Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/22/b2ace7-48db-4f7d-917f-306189d5c049/1/oso33tG3DIG3SkMPm016zGKAXtg.mft
File: oso33tG3DIG3SkMPm016zGKAXtg.mft (raw, json)
Hash identifier: rigHeucZ8420XVSYdbat6TqhDNAuls22apxtsqeV70k=
Subject key identifier: 47:50:64:A5:09:2F:D6:7F:2A:2F:40:54:0C:3D:05:F9:6C:0E:44:E5
Authority key identifier: A2:CA:37:DE:D1:B7:0C:81:B7:4A:43:0F:9B:4D:7A:CC:62:80:5E:D8
Certificate issuer: /CN=a2ca37ded1b70c81b74a430f9b4d7acc62805ed8
Certificate serial: 0196B8238C3BE17E5CEF983B79B1B0794E3D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/oso33tG3DIG3SkMPm016zGKAXtg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/22/b2ace7-48db-4f7d-917f-306189d5c049/1/oso33tG3DIG3SkMPm016zGKAXtg.mft
Manifest number: 036A
Signing time: Sat 10 May 2025 03:00:59 +0000
Manifest this update: Sat 10 May 2025 03:00:59 +0000
Manifest next update: Sun 11 May 2025 03:00:59 +0000
Files and hashes: 1: Uua6yM2rrGnji--Kv2Pn_xDUCUQ.roa (hash: kXckJ9Wq2st2kAYy1iDEHvhVUEJf4YmXaasq7C+0rWM=)
2: WpAem0y3mJRbP65lGL1BbYc7ewY.roa (hash: 9FtB6GE1KbOq2c/Ao/RtTSsyLPIeyA8GKr7sC11YD4c=)
3: ktIBl0vO2PiY2N18cJ-d_fSxe4Q.roa (hash: PaoiyedZ99+u6zVUTqQy6HmR360bMO4FcWgPO5UfmIs=)
4: oso33tG3DIG3SkMPm016zGKAXtg.crl (hash: smVOgorhuTPxHPeONX72pjyvYs9PZFBrYS2eZO83Fe0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/22/b2ace7-48db-4f7d-917f-306189d5c049/1/oso33tG3DIG3SkMPm016zGKAXtg.crl
rsync://rpki.ripe.net/repository/DEFAULT/22/b2ace7-48db-4f7d-917f-306189d5c049/1/oso33tG3DIG3SkMPm016zGKAXtg.mft
rsync://rpki.ripe.net/repository/DEFAULT/oso33tG3DIG3SkMPm016zGKAXtg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 11 May 2025 03:00:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:b8:23:8c:3b:e1:7e:5c:ef:98:3b:79:b1:b0:79:4e:3d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a2ca37ded1b70c81b74a430f9b4d7acc62805ed8
Validity
Not Before: May 10 03:00:59 2025 GMT
Not After : May 11 03:00:59 2025 GMT
Subject: CN=475064a5092fd67f2a2f40540c3d05f96c0e44e5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:86:41:87:c3:05:64:5f:ef:d6:c5:cd:1b:64:
9e:7d:47:9c:a7:c4:25:4a:b0:25:d2:6a:69:0b:37:
0c:eb:b9:c2:dc:fd:42:14:93:5c:e7:a7:22:d8:12:
4e:0f:1d:d9:8f:a3:6b:5b:9f:9a:ad:12:76:83:e3:
ab:ea:d3:d6:6c:22:b8:5f:c9:77:a8:95:54:e4:74:
d0:01:a8:a9:e3:8a:4d:68:44:77:43:d0:5a:f7:27:
39:1b:4a:9f:15:0a:10:21:43:9e:96:59:cb:3a:9c:
6a:72:52:16:ee:03:b1:8e:c5:16:f2:2f:7a:9b:47:
ba:f1:21:2d:f2:c9:37:1e:9d:76:54:c9:d9:b1:cd:
9f:0a:1e:bc:c1:8c:a9:45:3b:46:16:f5:b8:f9:1f:
64:97:74:d2:12:fe:48:1b:e6:f4:32:04:ec:27:77:
de:82:d5:32:a4:8d:3b:d3:f6:d1:b0:0a:24:2a:c6:
1e:a0:e8:a9:90:78:1b:0d:59:ff:7a:16:05:ea:fb:
b1:11:56:a6:d9:61:e3:9b:36:fa:3e:fa:16:55:82:
7a:1c:78:a8:35:41:7c:49:1f:30:e6:cf:57:62:f0:
81:27:e7:e9:bf:66:ec:f1:d6:68:93:31:91:90:8b:
3a:5c:1a:0a:b1:4b:be:c6:3c:ee:e1:e8:fb:69:09:
40:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
47:50:64:A5:09:2F:D6:7F:2A:2F:40:54:0C:3D:05:F9:6C:0E:44:E5
X509v3 Authority Key Identifier:
keyid:A2:CA:37:DE:D1:B7:0C:81:B7:4A:43:0F:9B:4D:7A:CC:62:80:5E:D8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/oso33tG3DIG3SkMPm016zGKAXtg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/22/b2ace7-48db-4f7d-917f-306189d5c049/1/oso33tG3DIG3SkMPm016zGKAXtg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/22/b2ace7-48db-4f7d-917f-306189d5c049/1/oso33tG3DIG3SkMPm016zGKAXtg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
10:35:74:0a:26:02:08:69:be:fa:e5:25:64:6d:a5:c9:01:d1:
68:52:81:f2:11:81:ef:74:9f:ce:da:ea:98:b9:a7:87:12:70:
c0:1c:73:7d:02:b1:07:80:01:08:93:6b:27:61:a9:72:b2:39:
0d:b3:90:73:ba:39:9e:62:12:a1:7a:30:cf:24:42:4a:c8:1a:
d3:2c:00:cc:8d:44:ec:3c:6a:41:7c:93:81:3a:14:b0:f2:a8:
bc:d6:7f:3d:bf:ca:ae:ef:6a:7c:e9:0a:07:3f:5b:cd:6c:2e:
a4:02:0f:b5:cc:f7:a0:65:a9:5d:0d:c6:12:7a:07:08:9c:6c:
06:b9:d9:84:89:25:3f:eb:9b:1e:29:91:3d:e2:21:73:d8:18:
3f:3f:9d:2f:c0:dd:91:aa:43:d1:0f:c4:7b:be:19:5a:86:c6:
fc:d7:ad:bd:7b:fc:ce:2b:aa:a8:bb:2c:28:d2:9a:e2:1e:ec:
a9:bc:82:fe:69:3f:c9:6e:a7:c8:2b:6e:e6:bb:e4:4f:03:4f:
ab:7f:be:76:2a:41:57:c8:fa:ea:dc:c0:32:9b:b5:a4:8e:e1:
a8:5c:09:b6:a3:12:c4:f3:7a:ef:76:5d:82:f0:90:bd:35:de:
66:d2:38:18:fa:e9:e1:bf:30:16:cf:f4:3a:ff:44:c6:6f:89:
68:7b:ca:51
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 10 08:27:22 2025 by rpki-client