Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/45/0ddff3-9e70-4d63-b5a0-c6632cc014b0/1/O5olHl0dO6vkxXnJHrPgrDf3vyo.mft
File: O5olHl0dO6vkxXnJHrPgrDf3vyo.mft (raw, json)
Hash identifier: sAJQvbaIs9+kubIP3YnLXPXdqmbqShKn8rKK1v403NA=
Subject key identifier: 3F:8C:90:D1:24:B4:15:15:18:C4:A6:A3:EE:0D:6E:9F:13:0F:EF:53
Authority key identifier: 3B:9A:25:1E:5D:1D:3B:AB:E4:C5:79:C9:1E:B3:E0:AC:37:F7:BF:2A
Certificate issuer: /CN=3b9a251e5d1d3babe4c579c91eb3e0ac37f7bf2a
Certificate serial: 0196AFC4D458CDDBB58E4B5A7807D0F41541
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/O5olHl0dO6vkxXnJHrPgrDf3vyo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/45/0ddff3-9e70-4d63-b5a0-c6632cc014b0/1/O5olHl0dO6vkxXnJHrPgrDf3vyo.mft
Manifest number: 0AB9
Signing time: Thu 08 May 2025 12:00:34 +0000
Manifest this update: Thu 08 May 2025 12:00:34 +0000
Manifest next update: Fri 09 May 2025 12:00:34 +0000
Files and hashes: 1: AwwB5IzEiG1Llx5yPnasYM8MO2Y.roa (hash: 7G8UolHLHJ6PE/s9cw2uAH1EfqGha5+Hkph4tWqL8U4=)
2: C1az3rJwjcR-YTlJxXpC5icVqE4.roa (hash: PI5Gh4dLNT0MSthDWw2SO00ZqeW1Mb5HaAinAwH/Ka4=)
3: O5olHl0dO6vkxXnJHrPgrDf3vyo.crl (hash: sbUvdzaNyi9sIV/b3vIR6zVBS5WdguymxdEwPlmPo0M=)
4: uSGhwqa1EaWC0O0u-4TI5idqWHY.roa (hash: T46XwP8D/bRE5BaimIUEAgaKKz/Apcp0pmUzAH68V3Q=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/45/0ddff3-9e70-4d63-b5a0-c6632cc014b0/1/O5olHl0dO6vkxXnJHrPgrDf3vyo.crl
rsync://rpki.ripe.net/repository/DEFAULT/45/0ddff3-9e70-4d63-b5a0-c6632cc014b0/1/O5olHl0dO6vkxXnJHrPgrDf3vyo.mft
rsync://rpki.ripe.net/repository/DEFAULT/O5olHl0dO6vkxXnJHrPgrDf3vyo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 09 May 2025 07:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:af:c4:d4:58:cd:db:b5:8e:4b:5a:78:07:d0:f4:15:41
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3b9a251e5d1d3babe4c579c91eb3e0ac37f7bf2a
Validity
Not Before: May 8 12:00:34 2025 GMT
Not After : May 9 12:00:34 2025 GMT
Subject: CN=3f8c90d124b4151518c4a6a3ee0d6e9f130fef53
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:88:ea:c3:a0:ef:4a:b9:d3:3f:ca:0b:1e:33:ce:
34:e2:8d:1d:85:9c:f6:c8:ff:0c:bb:f8:8a:37:51:
9d:1c:16:06:03:6b:0f:5a:a9:c8:71:8d:28:cf:d5:
13:d9:0f:d7:2f:41:8b:e2:04:ee:52:04:0d:d3:9b:
1c:7c:f7:ba:e0:32:9d:92:2f:a5:bf:56:fe:12:e4:
6e:7a:b3:89:b1:92:d1:b1:de:cc:ed:5b:db:68:4d:
2b:8b:c2:cd:28:14:32:08:98:1c:67:35:1a:e2:c1:
5b:24:20:95:db:80:9f:58:7e:77:14:13:98:17:52:
b7:29:c9:3b:04:56:6b:fd:2b:92:1b:09:36:3c:b3:
ce:37:77:4e:b8:2c:4c:da:b4:78:18:80:ec:77:df:
55:4b:79:ee:1a:d2:e1:aa:f0:fb:cc:5e:51:68:e3:
01:ff:68:26:26:d6:37:f6:c2:e9:0a:1b:6f:bf:e6:
29:b9:60:3f:72:cb:09:57:f4:9f:ca:5e:61:26:90:
a3:19:a9:7f:2e:fa:e7:61:e2:38:21:5c:13:1e:f0:
a9:30:3e:3a:d5:78:44:c5:e3:b5:e2:30:77:c6:9b:
1c:da:6b:d0:e4:7f:95:24:16:31:18:94:3b:82:42:
48:27:96:02:9b:15:19:14:3f:0c:70:80:a2:d7:03:
3f:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3F:8C:90:D1:24:B4:15:15:18:C4:A6:A3:EE:0D:6E:9F:13:0F:EF:53
X509v3 Authority Key Identifier:
keyid:3B:9A:25:1E:5D:1D:3B:AB:E4:C5:79:C9:1E:B3:E0:AC:37:F7:BF:2A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/O5olHl0dO6vkxXnJHrPgrDf3vyo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/45/0ddff3-9e70-4d63-b5a0-c6632cc014b0/1/O5olHl0dO6vkxXnJHrPgrDf3vyo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/45/0ddff3-9e70-4d63-b5a0-c6632cc014b0/1/O5olHl0dO6vkxXnJHrPgrDf3vyo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
45:4a:b7:19:f9:bc:40:bd:d7:27:74:58:a1:3e:78:19:f7:c8:
f1:ea:49:e5:40:4e:53:ce:8e:7b:aa:3b:b3:05:83:22:31:96:
7d:5d:67:3b:d1:8b:f3:62:db:27:f1:1f:23:f7:24:5a:03:38:
8a:49:d5:b0:a3:cb:d4:62:41:b0:cf:d5:e7:4e:40:7d:5c:54:
3c:0e:8d:3b:68:96:58:82:c1:04:aa:dc:3c:30:45:24:b2:2f:
dc:0f:79:2e:18:45:73:0b:dc:12:8e:a2:3b:c5:5c:29:70:e4:
51:94:14:ba:2e:d2:16:0f:a4:77:f4:60:36:05:7e:64:00:b2:
61:7a:61:18:11:44:29:15:c1:e3:29:cc:de:87:18:dc:cc:bf:
2d:2e:64:99:5d:06:7c:f1:78:88:76:25:96:ab:64:16:99:8e:
aa:18:ba:fa:69:f7:b8:52:a2:cf:0d:5f:67:f9:ad:07:87:52:
76:22:3f:c6:1a:c5:d9:ad:45:d0:8f:66:a6:f5:d5:64:e3:dd:
42:e4:b1:73:1e:bc:fc:7f:c8:d1:6d:3a:d3:09:5c:23:15:d5:
ad:fe:c9:20:42:82:9a:d0:64:83:01:c4:dc:03:e3:ba:d5:7f:
51:95:c3:7a:13:65:eb:b5:74:d6:54:d8:dc:b7:55:cc:16:4b:
3c:c8:4e:dc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 8 14:44:00 2025 by rpki-client