Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b4/13bd77-d297-4689-bee4-466e9cab7864/1/O6WxwJqjH2cTxhsy5VgQnkeWbUI.mft
File: O6WxwJqjH2cTxhsy5VgQnkeWbUI.mft (raw, json)
Hash identifier: rYBavoFm05BOVaaBGAkatEvNMDua1IN2UEgL9548F/0=
Subject key identifier: D6:59:1B:49:6B:2F:AF:CC:CC:77:14:00:BC:D3:9D:50:DB:C5:C7:DD
Authority key identifier: 3B:A5:B1:C0:9A:A3:1F:67:13:C6:1B:32:E5:58:10:9E:47:96:6D:42
Certificate issuer: /CN=3ba5b1c09aa31f6713c61b32e558109e47966d42
Certificate serial: 0196BE259AA593F660D92EFD2C730BF05133
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/O6WxwJqjH2cTxhsy5VgQnkeWbUI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b4/13bd77-d297-4689-bee4-466e9cab7864/1/O6WxwJqjH2cTxhsy5VgQnkeWbUI.mft
Manifest number: 1544
Signing time: Sun 11 May 2025 07:00:57 +0000
Manifest this update: Sun 11 May 2025 07:00:57 +0000
Manifest next update: Mon 12 May 2025 07:00:57 +0000
Files and hashes: 1: 1-kJ7dFfkbXY8GKTB51YoZp95upA.roa (hash: dR9vYcvJGh1CzLQ01rVJBBjGJtG77A8jF4vNPyZgLsk=)
2: BEfZLYm22ytL2TAUbAdVw1zX1Lw.roa (hash: klB/IG9rFDsKmRUAoHWuriGo/ZZNxkQ+BXChvVj85xk=)
3: HEUTASsEJ1XaEbGOmH7X4Jwc8WA.roa (hash: pY4BF2ACBH1qgVniWcBeMHaQwZVHstzR7MkwfTMJy6w=)
4: L2g5JebuYY7V2mQAYgdmVvxTDpM.roa (hash: NnNek1hVJzs9KMTpcStW+sGX8YKBScQrjrv4sJRJLuY=)
5: O6WxwJqjH2cTxhsy5VgQnkeWbUI.crl (hash: MOk+L0prs/eYnNQmwks5zSHrnkCXc0lHj86kMl7o17w=)
6: XOraKSxzxrwhqKYes5-js7tbyMM.roa (hash: WQ2IBOPtnhThz+gIf7Qaas166QmuF5Q3ApP6XXJ39d4=)
7: g9BBfDc_1PLnz7Bt9VifF-7KO2o.roa (hash: egth43kB7TA1PASJjKkxy/iH4S+KR37qtj3zbkktKes=)
8: nqUZf1GLiVDPhsp8HEtZMlhp3BY.roa (hash: AwrhAC+0+48MNhq3fFji1sJrgTPkE6AyZbz5FDgm7So=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b4/13bd77-d297-4689-bee4-466e9cab7864/1/O6WxwJqjH2cTxhsy5VgQnkeWbUI.crl
rsync://rpki.ripe.net/repository/DEFAULT/b4/13bd77-d297-4689-bee4-466e9cab7864/1/O6WxwJqjH2cTxhsy5VgQnkeWbUI.mft
rsync://rpki.ripe.net/repository/DEFAULT/O6WxwJqjH2cTxhsy5VgQnkeWbUI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 12 May 2025 07:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:be:25:9a:a5:93:f6:60:d9:2e:fd:2c:73:0b:f0:51:33
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3ba5b1c09aa31f6713c61b32e558109e47966d42
Validity
Not Before: May 11 07:00:57 2025 GMT
Not After : May 12 07:00:57 2025 GMT
Subject: CN=d6591b496b2fafcccc771400bcd39d50dbc5c7dd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:83:1a:ee:42:81:d1:d6:72:12:7a:2c:e7:3e:99:
0c:e0:af:6b:48:d1:e7:a1:74:06:e2:61:4f:ca:3e:
40:83:90:da:26:f0:05:6c:99:15:cc:52:7d:24:6f:
5a:63:96:da:ee:42:47:46:56:59:cb:0d:69:71:e3:
39:18:b2:8d:f2:33:04:2b:c9:2c:e2:ca:30:27:bf:
e0:58:0a:c6:63:80:74:50:0a:9a:1f:a4:da:f3:14:
62:52:d9:76:18:bf:75:37:b4:c6:4e:a4:40:54:03:
9e:de:25:fd:82:0e:99:06:0e:8b:6e:96:57:98:cb:
09:3d:21:13:82:e6:da:db:5a:5e:a7:e6:33:f2:5d:
6a:f6:c7:5f:c2:74:c1:f7:8b:88:df:3e:da:74:11:
03:05:42:8b:7d:87:31:35:85:6c:fd:59:dd:e1:87:
8e:9b:bb:08:b4:9e:11:bd:35:53:d8:e7:8a:d4:82:
92:63:8c:f7:2b:8a:2a:d4:d1:0e:05:80:5a:37:21:
60:30:3c:ec:57:45:bf:c8:b8:24:10:dc:e7:1b:20:
27:e1:c2:21:e6:37:2c:be:55:18:00:a5:0b:1c:98:
5c:7a:06:4b:6f:c4:f2:c9:1f:d7:6e:64:f3:81:f2:
11:a8:b2:bb:73:9f:26:20:28:00:cd:45:bf:eb:b8:
dc:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D6:59:1B:49:6B:2F:AF:CC:CC:77:14:00:BC:D3:9D:50:DB:C5:C7:DD
X509v3 Authority Key Identifier:
keyid:3B:A5:B1:C0:9A:A3:1F:67:13:C6:1B:32:E5:58:10:9E:47:96:6D:42
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/O6WxwJqjH2cTxhsy5VgQnkeWbUI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/13bd77-d297-4689-bee4-466e9cab7864/1/O6WxwJqjH2cTxhsy5VgQnkeWbUI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/13bd77-d297-4689-bee4-466e9cab7864/1/O6WxwJqjH2cTxhsy5VgQnkeWbUI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
05:d7:4b:37:d2:6c:14:46:bd:ca:66:21:c0:fa:fc:a9:20:78:
c6:82:71:12:22:8a:1f:d0:52:e3:13:58:7a:e7:ab:7b:ef:be:
e7:98:43:2e:ad:1d:c8:02:e4:ae:1b:f1:4f:d9:ee:3b:bb:40:
b3:2f:d0:ad:67:0d:88:ca:18:75:bf:d1:30:0a:23:4e:23:e0:
79:86:57:72:38:40:1e:64:46:40:5f:31:8d:28:12:fb:07:c3:
e4:95:de:e9:2a:3b:0f:85:1a:b1:4f:20:0a:23:5e:81:39:01:
52:5a:7b:d0:7a:c4:26:5e:41:c3:6b:9d:0b:36:c3:34:47:e9:
cd:53:47:2d:f3:cd:f8:74:e7:f3:52:ca:9a:1d:a8:e7:db:70:
2b:b3:96:b8:e9:7c:e7:26:45:d3:3d:4b:df:4c:fb:37:1b:73:
2f:8c:09:80:43:54:26:a9:43:2a:fc:68:a7:6a:96:a7:44:17:
19:95:d5:87:c4:8f:ca:46:de:bf:44:49:0a:3a:7b:bd:79:47:
aa:6b:d0:64:7f:37:c7:22:87:7a:7c:b7:c4:10:39:0c:b8:dd:
39:8f:e5:64:ea:28:c5:46:16:5a:25:96:8c:4f:73:c8:95:1c:
c2:3a:3c:d3:60:e3:a1:ce:b3:10:bd:d5:c2:9f:10:be:5b:7b:
da:5c:5b:ee
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 11 16:42:04 2025 by rpki-client