Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ba/ef20cf-4c39-4707-857c-7c35006e07a1/1/O4_iRlhDAxt3i7jYt701oJT8z0g.mft
File: O4_iRlhDAxt3i7jYt701oJT8z0g.mft (raw, json)
Hash identifier: JrwYesgDLcji4rXFYuTDMthpvdK5oL+WtdYhOfyYlOg=
Subject key identifier: 93:2F:76:93:15:50:E9:97:4B:39:9C:88:EC:EB:3A:B0:04:6A:80:58
Authority key identifier: 3B:8F:E2:46:58:43:03:1B:77:8B:B8:D8:B7:BD:35:A0:94:FC:CF:48
Certificate issuer: /CN=3b8fe2465843031b778bb8d8b7bd35a094fccf48
Certificate serial: 0196BDEE416C912E7776CADE2602CBCEDC8E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/O4_iRlhDAxt3i7jYt701oJT8z0g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ba/ef20cf-4c39-4707-857c-7c35006e07a1/1/O4_iRlhDAxt3i7jYt701oJT8z0g.mft
Manifest number: 0F9B
Signing time: Sun 11 May 2025 06:00:30 +0000
Manifest this update: Sun 11 May 2025 06:00:30 +0000
Manifest next update: Mon 12 May 2025 06:00:30 +0000
Files and hashes: 1: 1-Ls4q-ChZ0ZaOTjP1nQ6tqwVR7w.roa (hash: YXXZf8p+XXstJczN+ymTH8ANFDcZF/VCsvvC/wyu2tg=)
2: 3K66fkLdFIhZuPgVnT8dBkSPcIY.roa (hash: jrto9CYh3lf5yVyFB1TxobdXxUZh+GOGoL+a0rSxI8I=)
3: AF6uSBXXjV8m6D8T1L1tDnPI1pQ.roa (hash: 5ngifaMxS9mhHVtoSr7d4Aq0k4gtgdDqeUt6H7Q6K9U=)
4: GJq6jlu04Rm9wa7Cgp8cTcM0nxA.roa (hash: AENchPK3bfQJEdljclR0ie9L+vwumxV2eeigY07rGKw=)
5: O4_iRlhDAxt3i7jYt701oJT8z0g.crl (hash: emen+TOmlcKQhpADamtTt46h8BA7IdBjgSWjomkvptU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ba/ef20cf-4c39-4707-857c-7c35006e07a1/1/O4_iRlhDAxt3i7jYt701oJT8z0g.crl
rsync://rpki.ripe.net/repository/DEFAULT/ba/ef20cf-4c39-4707-857c-7c35006e07a1/1/O4_iRlhDAxt3i7jYt701oJT8z0g.mft
rsync://rpki.ripe.net/repository/DEFAULT/O4_iRlhDAxt3i7jYt701oJT8z0g.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 11 May 2025 23:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:bd:ee:41:6c:91:2e:77:76:ca:de:26:02:cb:ce:dc:8e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3b8fe2465843031b778bb8d8b7bd35a094fccf48
Validity
Not Before: May 11 06:00:30 2025 GMT
Not After : May 12 06:00:30 2025 GMT
Subject: CN=932f76931550e9974b399c88eceb3ab0046a8058
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:56:e7:a3:35:5a:5d:29:31:19:a1:0b:81:f5:
20:17:50:22:ef:fc:2b:5e:04:e9:b2:1f:04:2a:f5:
63:c6:4a:69:7e:f2:3b:99:c7:0c:59:75:a7:95:59:
97:78:91:b0:91:b9:32:a0:73:f8:89:61:22:bc:91:
b8:b5:56:13:fd:d6:88:35:ab:24:b6:a0:71:b0:53:
16:a6:9c:20:70:13:d3:69:3d:04:e8:27:e8:39:c0:
9e:cb:c5:dd:55:84:54:ec:5e:43:5a:c8:75:d6:d3:
4f:1d:34:c1:ec:90:18:51:8c:0b:ce:7d:9b:28:25:
96:da:f2:0c:70:54:1a:05:9e:14:44:ee:44:41:7f:
20:cd:9e:8d:e6:b8:b0:ad:57:7f:6c:9d:15:a5:cd:
e5:a5:db:f1:68:e9:bb:cc:47:0f:55:85:19:78:7b:
61:cb:24:8f:64:f2:5f:2d:45:e2:65:e6:f2:65:a4:
b6:9f:60:a0:d4:16:a6:43:f6:9f:f9:8a:49:f6:f2:
17:12:88:49:51:67:67:2e:c6:ed:3b:45:53:c6:52:
fb:68:87:09:9f:9a:b7:d3:fa:8d:6a:e3:52:5f:1e:
b1:c6:92:10:38:f6:ce:14:37:a7:0a:4d:75:26:ec:
14:94:6c:27:ca:7d:41:b9:14:12:d3:30:52:20:a0:
e1:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
93:2F:76:93:15:50:E9:97:4B:39:9C:88:EC:EB:3A:B0:04:6A:80:58
X509v3 Authority Key Identifier:
keyid:3B:8F:E2:46:58:43:03:1B:77:8B:B8:D8:B7:BD:35:A0:94:FC:CF:48
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/O4_iRlhDAxt3i7jYt701oJT8z0g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ba/ef20cf-4c39-4707-857c-7c35006e07a1/1/O4_iRlhDAxt3i7jYt701oJT8z0g.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ba/ef20cf-4c39-4707-857c-7c35006e07a1/1/O4_iRlhDAxt3i7jYt701oJT8z0g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
33:75:51:e6:c2:e3:e9:01:68:25:9b:3a:3a:4c:8e:b5:8e:67:
c7:8d:86:93:5d:6d:d1:02:76:5d:fe:a5:2d:f9:a6:41:07:b9:
9f:14:db:2a:8d:b2:4f:8a:c7:86:a8:68:f2:30:31:4c:d5:b2:
42:6d:04:1f:bf:b6:13:d7:96:b1:b9:f0:d8:a6:e2:9b:56:19:
ed:b6:87:27:4f:45:cf:d4:41:70:cd:b1:60:8f:84:c6:d6:1d:
37:81:6b:94:bc:ae:a0:1d:32:b9:87:3b:18:39:84:91:99:5f:
c6:12:85:a4:24:a3:bd:4c:f9:1e:15:71:b1:80:ce:1b:81:1b:
82:d2:b2:a3:ad:06:67:59:c1:9a:95:03:72:58:22:50:76:2a:
cf:6c:9e:2a:28:f2:c0:bf:f2:78:89:03:ec:b2:5d:51:0c:12:
dd:f1:4f:e8:a5:a3:3a:0a:a6:e5:be:1c:42:53:30:6b:0c:f6:
7a:45:0e:95:48:d5:f5:d1:2c:14:50:af:1e:55:02:4f:4e:75:
21:05:ab:82:23:27:56:1c:e0:2a:ef:70:2e:f3:1e:a3:b5:5d:
24:85:78:4c:bd:c2:4d:08:5d:9b:07:c1:25:a1:8f:ff:03:5f:
9c:ab:bb:5d:15:70:ff:53:a7:b8:3a:0f:dc:0a:37:f2:10:ae:
ce:61:ce:73
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 11 09:05:16 2025 by rpki-client