Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7a/3382cf-2cb1-475e-92c0-815f990bd431/1/1ght3Ze6OBOJNX4OVsoR5c_o9FM.mft
File: 1ght3Ze6OBOJNX4OVsoR5c_o9FM.mft (raw, json)
Hash identifier: NNn+DS6VgYlD5I0dPN9+6aTo7ANIVppbMb7PrIAwLnw=
Subject key identifier: 0A:3A:E4:6E:F8:D0:13:92:19:54:95:26:CF:FD:60:BB:09:CA:0C:40
Authority key identifier: D6:08:6D:DD:97:BA:38:13:89:35:7E:0E:56:CA:11:E5:CF:E8:F4:53
Certificate issuer: /CN=d6086ddd97ba381389357e0e56ca11e5cfe8f453
Certificate serial: 01969F3F59D7E61F30EF20B4209A8DB187C4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1ght3Ze6OBOJNX4OVsoR5c_o9FM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7a/3382cf-2cb1-475e-92c0-815f990bd431/1/1ght3Ze6OBOJNX4OVsoR5c_o9FM.mft
Manifest number: 11E6
Signing time: Mon 05 May 2025 07:00:51 +0000
Manifest this update: Mon 05 May 2025 07:00:51 +0000
Manifest next update: Tue 06 May 2025 07:00:51 +0000
Files and hashes: 1: 1ght3Ze6OBOJNX4OVsoR5c_o9FM.crl (hash: fRVy4FfIGLNFZxq5tdODx64erYDHhIGmNNmjsKo92TY=)
2: A0q8SzSP_vkB0Kdb-LLhQ_QObQQ.roa (hash: U5YBrDMRrX6ygfCOd+cwFtTn/aDz7ai314haVDrv0Uc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7a/3382cf-2cb1-475e-92c0-815f990bd431/1/1ght3Ze6OBOJNX4OVsoR5c_o9FM.crl
rsync://rpki.ripe.net/repository/DEFAULT/7a/3382cf-2cb1-475e-92c0-815f990bd431/1/1ght3Ze6OBOJNX4OVsoR5c_o9FM.mft
rsync://rpki.ripe.net/repository/DEFAULT/1ght3Ze6OBOJNX4OVsoR5c_o9FM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 06 May 2025 07:00:51 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:9f:3f:59:d7:e6:1f:30:ef:20:b4:20:9a:8d:b1:87:c4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d6086ddd97ba381389357e0e56ca11e5cfe8f453
Validity
Not Before: May 5 07:00:51 2025 GMT
Not After : May 6 07:00:51 2025 GMT
Subject: CN=0a3ae46ef8d0139219549526cffd60bb09ca0c40
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:5f:9e:ae:31:54:25:59:b9:a7:f4:58:52:1c:
23:4c:f4:a4:e4:c8:50:68:71:cb:a6:33:58:e8:65:
85:d5:1e:17:ab:df:74:0c:4b:1a:a3:3d:80:fe:9c:
59:4d:63:f9:88:20:a9:a5:41:04:85:bd:5b:a1:e8:
9e:2d:05:03:1e:78:88:c1:37:46:61:d8:b7:2f:d4:
90:7b:ff:e8:bc:7a:f7:3c:65:61:de:e2:30:98:30:
c3:3a:e0:6f:10:63:0d:06:af:f3:1d:df:d8:43:95:
16:44:a5:e2:8a:ce:50:78:64:62:06:8f:07:98:c8:
66:38:b8:e5:79:f4:53:f7:f9:d0:1e:0c:54:fa:02:
7a:fd:69:78:8c:17:8d:8a:02:42:2e:d5:a9:24:b8:
37:7e:a7:0a:3c:96:e4:a3:f0:7d:52:5e:49:9b:b4:
28:a7:f9:26:60:1e:10:32:c6:8d:73:af:da:be:30:
54:75:5a:25:bc:6b:e4:37:b8:c7:42:3b:bb:be:dd:
9c:19:a3:2e:1e:8e:cc:7d:06:2c:51:8a:22:21:26:
b8:88:c6:e2:25:10:c6:6c:db:21:f5:a2:f7:4f:9d:
9a:a9:fe:0d:2c:7b:38:e0:bf:e6:91:64:bc:01:d0:
b7:a2:2d:fa:02:89:ed:fe:84:d8:c4:f9:50:85:3b:
37:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0A:3A:E4:6E:F8:D0:13:92:19:54:95:26:CF:FD:60:BB:09:CA:0C:40
X509v3 Authority Key Identifier:
keyid:D6:08:6D:DD:97:BA:38:13:89:35:7E:0E:56:CA:11:E5:CF:E8:F4:53
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1ght3Ze6OBOJNX4OVsoR5c_o9FM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7a/3382cf-2cb1-475e-92c0-815f990bd431/1/1ght3Ze6OBOJNX4OVsoR5c_o9FM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7a/3382cf-2cb1-475e-92c0-815f990bd431/1/1ght3Ze6OBOJNX4OVsoR5c_o9FM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
51:7a:df:59:c9:b5:78:f8:be:46:11:21:a4:c5:10:b6:14:51:
8d:51:d3:d0:b5:b7:63:7d:24:8e:6f:5a:57:3a:20:c6:67:e7:
e1:22:b1:97:e8:f6:c5:30:f4:89:ff:53:0a:d4:c8:ab:8e:76:
21:5e:f1:22:9c:ba:74:7d:56:05:92:7d:d2:3b:4c:d4:ea:2e:
31:27:1c:37:bf:28:05:26:93:7b:9e:5b:04:a5:14:be:a9:0a:
a8:5f:69:cf:d5:10:5f:72:51:80:96:7a:90:fe:c0:32:43:0c:
f1:eb:47:7b:de:8c:49:b0:62:ac:54:85:e2:2c:2f:83:12:af:
b3:8e:f3:d2:99:7c:40:8f:45:7f:6b:85:d4:a0:38:26:88:cf:
b5:b4:61:20:07:a0:22:45:5c:73:e9:10:f1:e9:bc:d7:1a:2b:
1d:f1:b3:07:0c:c0:80:9b:4a:80:39:e4:c2:e8:6f:20:82:0e:
c7:5d:a1:7a:e9:ee:1c:3a:d8:a8:4d:b5:3d:2f:eb:f5:42:1e:
e5:7f:a0:62:96:c2:0b:20:38:16:27:7a:1e:a1:70:07:1c:1e:
99:76:b7:b9:41:ac:fc:65:ea:99:ac:9d:1c:8d:87:0e:26:1e:
93:cb:16:a6:23:f8:84:a7:bb:fc:3a:50:03:80:5c:f5:fe:86:
7e:85:e1:7a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 5 12:03:59 2025 by rpki-client