Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bf/f9e257-0162-4def-96ad-dec9796f6223/1/o2iDBf7VyZdgrsfIlMa6IeTq1nU.mft
File: o2iDBf7VyZdgrsfIlMa6IeTq1nU.mft (raw, json)
Hash identifier: epD2k9EgUm8toT+JNC7BqC66nmMi02B1U+Q+MXDOXRQ=
Subject key identifier: 0E:53:30:CF:34:15:04:B5:F2:26:1B:44:FF:00:09:B2:6E:2B:8D:C3
Authority key identifier: A3:68:83:05:FE:D5:C9:97:60:AE:C7:C8:94:C6:BA:21:E4:EA:D6:75
Certificate issuer: /CN=a3688305fed5c99760aec7c894c6ba21e4ead675
Certificate serial: 0196BDEE67A00E5BD98135882BB293C95962
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/o2iDBf7VyZdgrsfIlMa6IeTq1nU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bf/f9e257-0162-4def-96ad-dec9796f6223/1/o2iDBf7VyZdgrsfIlMa6IeTq1nU.mft
Manifest number: 1034
Signing time: Sun 11 May 2025 06:00:40 +0000
Manifest this update: Sun 11 May 2025 06:00:40 +0000
Manifest next update: Mon 12 May 2025 06:00:40 +0000
Files and hashes: 1: 29zZRujAn8DGdUDp5utUkmVO-uo.roa (hash: pdGXIGI1eFN6x7W6e3AuHm1Q9j3iH8yigptYTm3P3QA=)
2: o2iDBf7VyZdgrsfIlMa6IeTq1nU.crl (hash: nh1FwqxRhKsVXkI2uFWzc28+SnDCDu5wXTs5Z+FukGI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bf/f9e257-0162-4def-96ad-dec9796f6223/1/o2iDBf7VyZdgrsfIlMa6IeTq1nU.crl
rsync://rpki.ripe.net/repository/DEFAULT/bf/f9e257-0162-4def-96ad-dec9796f6223/1/o2iDBf7VyZdgrsfIlMa6IeTq1nU.mft
rsync://rpki.ripe.net/repository/DEFAULT/o2iDBf7VyZdgrsfIlMa6IeTq1nU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 11 May 2025 22:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:bd:ee:67:a0:0e:5b:d9:81:35:88:2b:b2:93:c9:59:62
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a3688305fed5c99760aec7c894c6ba21e4ead675
Validity
Not Before: May 11 06:00:40 2025 GMT
Not After : May 12 06:00:40 2025 GMT
Subject: CN=0e5330cf341504b5f2261b44ff0009b26e2b8dc3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:79:ce:e4:57:2c:f6:28:30:55:f4:b7:be:ac:
ef:c4:bb:3e:04:2a:e7:24:a0:fe:3c:2d:3b:54:61:
bf:f5:9e:3c:86:df:b4:9b:82:2a:91:17:f0:d6:30:
cd:30:c2:aa:6e:ac:da:dc:57:b2:ec:27:b0:0f:35:
af:a2:42:64:3f:ed:f2:b0:4b:d2:02:1e:a0:32:a3:
d1:cc:3f:ed:87:f0:0c:8d:06:22:3f:b4:a9:e8:d8:
6a:1b:36:d9:40:70:58:52:8d:3a:42:9c:18:73:cc:
16:45:60:34:26:ec:33:64:5c:d6:d5:7b:9e:6d:9d:
06:50:7c:32:29:48:48:c0:d1:62:8a:45:4a:3c:57:
c3:96:eb:ed:e0:98:0c:a9:ae:84:b7:f3:2a:11:da:
d4:e3:34:0a:b7:29:46:75:98:b3:3d:a7:a1:5b:73:
1d:d4:d9:ea:51:a6:6f:69:c7:f8:cb:6a:19:c8:2c:
41:cf:00:de:fe:c0:5c:90:af:65:2b:85:2e:62:01:
0c:e5:43:b0:9d:68:44:13:45:48:57:b6:1c:d4:5d:
b5:43:b8:79:c2:4a:ba:84:e6:91:86:9a:3f:3d:80:
42:22:d9:cb:a6:a6:1e:f2:55:73:05:ee:81:87:26:
8d:e7:7b:9b:4a:78:02:9d:8e:66:76:fc:e7:41:fe:
33:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0E:53:30:CF:34:15:04:B5:F2:26:1B:44:FF:00:09:B2:6E:2B:8D:C3
X509v3 Authority Key Identifier:
keyid:A3:68:83:05:FE:D5:C9:97:60:AE:C7:C8:94:C6:BA:21:E4:EA:D6:75
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/o2iDBf7VyZdgrsfIlMa6IeTq1nU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/f9e257-0162-4def-96ad-dec9796f6223/1/o2iDBf7VyZdgrsfIlMa6IeTq1nU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/f9e257-0162-4def-96ad-dec9796f6223/1/o2iDBf7VyZdgrsfIlMa6IeTq1nU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0e:c0:13:6c:d6:1c:23:e8:2c:90:42:2c:73:cb:f0:e7:a2:b8:
57:10:7e:6e:f2:89:99:dc:12:a0:42:3a:25:c1:93:77:b8:f3:
96:97:a3:53:05:4c:8d:e7:1e:92:88:37:10:a8:61:7f:42:73:
30:bd:b0:3f:bc:a3:3c:05:aa:cc:d3:d8:20:51:5a:0c:b9:4f:
53:47:f6:3a:a7:e9:41:3a:65:12:6b:b7:8d:f8:18:f3:65:0e:
93:da:51:47:0e:94:3c:24:61:ec:c6:52:0f:bf:b8:7d:eb:45:
0e:88:4f:97:34:ba:50:49:5b:5f:f4:6e:e8:bc:dc:5b:3f:94:
86:58:8b:6a:d2:49:a0:ca:78:5d:40:8f:2c:59:db:cd:18:6b:
e1:da:8b:4c:60:fa:2d:de:7f:6a:00:8a:62:19:37:23:6a:64:
25:b9:3f:21:05:e7:d0:19:73:7a:0f:a2:bd:4a:c8:40:ad:d8:
81:b5:90:d1:c7:2f:56:f5:09:53:5f:ee:e5:73:be:c0:54:69:
40:5d:a6:95:ab:1e:d8:10:fa:b7:28:9a:03:11:ac:e5:0c:56:
2a:11:de:f6:76:c1:ca:8f:a0:39:68:8a:7d:32:b1:c5:7d:08:
71:7f:85:8b:6f:a6:39:8a:f1:f0:49:b1:ae:f2:6c:5c:3e:66:
d1:ed:e8:71
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 11 07:40:36 2025 by rpki-client