Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3a/2dfa97-8c53-4e74-9a2c-484a06a61717/1/O-wSwhEIE08AwDUxB9YMza6--y4.mft
File: O-wSwhEIE08AwDUxB9YMza6--y4.mft (raw, json)
Hash identifier: zo0Mfj2jAkeLRR1EsHwUWIGZ3jluFuLLontX5rl+wmk=
Subject key identifier: B0:45:53:D9:BA:8E:93:EC:C5:EA:2B:58:AA:D8:FC:F0:3E:36:6F:3F
Authority key identifier: 3B:EC:12:C2:11:08:13:4F:00:C0:35:31:07:D6:0C:CD:AE:BE:FB:2E
Certificate issuer: /CN=3bec12c21108134f00c0353107d60ccdaebefb2e
Certificate serial: 0196BA48D55C2363C8D3F084244442A50D4A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/O-wSwhEIE08AwDUxB9YMza6--y4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3a/2dfa97-8c53-4e74-9a2c-484a06a61717/1/O-wSwhEIE08AwDUxB9YMza6--y4.mft
Manifest number: 0747
Signing time: Sat 10 May 2025 13:00:57 +0000
Manifest this update: Sat 10 May 2025 13:00:57 +0000
Manifest next update: Sun 11 May 2025 13:00:57 +0000
Files and hashes: 1: O-wSwhEIE08AwDUxB9YMza6--y4.crl (hash: 9Rife4GRN/Yh5/7EPAidNCR42J0x35D1v/ZkbDHqYf4=)
2: u2WMlvCqvR8C4fxIzSZBue7OPx8.roa (hash: qmjTqeANx+dQ4nPXTJuIRLRK9MoQ6Usvr9tkzeOywu8=)
3: zTvzZc3tlOwLBnnj-NPbv4PhboA.roa (hash: msHMJXILJsy2yJM+hVyJRqp2m3iGv1So8lJvoritOiE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3a/2dfa97-8c53-4e74-9a2c-484a06a61717/1/O-wSwhEIE08AwDUxB9YMza6--y4.crl
rsync://rpki.ripe.net/repository/DEFAULT/3a/2dfa97-8c53-4e74-9a2c-484a06a61717/1/O-wSwhEIE08AwDUxB9YMza6--y4.mft
rsync://rpki.ripe.net/repository/DEFAULT/O-wSwhEIE08AwDUxB9YMza6--y4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 11 May 2025 13:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:ba:48:d5:5c:23:63:c8:d3:f0:84:24:44:42:a5:0d:4a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3bec12c21108134f00c0353107d60ccdaebefb2e
Validity
Not Before: May 10 13:00:57 2025 GMT
Not After : May 11 13:00:57 2025 GMT
Subject: CN=b04553d9ba8e93ecc5ea2b58aad8fcf03e366f3f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:7e:51:21:aa:5b:f5:74:ba:91:98:e0:4a:c5:
77:36:fc:27:06:f5:e0:90:e5:5c:60:9a:59:77:b2:
9b:a9:a4:b2:d8:2e:af:04:cf:d6:5b:59:2e:d0:64:
4d:e7:ce:92:d0:cd:c4:ab:df:4e:93:d4:e9:a7:21:
73:34:5f:76:5f:67:8f:0c:99:ac:6e:91:e3:a6:d6:
4e:f1:3d:c3:e1:c6:a6:15:ea:14:15:59:1c:0e:91:
ae:b0:7e:5d:57:5b:af:81:d4:a1:b1:48:62:2b:2e:
7f:2b:81:1c:38:f7:e4:09:70:7f:d1:89:e0:17:0b:
1a:cf:f1:70:f3:e1:bb:c3:7d:6b:b0:df:5f:19:07:
b6:25:c3:92:79:4a:de:3a:a4:32:35:c2:75:d1:fa:
dd:d4:37:22:0d:72:20:fd:32:28:fa:5d:5c:e0:b3:
f3:58:22:6e:92:5b:87:25:3e:9a:c1:6a:41:51:d2:
c6:c1:d8:17:86:bd:4b:9c:63:aa:33:84:e5:71:d7:
8c:80:09:66:7f:04:ec:de:bd:ab:77:76:ee:20:1b:
1f:8b:01:cd:66:fd:f5:26:0d:65:6d:a8:2f:21:7e:
0e:3e:65:2a:a1:c3:2e:14:76:48:85:f8:fa:89:f1:
1b:78:bc:a5:22:f9:a9:7d:31:cf:89:da:68:3d:83:
d8:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B0:45:53:D9:BA:8E:93:EC:C5:EA:2B:58:AA:D8:FC:F0:3E:36:6F:3F
X509v3 Authority Key Identifier:
keyid:3B:EC:12:C2:11:08:13:4F:00:C0:35:31:07:D6:0C:CD:AE:BE:FB:2E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/O-wSwhEIE08AwDUxB9YMza6--y4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3a/2dfa97-8c53-4e74-9a2c-484a06a61717/1/O-wSwhEIE08AwDUxB9YMza6--y4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3a/2dfa97-8c53-4e74-9a2c-484a06a61717/1/O-wSwhEIE08AwDUxB9YMza6--y4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
12:4c:37:74:bd:11:df:2c:fa:67:6f:90:c7:9c:27:84:d1:08:
a8:df:c6:b7:e9:4c:dd:6d:1c:11:c4:0d:57:15:db:91:6f:7a:
74:d9:9a:3e:b6:53:22:0c:75:9f:80:a6:56:16:9a:ef:64:6d:
74:9d:76:9a:40:e7:7d:f7:99:2b:6c:99:a9:1a:c6:00:18:d4:
3a:11:0f:f1:2c:94:6c:f1:2f:29:4b:bf:0c:df:e5:bc:b8:3d:
57:9a:54:2a:d8:57:7a:fa:5c:6a:e4:06:de:a3:62:ad:dc:ad:
67:61:b2:c1:91:32:84:b8:aa:87:d4:2d:49:d5:42:02:5b:d4:
fc:27:67:3c:2f:d3:67:34:f2:18:f4:fb:e4:77:53:b3:bc:de:
43:3c:ed:8d:03:bd:5a:09:46:b0:2a:30:7b:8e:8c:df:79:be:
6e:71:fd:27:79:22:a9:0b:f5:c6:d4:0a:f6:4a:16:81:15:ef:
fe:fa:4d:48:0b:0c:5e:88:dd:df:88:32:59:80:df:5e:23:fe:
cd:b9:46:b1:92:c7:7f:4f:e2:b3:f3:5f:e1:1a:6c:fc:62:ba:
63:b4:ec:3b:24:b3:27:76:d0:e1:bd:30:e1:a0:51:e8:ac:50:
78:0b:95:52:94:b2:8f:15:45:5e:d7:10:95:6d:80:46:5a:2c:
72:ba:59:eb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 10 19:30:56 2025 by rpki-client