Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/72/8c3f6f-5ae9-492e-9d3a-750d62e9e53a/1/OmxgbyDOz-MSzGyBTeyZBLbbfDw.mft
File: OmxgbyDOz-MSzGyBTeyZBLbbfDw.mft (raw, json)
Hash identifier: DQued2uKaQylCRKc09sdADdOlj8azNU84SkrwX2/oLE=
Subject key identifier: 0F:8C:18:71:A7:B2:DF:83:2D:D6:68:12:0F:28:A9:24:DB:D9:FE:EE
Authority key identifier: 3A:6C:60:6F:20:CE:CF:E3:12:CC:6C:81:4D:EC:99:04:B6:DB:7C:3C
Certificate issuer: /CN=3a6c606f20cecfe312cc6c814dec9904b6db7c3c
Certificate serial: 0196AB0C9E725FC7B4A0EB86B2A4404286C1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OmxgbyDOz-MSzGyBTeyZBLbbfDw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/72/8c3f6f-5ae9-492e-9d3a-750d62e9e53a/1/OmxgbyDOz-MSzGyBTeyZBLbbfDw.mft
Manifest number: 152A
Signing time: Wed 07 May 2025 14:00:52 +0000
Manifest this update: Wed 07 May 2025 14:00:52 +0000
Manifest next update: Thu 08 May 2025 14:00:52 +0000
Files and hashes: 1: OmxgbyDOz-MSzGyBTeyZBLbbfDw.crl (hash: /SyxHTfILhlXaXFj8vtDOvRcGVSpwjJLZKUlyx0NOZ0=)
2: n8MWvNRKO36sf1pxZSj8cGYzibI.roa (hash: 1WbDvWw9T3omYw1SSZsXT4FxvvF0ZRhs3TvSkgmyWAY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/72/8c3f6f-5ae9-492e-9d3a-750d62e9e53a/1/OmxgbyDOz-MSzGyBTeyZBLbbfDw.crl
rsync://rpki.ripe.net/repository/DEFAULT/72/8c3f6f-5ae9-492e-9d3a-750d62e9e53a/1/OmxgbyDOz-MSzGyBTeyZBLbbfDw.mft
rsync://rpki.ripe.net/repository/DEFAULT/OmxgbyDOz-MSzGyBTeyZBLbbfDw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 08 May 2025 14:00:52 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:ab:0c:9e:72:5f:c7:b4:a0:eb:86:b2:a4:40:42:86:c1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3a6c606f20cecfe312cc6c814dec9904b6db7c3c
Validity
Not Before: May 7 14:00:52 2025 GMT
Not After : May 8 14:00:52 2025 GMT
Subject: CN=0f8c1871a7b2df832dd668120f28a924dbd9feee
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:6a:22:b2:38:95:ee:2e:6f:d1:03:a3:8b:8f:
d0:35:cb:b4:af:bf:fe:1c:11:43:03:06:63:5d:ce:
d4:7d:93:d3:77:f4:11:8b:d0:91:8b:30:4e:64:24:
03:5a:a5:3d:72:f6:34:ef:2a:51:e3:14:6d:63:c2:
16:81:52:b9:b5:f5:47:f1:d1:07:ee:18:d6:92:36:
32:ef:c9:37:f3:6c:ef:4c:55:63:a1:b1:55:e5:cb:
61:88:1d:e7:58:30:00:8e:fa:30:a3:3b:af:30:ce:
a9:2d:56:ac:95:5f:e0:b4:5c:3c:40:77:94:45:85:
96:8a:af:1e:f7:a4:9c:85:c2:69:cd:ed:ac:ea:59:
9b:ec:3e:77:7e:14:81:bb:74:2a:40:1e:b9:f4:da:
29:92:c3:e9:dc:3b:10:5f:0e:21:9d:cf:66:72:b3:
de:e5:f4:04:65:6e:af:9b:4e:b9:86:1f:f2:46:c5:
6a:ee:df:42:ac:e9:0f:f6:cc:4a:0c:95:16:1b:d7:
88:fa:ae:5a:67:f7:24:08:e0:0f:ee:e3:02:ff:24:
41:fa:11:32:8f:4b:eb:22:2b:3c:ac:24:e9:ad:02:
0b:6d:94:c4:e0:b8:f4:4b:1e:2f:14:22:3a:c0:d0:
32:24:a0:26:85:f9:a2:68:ae:5c:43:13:b8:73:fe:
60:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0F:8C:18:71:A7:B2:DF:83:2D:D6:68:12:0F:28:A9:24:DB:D9:FE:EE
X509v3 Authority Key Identifier:
keyid:3A:6C:60:6F:20:CE:CF:E3:12:CC:6C:81:4D:EC:99:04:B6:DB:7C:3C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OmxgbyDOz-MSzGyBTeyZBLbbfDw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/72/8c3f6f-5ae9-492e-9d3a-750d62e9e53a/1/OmxgbyDOz-MSzGyBTeyZBLbbfDw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/72/8c3f6f-5ae9-492e-9d3a-750d62e9e53a/1/OmxgbyDOz-MSzGyBTeyZBLbbfDw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
11:33:7d:b7:4b:d6:81:9e:ff:96:f7:29:61:42:ea:64:9a:29:
b4:68:d3:82:fe:61:41:7c:99:6a:d0:c7:c1:3e:bb:eb:38:cf:
15:cc:c4:1e:fe:4a:53:3c:46:00:2e:e1:97:52:fd:0b:c4:64:
41:34:77:69:98:a1:26:21:cd:e6:b3:83:5a:90:2a:a0:a4:a3:
db:bf:de:52:24:e4:76:50:3f:d8:f7:6d:95:33:7b:b4:63:c0:
a3:26:b6:e0:82:b9:71:14:68:e6:0e:ee:01:5e:f7:44:86:b8:
29:5b:17:a4:e1:b0:09:e7:29:e0:91:96:ea:c1:99:fa:32:e1:
3d:2d:f5:6b:a0:f3:69:54:74:69:9c:6f:4b:1d:3e:30:c8:a5:
3d:aa:7c:11:82:35:a3:bb:f7:07:67:03:d5:27:3f:b2:9b:1c:
bb:ad:7a:7f:5c:48:66:f0:09:2a:4d:e4:88:02:1b:31:c3:b7:
f0:59:a0:6f:55:15:59:70:ed:05:f7:aa:ff:af:6f:7d:1b:03:
7d:09:1b:49:3f:a4:59:d5:81:46:62:d7:97:23:a1:09:ca:b3:
1b:7e:8d:f3:2e:51:9f:4e:1b:b8:6a:fb:de:58:ae:d3:96:42:
3e:5c:44:85:bb:17:80:e8:5e:74:de:78:d6:f7:7a:ec:9f:c4:
e9:ab:b7:53
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 8 00:29:48 2025 by rpki-client