Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/50/ad7ac3-b8ad-42b0-ad2a-ae967d739dd3/1/O6F4K2r7p8a88HC5P-1MyEr0E1I.mft
File: O6F4K2r7p8a88HC5P-1MyEr0E1I.mft (raw, json)
Hash identifier: HPXsGG3ip9/KWUYbP6Zbua8ArsJuu4cx6rQlIgFsBN0=
Subject key identifier: CA:40:DA:B7:FE:DB:24:3F:D0:BE:5D:10:67:48:28:70:7A:CF:28:45
Authority key identifier: 3B:A1:78:2B:6A:FB:A7:C6:BC:F0:70:B9:3F:ED:4C:C8:4A:F4:13:52
Certificate issuer: /CN=3ba1782b6afba7c6bcf070b93fed4cc84af41352
Certificate serial: 0196C8DFB9FCA777D3EB328696C951905CB9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/O6F4K2r7p8a88HC5P-1MyEr0E1I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/50/ad7ac3-b8ad-42b0-ad2a-ae967d739dd3/1/O6F4K2r7p8a88HC5P-1MyEr0E1I.mft
Manifest number: 153E
Signing time: Tue 13 May 2025 09:00:27 +0000
Manifest this update: Tue 13 May 2025 09:00:27 +0000
Manifest next update: Wed 14 May 2025 09:00:27 +0000
Files and hashes: 1: 3jF5JkqZzpwDg2CUyKrMHDx4QqM.roa (hash: Ct22y3Kn4dpY61h6fsUyGmJkOxPrtpccRirSLUmpVtY=)
2: O6F4K2r7p8a88HC5P-1MyEr0E1I.crl (hash: J6wsM1USald8L4AfwUdLxOjM3SePTJoMhUgZTyiXTB4=)
3: caUBuUxU945I82DD831l9nsD-jo.roa (hash: fcv+cYVXy7t+Ay1RhyoB8XEGTuHAujkCAZt9GTjK/IA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/50/ad7ac3-b8ad-42b0-ad2a-ae967d739dd3/1/O6F4K2r7p8a88HC5P-1MyEr0E1I.crl
rsync://rpki.ripe.net/repository/DEFAULT/50/ad7ac3-b8ad-42b0-ad2a-ae967d739dd3/1/O6F4K2r7p8a88HC5P-1MyEr0E1I.mft
rsync://rpki.ripe.net/repository/DEFAULT/O6F4K2r7p8a88HC5P-1MyEr0E1I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 14 May 2025 08:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:c8:df:b9:fc:a7:77:d3:eb:32:86:96:c9:51:90:5c:b9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3ba1782b6afba7c6bcf070b93fed4cc84af41352
Validity
Not Before: May 13 09:00:27 2025 GMT
Not After : May 14 09:00:27 2025 GMT
Subject: CN=ca40dab7fedb243fd0be5d10674828707acf2845
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f5:fc:28:e4:bf:8b:48:81:92:c4:6d:fe:91:ed:
74:61:fe:62:a7:db:b7:cc:8d:ec:08:d5:2f:07:57:
15:e8:5a:51:3b:ff:b4:d3:54:d3:51:dd:5c:23:b4:
f2:ec:4a:e3:f3:0a:29:e9:40:88:2b:62:82:03:b8:
3a:a4:7d:5c:12:9b:0f:f1:ce:49:4a:d0:82:f3:29:
b7:f8:ef:a3:ee:33:1a:ad:1b:1a:db:cb:1a:fe:39:
8e:87:75:f4:7f:7d:fd:5e:3a:29:92:cf:b9:45:4c:
51:9a:95:61:3c:d5:cf:da:61:5c:42:4e:9a:87:13:
b5:52:61:ed:e2:4a:2b:0a:66:71:5e:f6:4a:ca:0d:
8e:5b:48:0f:41:06:ff:fc:c1:53:3d:e1:36:8e:ef:
6e:72:ba:7b:45:f4:3e:87:00:78:d5:cc:9a:ad:8b:
18:ff:d4:07:7c:8f:90:03:8b:dd:21:ab:e6:f2:bf:
72:ad:84:1f:42:65:c7:b4:f9:1b:18:1f:ab:cc:3c:
5e:8a:c8:1c:23:37:2f:d4:66:90:d9:88:6f:c1:d4:
ae:f2:d4:63:d4:4a:c0:7a:0a:58:c0:1e:ef:21:c5:
85:f8:2f:bb:7f:53:29:a9:49:be:d0:11:9a:14:0c:
bf:4d:c8:54:bc:50:a3:a3:cd:13:36:26:a5:d0:58:
a9:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CA:40:DA:B7:FE:DB:24:3F:D0:BE:5D:10:67:48:28:70:7A:CF:28:45
X509v3 Authority Key Identifier:
keyid:3B:A1:78:2B:6A:FB:A7:C6:BC:F0:70:B9:3F:ED:4C:C8:4A:F4:13:52
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/O6F4K2r7p8a88HC5P-1MyEr0E1I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/50/ad7ac3-b8ad-42b0-ad2a-ae967d739dd3/1/O6F4K2r7p8a88HC5P-1MyEr0E1I.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/50/ad7ac3-b8ad-42b0-ad2a-ae967d739dd3/1/O6F4K2r7p8a88HC5P-1MyEr0E1I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
98:38:d1:68:16:84:af:f0:07:58:20:59:df:96:02:c9:f2:b6:
d3:2d:6e:36:b3:3f:f2:f9:90:9a:b9:d5:27:d4:0a:cc:be:f4:
85:8b:05:09:da:5d:63:f5:f6:03:48:7b:6a:a4:a4:be:b1:52:
5b:d6:61:c6:df:6b:70:3b:7d:78:68:2c:a7:42:19:bb:30:56:
c2:44:bb:d8:ee:f1:d0:ed:0f:fa:de:f5:d1:ee:b2:40:35:83:
a2:cd:1e:e5:72:55:74:af:ba:7b:23:84:cb:7c:8f:bf:28:25:
d9:48:8a:b6:7b:78:9f:2b:50:b9:c5:35:33:ed:92:29:1c:96:
f3:01:49:ae:ec:aa:4c:ed:73:0e:b0:d9:c0:b7:b9:07:47:82:
f0:26:8c:5c:16:1f:12:cc:9b:54:07:3d:08:02:60:00:f2:64:
47:93:e2:5f:e1:f1:0e:1f:9d:3d:fd:b4:38:56:d6:f7:38:c0:
41:a3:61:75:74:2d:9c:68:e5:00:94:fe:20:78:cc:16:26:ea:
a4:98:5f:55:19:66:70:4e:25:44:11:4c:98:fb:cf:41:f0:16:
e3:37:c9:63:d2:7d:0f:bd:94:db:52:62:85:16:e3:0a:a8:80:
28:78:22:91:bb:1f:07:83:3a:60:2d:d6:a8:5d:93:c3:53:ec:
a4:c7:ba:3f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 13 13:40:36 2025 by rpki-client