Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/87/6d45c9-b2ca-40b7-80fe-a633125b7e23/1/C_O8-guoLZPRT4VYcCen53NRGmE.mft
File: C_O8-guoLZPRT4VYcCen53NRGmE.mft (raw, json)
Hash identifier: BXwF0V8G6PCUbcr1vJYL2KokzQl69EqFDSNCtr/PWvg=
Subject key identifier: D6:89:AE:9B:A6:99:EF:A5:65:58:C2:A2:33:BD:9C:06:75:E8:E8:14
Authority key identifier: 0B:F3:BC:FA:0B:A8:2D:93:D1:4F:85:58:70:27:A7:E7:73:51:1A:61
Certificate issuer: /CN=0bf3bcfa0ba82d93d14f85587027a7e773511a61
Certificate serial: 0196C53A5DAC74901D0DBA909FF546999A1A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/C_O8-guoLZPRT4VYcCen53NRGmE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/87/6d45c9-b2ca-40b7-80fe-a633125b7e23/1/C_O8-guoLZPRT4VYcCen53NRGmE.mft
Manifest number: 04BE
Signing time: Mon 12 May 2025 16:00:58 +0000
Manifest this update: Mon 12 May 2025 16:00:58 +0000
Manifest next update: Tue 13 May 2025 16:00:58 +0000
Files and hashes: 1: C_O8-guoLZPRT4VYcCen53NRGmE.crl (hash: V+eoUYVdv+AfUEQnQlKQcGV6RPNGbsuDMCiNA1KnzKc=)
2: UaXU4JRzeuGMG6wdYLOUEK9yfe8.roa (hash: 4U1yrHFJUucJ8q4Do7bByqlbkCfcvDVqW8/VtgVvyc8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/87/6d45c9-b2ca-40b7-80fe-a633125b7e23/1/C_O8-guoLZPRT4VYcCen53NRGmE.crl
rsync://rpki.ripe.net/repository/DEFAULT/87/6d45c9-b2ca-40b7-80fe-a633125b7e23/1/C_O8-guoLZPRT4VYcCen53NRGmE.mft
rsync://rpki.ripe.net/repository/DEFAULT/C_O8-guoLZPRT4VYcCen53NRGmE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 13 May 2025 14:31:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:c5:3a:5d:ac:74:90:1d:0d:ba:90:9f:f5:46:99:9a:1a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0bf3bcfa0ba82d93d14f85587027a7e773511a61
Validity
Not Before: May 12 16:00:58 2025 GMT
Not After : May 13 16:00:58 2025 GMT
Subject: CN=d689ae9ba699efa56558c2a233bd9c0675e8e814
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8f:54:ac:51:f6:f7:60:8a:bc:f0:43:11:68:1c:
cf:c7:c0:82:5e:1c:99:a4:35:a7:e7:c8:df:59:0e:
58:57:51:34:c2:9e:7f:36:93:68:32:6d:b3:f8:bd:
52:d3:12:2f:e7:7c:c5:8b:e8:6c:ab:8c:cc:da:83:
95:5f:15:13:5b:0c:d3:62:34:71:41:90:aa:1e:ea:
ec:b0:fd:e1:eb:21:49:07:a6:25:5a:16:04:14:58:
b5:b3:6c:d5:a2:0b:c8:13:ff:f2:3c:bb:85:79:78:
2f:cf:3b:a7:b7:7b:31:9e:de:aa:f7:26:1d:1a:bc:
98:57:54:13:39:4d:b0:5a:25:10:31:e8:75:05:3e:
b8:44:42:be:5e:77:0a:5c:ce:bf:45:26:d0:8d:43:
b7:95:aa:da:1d:f0:35:a2:37:8d:18:f7:bb:b1:fb:
94:fd:ba:4b:e0:46:23:88:d0:58:61:cd:81:b9:95:
c0:1f:d9:80:08:a3:81:70:7a:ea:96:63:cd:ce:fd:
76:2d:74:79:97:6e:b9:8c:43:b1:c6:00:50:88:af:
2e:ef:42:91:0f:24:2e:bb:c7:21:1e:90:80:b8:f7:
ac:39:7b:81:f6:70:64:7b:5f:37:56:d4:bd:00:f8:
9a:45:c6:06:1c:1b:f1:62:23:2d:cb:70:5d:ff:be:
3a:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D6:89:AE:9B:A6:99:EF:A5:65:58:C2:A2:33:BD:9C:06:75:E8:E8:14
X509v3 Authority Key Identifier:
keyid:0B:F3:BC:FA:0B:A8:2D:93:D1:4F:85:58:70:27:A7:E7:73:51:1A:61
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/C_O8-guoLZPRT4VYcCen53NRGmE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/87/6d45c9-b2ca-40b7-80fe-a633125b7e23/1/C_O8-guoLZPRT4VYcCen53NRGmE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/87/6d45c9-b2ca-40b7-80fe-a633125b7e23/1/C_O8-guoLZPRT4VYcCen53NRGmE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5d:b6:82:8d:36:eb:d8:50:29:5b:8b:c6:ad:75:fa:34:1a:25:
bc:59:c5:cc:92:c1:03:47:4e:98:2b:b7:7d:7e:81:e6:a2:a1:
12:ef:ee:05:e2:1f:6e:a1:d6:2e:9e:de:37:7c:f0:99:fd:f2:
17:73:1a:70:58:ee:15:3c:32:08:86:9f:61:40:15:e4:41:e0:
0a:f7:2d:ce:39:e6:84:07:c4:48:18:58:77:3c:f4:dc:42:4c:
ba:37:05:00:59:32:b4:0d:d5:65:ba:29:3c:c8:e7:a1:3b:23:
bb:bf:68:f9:2e:c8:bb:e4:52:6f:86:23:00:9f:7a:08:91:b6:
19:fe:fa:08:0d:33:18:19:a5:86:e5:55:6d:ad:d7:2a:62:ec:
4c:29:4b:87:2d:17:55:e3:00:22:8b:d6:a8:4a:d0:68:ac:02:
1c:d0:6f:34:92:96:d9:a0:91:38:ea:b7:27:7a:61:04:ec:83:
6f:9d:d2:29:89:03:ea:29:25:e4:a2:cc:9e:19:eb:f0:d9:fc:
4f:50:cf:42:69:77:f9:10:74:1e:d1:9f:a6:fd:50:7b:84:2b:
07:77:e8:63:1c:7a:b3:11:9e:3f:bb:d2:e9:49:2f:bb:87:f9:
ea:c5:9c:05:72:86:e0:62:3b:47:d3:cd:de:0b:2e:40:4c:8b:
b4:5a:d4:eb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 12 20:44:17 2025 by rpki-client