Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ad/c720b4-1acb-4703-bc24-467e009daed0/1/o6gu6aoRBu1yDWPDhE5mZEDjRDg.mft
File: o6gu6aoRBu1yDWPDhE5mZEDjRDg.mft (raw, json)
Hash identifier: dz6yjKhDtCmJcDRjlACVdOEYLdtnosQRu9PRATUpvXY=
Subject key identifier: 8A:48:D1:2A:AA:12:96:6D:D8:CD:29:95:F8:43:22:64:7F:52:AB:C1
Authority key identifier: A3:A8:2E:E9:AA:11:06:ED:72:0D:63:C3:84:4E:66:64:40:E3:44:38
Certificate issuer: /CN=a3a82ee9aa1106ed720d63c3844e666440e34438
Certificate serial: 0196C42778100B5B9BC750F00384485A77C2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/o6gu6aoRBu1yDWPDhE5mZEDjRDg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ad/c720b4-1acb-4703-bc24-467e009daed0/1/o6gu6aoRBu1yDWPDhE5mZEDjRDg.mft
Manifest number: 0A6C
Signing time: Mon 12 May 2025 11:00:43 +0000
Manifest this update: Mon 12 May 2025 11:00:43 +0000
Manifest next update: Tue 13 May 2025 11:00:43 +0000
Files and hashes: 1: c6Nj79I3Har3nGytaNZUrH4rLp8.roa (hash: pFirwTzGIzOGXK1Oft6HDqGlSVO899FoeQfzjWxGxFc=)
2: o6gu6aoRBu1yDWPDhE5mZEDjRDg.crl (hash: f7UOGXc235FT4Ggtt+43g401MBY3K4CAGqMiu9Hr+E4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ad/c720b4-1acb-4703-bc24-467e009daed0/1/o6gu6aoRBu1yDWPDhE5mZEDjRDg.crl
rsync://rpki.ripe.net/repository/DEFAULT/ad/c720b4-1acb-4703-bc24-467e009daed0/1/o6gu6aoRBu1yDWPDhE5mZEDjRDg.mft
rsync://rpki.ripe.net/repository/DEFAULT/o6gu6aoRBu1yDWPDhE5mZEDjRDg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 13 May 2025 11:00:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:c4:27:78:10:0b:5b:9b:c7:50:f0:03:84:48:5a:77:c2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a3a82ee9aa1106ed720d63c3844e666440e34438
Validity
Not Before: May 12 11:00:43 2025 GMT
Not After : May 13 11:00:43 2025 GMT
Subject: CN=8a48d12aaa12966dd8cd2995f84322647f52abc1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:69:0e:91:03:14:ba:dd:1a:15:fb:38:19:4a:
a0:31:51:2a:ba:34:30:6a:9e:24:84:da:0c:11:ae:
f8:0b:c2:4e:fd:f3:08:95:02:91:aa:7b:e9:64:a7:
3a:ee:55:d0:5a:da:e4:14:fe:52:2e:e8:73:10:9d:
d9:38:54:ef:09:63:02:b9:42:17:42:cd:0b:a5:2a:
53:00:d4:89:24:37:2a:90:da:13:72:ea:b1:2f:6c:
0e:a5:ba:91:bc:de:a3:b0:c5:50:54:27:c0:4c:d2:
ad:d8:06:9f:64:73:d0:5a:de:85:75:f7:51:a4:b3:
3b:14:d0:59:f5:5f:88:b0:02:ba:fa:ae:51:09:be:
4e:78:0b:d5:73:75:a2:12:29:9f:3a:9a:4e:1d:33:
df:68:31:04:67:51:e3:a3:8c:e3:c3:76:d0:79:ce:
55:2f:80:2c:ee:c8:1e:e0:6b:8b:9c:ec:b4:e0:7e:
52:d6:28:8a:9c:b0:fb:05:76:8b:e6:71:e8:00:08:
22:95:60:e2:48:50:ea:3d:20:ca:8e:c4:62:f9:b0:
63:df:21:f5:ba:6f:d9:15:1b:85:a7:43:b3:ed:e1:
ed:8f:ae:0e:67:56:14:7b:cb:2e:d0:90:08:d4:5f:
a0:7b:2a:bf:0b:f9:09:1b:61:db:90:57:c9:10:cc:
0a:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8A:48:D1:2A:AA:12:96:6D:D8:CD:29:95:F8:43:22:64:7F:52:AB:C1
X509v3 Authority Key Identifier:
keyid:A3:A8:2E:E9:AA:11:06:ED:72:0D:63:C3:84:4E:66:64:40:E3:44:38
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/o6gu6aoRBu1yDWPDhE5mZEDjRDg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ad/c720b4-1acb-4703-bc24-467e009daed0/1/o6gu6aoRBu1yDWPDhE5mZEDjRDg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ad/c720b4-1acb-4703-bc24-467e009daed0/1/o6gu6aoRBu1yDWPDhE5mZEDjRDg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7d:5b:df:17:ab:d9:e2:3e:ab:27:13:a9:f2:26:34:07:ad:66:
26:7f:a5:0a:bd:5b:85:56:c9:92:78:96:14:47:92:51:e2:df:
8c:98:d7:93:43:64:00:d7:66:4d:88:fc:f6:4c:1c:51:56:b4:
f1:93:68:36:86:c8:f7:17:72:40:7a:53:67:62:a8:d2:da:83:
d5:f0:d7:53:aa:41:9b:9d:c2:91:5d:ac:d9:e1:9a:fc:d6:21:
d5:83:83:10:9c:5c:77:03:cc:ff:55:f8:67:c2:d1:68:b1:c6:
52:d3:8b:88:8e:87:75:84:3d:7d:92:ac:2a:0f:e8:54:8f:7a:
53:fa:44:fb:b7:bd:4d:c0:82:b4:77:b6:13:51:93:34:79:ae:
ac:b3:ab:2c:4f:49:bd:dd:85:42:33:ae:82:3f:d0:2d:7a:c4:
e3:5c:7f:a8:fa:04:61:b9:69:21:2e:31:03:d7:a0:1b:db:c7:
5c:70:d1:fe:b1:34:f9:1d:30:0c:1f:d9:4f:2c:25:02:aa:50:
54:a0:08:21:1c:53:d7:be:28:4d:e9:e2:ed:98:7f:1a:b3:1f:
65:97:55:51:d8:55:9b:47:c9:c6:fa:80:e7:cf:7a:3d:18:7e:
16:bb:0b:a1:c3:5a:67:df:65:10:0a:c9:10:5c:67:90:97:8b:
c4:66:e3:54
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 12 17:04:16 2025 by rpki-client