Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/23/78fea9-efac-4983-ac2b-df45054dd934/1/O9VD0EZeovb-uCjxhQSwP0A6xmk.mft
File: O9VD0EZeovb-uCjxhQSwP0A6xmk.mft (raw, json)
Hash identifier: LNtTjWMb/smQjiaMoNTBf/5C4RG4fHV7F6tSpGQWvUQ=
Subject key identifier: 5B:97:27:3F:BF:73:4F:3C:54:64:82:4B:7E:7F:33:33:12:8E:D4:A3
Authority key identifier: 3B:D5:43:D0:46:5E:A2:F6:FE:B8:28:F1:85:04:B0:3F:40:3A:C6:69
Certificate issuer: /CN=3bd543d0465ea2f6feb828f18504b03f403ac669
Certificate serial: 0196D2BE9AF0DD2FD3F32FD8F105020992C8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/O9VD0EZeovb-uCjxhQSwP0A6xmk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/23/78fea9-efac-4983-ac2b-df45054dd934/1/O9VD0EZeovb-uCjxhQSwP0A6xmk.mft
Manifest number: 0F79
Signing time: Thu 15 May 2025 07:00:28 +0000
Manifest this update: Thu 15 May 2025 07:00:28 +0000
Manifest next update: Fri 16 May 2025 07:00:28 +0000
Files and hashes: 1: O9VD0EZeovb-uCjxhQSwP0A6xmk.crl (hash: FFTKF/7/CCvfdYvrLzF3YsNEpeZCJqqkrZKj/Xw73/0=)
2: x4WRkvTk4Qfvxow9VzZXx3rDXCk.roa (hash: RyOgBcFttRpc6DEmQeaGYO0tOWZlEQp1Uhl8vvwB5VE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/23/78fea9-efac-4983-ac2b-df45054dd934/1/O9VD0EZeovb-uCjxhQSwP0A6xmk.crl
rsync://rpki.ripe.net/repository/DEFAULT/23/78fea9-efac-4983-ac2b-df45054dd934/1/O9VD0EZeovb-uCjxhQSwP0A6xmk.mft
rsync://rpki.ripe.net/repository/DEFAULT/O9VD0EZeovb-uCjxhQSwP0A6xmk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 16 May 2025 07:00:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:d2:be:9a:f0:dd:2f:d3:f3:2f:d8:f1:05:02:09:92:c8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3bd543d0465ea2f6feb828f18504b03f403ac669
Validity
Not Before: May 15 07:00:28 2025 GMT
Not After : May 16 07:00:28 2025 GMT
Subject: CN=5b97273fbf734f3c5464824b7e7f3333128ed4a3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:4b:22:d4:5e:ce:7d:4d:fe:22:70:72:4d:24:
a8:dd:e5:71:cc:10:51:ad:b7:c5:15:84:33:9b:cb:
5a:8c:de:80:73:b4:57:c6:45:dd:54:16:e6:14:db:
8b:7a:61:5a:a8:41:21:d4:1c:5e:2b:8f:01:ae:48:
5b:05:e4:8c:ee:ae:cd:97:07:20:f8:1c:3b:4b:b7:
38:09:3e:10:2f:4b:d9:60:ba:24:13:74:b9:40:ef:
8d:1b:38:14:48:c5:dd:59:9a:75:31:9d:2f:88:56:
1c:5c:7b:2d:41:54:46:c8:dd:c3:35:d4:27:be:ca:
e1:59:d9:9b:ba:9c:bc:1a:b3:fc:f5:03:6b:9e:1a:
8c:99:c4:94:a4:50:64:cf:e8:55:11:d5:c8:11:9c:
69:a6:3d:42:f7:49:9c:a7:ef:e5:26:c8:e2:25:3d:
63:7a:d5:c5:0a:bd:e0:69:40:1b:dc:39:d6:6f:bf:
72:38:07:50:10:60:19:c8:dd:ab:ce:d9:50:54:27:
c1:60:ab:4e:87:96:52:a1:df:6a:f6:cb:fe:07:8b:
52:9b:58:00:d7:a8:bf:c4:9c:88:d7:0f:85:2d:42:
db:25:00:22:ce:fc:72:65:1f:a0:62:a5:3f:85:84:
d7:61:a8:9d:60:5d:8d:3b:cb:f4:81:ad:11:3a:49:
e1:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5B:97:27:3F:BF:73:4F:3C:54:64:82:4B:7E:7F:33:33:12:8E:D4:A3
X509v3 Authority Key Identifier:
keyid:3B:D5:43:D0:46:5E:A2:F6:FE:B8:28:F1:85:04:B0:3F:40:3A:C6:69
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/O9VD0EZeovb-uCjxhQSwP0A6xmk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/23/78fea9-efac-4983-ac2b-df45054dd934/1/O9VD0EZeovb-uCjxhQSwP0A6xmk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/23/78fea9-efac-4983-ac2b-df45054dd934/1/O9VD0EZeovb-uCjxhQSwP0A6xmk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
58:f7:04:96:0b:fc:d9:a0:3c:96:29:e5:0b:6e:f5:0e:b2:36:
bc:c2:d5:f5:ac:01:e5:de:07:1d:10:5b:3e:02:98:98:c2:58:
19:04:a0:0c:86:70:74:3b:f6:74:45:00:1f:ac:2d:95:34:53:
6b:84:aa:d3:ab:27:8b:19:03:b9:3a:5f:af:ef:76:79:f8:b8:
85:9b:4c:c0:5d:0a:26:32:2d:54:af:8b:0c:df:5e:02:99:ee:
99:eb:91:74:9d:f0:79:d0:1e:f8:42:b5:d3:6d:e0:12:3e:91:
50:ab:22:71:08:b9:7f:4a:ea:c8:62:13:63:11:ff:5a:e0:88:
cb:21:b3:ed:3d:97:0c:bb:b5:aa:81:45:b2:c3:0f:14:04:9a:
3a:61:31:22:c1:b6:67:ff:b1:1e:46:c2:f8:57:f5:44:47:11:
5e:2a:fe:83:5f:db:af:60:76:48:67:49:3b:49:e9:49:a2:9b:
0e:c5:11:c8:d3:69:02:35:ad:16:4d:d8:dc:97:af:64:a0:35:
fb:3b:b4:41:08:38:b9:52:c6:69:fb:71:a2:37:2e:17:91:8c:
36:58:40:82:ed:b6:36:a3:0d:97:b4:4a:85:67:8c:ae:06:29:
41:ae:ea:59:c3:f3:59:65:00:45:6e:77:4b:a3:40:89:e5:f1:
cc:17:dd:58
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 15 10:16:29 2025 by rpki-client