Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5a/c53a3e-f90d-4742-84fb-db319a31bdf7/1/O94s1SFek7-gym34ssH17SyUr3Q.mft
File: O94s1SFek7-gym34ssH17SyUr3Q.mft (raw, json)
Hash identifier: GicNs0NuHmYUYKas95XTDVF1SrTWPtF8RX7QFw4m9qw=
Subject key identifier: BB:95:C5:C5:4C:E0:AB:25:2A:5C:35:B6:EC:F0:A6:31:4A:29:F2:92
Authority key identifier: 3B:DE:2C:D5:21:5E:93:BF:A0:CA:6D:F8:B2:C1:F5:ED:2C:94:AF:74
Certificate issuer: /CN=3bde2cd5215e93bfa0ca6df8b2c1f5ed2c94af74
Certificate serial: 0196A8AFE5EBD55C53575B69EB6BDFCF0300
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/O94s1SFek7-gym34ssH17SyUr3Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5a/c53a3e-f90d-4742-84fb-db319a31bdf7/1/O94s1SFek7-gym34ssH17SyUr3Q.mft
Manifest number: 152A
Signing time: Wed 07 May 2025 03:00:21 +0000
Manifest this update: Wed 07 May 2025 03:00:21 +0000
Manifest next update: Thu 08 May 2025 03:00:21 +0000
Files and hashes: 1: O94s1SFek7-gym34ssH17SyUr3Q.crl (hash: 7jop2t5Dz+4v3atN5E4o+elvZ6gyW5tMZufZcSPVPn0=)
2: q9xJeN8PofnE74G9SyXfTH60ZME.roa (hash: yftwsdAWhtCdoWRv+jAeZvxiXWe//Rf4F2VF/Lbsjio=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5a/c53a3e-f90d-4742-84fb-db319a31bdf7/1/O94s1SFek7-gym34ssH17SyUr3Q.crl
rsync://rpki.ripe.net/repository/DEFAULT/5a/c53a3e-f90d-4742-84fb-db319a31bdf7/1/O94s1SFek7-gym34ssH17SyUr3Q.mft
rsync://rpki.ripe.net/repository/DEFAULT/O94s1SFek7-gym34ssH17SyUr3Q.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 07 May 2025 23:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:a8:af:e5:eb:d5:5c:53:57:5b:69:eb:6b:df:cf:03:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3bde2cd5215e93bfa0ca6df8b2c1f5ed2c94af74
Validity
Not Before: May 7 03:00:21 2025 GMT
Not After : May 8 03:00:21 2025 GMT
Subject: CN=bb95c5c54ce0ab252a5c35b6ecf0a6314a29f292
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e7:dd:ab:d0:b6:fd:3b:65:42:13:2c:1d:a8:2e:
20:f2:52:49:c6:aa:6f:a4:c5:a7:68:48:c3:7a:21:
02:d4:83:d8:ac:0a:05:af:06:e5:19:cc:2e:86:42:
2c:46:be:08:6b:e0:94:ba:85:6a:68:f2:ed:2b:ce:
6c:83:20:d6:ce:a0:74:8b:ef:29:2d:41:1f:9e:ca:
31:90:29:1d:86:b6:83:ea:cd:3f:b8:4c:98:b9:3d:
ab:6f:92:c6:45:2f:10:42:54:d7:ce:b0:6f:16:0f:
a6:57:5d:4e:65:a6:eb:d1:ed:f1:7f:cc:c0:99:f4:
e8:17:35:0d:24:fc:db:88:d8:5d:eb:bb:73:4a:e2:
e8:87:e8:30:bd:b6:11:f0:66:a4:75:0f:7d:37:48:
36:82:36:10:56:fd:1f:d4:a0:ef:a9:b6:57:97:0b:
d1:fe:33:ba:90:49:60:f0:8c:a3:17:f1:ce:8c:1c:
fa:4e:be:e3:0c:73:24:0e:af:67:bf:62:33:83:96:
1e:eb:d4:43:f2:a2:b5:7e:5f:4d:fe:87:61:34:a8:
e6:31:f7:54:ee:aa:58:b2:3b:30:36:31:0e:d2:6a:
e7:e9:92:e9:6e:42:bf:b5:17:dd:17:29:4f:8b:e5:
ee:61:53:a9:c5:13:e8:3b:f6:78:a8:2c:92:01:0b:
07:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BB:95:C5:C5:4C:E0:AB:25:2A:5C:35:B6:EC:F0:A6:31:4A:29:F2:92
X509v3 Authority Key Identifier:
keyid:3B:DE:2C:D5:21:5E:93:BF:A0:CA:6D:F8:B2:C1:F5:ED:2C:94:AF:74
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/O94s1SFek7-gym34ssH17SyUr3Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/c53a3e-f90d-4742-84fb-db319a31bdf7/1/O94s1SFek7-gym34ssH17SyUr3Q.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/c53a3e-f90d-4742-84fb-db319a31bdf7/1/O94s1SFek7-gym34ssH17SyUr3Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
85:9f:2f:a0:7b:d9:1c:58:0f:48:f8:aa:ba:d8:31:01:3b:f4:
a9:1f:01:d3:14:2c:6d:ff:e7:7c:31:86:7a:da:a9:f1:c9:f5:
6e:1d:d4:84:c2:f7:4b:3b:6b:a3:1b:86:e8:4e:f0:e3:2b:cf:
e5:a8:65:3c:cc:f1:69:a3:f7:53:3d:b7:40:41:7d:f6:1e:d6:
d6:70:48:17:c0:ae:18:64:6a:80:f8:7b:ce:be:6d:12:7e:45:
86:2b:f5:d1:aa:a1:03:de:4d:3a:51:d9:22:5e:d8:76:79:17:
39:76:32:a8:37:27:b2:9b:86:39:26:1b:7d:fd:b9:ad:80:4f:
bd:9d:f4:ce:10:4d:55:b4:a8:be:72:f8:82:54:7d:e6:c8:d9:
4e:19:84:94:c0:28:67:a4:37:fa:d2:d8:b4:a0:3d:a4:46:6e:
76:16:b6:af:d8:19:88:52:37:64:ff:fa:94:2f:e9:80:79:53:
a9:67:67:cf:81:59:20:46:03:89:2a:83:32:48:fd:84:33:fa:
9d:6c:93:f6:e0:8a:9f:60:ba:f4:a7:e2:cb:a6:7e:95:35:06:
81:19:3a:be:32:be:0c:e4:69:e8:49:ae:3b:1f:53:b1:2c:aa:
87:d1:6a:b0:7f:97:b5:63:74:c8:33:82:7b:d4:10:50:56:d8:
e7:34:3f:b2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 7 09:27:27 2025 by rpki-client