Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/42/648bcc-0911-4f64-b6d1-0a2f29aecdb3/1/m_OG1KjS4YgyzyP7819iQNuOokI.mft
File: m_OG1KjS4YgyzyP7819iQNuOokI.mft (raw, json)
Hash identifier: XUM/ITlxMNK+csDkl/juGTMk/gyW7IhPKVv0Hkh7de4=
Subject key identifier: 3B:56:41:99:07:DF:74:89:F9:DF:31:4F:86:6D:33:A9:04:C9:D3:90
Authority key identifier: 9B:F3:86:D4:A8:D2:E1:88:32:CF:23:FB:F3:5F:62:40:DB:8E:A2:42
Certificate issuer: /CN=9bf386d4a8d2e18832cf23fbf35f6240db8ea242
Certificate serial: 0196B4465B77D19717E42F57AF81454517F4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/m_OG1KjS4YgyzyP7819iQNuOokI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/42/648bcc-0911-4f64-b6d1-0a2f29aecdb3/1/m_OG1KjS4YgyzyP7819iQNuOokI.mft
Manifest number: 9F
Signing time: Fri 09 May 2025 09:00:31 +0000
Manifest this update: Fri 09 May 2025 09:00:31 +0000
Manifest next update: Sat 10 May 2025 09:00:31 +0000
Files and hashes: 1: m_OG1KjS4YgyzyP7819iQNuOokI.crl (hash: Lfgj20eeiNo9uq1bnNUxwwkAFZuv4LE0lPgUbcTx0Y8=)
2: vvhtwRxSkAUJ1c-M3BxUohEySzg.roa (hash: 5peLctB/1NoUxBRjWB/Eva3roqPmaT0WkPw4865m1uE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/42/648bcc-0911-4f64-b6d1-0a2f29aecdb3/1/m_OG1KjS4YgyzyP7819iQNuOokI.crl
rsync://rpki.ripe.net/repository/DEFAULT/42/648bcc-0911-4f64-b6d1-0a2f29aecdb3/1/m_OG1KjS4YgyzyP7819iQNuOokI.mft
rsync://rpki.ripe.net/repository/DEFAULT/m_OG1KjS4YgyzyP7819iQNuOokI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 10 May 2025 09:00:31 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:b4:46:5b:77:d1:97:17:e4:2f:57:af:81:45:45:17:f4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9bf386d4a8d2e18832cf23fbf35f6240db8ea242
Validity
Not Before: May 9 09:00:31 2025 GMT
Not After : May 10 09:00:31 2025 GMT
Subject: CN=3b56419907df7489f9df314f866d33a904c9d390
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:fb:5f:29:0c:fb:77:1c:5a:93:cf:2c:b7:e0:
45:08:f0:4e:6a:73:53:38:cd:c7:97:d8:08:c9:ee:
f9:91:cd:94:37:a2:65:9f:56:81:1f:e8:16:74:36:
71:05:ba:13:f2:28:60:51:35:68:c9:c3:e1:f9:0f:
60:2a:fb:03:ad:c7:a7:ea:20:86:c5:01:c2:56:d9:
98:37:c3:f4:20:f5:40:1f:5c:47:02:d9:63:54:d9:
54:8c:88:d2:6b:9f:f1:88:ee:b5:ea:07:d8:4d:0c:
f3:9e:9f:2c:fa:15:34:40:6a:52:4b:8a:b6:29:95:
c9:a4:fd:dd:1a:d0:ce:f2:ff:e3:3d:97:03:bd:a9:
f2:eb:0c:7a:c3:77:89:df:18:2c:20:a5:5c:db:02:
65:82:b1:57:52:f0:b4:1b:dc:c2:0a:e3:45:f3:9b:
94:ab:66:7c:89:06:32:17:15:f6:00:6f:6f:fc:3f:
18:31:1a:fe:3f:26:9f:67:f4:10:57:38:1d:74:2d:
f5:85:3d:c7:ac:a5:5b:26:4c:b9:f5:18:f1:49:41:
9d:92:5d:a4:81:e5:64:fa:b7:97:2e:44:44:f6:26:
28:8c:ea:ec:1b:b0:10:84:23:1f:7f:15:4d:c4:29:
0e:ed:73:41:15:eb:66:c1:2b:8f:29:16:fb:75:02:
4d:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3B:56:41:99:07:DF:74:89:F9:DF:31:4F:86:6D:33:A9:04:C9:D3:90
X509v3 Authority Key Identifier:
keyid:9B:F3:86:D4:A8:D2:E1:88:32:CF:23:FB:F3:5F:62:40:DB:8E:A2:42
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/m_OG1KjS4YgyzyP7819iQNuOokI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/42/648bcc-0911-4f64-b6d1-0a2f29aecdb3/1/m_OG1KjS4YgyzyP7819iQNuOokI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/42/648bcc-0911-4f64-b6d1-0a2f29aecdb3/1/m_OG1KjS4YgyzyP7819iQNuOokI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4c:ba:d2:e3:77:b3:c0:aa:3e:43:92:27:2c:2f:b4:54:fa:23:
72:e2:f4:bf:e8:03:70:7f:54:1e:12:b1:8c:88:c0:57:75:0b:
2c:b2:a5:78:67:22:56:e0:24:b6:5b:ba:ce:9c:d6:7c:15:ad:
b3:d4:d5:be:5a:53:98:5c:f4:db:77:ec:49:8a:36:24:46:42:
f3:95:3d:6a:1f:cf:f6:53:56:22:5e:30:d9:79:a1:fa:53:53:
83:6b:81:af:22:df:04:8d:9c:a8:f4:34:81:96:35:be:b7:69:
a0:62:39:be:92:f2:f4:0e:74:50:d4:fb:ce:5e:72:74:13:13:
64:5b:4b:3f:e0:8d:59:5d:06:ca:52:df:af:a7:e8:7f:4e:b2:
4c:df:a0:4d:e3:37:94:0d:41:84:be:2e:42:e9:8e:57:8b:f6:
1c:d4:02:ec:43:cb:47:b8:d7:13:ca:75:fc:29:64:c0:fc:11:
ef:c1:6d:41:62:21:d7:b4:c2:f1:ad:4b:a9:82:eb:ac:3d:fc:
5b:e4:a5:40:46:bb:e4:8b:56:45:7a:4b:5d:d3:66:a8:86:91:
e4:9b:35:16:1b:25:f9:50:ea:ad:16:5e:ea:99:93:b5:71:f6:
54:48:28:20:fc:dc:b4:d0:79:ae:0c:19:dc:5a:07:73:de:1e:
1a:f0:b7:55
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 9 17:47:36 2025 by rpki-client