Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/c339dd-443f-4ba9-a959-66db25e1990c/1/o8igyniYQoP6uYbJuApbBAl35VY.mft
File: o8igyniYQoP6uYbJuApbBAl35VY.mft (raw, json)
Hash identifier: 2In25QOY/3lwAj4a07NOeneB9eRk9WYt6ipBS+dSb1g=
Subject key identifier: 90:31:7E:0E:6D:E5:97:DA:9A:BB:7F:5B:8E:98:79:F5:9B:C3:75:D1
Authority key identifier: A3:C8:A0:CA:78:98:42:83:FA:B9:86:C9:B8:0A:5B:04:09:77:E5:56
Certificate issuer: /CN=a3c8a0ca78984283fab986c9b80a5b040977e556
Certificate serial: 0196B6A27A44B10E3FC0D73FFD33EA75D601
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/o8igyniYQoP6uYbJuApbBAl35VY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/c339dd-443f-4ba9-a959-66db25e1990c/1/o8igyniYQoP6uYbJuApbBAl35VY.mft
Manifest number: 1533
Signing time: Fri 09 May 2025 20:00:23 +0000
Manifest this update: Fri 09 May 2025 20:00:23 +0000
Manifest next update: Sat 10 May 2025 20:00:23 +0000
Files and hashes: 1: 2dCQLf2c8rJJ6iCQKe0e6vINyPk.roa (hash: SEFpdbMTDaaA3AA3UouB55T1ZZTJCyUohOoSjbS+NbY=)
2: S590SXJakiMm1tsWzi1G9Qgs-eo.roa (hash: 3PI1IRmRMy2Dl683V5IPqONj9wz5d+QDZfRjIsrHO1I=)
3: o8igyniYQoP6uYbJuApbBAl35VY.crl (hash: mAGdN4iQoPOuYRG6rJzp4kYnq2OevUiQ3oTKT6auTxQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5e/c339dd-443f-4ba9-a959-66db25e1990c/1/o8igyniYQoP6uYbJuApbBAl35VY.crl
rsync://rpki.ripe.net/repository/DEFAULT/5e/c339dd-443f-4ba9-a959-66db25e1990c/1/o8igyniYQoP6uYbJuApbBAl35VY.mft
rsync://rpki.ripe.net/repository/DEFAULT/o8igyniYQoP6uYbJuApbBAl35VY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 10 May 2025 19:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:b6:a2:7a:44:b1:0e:3f:c0:d7:3f:fd:33:ea:75:d6:01
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a3c8a0ca78984283fab986c9b80a5b040977e556
Validity
Not Before: May 9 20:00:23 2025 GMT
Not After : May 10 20:00:23 2025 GMT
Subject: CN=90317e0e6de597da9abb7f5b8e9879f59bc375d1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:d4:50:a2:00:8c:9e:77:22:53:84:b0:3c:64:
80:0f:f7:7f:8d:7f:18:4e:1c:60:47:42:f4:00:64:
fb:0c:3e:b3:b7:d4:cd:d2:1a:53:3b:12:a3:e4:ab:
97:37:0f:c9:f9:28:98:0e:38:a6:ec:1a:03:84:b3:
dc:b0:6e:7e:c8:bf:32:6a:7e:a2:56:32:3e:df:2c:
2d:d7:15:5e:dc:60:a1:a0:d5:a9:49:39:79:77:ec:
1b:13:84:50:7d:13:2f:c4:6d:70:28:47:99:77:51:
f1:fd:49:96:b8:01:fc:fe:34:43:db:ad:2a:33:7b:
12:db:64:0c:72:15:d5:90:8a:6b:96:ad:df:73:fc:
fa:38:0b:76:e6:68:86:8e:7f:84:c3:3b:6c:ee:c3:
16:eb:50:df:1d:18:09:0a:65:24:2a:1b:f7:70:f8:
10:9c:d8:b0:18:92:d6:ba:20:dd:8b:88:9e:bc:59:
5f:da:4a:ca:27:fa:71:a8:aa:1b:6b:b7:63:a5:ff:
4b:0e:87:82:89:d8:a7:36:af:db:b6:42:af:c7:6a:
7c:2d:6c:f7:de:a0:05:d2:85:d1:73:e8:83:df:32:
89:68:db:25:eb:ef:6d:2f:83:2d:30:70:c0:fa:c0:
51:8f:4a:57:15:ce:6a:c7:64:a4:b2:80:9f:3c:23:
82:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
90:31:7E:0E:6D:E5:97:DA:9A:BB:7F:5B:8E:98:79:F5:9B:C3:75:D1
X509v3 Authority Key Identifier:
keyid:A3:C8:A0:CA:78:98:42:83:FA:B9:86:C9:B8:0A:5B:04:09:77:E5:56
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/o8igyniYQoP6uYbJuApbBAl35VY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/c339dd-443f-4ba9-a959-66db25e1990c/1/o8igyniYQoP6uYbJuApbBAl35VY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/c339dd-443f-4ba9-a959-66db25e1990c/1/o8igyniYQoP6uYbJuApbBAl35VY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0d:24:59:87:13:69:ff:a2:fd:f6:52:2c:48:7a:12:ac:1f:c8:
cb:20:cc:c0:59:41:fe:bf:a9:66:65:18:ca:d3:fe:89:f0:1e:
a1:d4:e1:c2:45:e9:cc:3b:d2:73:fe:d8:29:fb:92:bb:23:0e:
7f:84:e6:20:4c:79:35:bd:4a:2c:e5:af:e2:3b:a1:5f:50:df:
39:a8:0f:6a:3a:c7:d4:92:eb:b1:a8:3b:34:56:5f:ee:67:14:
5e:01:12:19:a1:13:ed:ab:6d:83:7b:ef:eb:2e:95:2e:f6:8c:
92:64:da:d6:5f:02:09:b1:f7:77:aa:eb:3e:5a:51:26:4d:95:
5f:81:6c:1b:6a:40:23:0c:95:05:3b:b8:27:4c:e1:48:37:e4:
d6:a1:9a:45:24:93:e3:0e:94:46:e0:ad:58:09:d4:b6:f3:4f:
cb:d6:a9:45:36:46:d7:b1:3c:68:55:6d:ae:a9:bf:cf:7d:5a:
be:cd:9f:1b:a8:df:f4:c8:b3:49:34:f1:c4:5d:6f:f7:ab:70:
b7:ad:ea:9a:a4:55:dd:6c:bb:11:38:c4:36:18:b0:95:c4:b2:
ce:97:ac:56:47:fa:da:e6:7b:02:85:c5:c3:8d:41:6d:0f:7f:
18:05:6a:d0:5c:ca:1c:58:1f:35:7a:94:df:9a:59:d0:71:5a:
c4:73:5c:ff
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 10 03:46:12 2025 by rpki-client