Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/88/ba70f2-b7ac-4346-9d08-63ae0bfc169f/1/O_zNSgBCLIZfUJO4W7howrswxGk.mft
File: O_zNSgBCLIZfUJO4W7howrswxGk.mft (raw, json)
Hash identifier: LLPNimTA7ZrXOCU+7G5QcjrCdhKHgZdrYterS0G8Dmo=
Subject key identifier: E1:C6:96:23:FF:17:CF:0D:6A:3E:FF:79:B3:B8:A8:D5:3A:67:BB:E2
Authority key identifier: 3B:FC:CD:4A:00:42:2C:86:5F:50:93:B8:5B:B8:68:C2:BB:30:C4:69
Certificate issuer: /CN=3bfccd4a00422c865f5093b85bb868c2bb30c469
Certificate serial: 0196CD98C855066E633A96C986CF9C7203E4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/O_zNSgBCLIZfUJO4W7howrswxGk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/88/ba70f2-b7ac-4346-9d08-63ae0bfc169f/1/O_zNSgBCLIZfUJO4W7howrswxGk.mft
Manifest number: 153F
Signing time: Wed 14 May 2025 07:01:04 +0000
Manifest this update: Wed 14 May 2025 07:01:04 +0000
Manifest next update: Thu 15 May 2025 07:01:04 +0000
Files and hashes: 1: 3U1ZWgNoASiRwWRzOTs9a26_aSI.roa (hash: rfiPEMHu4Dy2ke39aiCtx6HNVMRJPDS81QuXHyTH8CQ=)
2: O_zNSgBCLIZfUJO4W7howrswxGk.crl (hash: WbUZwaN3RU9pXnKaMIIvWwKmUaScxjox1PGPMwDlbXc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/88/ba70f2-b7ac-4346-9d08-63ae0bfc169f/1/O_zNSgBCLIZfUJO4W7howrswxGk.crl
rsync://rpki.ripe.net/repository/DEFAULT/88/ba70f2-b7ac-4346-9d08-63ae0bfc169f/1/O_zNSgBCLIZfUJO4W7howrswxGk.mft
rsync://rpki.ripe.net/repository/DEFAULT/O_zNSgBCLIZfUJO4W7howrswxGk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 15 May 2025 07:01:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:cd:98:c8:55:06:6e:63:3a:96:c9:86:cf:9c:72:03:e4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3bfccd4a00422c865f5093b85bb868c2bb30c469
Validity
Not Before: May 14 07:01:04 2025 GMT
Not After : May 15 07:01:04 2025 GMT
Subject: CN=e1c69623ff17cf0d6a3eff79b3b8a8d53a67bbe2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dc:31:fa:9d:4c:64:4a:48:0b:aa:f4:d6:db:79:
1d:05:00:74:87:87:aa:32:b4:21:5b:0e:91:48:94:
4d:63:87:c1:b0:45:9d:16:2e:30:28:1a:8a:3a:da:
f6:1a:63:82:37:af:30:a3:29:df:56:ea:2a:bc:b0:
4d:20:64:d7:59:45:26:22:f6:f8:81:23:11:1f:34:
ed:ff:63:ef:84:98:21:11:5f:ad:2c:25:67:fd:02:
f4:83:76:1d:a2:71:b7:7b:49:ab:b5:b1:72:56:60:
b2:71:83:75:5c:1f:0c:93:d0:9d:1a:a8:b7:4d:40:
43:ce:46:68:2a:04:a8:03:d5:17:16:9c:23:61:e8:
8a:14:c8:f9:1b:42:ec:28:4a:22:07:8a:0a:f5:8e:
c2:1a:b0:cd:df:0f:68:90:e5:11:8c:27:39:c4:96:
86:f4:bd:e6:00:96:22:e8:fc:d0:39:9a:6f:3e:ee:
10:8e:cd:e3:f8:48:40:4c:1b:42:12:23:4c:10:f3:
36:1b:77:48:fd:24:3d:24:7d:91:36:b2:67:9d:c8:
62:c3:81:10:43:e6:03:f2:79:17:63:c0:c8:be:0a:
ce:06:a2:79:70:10:d7:30:cc:6f:20:72:d0:9d:9a:
6b:a3:99:28:9f:12:42:6a:d3:ac:52:79:34:52:c4:
0a:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E1:C6:96:23:FF:17:CF:0D:6A:3E:FF:79:B3:B8:A8:D5:3A:67:BB:E2
X509v3 Authority Key Identifier:
keyid:3B:FC:CD:4A:00:42:2C:86:5F:50:93:B8:5B:B8:68:C2:BB:30:C4:69
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/O_zNSgBCLIZfUJO4W7howrswxGk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/88/ba70f2-b7ac-4346-9d08-63ae0bfc169f/1/O_zNSgBCLIZfUJO4W7howrswxGk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/88/ba70f2-b7ac-4346-9d08-63ae0bfc169f/1/O_zNSgBCLIZfUJO4W7howrswxGk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
06:12:17:b4:1a:9f:c0:7f:99:ca:f8:8e:90:c2:5d:27:99:7d:
76:58:71:a6:93:90:c0:72:e1:eb:79:f4:2a:86:90:38:f1:4f:
51:b4:5f:89:02:56:fb:3b:7d:28:80:6e:4b:04:ea:59:f3:67:
9b:9e:e5:b7:bb:21:72:26:1d:7c:83:dc:51:25:58:f1:40:de:
07:09:ed:b2:36:bc:c2:10:96:70:c7:58:da:03:a9:f5:16:5c:
26:ac:f5:a2:fe:39:e1:68:c3:06:0c:dd:15:44:63:94:93:71:
16:a4:ea:28:70:f0:1d:f0:82:dc:d5:4a:28:00:c1:d4:51:1e:
30:ba:82:58:b5:40:0a:cb:43:16:09:10:7a:06:29:e7:cb:24:
46:4d:1f:ff:b1:2a:6f:10:56:a4:f5:76:24:06:1d:b3:6d:b7:
5e:dc:61:48:21:d0:f6:25:56:ad:76:70:96:86:93:18:7c:bb:
5e:f5:0c:dd:9f:26:9a:5f:0f:23:a4:13:64:43:0d:c2:fc:ce:
f1:7f:d8:14:d7:cb:e2:49:f0:ea:47:e8:f0:7a:dd:dc:98:70:
71:cc:27:20:23:85:1a:b0:a7:61:ef:63:31:b9:e7:b0:7a:ce:
00:1f:55:02:90:fa:c6:de:13:f9:80:2d:b1:45:84:78:5d:e1:
49:da:eb:fc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 14 12:54:32 2025 by rpki-client