Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/84/3ee7c5-1264-47e9-8a12-041b78ada215/1/o082XngGS1jETUjPs5KR0_sdnhA.mft
File: o082XngGS1jETUjPs5KR0_sdnhA.mft (raw, json)
Hash identifier: rf94x4/B6jUGic0q8Bk15f2TE9AIMZfqsCaBH42/dxQ=
Subject key identifier: DD:1D:1D:4A:79:88:3C:58:E7:73:B5:E4:06:5B:A2:7A:1F:C8:14:55
Authority key identifier: A3:4F:36:5E:78:06:4B:58:C4:4D:48:CF:B3:92:91:D3:FB:1D:9E:10
Certificate issuer: /CN=a34f365e78064b58c44d48cfb39291d3fb1d9e10
Certificate serial: 0196CB3C196836C5DB7BBA8EC79240E6AE57
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/o082XngGS1jETUjPs5KR0_sdnhA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/84/3ee7c5-1264-47e9-8a12-041b78ada215/1/o082XngGS1jETUjPs5KR0_sdnhA.mft
Manifest number: 147D
Signing time: Tue 13 May 2025 20:00:35 +0000
Manifest this update: Tue 13 May 2025 20:00:35 +0000
Manifest next update: Wed 14 May 2025 20:00:35 +0000
Files and hashes: 1: 8M6EvOOueKa7PM6SUMWysNV1P1E.roa (hash: tXy3k1V6q4E+Xjy/ypSFyuA9ZzVHmCAzqLsaHasRW9o=)
2: o082XngGS1jETUjPs5KR0_sdnhA.crl (hash: 9dLWo79ee/uQaWpvWcjERpuQAcyYIu80lFAnOmYoV5A=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/84/3ee7c5-1264-47e9-8a12-041b78ada215/1/o082XngGS1jETUjPs5KR0_sdnhA.crl
rsync://rpki.ripe.net/repository/DEFAULT/84/3ee7c5-1264-47e9-8a12-041b78ada215/1/o082XngGS1jETUjPs5KR0_sdnhA.mft
rsync://rpki.ripe.net/repository/DEFAULT/o082XngGS1jETUjPs5KR0_sdnhA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 14 May 2025 14:31:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:cb:3c:19:68:36:c5:db:7b:ba:8e:c7:92:40:e6:ae:57
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a34f365e78064b58c44d48cfb39291d3fb1d9e10
Validity
Not Before: May 13 20:00:35 2025 GMT
Not After : May 14 20:00:35 2025 GMT
Subject: CN=dd1d1d4a79883c58e773b5e4065ba27a1fc81455
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:92:1c:e9:ba:22:33:0d:fe:ff:17:21:74:4a:f5:
f5:a7:fb:fd:53:d5:76:ef:be:06:cb:9b:b0:dd:34:
ff:a3:bd:cc:ed:e7:2f:2a:28:d9:8b:ec:8b:9d:75:
54:82:1d:b4:c1:fd:a9:24:dd:ac:51:47:01:5c:3d:
14:2f:7b:ce:b4:7b:b5:a6:7a:4e:2e:92:d8:84:6a:
a8:86:f5:69:a5:af:15:ad:e9:9d:da:42:4c:20:5f:
a8:be:c6:b7:a2:e2:0d:cb:5c:20:62:53:30:f2:3a:
6c:75:96:16:23:f5:d6:a0:5d:1d:48:fa:64:05:5a:
d5:2c:a4:82:db:ae:0b:bc:0e:a6:69:bd:41:cd:e0:
b9:57:4c:35:a7:80:e6:2a:8a:f5:76:19:aa:12:a2:
10:2c:fa:46:f7:2b:c6:95:65:09:4f:e5:96:d8:ad:
95:d9:28:46:0b:0e:90:da:f4:6a:88:a2:ee:8a:b5:
e1:be:5f:9d:15:78:43:2f:10:c5:a9:54:fa:05:71:
fb:f3:99:ea:85:88:da:f5:04:52:e2:94:6b:1d:67:
9e:7a:78:19:1c:cc:29:1a:7d:2e:a9:67:ea:18:cd:
b1:68:5d:f0:61:1a:6a:24:08:d4:56:32:65:4a:ed:
2e:7d:66:95:8c:3a:38:2d:e7:12:4b:f0:74:1e:be:
cc:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DD:1D:1D:4A:79:88:3C:58:E7:73:B5:E4:06:5B:A2:7A:1F:C8:14:55
X509v3 Authority Key Identifier:
keyid:A3:4F:36:5E:78:06:4B:58:C4:4D:48:CF:B3:92:91:D3:FB:1D:9E:10
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/o082XngGS1jETUjPs5KR0_sdnhA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/84/3ee7c5-1264-47e9-8a12-041b78ada215/1/o082XngGS1jETUjPs5KR0_sdnhA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/84/3ee7c5-1264-47e9-8a12-041b78ada215/1/o082XngGS1jETUjPs5KR0_sdnhA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
70:9e:26:f6:25:8d:32:05:34:c7:e6:cf:36:58:96:5f:86:c5:
f7:b0:03:2a:66:f9:4d:25:cb:31:6d:b7:b5:5e:13:c4:30:ab:
99:f5:28:d6:0d:b6:f6:7c:7b:b4:7a:76:39:d7:02:f5:99:f4:
30:f1:47:a3:04:4c:81:d4:66:6b:74:18:e4:99:32:c4:a0:87:
29:e0:c4:99:54:a8:39:85:c1:56:20:4f:b1:71:27:c0:f3:26:
35:77:ad:d9:57:f4:78:5f:74:6c:9f:4a:21:75:af:4c:fd:b4:
0b:18:66:01:c2:6b:aa:c3:19:97:a5:67:52:81:72:41:dc:b1:
fa:32:d2:bb:07:ee:e1:be:db:a8:d5:4e:9e:95:d4:76:91:9d:
78:1a:d1:67:b6:f9:41:fb:86:d8:45:ae:c4:4f:7e:db:64:05:
99:dc:5b:25:61:5c:24:c2:e7:9b:e3:9b:7f:66:c4:72:05:c4:
d4:19:55:c5:d0:db:55:f4:20:6f:3c:a2:88:9e:f8:8b:45:35:
f5:ec:5f:b5:9e:c0:0f:ca:31:73:36:69:88:f3:cd:4a:f8:22:
a3:84:52:46:83:b5:64:11:18:d5:0b:75:fd:c2:18:4e:46:d2:
eb:5c:c3:8f:51:b1:6a:8d:44:cd:72:8f:c3:27:7a:cf:a0:6a:
02:18:ea:1c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 13 22:08:47 2025 by rpki-client