Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/81/12b937-890d-47b5-a041-331d7fc77bd4/1/OspQhYoYVv-gLpE1bxQjbnw4uFo.mft
File: OspQhYoYVv-gLpE1bxQjbnw4uFo.mft (raw, json)
Hash identifier: HWAYrTi39S3FhmFVKGdIfTEEFcfjQuxWC6YBSoadOa0=
Subject key identifier: 68:EB:AB:CA:AD:E2:36:40:87:8D:01:72:BF:AD:49:87:9F:33:76:A1
Authority key identifier: 3A:CA:50:85:8A:18:56:FF:A0:2E:91:35:6F:14:23:6E:7C:38:B8:5A
Certificate issuer: /CN=3aca50858a1856ffa02e91356f14236e7c38b85a
Certificate serial: 0196C427325BE749009F608425A239477ED4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OspQhYoYVv-gLpE1bxQjbnw4uFo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/81/12b937-890d-47b5-a041-331d7fc77bd4/1/OspQhYoYVv-gLpE1bxQjbnw4uFo.mft
Manifest number: 153D
Signing time: Mon 12 May 2025 11:00:25 +0000
Manifest this update: Mon 12 May 2025 11:00:25 +0000
Manifest next update: Tue 13 May 2025 11:00:25 +0000
Files and hashes: 1: 0i27NjvnFtlwbFJL8brWgH_dw8U.roa (hash: YML80PmXT345DJiCwX4apNsJ7UtnB8nEMX5Dpv2Ctsw=)
2: 1kY2nGT8PP1V1pxbzH8gDFZHRGw.roa (hash: pbZtP+N8idLMQTinI/aHUKYzG+cdVac5nacfjqhyPdo=)
3: OfxxmNtzJcdCBkWeVovM4im8aiY.roa (hash: WRZK3jUR3eiSqkPuuJOy87KYkFs/X19TJQecAHmPTCA=)
4: OspQhYoYVv-gLpE1bxQjbnw4uFo.crl (hash: CliH49XIPug3UFC0UrxJXauflDjBr8zvuOF52AVlWE8=)
5: ct0UdU9tbjVu5vnRCDtuTGBSo4c.roa (hash: 2wetSh/WjuBgx0H+sbj7Aow3E9vqoUt+MG+BDwetShE=)
6: pZwUUb6x4Lez1tW_jvxd_X_PyY8.roa (hash: weF+c7Ta8anbMKz4f67ACPq7m1FTdbmyMymH/ZhAy3g=)
7: vFVZ9av3BvQ-ws_7EVciDYDt6Rw.roa (hash: 1s2dWFQ6yIEmp8FiTPqLYuMVpLoqmko/eqoHIt276/8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/81/12b937-890d-47b5-a041-331d7fc77bd4/1/OspQhYoYVv-gLpE1bxQjbnw4uFo.crl
rsync://rpki.ripe.net/repository/DEFAULT/81/12b937-890d-47b5-a041-331d7fc77bd4/1/OspQhYoYVv-gLpE1bxQjbnw4uFo.mft
rsync://rpki.ripe.net/repository/DEFAULT/OspQhYoYVv-gLpE1bxQjbnw4uFo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 13 May 2025 11:00:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:c4:27:32:5b:e7:49:00:9f:60:84:25:a2:39:47:7e:d4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3aca50858a1856ffa02e91356f14236e7c38b85a
Validity
Not Before: May 12 11:00:25 2025 GMT
Not After : May 13 11:00:25 2025 GMT
Subject: CN=68ebabcaade23640878d0172bfad49879f3376a1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:17:9c:07:9e:3b:28:14:95:ad:92:a7:7d:33:
c1:40:c3:a8:6b:ac:6a:48:70:03:b6:86:a0:6a:00:
e9:cf:65:c6:6a:0c:a4:c1:ea:02:40:63:4c:9a:e9:
ae:5e:aa:18:8c:e1:5b:94:df:e8:00:46:06:13:a4:
df:ca:57:6f:93:60:62:1f:2b:2d:48:be:eb:ad:d0:
71:ca:45:34:e1:b4:09:18:e7:7d:90:e8:11:71:9e:
68:3c:3a:89:f1:c4:9a:ae:eb:d6:66:19:c9:93:17:
24:03:4f:f4:88:f0:b7:b4:2a:06:7e:e2:ae:b6:5a:
5f:1e:77:97:91:54:91:6c:0a:20:56:00:75:1c:56:
85:fe:9d:1a:a0:0c:5c:91:e6:92:85:f3:33:1b:bb:
0a:ad:0f:99:4c:76:31:3b:f7:38:eb:23:99:f4:92:
27:91:e3:5b:22:76:be:89:22:8b:4c:f1:da:88:a6:
a6:af:35:b2:0e:52:b1:c5:90:40:4d:e3:0f:bb:d8:
8a:79:ac:04:31:02:88:77:af:89:b9:23:62:ba:1f:
88:2d:d3:04:45:4b:75:55:40:2d:23:83:45:b3:34:
06:80:92:9d:4a:e4:c7:b8:0f:11:eb:45:ba:4f:13:
da:89:b9:18:31:eb:08:26:00:c3:55:d2:de:22:9b:
4a:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
68:EB:AB:CA:AD:E2:36:40:87:8D:01:72:BF:AD:49:87:9F:33:76:A1
X509v3 Authority Key Identifier:
keyid:3A:CA:50:85:8A:18:56:FF:A0:2E:91:35:6F:14:23:6E:7C:38:B8:5A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OspQhYoYVv-gLpE1bxQjbnw4uFo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/81/12b937-890d-47b5-a041-331d7fc77bd4/1/OspQhYoYVv-gLpE1bxQjbnw4uFo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/81/12b937-890d-47b5-a041-331d7fc77bd4/1/OspQhYoYVv-gLpE1bxQjbnw4uFo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
09:66:2b:6c:92:30:56:f9:a8:b7:71:5d:53:e0:12:56:42:db:
5a:0f:da:49:83:bf:0c:bb:77:e2:29:00:9d:c0:46:68:1f:cb:
af:3d:7d:b5:2b:36:ba:6c:bf:69:a5:34:ee:e8:db:4c:53:5f:
98:5a:8f:b7:92:15:33:bd:0b:ba:32:b2:95:15:e6:90:33:7d:
8f:68:9b:91:0f:94:b4:02:b6:1c:bb:44:85:03:9d:5a:be:2c:
f6:36:fc:d8:ce:50:17:c9:ce:76:d7:ed:7a:64:d4:75:0e:fe:
da:ff:8e:54:ec:cb:be:76:8a:ef:15:40:b5:b2:35:72:41:21:
d0:52:7d:c0:bc:7f:24:cc:9b:32:e1:ce:3a:ff:9f:6b:0a:da:
70:8b:77:5f:f7:1d:6d:c2:db:66:5e:dd:71:4e:32:46:74:c7:
87:94:10:bf:21:df:8e:50:8e:7c:b1:22:d7:75:6f:dc:05:6e:
69:c8:0f:d3:ef:48:d8:03:e8:a8:9c:af:4f:57:2a:6f:c5:9c:
5d:1d:57:ac:90:6a:05:8c:f2:58:91:dd:9f:97:13:f8:9a:49:
bf:aa:0c:f8:88:d2:c9:ca:da:95:e2:1f:9f:32:d1:0e:a5:26:
0a:70:a7:9c:22:11:bb:8e:e1:99:1b:e3:94:04:fe:38:3f:15:
0b:82:1e:5c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 12 15:32:33 2025 by rpki-client