Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/86/c4210e-90de-4eca-8206-5537d85d2bd0/1/oLsXGJY93ZEot2_T2CE6FWXvhW0.mft
File: oLsXGJY93ZEot2_T2CE6FWXvhW0.mft (raw, json)
Hash identifier: i9of7e93WqrCN2YifiauqtdVTlx0dkq4R20uHeOmiOc=
Subject key identifier: B8:44:B4:79:5D:9D:23:94:53:B7:B0:9A:29:8D:97:97:79:65:56:9C
Authority key identifier: A0:BB:17:18:96:3D:DD:91:28:B7:6F:D3:D8:21:3A:15:65:EF:85:6D
Certificate issuer: /CN=a0bb1718963ddd9128b76fd3d8213a1565ef856d
Certificate serial: 0196BE5C1298F8E980D5F61CE7A8ADA30688
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/oLsXGJY93ZEot2_T2CE6FWXvhW0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/86/c4210e-90de-4eca-8206-5537d85d2bd0/1/oLsXGJY93ZEot2_T2CE6FWXvhW0.mft
Manifest number: 1533
Signing time: Sun 11 May 2025 08:00:27 +0000
Manifest this update: Sun 11 May 2025 08:00:27 +0000
Manifest next update: Mon 12 May 2025 08:00:27 +0000
Files and hashes: 1: 3AKmduEBocJ2JnN0jXYWS-8GbOY.roa (hash: iBJD1wTxS+O8/2QNKHhH8F14y6hfViRbWeFBsKe3/pI=)
2: kIIfJ-bgIB8FEHmlLuoBBuJNtKA.roa (hash: d5x0f5Yxm3xcFQXy2bPoyZU9c7+8Vyq9PQskQziwEEU=)
3: oLsXGJY93ZEot2_T2CE6FWXvhW0.crl (hash: ofkJsgCfFCQaNv2dTBuhyIQTMfStg0qPipRfJxldzY4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/86/c4210e-90de-4eca-8206-5537d85d2bd0/1/oLsXGJY93ZEot2_T2CE6FWXvhW0.crl
rsync://rpki.ripe.net/repository/DEFAULT/86/c4210e-90de-4eca-8206-5537d85d2bd0/1/oLsXGJY93ZEot2_T2CE6FWXvhW0.mft
rsync://rpki.ripe.net/repository/DEFAULT/oLsXGJY93ZEot2_T2CE6FWXvhW0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 12 May 2025 07:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:be:5c:12:98:f8:e9:80:d5:f6:1c:e7:a8:ad:a3:06:88
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a0bb1718963ddd9128b76fd3d8213a1565ef856d
Validity
Not Before: May 11 08:00:27 2025 GMT
Not After : May 12 08:00:27 2025 GMT
Subject: CN=b844b4795d9d239453b7b09a298d97977965569c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:89:f2:5a:fa:39:dc:b9:46:04:8a:68:31:71:
53:35:a9:ad:18:1a:5f:5d:44:2e:77:db:07:af:ab:
15:15:b0:a3:a6:cb:5d:c4:29:8f:c2:f2:40:08:e9:
67:1b:ad:ca:e0:7f:75:5e:c3:bd:a2:c4:8f:84:a9:
5a:99:22:1c:68:44:7d:74:ec:96:21:6d:56:6f:1c:
01:06:88:2e:98:5c:83:26:6d:a4:41:e9:43:a5:17:
f6:f4:80:76:a8:68:46:7e:b5:76:22:c2:14:66:b8:
e3:ff:b1:b9:16:7c:6f:1b:ad:3f:7f:c8:bb:d7:3f:
15:38:00:d9:17:4d:96:d8:23:28:fe:3e:16:60:45:
44:6d:8b:76:52:07:8c:1f:1a:7c:24:e3:42:bd:a5:
7c:ea:4e:20:2c:5d:00:ee:b6:10:72:3d:c4:c3:47:
bc:f2:02:b6:9f:12:80:d5:89:e8:9a:e3:b9:46:41:
97:2e:6c:8c:fb:dd:a8:3f:86:df:35:0f:98:e6:3d:
55:05:be:55:da:40:28:85:5f:55:7c:5c:56:d4:94:
84:e8:31:15:27:63:a9:17:d5:64:28:62:f7:21:82:
f5:af:9a:d7:b4:19:34:3e:56:3c:da:97:dd:03:86:
d2:33:84:56:32:1e:f1:cd:c2:5b:f1:7d:37:03:03:
c9:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B8:44:B4:79:5D:9D:23:94:53:B7:B0:9A:29:8D:97:97:79:65:56:9C
X509v3 Authority Key Identifier:
keyid:A0:BB:17:18:96:3D:DD:91:28:B7:6F:D3:D8:21:3A:15:65:EF:85:6D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/oLsXGJY93ZEot2_T2CE6FWXvhW0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/86/c4210e-90de-4eca-8206-5537d85d2bd0/1/oLsXGJY93ZEot2_T2CE6FWXvhW0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/86/c4210e-90de-4eca-8206-5537d85d2bd0/1/oLsXGJY93ZEot2_T2CE6FWXvhW0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ac:ff:cd:01:9b:df:54:f6:f8:95:e8:77:16:d0:52:1d:26:e6:
c3:70:97:98:de:93:a4:69:48:2e:ab:76:5d:cc:60:ea:b7:12:
a4:0a:b2:f0:88:19:c1:22:39:4a:59:a1:94:ed:52:1c:01:21:
b4:97:d7:b8:99:bd:d8:15:50:6e:71:82:a6:ec:81:17:bf:dc:
e3:73:4f:7b:bf:ca:c5:7d:4f:3c:9e:4c:3b:ec:2f:e2:ac:5d:
85:e4:39:f4:91:0c:71:30:46:97:fa:ea:65:66:8a:04:51:12:
c6:39:85:74:05:4f:fe:db:2a:ef:cb:86:51:44:36:d2:60:04:
55:74:43:0b:d9:7c:a9:4b:75:96:07:01:ba:68:7e:f7:5f:de:
62:35:e4:76:83:84:05:f8:59:1f:d3:14:b5:14:c3:bf:73:1f:
d9:53:c3:1b:ec:96:fe:72:fb:ff:e2:67:a7:f6:02:ac:67:17:
dc:38:b3:83:5c:61:cf:12:24:aa:66:a5:01:87:b1:5c:f8:37:
60:7b:7f:ae:f2:27:79:2a:39:38:63:52:ed:02:54:c3:11:8a:
7f:17:85:96:94:9e:0d:12:98:91:2d:db:09:74:cb:65:8d:dc:
0e:09:49:32:98:30:b0:2a:3e:93:48:cf:4c:25:30:ae:8a:92:
1b:7c:3f:ca
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 11 16:58:59 2025 by rpki-client