Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/40/4cf814-79b5-4786-ac51-3190795e863b/1/o2bzW6xhoKv3HRjWsQY9XJM6JKs.mft
File: o2bzW6xhoKv3HRjWsQY9XJM6JKs.mft (raw, json)
Hash identifier: 94zkbr+OPjm3YTXlADQYaB49VPvV0R5petSJS8UDeTA=
Subject key identifier: C5:88:2C:11:95:D9:E6:D7:0E:34:ED:0F:13:E2:49:14:34:ED:51:EE
Authority key identifier: A3:66:F3:5B:AC:61:A0:AB:F7:1D:18:D6:B1:06:3D:5C:93:3A:24:AB
Certificate issuer: /CN=a366f35bac61a0abf71d18d6b1063d5c933a24ab
Certificate serial: 0196BB5B28FAF5A6793E1D716B8EC982EE81
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/o2bzW6xhoKv3HRjWsQY9XJM6JKs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/40/4cf814-79b5-4786-ac51-3190795e863b/1/o2bzW6xhoKv3HRjWsQY9XJM6JKs.mft
Manifest number: 1525
Signing time: Sat 10 May 2025 18:00:35 +0000
Manifest this update: Sat 10 May 2025 18:00:35 +0000
Manifest next update: Sun 11 May 2025 18:00:35 +0000
Files and hashes: 1: JQFRevUesYnGzWy86if_lRLWdpc.roa (hash: t3BYwJZyAAH5HRBi+AIKc99FxTLmFzwx0nZw4AplB88=)
2: o2bzW6xhoKv3HRjWsQY9XJM6JKs.crl (hash: wEcpPeMOboEdJ5piPYPCnI3JSopNOa6xM8bJgC6zw9A=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/40/4cf814-79b5-4786-ac51-3190795e863b/1/o2bzW6xhoKv3HRjWsQY9XJM6JKs.crl
rsync://rpki.ripe.net/repository/DEFAULT/40/4cf814-79b5-4786-ac51-3190795e863b/1/o2bzW6xhoKv3HRjWsQY9XJM6JKs.mft
rsync://rpki.ripe.net/repository/DEFAULT/o2bzW6xhoKv3HRjWsQY9XJM6JKs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 11 May 2025 13:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:bb:5b:28:fa:f5:a6:79:3e:1d:71:6b:8e:c9:82:ee:81
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a366f35bac61a0abf71d18d6b1063d5c933a24ab
Validity
Not Before: May 10 18:00:35 2025 GMT
Not After : May 11 18:00:35 2025 GMT
Subject: CN=c5882c1195d9e6d70e34ed0f13e2491434ed51ee
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:e5:86:76:77:40:85:27:f8:1d:27:9f:0c:09:
d0:ae:0b:74:08:aa:5b:07:70:e7:97:73:a1:48:51:
0d:a7:78:f3:77:5e:ee:78:2a:c9:ea:c5:dd:2f:05:
9e:25:64:55:13:42:69:e6:46:1e:6a:c3:d2:e7:2d:
7e:e3:2b:b7:22:ac:07:14:52:4b:76:af:7f:ad:d2:
7d:e9:44:e5:78:5f:d3:1a:01:2a:1d:66:35:bf:ea:
f4:07:3c:03:c3:1b:25:d7:d1:87:a2:ea:1b:2f:aa:
79:4f:4f:9b:ac:5d:aa:0f:1e:7b:cb:e2:0c:e4:98:
52:16:80:86:25:1d:80:ac:a3:a0:26:40:9e:c6:cc:
9b:e4:8b:03:84:f2:d9:90:51:a6:ec:f0:4b:a4:b7:
8c:27:4e:f7:fe:52:c8:48:b3:f5:54:72:a1:dd:ad:
ae:5a:29:59:c2:57:7b:d2:db:45:00:13:6e:ad:cb:
ee:cd:7a:9e:40:dd:87:2a:20:0d:66:26:b9:7c:05:
5c:6c:27:72:ec:9d:87:3d:40:95:08:9e:f7:19:4c:
e6:81:cb:0c:c7:2c:09:b6:fb:98:85:b5:f0:a9:bc:
3c:72:1c:95:e0:ce:9d:1d:67:78:23:11:40:0d:d4:
14:ff:31:02:ab:d4:af:07:0f:80:58:16:80:04:c2:
ef:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C5:88:2C:11:95:D9:E6:D7:0E:34:ED:0F:13:E2:49:14:34:ED:51:EE
X509v3 Authority Key Identifier:
keyid:A3:66:F3:5B:AC:61:A0:AB:F7:1D:18:D6:B1:06:3D:5C:93:3A:24:AB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/o2bzW6xhoKv3HRjWsQY9XJM6JKs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/40/4cf814-79b5-4786-ac51-3190795e863b/1/o2bzW6xhoKv3HRjWsQY9XJM6JKs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/40/4cf814-79b5-4786-ac51-3190795e863b/1/o2bzW6xhoKv3HRjWsQY9XJM6JKs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
91:b4:1b:f6:4f:02:21:cc:d4:f8:2f:94:1c:5f:2a:0f:e4:0f:
75:0e:f7:5b:a5:b8:ba:b4:3c:be:12:ad:b3:ec:b3:27:ae:df:
0b:df:f4:c8:ac:58:f9:f0:20:49:fc:95:ac:6c:0e:32:09:e2:
19:89:35:ed:66:fb:6d:1c:14:4a:65:a4:96:d3:3f:92:f3:e4:
8c:c2:67:71:f2:5c:e4:de:6d:8a:61:74:9f:eb:6d:71:a9:fc:
e2:4b:c0:e0:a0:4c:0b:c9:50:c0:5f:86:42:30:80:91:76:64:
44:f3:5f:e9:17:14:a1:5e:66:c3:07:57:29:df:c2:00:be:ce:
d4:1c:b5:4a:fe:52:9b:2c:50:27:74:53:3c:e6:b9:22:45:0c:
19:a9:67:2a:42:7d:81:1c:26:a2:c7:04:25:fc:2c:e6:c1:11:
4a:24:0b:9d:7c:c6:7c:e0:6a:8d:d3:2c:84:a2:58:fa:8e:af:
1d:1f:84:2c:2b:f4:d2:ad:53:7d:81:b2:bd:1a:ba:5e:f4:7d:
0b:44:8f:bb:0e:00:52:5f:3a:08:63:85:d6:99:1b:15:a2:47:
f2:ee:b0:d8:f6:eb:eb:59:4e:51:3c:ce:c3:b2:cc:4c:08:ca:
f4:6e:90:c0:e7:ef:d3:76:17:dc:ef:e3:34:b5:1d:9e:86:21:
ae:6d:d8:8b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 10 21:03:54 2025 by rpki-client