Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5f/09ec83-85e2-4e9c-a79c-4c959f6077a0/1/O6BcspZx0wpXo-hET0H-A0z3UjE.mft
File: O6BcspZx0wpXo-hET0H-A0z3UjE.mft (raw, json)
Hash identifier: b2G4QTG4ytnHJnz3NX237lBTCE9PIGtLjwq3UEP3GPI=
Subject key identifier: 00:ED:4A:8C:45:03:E5:07:6E:54:6D:14:F2:0E:8B:B4:AE:2D:A5:84
Authority key identifier: 3B:A0:5C:B2:96:71:D3:0A:57:A3:E8:44:4F:41:FE:03:4C:F7:52:31
Certificate issuer: /CN=3ba05cb29671d30a57a3e8444f41fe034cf75231
Certificate serial: 0196BAB64FB2567605E7E3C5534523633F92
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/O6BcspZx0wpXo-hET0H-A0z3UjE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5f/09ec83-85e2-4e9c-a79c-4c959f6077a0/1/O6BcspZx0wpXo-hET0H-A0z3UjE.mft
Manifest number: 03F7
Signing time: Sat 10 May 2025 15:00:32 +0000
Manifest this update: Sat 10 May 2025 15:00:32 +0000
Manifest next update: Sun 11 May 2025 15:00:32 +0000
Files and hashes: 1: O6BcspZx0wpXo-hET0H-A0z3UjE.crl (hash: JnBZCaaxXdSl7Fr+bgCjHRepFq7+9DimVP+kBLzkAws=)
2: Rz-Vh9z4e03dlNgqerpia1XRL-k.roa (hash: 264nJ8QiwzT6QaHmYoFKRNYp0Sy9/H1JZeP4RPKrOd4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5f/09ec83-85e2-4e9c-a79c-4c959f6077a0/1/O6BcspZx0wpXo-hET0H-A0z3UjE.crl
rsync://rpki.ripe.net/repository/DEFAULT/5f/09ec83-85e2-4e9c-a79c-4c959f6077a0/1/O6BcspZx0wpXo-hET0H-A0z3UjE.mft
rsync://rpki.ripe.net/repository/DEFAULT/O6BcspZx0wpXo-hET0H-A0z3UjE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 11 May 2025 13:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:ba:b6:4f:b2:56:76:05:e7:e3:c5:53:45:23:63:3f:92
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3ba05cb29671d30a57a3e8444f41fe034cf75231
Validity
Not Before: May 10 15:00:32 2025 GMT
Not After : May 11 15:00:32 2025 GMT
Subject: CN=00ed4a8c4503e5076e546d14f20e8bb4ae2da584
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:2f:a5:02:77:94:aa:fb:c6:e4:d6:68:a3:cd:
79:d2:2e:a6:e3:cf:05:55:78:3f:a5:e2:a1:8a:48:
63:99:1c:76:71:a1:60:65:0b:91:df:ea:4b:97:1a:
e5:d9:18:47:08:90:56:64:a1:e1:d9:d2:44:17:7f:
e0:2b:82:31:f3:57:42:39:f0:2a:60:ae:e4:75:59:
a4:c8:4e:75:af:fb:1f:61:a2:ea:28:2c:91:8d:ec:
9b:2d:2f:0e:26:9f:ba:c5:8e:d6:b3:56:ce:94:cd:
0e:51:33:1b:be:c4:7c:c1:26:72:40:80:c6:c2:27:
f6:6d:85:bb:81:7f:fc:ea:4c:ad:ab:84:5a:d7:9a:
3d:9f:dd:18:c9:67:2b:72:61:bd:7f:35:d4:ae:cd:
30:58:29:0f:0f:35:90:8c:41:61:f4:86:7c:5f:58:
c4:8f:f1:9e:c0:c0:6e:35:b9:6e:82:ed:27:fc:87:
85:a5:29:d0:40:14:48:a7:4f:d5:44:91:ac:9e:69:
56:92:15:3b:ee:ce:45:b6:3b:fe:70:23:c4:57:82:
cb:ed:1b:fe:58:23:00:6c:76:c1:db:45:ce:b2:61:
71:34:e1:b8:3a:ce:cd:bf:f8:f5:23:24:e4:ff:ee:
37:c6:71:45:e1:47:3c:bd:f6:36:e0:93:3d:7b:6f:
19:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
00:ED:4A:8C:45:03:E5:07:6E:54:6D:14:F2:0E:8B:B4:AE:2D:A5:84
X509v3 Authority Key Identifier:
keyid:3B:A0:5C:B2:96:71:D3:0A:57:A3:E8:44:4F:41:FE:03:4C:F7:52:31
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/O6BcspZx0wpXo-hET0H-A0z3UjE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/09ec83-85e2-4e9c-a79c-4c959f6077a0/1/O6BcspZx0wpXo-hET0H-A0z3UjE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/09ec83-85e2-4e9c-a79c-4c959f6077a0/1/O6BcspZx0wpXo-hET0H-A0z3UjE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
96:8e:c7:fb:c1:14:58:2a:58:1d:01:3d:6b:b9:a5:67:f9:ef:
b1:7a:6a:5d:bf:ec:ad:a1:c4:da:ab:06:5e:83:72:35:40:4b:
1b:10:2a:fd:fd:23:b8:3b:99:0b:47:fb:90:1a:5b:e9:b9:fb:
79:06:f0:78:69:76:66:60:43:57:28:7a:6a:7f:cb:ef:3c:ce:
48:c0:87:2d:02:38:bb:e5:b9:f5:1d:c6:95:95:2c:70:5c:53:
0d:1e:fa:f3:2f:19:02:a1:bb:5a:03:1f:50:85:d5:40:ef:9c:
1b:63:53:7a:fb:3e:7f:25:e5:7e:42:a4:a0:1e:39:40:5c:1a:
66:18:09:9b:d6:33:d8:d8:eb:62:c3:37:87:78:31:74:e3:0a:
7f:96:9f:fa:e7:74:e4:04:fd:7d:c5:f5:2c:99:9a:eb:62:b2:
c9:ce:f0:c6:fd:35:0b:23:99:cc:d4:3a:b9:f0:4f:c9:12:7b:
96:ca:ab:6a:27:1d:f6:c3:f7:89:99:ee:1e:97:b0:a8:23:29:
16:a9:a2:ab:2e:9a:30:aa:86:bb:48:4c:4c:92:58:a9:0d:22:
54:19:e2:af:bb:71:9a:94:c4:18:33:e6:ea:c1:b2:2b:19:6d:
53:32:c3:98:e0:c9:76:2d:73:94:df:42:d9:d1:b3:33:9a:ee:
e1:79:ba:cf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 10 16:53:44 2025 by rpki-client