf7ac1706de3de739b
Validity
Not Before: May 11 18:00:35 2025 GMT
Not After : May 12 18:00:35 2025 GMT
Subject: CN=0f7107e9840e481c9c8381bded782008e632402e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:b2:ad:4f:a3:b4:8a:91:06:0e:d1:dc:1e:9d:
a8:3c:6e:e5:24:43:d6:00:0d:bf:95:21:01:4a:8c:
ce:50:8b:6d:05:9c:aa:49:d5:8f:be:f1:b4:47:50:
c8:98:28:c2:9d:e9:ca:5a:a0:d8:02:da:44:ce:b8:
f4:9e:d0:e2:ff:bf:33:ff:03:37:66:c5:dc:70:12:
71:79:3e:e6:17:d1:f9:01:bf:12:e2:ea:01:38:d6:
2a:9c:e0:a7:1f:7c:7b:e0:1b:0c:92:38:8c:89:89:
c3:b3:b5:fc:5e:58:df:82:8a:c4:3f:37:9d:2f:44:
62:1e:ad:6f:9e:be:b6:7c:08:2c:1f:fd:7b:17:56:
f9:f3:5c:95:77:e6:9c:e4:72:41:3d:d9:9a:71:f6:
d3:d8:f7:ba:ad:d1:d3:45:a4:1a:16:ef:53:77:e1:
57:ce:14:1e:b0:ac:0c:66:f7:b6:00:5b:f0:aa:07:
7b:c8:16:ca:4a:ea:87:56:c8:70:51:0d:41:a7:3f:
49:63:dd:6d:8d:53:81:74:8f:c9:22:f9:9f:c1:2d:
7c:20:1c:08:97:73:02:f1:78:94:9a:ce:a6:7a:26:
99:c0:27:43:7d:cb:fb:13:0e:e8:bd:b9:0e:29:22:
e1:51:bb:f4:ae:05:85:fc:87:58:10:97:4c:32:fd:
d1:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0F:71:07:E9:84:0E:48:1C:9C:83:81:BD:ED:78:20:08:E6:32:40:2E
X509v3 Authority Key Identifier:
keyid:D0:E3:1A:14:9C:2E:6A:E9:AC:C7:29:CF:7A:C1:70:6D:E3:DE:73:9B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0OMaFJwuaumsxynPesFwbePec5s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/20/d46e2b-de4d-4b6f-8dd7-69629c501943/1/0OMaFJwuaumsxynPesFwbePec5s.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/20/d46e2b-de4d-4b6f-8dd7-69629c501943/1/0OMaFJwuaumsxynPesFwbePec5s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
47:a6:cd:f5:a4:4d:6b:ce:b4:a1:96:2f:94:06:c8:d4:f0:fc:
54:32:71:7b:b1:75:d2:cb:c9:be:15:4a:86:0c:0f:ae:72:37:
77:a0:7b:7c:1d:f9:1d:1b:91:74:51:76:ca:1a:92:26:64:59:
5b:ad:c9:ea:09:90:97:42:e6:91:6d:46:72:41:60:cf:7f:29:
56:bc:f3:34:c8:08:21:d9:d1:77:a6:2d:6f:c4:fa:21:ac:6a:
2f:1f:88:c6:f0:2f:76:ee:df:81:2f:25:47:ff:00:e8:2c:d3:
a3:18:c2:55:6f:76:86:be:7d:7d:a4:a1:90:d3:10:90:3b:78:
f0:22:fd:9a:20:e3:32:10:c5:ac:89:aa:02:11:25:a9:b7:9c:
05:c9:5d:da:4b:95:48:71:fb:72:28:59:5b:5f:4f:21:33:98:
9c:c9:1f:97:de:66:58:67:58:81:4f:20:57:d9:6f:b2:24:bc:
fe:24:06:6f:c9:1d:1e:9d:f1:92:56:58:03:1d:7a:4a:b6:8d:
35:31:ae:32:5c:80:90:4b:68:26:48:1f:1c:76:02:a1:5d:b8:
8a:e3:47:10:8f:cc:15:d3:a7:cd:29:6e:e3:45:fb:c0:e4:2a:
e5:8c:df:08:84:4e:24:ef:07:5d:0d:ce:fd:22:c1:c4:d2:f7:
51:21:50:fd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 12 02:30:50 2025 by rpki-client