Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7f/03c9d3-0e25-4cc7-96a3-117bf42941ca/1/a-OcMb6T9W5jvSbVscBy3HdTGeY.mft
File: a-OcMb6T9W5jvSbVscBy3HdTGeY.mft (raw, json)
Hash identifier: 5lj40Ze5xOuPie2jww15OvDMt1GcHtpjUwTeVfQsvn8=
Subject key identifier: 09:90:D8:48:B1:7D:14:A6:59:DC:4F:C0:4D:5C:49:40:7D:DB:AE:2B
Authority key identifier: 6B:E3:9C:31:BE:93:F5:6E:63:BD:26:D5:B1:C0:72:DC:77:53:19:E6
Certificate issuer: /CN=6be39c31be93f56e63bd26d5b1c072dc775319e6
Certificate serial: 0196CA60A508DE0F094DD81D5645F4833176
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/a-OcMb6T9W5jvSbVscBy3HdTGeY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7f/03c9d3-0e25-4cc7-96a3-117bf42941ca/1/a-OcMb6T9W5jvSbVscBy3HdTGeY.mft
Manifest number: 030B
Signing time: Tue 13 May 2025 16:00:53 +0000
Manifest this update: Tue 13 May 2025 16:00:53 +0000
Manifest next update: Wed 14 May 2025 16:00:53 +0000
Files and hashes: 1: a-OcMb6T9W5jvSbVscBy3HdTGeY.crl (hash: Xc8sWCXC5GKX0CDw4dpb4PD0eqjahhwC72TPDMSMQ3k=)
2: avdVBk-rHRbW-M4AabpJX7CSjxg.roa (hash: XlwxkSLG5mJnTFp/kB80ylCJ16RiA9KQHhkduE06FV0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7f/03c9d3-0e25-4cc7-96a3-117bf42941ca/1/a-OcMb6T9W5jvSbVscBy3HdTGeY.crl
rsync://rpki.ripe.net/repository/DEFAULT/7f/03c9d3-0e25-4cc7-96a3-117bf42941ca/1/a-OcMb6T9W5jvSbVscBy3HdTGeY.mft
rsync://rpki.ripe.net/repository/DEFAULT/a-OcMb6T9W5jvSbVscBy3HdTGeY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 14 May 2025 14:31:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:ca:60:a5:08:de:0f:09:4d:d8:1d:56:45:f4:83:31:76
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6be39c31be93f56e63bd26d5b1c072dc775319e6
Validity
Not Before: May 13 16:00:53 2025 GMT
Not After : May 14 16:00:53 2025 GMT
Subject: CN=0990d848b17d14a659dc4fc04d5c49407ddbae2b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8e:d5:2c:99:42:f1:e0:d6:5b:c1:50:48:04:e4:
51:53:2a:25:8d:a8:fb:68:bc:1b:e1:ad:da:b1:48:
df:cf:8d:05:9b:e2:f0:b0:12:0c:06:f6:0f:bc:fa:
ec:29:61:fa:ce:5a:53:78:23:38:72:4c:bf:77:ff:
3d:6b:78:12:29:91:ac:ce:d2:a5:9c:63:ee:32:a2:
4b:8b:43:47:78:21:7e:3b:a7:19:67:e0:83:28:f0:
9e:b5:3a:a0:6b:48:fd:02:6a:8f:05:be:91:cf:2c:
6b:48:77:4a:e8:2a:10:24:1f:30:ef:4b:0f:86:66:
83:e4:53:a6:80:23:d8:b3:71:91:52:f0:3f:9f:ac:
7e:91:53:eb:90:34:2d:16:f3:00:1a:2e:38:81:f8:
93:75:f3:df:54:3e:6d:38:e7:39:98:c7:e5:c7:f2:
8f:aa:78:71:3d:66:57:92:1e:31:60:a2:9c:52:1d:
93:70:f1:f2:23:79:20:64:b8:22:cd:2f:d7:5e:5f:
dc:d1:1a:6d:2e:e3:b6:d6:5e:34:ac:20:cf:ec:a1:
71:69:80:a9:e2:7b:c8:97:5e:9e:ce:56:db:b1:e4:
2e:12:68:76:92:2e:ea:d7:85:30:37:69:1d:fd:81:
34:59:3d:d4:6c:46:67:cb:37:8a:98:19:c2:ca:a2:
96:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
09:90:D8:48:B1:7D:14:A6:59:DC:4F:C0:4D:5C:49:40:7D:DB:AE:2B
X509v3 Authority Key Identifier:
keyid:6B:E3:9C:31:BE:93:F5:6E:63:BD:26:D5:B1:C0:72:DC:77:53:19:E6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/a-OcMb6T9W5jvSbVscBy3HdTGeY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7f/03c9d3-0e25-4cc7-96a3-117bf42941ca/1/a-OcMb6T9W5jvSbVscBy3HdTGeY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7f/03c9d3-0e25-4cc7-96a3-117bf42941ca/1/a-OcMb6T9W5jvSbVscBy3HdTGeY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
e7:a0:86:14:7d:6a:fb:ba:36:b4:3a:a2:7f:7b:0a:10:93:b2:
b9:0c:f0:6e:1d:63:fd:b7:8c:c8:7e:22:8d:d0:9b:24:08:36:
32:0a:3e:65:84:88:50:b4:00:ab:09:be:ce:eb:41:b8:0b:9f:
20:2e:e5:b5:47:b7:66:f3:36:6d:fa:94:ba:5f:75:16:01:1f:
67:da:7e:22:6e:3a:4c:1e:be:3e:9d:81:ac:a5:f4:64:c5:b3:
00:60:de:c6:9a:6e:c9:7e:f5:c5:67:f2:2e:ef:9d:8c:3b:44:
37:0c:f2:6d:5c:66:da:98:4e:3d:ac:40:58:77:0a:e8:1d:cd:
19:27:a6:b1:2f:e5:4a:6e:7e:75:43:32:70:2f:22:cb:5c:cb:
d4:c0:cb:cd:13:32:91:d9:e8:2f:75:57:6a:13:61:0f:74:60:
93:90:38:eb:0b:30:68:12:1a:1b:38:62:3a:dc:21:0e:00:a9:
99:a3:7d:a6:f2:9a:05:c9:68:24:d4:bf:90:a6:0f:8f:31:02:
ed:55:01:0f:9e:99:5a:67:bc:f6:dc:5f:68:3d:44:ec:90:da:
22:17:9b:73:37:ef:0b:ee:4d:c7:2d:64:02:90:de:af:ef:c5:
0f:1b:5b:4c:f7:32:1a:e4:cd:84:98:02:37:19:ee:98:c2:75:
b6:50:24:a3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 13 18:10:10 2025 by rpki-client