Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5a/fc0ed1-5666-4bb7-bb7c-7b627582fd2d/1/O2HIth_0q5daL2xn0LzmN5Ni4v4.mft
File: O2HIth_0q5daL2xn0LzmN5Ni4v4.mft (raw, json)
Hash identifier: fFk5k7guMmCbgQj8UjAoDZaS8jCTbp/SMGgKM6aMr8I=
Subject key identifier: 03:8D:80:36:76:A4:82:30:1C:EF:DB:B4:39:2E:97:25:AC:88:F9:28
Authority key identifier: 3B:61:C8:B6:1F:F4:AB:97:5A:2F:6C:67:D0:BC:E6:37:93:62:E2:FE
Certificate issuer: /CN=3b61c8b61ff4ab975a2f6c67d0bce6379362e2fe
Certificate serial: 0196BCA480A7EEBA4E297B73DC73DB49E966
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/O2HIth_0q5daL2xn0LzmN5Ni4v4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5a/fc0ed1-5666-4bb7-bb7c-7b627582fd2d/1/O2HIth_0q5daL2xn0LzmN5Ni4v4.mft
Manifest number: 0848
Signing time: Sun 11 May 2025 00:00:19 +0000
Manifest this update: Sun 11 May 2025 00:00:19 +0000
Manifest next update: Mon 12 May 2025 00:00:19 +0000
Files and hashes: 1: O2HIth_0q5daL2xn0LzmN5Ni4v4.crl (hash: 3FfvpD+UAi9ffO+1PUMul/Exn8vApTSZqSGvxUPI8Wk=)
2: zPHYYf64cnazRpEP2DM-tC5zi20.roa (hash: KRY5tyMHgi4pvRx1DdmJaDKEtzRxICuicXJ6HWfF+Yg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5a/fc0ed1-5666-4bb7-bb7c-7b627582fd2d/1/O2HIth_0q5daL2xn0LzmN5Ni4v4.crl
rsync://rpki.ripe.net/repository/DEFAULT/5a/fc0ed1-5666-4bb7-bb7c-7b627582fd2d/1/O2HIth_0q5daL2xn0LzmN5Ni4v4.mft
rsync://rpki.ripe.net/repository/DEFAULT/O2HIth_0q5daL2xn0LzmN5Ni4v4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 11 May 2025 22:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:bc:a4:80:a7:ee:ba:4e:29:7b:73:dc:73:db:49:e9:66
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3b61c8b61ff4ab975a2f6c67d0bce6379362e2fe
Validity
Not Before: May 11 00:00:19 2025 GMT
Not After : May 12 00:00:19 2025 GMT
Subject: CN=038d803676a482301cefdbb4392e9725ac88f928
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8f:11:16:45:8a:6b:69:46:20:6a:c2:b9:48:00:
0a:34:89:b6:1e:58:0b:ff:aa:a1:3d:ef:a8:5e:1b:
66:bf:cb:14:53:8a:4d:15:c2:47:cd:de:72:02:ad:
13:4b:42:75:70:e8:b9:cf:39:21:39:83:4d:d7:a1:
e9:5d:46:36:e3:56:70:2d:08:c7:dc:4a:f1:f8:7a:
a3:c4:f3:f0:8d:e5:14:62:a0:cf:49:fa:da:a9:fe:
e7:57:74:24:85:b7:59:9c:78:9e:82:57:12:3d:67:
86:97:66:bc:07:0d:c0:d6:b8:2d:da:59:8a:39:16:
9f:c2:b9:5c:2d:a7:d8:0c:07:f9:42:64:be:15:97:
89:e0:10:3d:d2:a0:8a:33:af:83:00:d4:49:36:76:
ea:66:77:16:4c:69:84:b2:ab:55:8d:7d:3a:41:69:
df:86:8b:59:30:e7:74:cd:ee:0e:ad:d3:a1:8c:8f:
8b:84:11:ba:31:15:db:11:14:a2:ff:3c:33:8b:c0:
3b:98:c5:8f:bc:66:92:27:c7:21:e6:3c:64:9e:13:
a8:be:fc:32:69:89:43:61:e1:6f:21:57:07:d5:73:
ec:98:c2:4b:86:af:73:fd:88:eb:8a:85:da:27:2c:
14:f1:7a:c2:fe:1a:d1:8e:12:d1:57:8c:3d:8a:60:
33:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
03:8D:80:36:76:A4:82:30:1C:EF:DB:B4:39:2E:97:25:AC:88:F9:28
X509v3 Authority Key Identifier:
keyid:3B:61:C8:B6:1F:F4:AB:97:5A:2F:6C:67:D0:BC:E6:37:93:62:E2:FE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/O2HIth_0q5daL2xn0LzmN5Ni4v4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/fc0ed1-5666-4bb7-bb7c-7b627582fd2d/1/O2HIth_0q5daL2xn0LzmN5Ni4v4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/fc0ed1-5666-4bb7-bb7c-7b627582fd2d/1/O2HIth_0q5daL2xn0LzmN5Ni4v4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2b:b6:0a:ec:fb:74:2c:8b:d6:86:0e:2a:fe:24:19:04:cd:72:
10:8f:4e:41:3b:93:52:9b:03:d4:c4:77:7f:58:87:57:0b:da:
c0:fc:3a:0f:a3:8e:34:43:27:2c:70:25:66:a2:5b:b2:c6:11:
18:06:bb:2a:15:35:f2:73:2b:9f:e1:b4:52:cd:47:3a:a5:7f:
cd:52:1e:f1:dd:f7:7f:c7:63:10:d6:5b:23:1c:81:2d:4f:0d:
9a:9e:85:ef:0b:fb:4e:51:38:aa:2f:3b:b4:6a:c4:59:80:36:
59:d8:31:4d:21:f2:2f:a7:33:33:cd:da:73:04:9a:bc:28:04:
4e:50:cc:b3:18:43:bb:31:e8:01:85:67:31:af:cc:67:fa:79:
f9:ae:b3:2c:0f:0c:a5:38:bd:c6:bf:e2:46:ec:4a:76:27:dc:
88:e6:1e:e4:c4:5f:b1:18:6d:4e:15:57:ec:d4:7e:d1:30:e6:
3b:54:2c:76:13:52:65:8f:c2:7a:75:43:b5:d7:19:ef:58:ba:
e4:c3:85:c4:8a:c1:7c:b3:f3:54:a8:15:8b:59:56:1e:34:fb:
9e:71:ca:9d:5d:e6:fc:03:5a:ff:ca:b5:8a:84:7b:a7:58:20:
bc:1d:c5:75:96:2f:24:c9:90:7c:68:e0:c8:cd:c2:a4:25:9e:
25:7c:4a:3c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 11 08:04:42 2025 by rpki-client