Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bc/46358e-54f7-4f4b-a747-f735e3dafd53/1/oNrnZ4o5aWnmNAydy2XN6eMpVUo.mft
File: oNrnZ4o5aWnmNAydy2XN6eMpVUo.mft (raw, json)
Hash identifier: l7+bflIubJ5MkriLDAkbhBxYYl7iXXVWnlL5osU8/sg=
Subject key identifier: EA:C7:33:50:64:E8:50:01:5B:0A:8E:37:01:A9:58:17:E7:3F:5A:17
Authority key identifier: A0:DA:E7:67:8A:39:69:69:E6:34:0C:9D:CB:65:CD:E9:E3:29:55:4A
Certificate issuer: /CN=a0dae7678a396969e6340c9dcb65cde9e329554a
Certificate serial: 0196AB0CA1E370A5C4C96B1724C0A215C307
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/oNrnZ4o5aWnmNAydy2XN6eMpVUo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bc/46358e-54f7-4f4b-a747-f735e3dafd53/1/oNrnZ4o5aWnmNAydy2XN6eMpVUo.mft
Manifest number: 0C39
Signing time: Wed 07 May 2025 14:00:53 +0000
Manifest this update: Wed 07 May 2025 14:00:53 +0000
Manifest next update: Thu 08 May 2025 14:00:53 +0000
Files and hashes: 1: ILIvvSN7jhBNrgAFepnE5fxAfIc.roa (hash: qrswcvi6gW3Bxpx7V6TKM6+tVg0zuZnKPktwjp/YCHs=)
2: S4AYf34wbJr686FuAfXvLLFVW90.roa (hash: QoZkIggV0Rak9NY5B7MD5kJpzqBlOZcHQ7nSTP7ujCU=)
3: jzKy-bNbEooaDReNok2j2yv-pdI.roa (hash: GUiFogVUQmG0/pMsKlem+Qrlz+e50kXxDrB2fF+wH/s=)
4: oNrnZ4o5aWnmNAydy2XN6eMpVUo.crl (hash: DxYaA6d6dra1kqnma5hRLeq5nT6nDdbG3xpPG7T1FQk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bc/46358e-54f7-4f4b-a747-f735e3dafd53/1/oNrnZ4o5aWnmNAydy2XN6eMpVUo.crl
rsync://rpki.ripe.net/repository/DEFAULT/bc/46358e-54f7-4f4b-a747-f735e3dafd53/1/oNrnZ4o5aWnmNAydy2XN6eMpVUo.mft
rsync://rpki.ripe.net/repository/DEFAULT/oNrnZ4o5aWnmNAydy2XN6eMpVUo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 08 May 2025 13:31:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:ab:0c:a1:e3:70:a5:c4:c9:6b:17:24:c0:a2:15:c3:07
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a0dae7678a396969e6340c9dcb65cde9e329554a
Validity
Not Before: May 7 14:00:53 2025 GMT
Not After : May 8 14:00:53 2025 GMT
Subject: CN=eac7335064e850015b0a8e3701a95817e73f5a17
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:78:1c:c3:1f:c2:f0:fa:2b:e4:19:b0:6d:15:
5f:ab:ad:f9:30:b8:f6:04:61:08:81:96:ed:cd:3d:
26:74:e3:b2:de:2a:73:74:ce:11:93:93:32:15:3b:
a4:72:06:b3:39:d0:52:49:20:ae:b3:b1:b8:c9:0c:
ab:47:23:9b:df:8d:5b:e2:a9:2b:e4:39:86:d0:dd:
c8:2b:c2:4e:80:58:ee:31:1e:a2:31:9c:3a:dd:fe:
61:17:12:ab:0e:9a:4b:5e:a9:31:0f:9f:14:6f:3a:
13:71:54:01:66:0c:e9:0e:b0:7c:17:c0:e2:0e:10:
65:30:3d:49:c9:ab:38:28:fa:87:6b:0b:2a:de:e7:
53:22:26:ac:04:93:58:0c:a3:98:a5:e3:21:e4:59:
eb:a5:80:2d:e3:e7:8f:67:83:c1:a8:40:0c:d6:9f:
f2:69:41:f4:a4:40:ac:49:6f:d0:ac:88:f5:46:f7:
92:5f:7e:d0:b9:1a:e5:69:0f:8d:8e:93:27:ec:49:
80:fd:a8:6e:e7:94:2f:68:3a:d8:4c:d9:c0:d2:6e:
68:a9:32:ed:be:9f:f7:a5:40:e4:93:fb:27:70:e8:
c7:7a:d8:07:2d:dd:03:c5:a5:d6:37:37:90:c4:38:
27:e6:ce:2d:87:9b:17:08:4e:53:11:d4:c1:1d:d3:
da:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EA:C7:33:50:64:E8:50:01:5B:0A:8E:37:01:A9:58:17:E7:3F:5A:17
X509v3 Authority Key Identifier:
keyid:A0:DA:E7:67:8A:39:69:69:E6:34:0C:9D:CB:65:CD:E9:E3:29:55:4A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/oNrnZ4o5aWnmNAydy2XN6eMpVUo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/46358e-54f7-4f4b-a747-f735e3dafd53/1/oNrnZ4o5aWnmNAydy2XN6eMpVUo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/46358e-54f7-4f4b-a747-f735e3dafd53/1/oNrnZ4o5aWnmNAydy2XN6eMpVUo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
80:46:bd:96:12:e6:40:8f:61:07:14:35:f4:50:bf:b4:55:87:
01:31:bb:90:fe:32:db:f3:10:50:2d:ef:58:a4:0d:aa:fe:61:
ee:99:b0:3f:8c:51:2d:2c:8d:d8:6f:24:1b:f4:11:76:b0:c5:
f0:4b:ae:76:92:9f:d6:cd:f4:13:e0:da:4a:f6:1e:43:12:9d:
6c:3a:e7:6c:9b:6e:0d:f5:41:a0:b8:d4:07:24:09:0e:9d:23:
99:35:1a:9f:6b:88:3d:c5:e8:71:fd:9f:66:f8:6b:66:4f:92:
96:e2:98:c1:b3:8d:52:af:db:cf:b6:4b:81:96:1a:94:50:89:
ee:72:98:38:de:1d:30:98:6a:6c:b6:b6:cd:f7:46:42:ad:b8:
d3:a4:06:a4:31:74:70:7e:72:3c:f4:44:e6:a0:9a:95:de:74:
cd:08:5c:b2:9d:bf:be:d1:5d:b0:7a:c1:c3:4d:98:72:7b:4f:
f8:d3:43:e4:ac:67:97:f2:65:e0:b4:92:a2:ef:e4:1d:c7:be:
52:b0:8a:b0:4f:d1:f2:92:45:0a:83:b1:c3:ca:f6:fd:16:f7:
2b:07:59:98:ab:82:78:01:5a:3c:71:f0:2b:d1:70:80:27:70:
37:d2:e4:19:16:1d:80:7c:7d:62:1b:0d:af:04:31:4d:cb:29:
ab:b1:14:81
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 7 16:41:20 2025 by rpki-client