Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9a/f565d7-32af-4be1-82ac-b602cedac36c/1/o3h9K-bqw2wdJ4D3hrh8nhU-gfE.mft
File: o3h9K-bqw2wdJ4D3hrh8nhU-gfE.mft (raw, json)
Hash identifier: UBIMz7h2PxazO49ur65iQ9nPazWntVAfJXXTmshNMRI=
Subject key identifier: B5:F6:B1:04:E5:8A:D7:22:83:66:42:79:F6:EB:34:50:C7:43:68:83
Authority key identifier: A3:78:7D:2B:E6:EA:C3:6C:1D:27:80:F7:86:B8:7C:9E:15:3E:81:F1
Certificate issuer: /CN=a3787d2be6eac36c1d2780f786b87c9e153e81f1
Certificate serial: 0196C314852B3C214AAE39B7111FE85204E5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/o3h9K-bqw2wdJ4D3hrh8nhU-gfE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9a/f565d7-32af-4be1-82ac-b602cedac36c/1/o3h9K-bqw2wdJ4D3hrh8nhU-gfE.mft
Manifest number: 0F0A
Signing time: Mon 12 May 2025 06:00:23 +0000
Manifest this update: Mon 12 May 2025 06:00:23 +0000
Manifest next update: Tue 13 May 2025 06:00:23 +0000
Files and hashes: 1: 00IasE-o8chBNSoJdt3smuycCow.roa (hash: pV/5gFRP1JCOYIjBq4kIT8BYMxCvMc+8eXCSruPkrAc=)
2: OUfSr-obqja2htAQodOdBecQwpM.roa (hash: kYEhvKSYnyjKX9d+IlHmBvClGZqsfdLMn/6qKgbrz/8=)
3: lqiA_aAj9YiPmEY_ozKBdTXaK8U.roa (hash: FH++B616VrSvf6jbJ25EtMhVAMv/kHOEkuMZjWfUstA=)
4: o3h9K-bqw2wdJ4D3hrh8nhU-gfE.crl (hash: sZ63JOm78nS9HZExti3xfvsusKJoo8xNl0hcFCUN7K4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9a/f565d7-32af-4be1-82ac-b602cedac36c/1/o3h9K-bqw2wdJ4D3hrh8nhU-gfE.crl
rsync://rpki.ripe.net/repository/DEFAULT/9a/f565d7-32af-4be1-82ac-b602cedac36c/1/o3h9K-bqw2wdJ4D3hrh8nhU-gfE.mft
rsync://rpki.ripe.net/repository/DEFAULT/o3h9K-bqw2wdJ4D3hrh8nhU-gfE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 13 May 2025 01:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:c3:14:85:2b:3c:21:4a:ae:39:b7:11:1f:e8:52:04:e5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a3787d2be6eac36c1d2780f786b87c9e153e81f1
Validity
Not Before: May 12 06:00:23 2025 GMT
Not After : May 13 06:00:23 2025 GMT
Subject: CN=b5f6b104e58ad72283664279f6eb3450c7436883
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:d6:ba:b0:04:9c:65:49:29:c5:78:a6:3e:5e:
e7:92:42:43:c7:37:b8:e0:d2:d9:fa:d3:80:2e:cb:
98:50:8d:e3:8e:a9:b8:9d:96:3b:cc:2b:f1:93:06:
28:52:c5:9f:9a:5a:a8:92:53:db:a0:2e:9f:b5:3b:
76:fd:ec:49:d2:d6:93:2d:7d:35:33:90:e2:33:56:
f7:5e:e7:69:c4:f9:b8:91:73:96:6a:27:7e:96:7b:
9d:39:8f:06:f8:60:c8:77:8a:7f:85:20:46:53:21:
35:b9:97:2c:7e:21:79:1a:13:56:e5:c2:21:a3:93:
08:cc:92:8e:df:9f:ca:93:f0:a2:ab:cc:9c:d7:d1:
ad:eb:f7:62:55:57:9b:d6:52:56:c1:82:4f:63:55:
fc:fe:07:a2:43:c9:48:9e:e4:8c:bc:cb:66:18:9e:
0e:03:6b:79:28:3a:32:4a:4f:4c:79:8e:0d:eb:b0:
08:03:49:04:17:70:66:c3:9b:48:0e:09:58:e3:fe:
47:42:e0:c0:90:b0:a3:cb:e6:07:5d:cb:69:a9:cf:
93:d3:65:87:9e:e1:10:23:d4:30:80:09:dd:5e:c6:
8e:4c:f6:79:d6:ea:66:6c:79:b2:95:97:8c:7c:a9:
6d:e9:dc:37:a6:6c:3e:d1:ed:05:9e:6b:32:88:74:
9f:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B5:F6:B1:04:E5:8A:D7:22:83:66:42:79:F6:EB:34:50:C7:43:68:83
X509v3 Authority Key Identifier:
keyid:A3:78:7D:2B:E6:EA:C3:6C:1D:27:80:F7:86:B8:7C:9E:15:3E:81:F1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/o3h9K-bqw2wdJ4D3hrh8nhU-gfE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9a/f565d7-32af-4be1-82ac-b602cedac36c/1/o3h9K-bqw2wdJ4D3hrh8nhU-gfE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9a/f565d7-32af-4be1-82ac-b602cedac36c/1/o3h9K-bqw2wdJ4D3hrh8nhU-gfE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
26:12:e3:0c:f2:17:0a:94:cd:0a:15:ae:4d:f4:71:82:31:f6:
13:d7:94:7f:32:df:bf:12:9e:eb:f1:6e:c9:e0:d0:b2:6a:94:
3a:d7:2d:b3:4c:cb:0b:6c:fb:7a:2a:ef:f0:c9:90:67:ed:e5:
83:51:f2:0f:66:23:60:5e:bf:f4:39:1d:23:8f:b0:6e:02:60:
ca:26:b3:56:56:d4:06:d9:6f:c4:68:16:7c:e3:3b:9a:4c:58:
c7:6a:0e:ea:12:d6:40:40:1c:ec:49:83:64:30:a2:cd:f3:db:
c2:c5:96:5f:91:23:6a:63:32:f1:71:d5:b1:ec:59:38:1c:eb:
c7:19:07:7b:81:1d:21:84:45:11:f6:3d:b9:99:94:2a:d0:03:
b1:62:fb:66:c6:e5:d8:96:1c:9e:7d:2f:98:ad:1c:49:d3:58:
5c:a7:57:92:fd:41:76:1e:05:f5:99:24:5e:71:1a:34:08:2b:
82:2c:3c:d6:84:8b:6a:c1:55:1a:bd:b9:6c:95:f1:f6:7c:87:
be:29:b6:aa:06:7e:df:3a:77:04:34:82:6f:fb:98:52:38:b9:
06:82:50:9b:16:1c:33:e9:46:7b:1e:e7:30:8f:2e:a3:41:b0:
d3:1e:1f:a9:88:77:df:4d:d3:9d:76:a0:9c:35:e4:4b:71:12:
2b:14:52:6f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 12 08:35:12 2025 by rpki-client