Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/49/e346e4-5831-40cf-a4dc-42fb3677df77/1/OR6ZSpUBLZL7UaKMimUO2fl3N7g.mft
File: OR6ZSpUBLZL7UaKMimUO2fl3N7g.mft (raw, json)
Hash identifier: A/+3aducCKpg24tES9lXIMq8WJ6n1kS0A2+Mzblh+2s=
Subject key identifier: B3:EA:1C:71:CF:B5:31:BB:5C:B7:67:6B:3E:87:5B:3C:76:5D:31:16
Authority key identifier: 39:1E:99:4A:95:01:2D:92:FB:51:A2:8C:8A:65:0E:D9:F9:77:37:B8
Certificate issuer: /CN=391e994a95012d92fb51a28c8a650ed9f97737b8
Certificate serial: 01969F3F2E2CE450B3BCA6B37DC161EB7FD8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OR6ZSpUBLZL7UaKMimUO2fl3N7g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/49/e346e4-5831-40cf-a4dc-42fb3677df77/1/OR6ZSpUBLZL7UaKMimUO2fl3N7g.mft
Manifest number: 0B9E
Signing time: Mon 05 May 2025 07:00:40 +0000
Manifest this update: Mon 05 May 2025 07:00:40 +0000
Manifest next update: Tue 06 May 2025 07:00:40 +0000
Files and hashes: 1: OR6ZSpUBLZL7UaKMimUO2fl3N7g.crl (hash: 4FvUqbrmOATOf6lTKegwxgL3l9Iqtk8+PUX1i3n99hw=)
2: dZUPSlz29pGWYByW6oVfuTbfNRM.roa (hash: kjVkTTaEOvl+OY2K3zGyDyZOzxn/+zfixfXEwc09htQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/49/e346e4-5831-40cf-a4dc-42fb3677df77/1/OR6ZSpUBLZL7UaKMimUO2fl3N7g.crl
rsync://rpki.ripe.net/repository/DEFAULT/49/e346e4-5831-40cf-a4dc-42fb3677df77/1/OR6ZSpUBLZL7UaKMimUO2fl3N7g.mft
rsync://rpki.ripe.net/repository/DEFAULT/OR6ZSpUBLZL7UaKMimUO2fl3N7g.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 06 May 2025 07:00:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:9f:3f:2e:2c:e4:50:b3:bc:a6:b3:7d:c1:61:eb:7f:d8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=391e994a95012d92fb51a28c8a650ed9f97737b8
Validity
Not Before: May 5 07:00:40 2025 GMT
Not After : May 6 07:00:40 2025 GMT
Subject: CN=b3ea1c71cfb531bb5cb7676b3e875b3c765d3116
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:a9:db:8b:43:58:d7:b6:72:69:15:f3:e5:87:
32:d9:b1:a6:b8:cf:3b:bb:08:53:14:47:d5:83:1b:
52:26:29:c9:2d:0a:a7:15:45:48:87:0b:47:6a:d7:
ea:33:ac:11:65:5f:b9:6f:20:35:ef:6e:9e:ff:e9:
33:97:29:b9:0f:dc:6d:d9:6f:83:10:d7:50:37:17:
ed:74:94:65:44:3f:0d:c4:93:33:a7:0e:a4:06:94:
bf:f2:1e:60:d5:22:40:53:cc:a6:0f:41:6a:2d:59:
0d:94:2b:c1:cc:fb:c2:7a:2f:04:69:d7:c7:b9:8e:
99:9a:7a:b1:5f:cc:30:7a:14:37:e9:b3:7d:e3:85:
3b:83:ca:62:35:6e:61:31:7e:b1:dc:2d:54:dc:b0:
52:47:4d:81:a7:0e:0e:25:62:f2:55:0b:0e:ce:d5:
37:e7:76:70:bf:47:1f:22:72:45:33:fa:c4:03:78:
4a:a2:47:bc:6d:9a:59:b0:9e:69:4e:35:e8:68:3c:
b0:80:f3:5b:d7:78:9c:52:fd:17:70:fb:40:40:64:
cb:2e:96:3e:8b:1a:45:26:62:92:0f:13:e1:7a:05:
cc:4e:e9:24:04:46:77:70:24:20:e0:cd:4d:e3:d3:
15:58:d3:5b:da:8f:0f:8d:8e:60:5f:39:0a:d0:8d:
f0:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B3:EA:1C:71:CF:B5:31:BB:5C:B7:67:6B:3E:87:5B:3C:76:5D:31:16
X509v3 Authority Key Identifier:
keyid:39:1E:99:4A:95:01:2D:92:FB:51:A2:8C:8A:65:0E:D9:F9:77:37:B8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OR6ZSpUBLZL7UaKMimUO2fl3N7g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/49/e346e4-5831-40cf-a4dc-42fb3677df77/1/OR6ZSpUBLZL7UaKMimUO2fl3N7g.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/49/e346e4-5831-40cf-a4dc-42fb3677df77/1/OR6ZSpUBLZL7UaKMimUO2fl3N7g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
87:3d:8e:32:2f:65:35:36:bb:f3:a1:a4:d3:d3:6c:a2:ee:e3:
07:c4:f8:17:6d:08:b2:ed:27:7f:f7:40:b0:c4:e8:3e:a7:29:
d6:04:fa:11:b7:84:c0:ff:9b:cd:8c:68:92:bd:42:32:b1:b1:
04:f0:33:32:51:c3:62:73:42:95:58:8b:45:75:4d:19:53:89:
bf:08:5b:d3:1d:51:e7:68:fc:58:f7:37:d1:d7:da:69:a9:75:
67:df:a6:ee:10:b9:1e:b9:a9:bf:bd:9c:c4:65:bb:49:1c:64:
12:be:16:3b:f6:ac:ee:76:ff:24:f8:0e:1e:14:56:ee:65:a6:
74:87:f4:75:6f:18:02:94:05:fb:a6:a3:ee:74:c8:5d:43:04:
09:0c:d9:d7:2b:43:01:e2:3e:fc:d2:3d:56:13:e9:d2:82:ed:
b5:86:c7:db:5a:71:11:67:2a:65:14:cf:eb:b8:b0:5e:1b:25:
79:91:e9:40:f0:ce:b5:38:f5:3d:8f:a9:2b:9f:c9:6f:b1:09:
04:4e:86:4a:13:08:be:7b:81:93:4d:56:f6:e2:8a:06:a2:27:
4c:38:36:f6:43:40:c9:24:36:64:b6:b0:8b:38:4a:28:24:ff:
2a:c5:ac:52:e1:45:da:56:13:12:0b:99:bd:84:9f:63:ce:28:
44:33:e0:83
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 5 15:04:36 2025 by rpki-client