Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/49/493d29-47a9-49eb-8080-9226b3ac4e9d/1/O3vGRy6lJXXOlb3KeCbppR-qzkk.mft
File: O3vGRy6lJXXOlb3KeCbppR-qzkk.mft (raw, json)
Hash identifier: sA2l0i6BJtb6ggQD5FjNknmJEclyXAmFO/E2DBkzROM=
Subject key identifier: 0B:33:AF:D1:44:FD:1F:D9:08:E1:3E:82:79:2E:A8:0A:F0:E2:8D:19
Authority key identifier: 3B:7B:C6:47:2E:A5:25:75:CE:95:BD:CA:78:26:E9:A5:1F:AA:CE:49
Certificate issuer: /CN=3b7bc6472ea52575ce95bdca7826e9a51faace49
Certificate serial: 0196BECA2AC8B8D08F86CF79B369187A557C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/O3vGRy6lJXXOlb3KeCbppR-qzkk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/49/493d29-47a9-49eb-8080-9226b3ac4e9d/1/O3vGRy6lJXXOlb3KeCbppR-qzkk.mft
Manifest number: 25
Signing time: Sun 11 May 2025 10:00:42 +0000
Manifest this update: Sun 11 May 2025 10:00:42 +0000
Manifest next update: Mon 12 May 2025 10:00:42 +0000
Files and hashes: 1: 9kI0xW5MbOx76ceEc1r6lL1zLqw.roa (hash: EBfX8OboRteLfAyp7yvYOpYG1nnQo1fO08vfwQ0PAY0=)
2: O3vGRy6lJXXOlb3KeCbppR-qzkk.crl (hash: S4i3L0v4VUzc+aMN+dhq1NUVg9S6NMHvDxqy83G7lwA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/49/493d29-47a9-49eb-8080-9226b3ac4e9d/1/O3vGRy6lJXXOlb3KeCbppR-qzkk.crl
rsync://rpki.ripe.net/repository/DEFAULT/49/493d29-47a9-49eb-8080-9226b3ac4e9d/1/O3vGRy6lJXXOlb3KeCbppR-qzkk.mft
rsync://rpki.ripe.net/repository/DEFAULT/O3vGRy6lJXXOlb3KeCbppR-qzkk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 12 May 2025 10:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:be:ca:2a:c8:b8:d0:8f:86:cf:79:b3:69:18:7a:55:7c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3b7bc6472ea52575ce95bdca7826e9a51faace49
Validity
Not Before: May 11 10:00:42 2025 GMT
Not After : May 12 10:00:42 2025 GMT
Subject: CN=0b33afd144fd1fd908e13e82792ea80af0e28d19
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e6:2d:61:55:4c:df:95:d2:53:bd:8c:79:4a:e3:
83:00:15:6b:ab:2f:87:e5:b1:35:59:2a:2b:bf:4a:
ab:9f:34:22:f7:31:ba:5e:e0:50:55:74:ed:9e:32:
2b:94:a7:20:7f:a0:ef:17:b3:cc:39:ff:08:0d:6e:
6e:91:3b:61:1d:48:e9:c6:ab:f2:1b:0e:d0:c4:14:
49:df:e2:55:b1:59:58:73:db:3d:fd:af:6c:4f:1d:
5f:ed:10:68:f1:2b:cc:b2:31:fc:18:f9:01:90:49:
bc:93:e3:cd:e7:c1:42:27:58:93:3e:9b:e1:ca:b4:
73:56:fd:c5:95:a9:05:4e:82:b0:2d:9c:6c:57:b9:
8a:5f:c7:78:73:b3:64:0b:e0:7d:18:45:28:7e:1e:
c9:00:6f:9d:73:06:9e:a7:a0:ab:e3:c0:fe:64:e2:
33:72:7a:ed:a0:a9:13:32:30:a5:08:3c:5a:53:19:
3a:8b:be:bf:c2:05:9a:80:45:f1:83:e1:4a:b0:1a:
51:35:35:b7:60:04:a3:ff:c3:bf:a7:17:eb:35:03:
2c:30:85:84:f3:d1:93:56:15:48:82:62:b7:b4:b8:
8e:c3:f1:fc:29:bf:20:1a:b1:c6:64:4a:9f:b1:5c:
df:98:0f:30:57:47:12:98:f3:b3:31:95:cc:09:c0:
0d:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0B:33:AF:D1:44:FD:1F:D9:08:E1:3E:82:79:2E:A8:0A:F0:E2:8D:19
X509v3 Authority Key Identifier:
keyid:3B:7B:C6:47:2E:A5:25:75:CE:95:BD:CA:78:26:E9:A5:1F:AA:CE:49
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/O3vGRy6lJXXOlb3KeCbppR-qzkk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/49/493d29-47a9-49eb-8080-9226b3ac4e9d/1/O3vGRy6lJXXOlb3KeCbppR-qzkk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/49/493d29-47a9-49eb-8080-9226b3ac4e9d/1/O3vGRy6lJXXOlb3KeCbppR-qzkk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
58:2c:9a:10:5e:20:9f:70:b6:83:94:b9:18:d0:f7:54:5b:33:
6a:51:71:60:1f:79:e1:96:e1:5b:26:4e:e5:f5:61:ac:af:bb:
6d:d2:27:91:1c:60:e9:9f:f9:30:57:53:b1:c1:7f:0a:81:2d:
65:db:e3:18:52:05:75:26:c6:ca:82:e4:1a:96:44:11:2f:1c:
36:b0:cf:2a:f4:0c:4e:85:13:2d:df:ee:16:bf:87:44:4c:c9:
34:c4:85:77:17:46:73:a9:3f:65:21:57:6c:e1:e7:08:f3:6b:
e8:a7:1d:51:6e:d1:8d:ea:61:de:3c:53:71:c5:a8:96:4d:89:
94:b6:b7:91:b8:9e:1d:1c:8f:bf:b3:86:36:57:cc:31:57:e4:
1a:66:11:a1:0b:64:a3:2b:bc:d6:30:4c:d5:47:50:dc:02:4b:
36:ec:be:09:4f:5f:01:63:39:3c:f1:f5:17:48:e7:b8:57:fb:
9d:99:60:3a:b2:6e:74:87:82:e9:81:1c:61:5d:e5:ca:4f:e2:
6f:c5:f8:ce:69:25:21:28:5f:19:68:82:db:4a:0d:84:07:1e:
49:7b:ea:ac:0a:56:92:1e:5b:95:fc:43:15:ae:d2:a8:a3:0e:
2d:fb:ac:65:87:0c:95:53:63:2a:5b:1c:2b:c4:46:0e:0a:35:
44:5a:29:7f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 11 18:55:52 2025 by rpki-client