Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/23/77f5b9-5b8c-4546-9a0d-b8c5f84d9687/1/o6znPa9SECzbhLf1aBKWlXoMmng.mft
File: o6znPa9SECzbhLf1aBKWlXoMmng.mft (raw, json)
Hash identifier: Mtv8FAd4PbsMgMtwuNEC8qIs7pxIKSv/fUKK3E7B5Ao=
Subject key identifier: 11:F3:3F:1E:43:16:1C:1C:4F:B3:11:08:03:2C:E1:13:83:38:1A:98
Authority key identifier: A3:AC:E7:3D:AF:52:10:2C:DB:84:B7:F5:68:12:96:95:7A:0C:9A:78
Certificate issuer: /CN=a3ace73daf52102cdb84b7f5681296957a0c9a78
Certificate serial: 0196C15D41027083ABB367CDCECDEC809ABD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/o6znPa9SECzbhLf1aBKWlXoMmng.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/23/77f5b9-5b8c-4546-9a0d-b8c5f84d9687/1/o6znPa9SECzbhLf1aBKWlXoMmng.mft
Manifest number: 0733
Signing time: Sun 11 May 2025 22:00:36 +0000
Manifest this update: Sun 11 May 2025 22:00:36 +0000
Manifest next update: Mon 12 May 2025 22:00:36 +0000
Files and hashes: 1: PLwRwWOtSjw-0Pg41XEpQjuSA-U.roa (hash: lGtM/oEk7N2nkUdCvZFwDApY3dPL/dm/f6h+7RuL+gU=)
2: o6znPa9SECzbhLf1aBKWlXoMmng.crl (hash: c1Ja225Nj4LL16GaDXA275hZoWONWKf8+FlUL3pda2s=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/23/77f5b9-5b8c-4546-9a0d-b8c5f84d9687/1/o6znPa9SECzbhLf1aBKWlXoMmng.crl
rsync://rpki.ripe.net/repository/DEFAULT/23/77f5b9-5b8c-4546-9a0d-b8c5f84d9687/1/o6znPa9SECzbhLf1aBKWlXoMmng.mft
rsync://rpki.ripe.net/repository/DEFAULT/o6znPa9SECzbhLf1aBKWlXoMmng.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 12 May 2025 22:00:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:c1:5d:41:02:70:83:ab:b3:67:cd:ce:cd:ec:80:9a:bd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a3ace73daf52102cdb84b7f5681296957a0c9a78
Validity
Not Before: May 11 22:00:36 2025 GMT
Not After : May 12 22:00:36 2025 GMT
Subject: CN=11f33f1e43161c1c4fb31108032ce11383381a98
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:f0:81:ae:e0:c0:b8:1f:69:2a:21:e0:8b:8e:
c3:e7:09:13:a0:a0:a9:5e:79:1b:0f:bb:c0:6c:26:
1b:18:4a:4f:e6:d5:db:80:32:d3:62:29:79:b3:2a:
97:47:80:81:3b:99:91:77:e6:09:64:ef:5a:f1:83:
2f:d4:39:12:9b:7f:30:cb:36:fc:ab:f4:94:5b:47:
bd:68:60:54:08:04:4e:a4:14:3f:db:b2:45:a1:2a:
61:2b:32:9f:42:9e:f3:de:e1:e3:0d:2d:78:5e:bd:
43:fc:cd:86:3a:d1:f7:1d:45:48:79:f4:c5:6f:2b:
60:2d:8e:69:a1:cd:ea:de:ef:41:17:c1:1d:6d:75:
ee:48:19:be:33:49:46:ab:65:fa:c9:85:81:9e:c8:
f7:9a:bd:ec:76:a2:7c:fd:59:43:c3:16:af:6e:5e:
26:23:8b:70:c1:95:3f:9b:01:42:20:9c:ba:66:3b:
8e:4f:f6:55:6b:72:4b:15:5e:b3:a9:7e:53:98:29:
42:8b:e6:5b:b3:8d:8f:11:96:f2:ec:03:6a:ad:07:
c4:47:f7:b8:84:cc:5f:7f:ef:7b:77:1b:44:e5:5a:
76:b6:f3:fc:7f:ad:06:c2:76:ca:24:01:2c:0b:62:
8f:5f:06:23:28:c7:80:58:79:a9:b1:94:8f:1d:51:
28:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
11:F3:3F:1E:43:16:1C:1C:4F:B3:11:08:03:2C:E1:13:83:38:1A:98
X509v3 Authority Key Identifier:
keyid:A3:AC:E7:3D:AF:52:10:2C:DB:84:B7:F5:68:12:96:95:7A:0C:9A:78
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/o6znPa9SECzbhLf1aBKWlXoMmng.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/23/77f5b9-5b8c-4546-9a0d-b8c5f84d9687/1/o6znPa9SECzbhLf1aBKWlXoMmng.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/23/77f5b9-5b8c-4546-9a0d-b8c5f84d9687/1/o6znPa9SECzbhLf1aBKWlXoMmng.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
48:0a:22:d2:34:85:7c:67:11:5c:b9:b0:82:f1:ef:58:54:c7:
db:68:41:7d:78:6f:82:e6:58:68:69:3b:89:41:6b:13:91:a6:
a2:a3:0a:ba:c4:30:8f:b0:cd:3c:1f:77:2a:03:f4:d3:8b:8d:
e3:ee:10:e7:9d:43:97:24:6a:ca:da:61:bb:7c:ca:c6:b9:ce:
d1:00:da:0a:2b:fd:71:f7:85:79:96:ad:d4:82:5e:f8:8d:39:
2e:3b:07:ba:d8:ea:16:44:92:32:71:db:79:47:e8:35:35:3b:
c3:2f:52:96:d2:17:0b:00:f1:ed:97:2c:44:8a:63:32:ec:c5:
2c:5c:48:71:fa:fc:8b:1a:d9:e1:0c:39:0c:37:fa:39:fb:e5:
2c:10:2f:80:39:85:ff:26:c3:71:b7:ea:41:cb:03:74:cf:91:
c5:d2:61:71:e7:30:3d:91:e6:4e:b2:b4:47:12:00:49:ef:a5:
3f:a9:37:56:e1:bc:18:8a:3f:a5:9a:31:fb:ae:5f:90:55:53:
41:91:e1:a4:13:cd:9b:4d:79:9a:5c:a7:00:f3:f7:c0:b3:68:
dc:60:be:ae:3e:b9:e3:84:23:7f:f6:4a:d1:72:99:35:31:d7:
b0:99:7b:0b:e2:c9:44:c3:59:6e:6b:da:5c:3a:81:3f:3c:26:
c4:44:60:39
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 12 05:17:18 2025 by rpki-client