Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/55/43eb05-affe-4274-913b-3320271fb3ac/1/o9OQf4EcuD8WuBZ4XjgLwkyKwZM.mft
File: o9OQf4EcuD8WuBZ4XjgLwkyKwZM.mft (raw, json)
Hash identifier: k93eX7WWYVU2J43tBwjG3v6XBxWlnQJtlngW7d5U6PE=
Subject key identifier: E6:61:9B:E6:23:D3:55:13:28:1F:07:18:59:7A:01:17:E3:25:B1:70
Authority key identifier: A3:D3:90:7F:81:1C:B8:3F:16:B8:16:78:5E:38:0B:C2:4C:8A:C1:93
Certificate issuer: /CN=a3d3907f811cb83f16b816785e380bc24c8ac193
Certificate serial: 0196D3D1414E26DA7717F7763E1778BFFF1D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/o9OQf4EcuD8WuBZ4XjgLwkyKwZM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/55/43eb05-affe-4274-913b-3320271fb3ac/1/o9OQf4EcuD8WuBZ4XjgLwkyKwZM.mft
Manifest number: 124D
Signing time: Thu 15 May 2025 12:00:28 +0000
Manifest this update: Thu 15 May 2025 12:00:28 +0000
Manifest next update: Fri 16 May 2025 12:00:28 +0000
Files and hashes: 1: KHmBEFAHu1D8g7BNr6DM90HcrdE.roa (hash: cHCWZbVIixRYPkJFTsJoo7AK/4mwhNH2E0rmOh1q4HI=)
2: o9OQf4EcuD8WuBZ4XjgLwkyKwZM.crl (hash: GE3nvxkdLyqFbp9TYXEaH1PY7gwe6BZOgAxUbykC8i8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/55/43eb05-affe-4274-913b-3320271fb3ac/1/o9OQf4EcuD8WuBZ4XjgLwkyKwZM.crl
rsync://rpki.ripe.net/repository/DEFAULT/55/43eb05-affe-4274-913b-3320271fb3ac/1/o9OQf4EcuD8WuBZ4XjgLwkyKwZM.mft
rsync://rpki.ripe.net/repository/DEFAULT/o9OQf4EcuD8WuBZ4XjgLwkyKwZM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 16 May 2025 08:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:d3:d1:41:4e:26:da:77:17:f7:76:3e:17:78:bf:ff:1d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a3d3907f811cb83f16b816785e380bc24c8ac193
Validity
Not Before: May 15 12:00:28 2025 GMT
Not After : May 16 12:00:28 2025 GMT
Subject: CN=e6619be623d35513281f0718597a0117e325b170
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:94:e9:36:00:9b:30:0f:75:28:19:f1:1e:7e:
9e:25:4f:dd:94:7f:02:9d:00:73:97:53:1d:3b:f0:
77:6f:36:73:42:1a:46:7c:cb:3c:72:73:82:c0:ec:
53:f4:3a:bc:1e:5a:b3:99:6e:30:02:f0:71:b2:d2:
b2:98:5a:c7:89:85:1a:9b:d2:c3:03:f7:08:ae:32:
de:9b:18:e5:51:56:fc:21:4f:1d:1b:99:7f:b0:24:
b2:f7:be:00:36:c0:1f:42:d0:3f:c2:e4:d3:52:48:
1f:fd:54:da:e0:f4:c3:4f:0c:9f:c4:fa:23:86:e9:
ce:5a:15:9e:bc:65:7d:09:cc:cc:c9:71:87:9e:48:
23:5f:f5:37:7c:1a:ad:81:eb:02:9e:d4:3e:6c:4a:
8f:83:38:55:77:0c:bf:14:25:82:35:40:8d:89:53:
0e:d0:05:97:08:d4:88:63:80:25:d1:d7:c9:e0:e2:
04:f1:29:a9:43:b0:32:8b:2e:5c:01:15:ac:0f:7e:
e7:61:bc:8a:1c:b6:e4:e8:2a:21:cf:be:6f:97:bd:
92:9b:36:94:b8:e9:3c:88:c9:f0:20:31:66:a2:1b:
75:c5:1c:e2:52:ee:62:74:59:95:28:ba:e7:4f:76:
8c:34:a6:a0:30:fe:5d:90:77:75:d9:ae:69:eb:ec:
37:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E6:61:9B:E6:23:D3:55:13:28:1F:07:18:59:7A:01:17:E3:25:B1:70
X509v3 Authority Key Identifier:
keyid:A3:D3:90:7F:81:1C:B8:3F:16:B8:16:78:5E:38:0B:C2:4C:8A:C1:93
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/o9OQf4EcuD8WuBZ4XjgLwkyKwZM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/55/43eb05-affe-4274-913b-3320271fb3ac/1/o9OQf4EcuD8WuBZ4XjgLwkyKwZM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/55/43eb05-affe-4274-913b-3320271fb3ac/1/o9OQf4EcuD8WuBZ4XjgLwkyKwZM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
73:5b:96:6c:4c:ec:d9:22:6a:4f:07:fb:58:7d:c5:96:30:cd:
69:85:c2:01:82:3e:a8:4d:5b:26:34:b4:d5:6b:94:63:b7:b5:
a8:e4:18:a5:73:6e:83:c3:6a:35:a9:b8:8b:a0:1d:82:3c:f8:
d7:20:3d:24:ac:97:b3:69:a2:f3:1a:1e:8a:1e:77:77:15:7a:
4b:38:4d:cc:ff:f7:56:17:5e:90:f9:90:c4:6d:fe:9b:fd:fd:
40:60:6f:f3:1a:88:bf:e2:f1:55:e4:cd:c9:eb:e2:fc:89:4e:
0d:4b:03:1b:25:24:cd:ec:a7:dd:cc:30:47:ba:ad:06:a8:4b:
a2:6f:d9:0e:b3:fc:3e:21:b2:3b:cd:be:2f:5e:9d:27:4f:d1:
76:95:a7:ec:47:ff:48:93:d5:13:79:b3:3b:77:7a:69:f8:47:
28:2e:45:e2:06:b0:fc:4d:a0:d0:b3:b8:cf:33:12:9c:73:d7:
b2:21:0d:b2:e6:8b:f4:3f:d2:7a:9e:68:d9:8b:ae:17:a6:42:
b3:66:ac:18:e0:37:9e:e4:eb:cc:b4:87:8e:de:6f:8d:96:7a:
88:d1:44:1e:d6:42:c0:83:11:12:db:11:9f:89:bf:39:7f:45:
a4:c2:65:47:ae:d4:35:73:f8:8a:61:59:1c:8f:75:9e:5b:1c:
41:2c:a7:d9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 15 15:25:04 2025 by rpki-client