Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c1/a878ae-e977-45b0-923c-c90fa345c66e/1/x3H7Qkn8UYipi2Kw1Au6m_fjOSM.mft
File: x3H7Qkn8UYipi2Kw1Au6m_fjOSM.mft (raw, json)
Hash identifier: qFyKeiY3rr3eC+VCuu+4PFz1iPt8lXxGp8SVgiXYgEo=
Subject key identifier: DB:6F:ED:6B:8A:E9:F1:EC:1D:94:1C:22:AC:95:45:BD:8A:80:8F:79
Authority key identifier: C7:71:FB:42:49:FC:51:88:A9:8B:62:B0:D4:0B:BA:9B:F7:E3:39:23
Certificate issuer: /CN=c771fb4249fc5188a98b62b0d40bba9bf7e33923
Certificate serial: 0196C239A1E2D05DEDC1C11F17E30A43874A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/x3H7Qkn8UYipi2Kw1Au6m_fjOSM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c1/a878ae-e977-45b0-923c-c90fa345c66e/1/x3H7Qkn8UYipi2Kw1Au6m_fjOSM.mft
Manifest number: 028D
Signing time: Mon 12 May 2025 02:01:18 +0000
Manifest this update: Mon 12 May 2025 02:01:18 +0000
Manifest next update: Tue 13 May 2025 02:01:18 +0000
Files and hashes: 1: x3H7Qkn8UYipi2Kw1Au6m_fjOSM.crl (hash: OIUbEBz+lwJeFAyG6hxmwrttkiFIlFdc97g6mlwqkf0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c1/a878ae-e977-45b0-923c-c90fa345c66e/1/x3H7Qkn8UYipi2Kw1Au6m_fjOSM.crl
rsync://rpki.ripe.net/repository/DEFAULT/c1/a878ae-e977-45b0-923c-c90fa345c66e/1/x3H7Qkn8UYipi2Kw1Au6m_fjOSM.mft
rsync://rpki.ripe.net/repository/DEFAULT/x3H7Qkn8UYipi2Kw1Au6m_fjOSM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 13 May 2025 01:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:c2:39:a1:e2:d0:5d:ed:c1:c1:1f:17:e3:0a:43:87:4a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c771fb4249fc5188a98b62b0d40bba9bf7e33923
Validity
Not Before: May 12 02:01:18 2025 GMT
Not After : May 13 02:01:18 2025 GMT
Subject: CN=db6fed6b8ae9f1ec1d941c22ac9545bd8a808f79
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:ab:ce:93:be:02:98:76:41:02:05:a0:2f:68:
5c:a9:f8:79:59:13:4a:95:04:b7:a1:9c:d1:57:41:
61:78:32:16:62:98:70:6d:b1:19:ac:c4:b0:db:15:
4c:ed:0b:37:86:bd:dd:cc:69:93:13:c3:b0:16:d5:
7e:bb:a0:35:82:40:2c:2c:d2:41:01:1e:f3:f6:a8:
a8:f3:fa:fb:a8:04:ac:92:02:97:42:79:8b:9f:f4:
ed:ec:b1:73:60:f6:4c:94:6e:7e:72:0a:01:2c:4f:
c5:b6:1b:b9:e6:ad:2d:a9:a1:c9:92:fc:d9:42:33:
e4:65:2f:1d:89:f2:14:03:a5:aa:b4:67:52:f5:b1:
e0:e3:b6:ed:26:a8:9d:e4:a6:a8:34:6e:27:89:df:
a3:ce:dc:80:16:cd:fe:b2:a0:ce:c7:5c:71:e9:60:
6b:50:30:e6:bd:fd:be:77:84:7e:34:f7:83:50:db:
8c:29:8d:36:14:75:03:0c:9e:7d:29:2e:de:47:e1:
7b:d6:e8:fe:d9:a0:09:80:32:84:86:4c:36:d8:a7:
b6:60:ea:07:5c:c0:e2:97:71:e1:72:32:b5:1a:38:
e9:19:03:15:aa:16:03:24:9b:5f:d1:92:8a:21:e7:
48:18:8d:85:d3:c1:a2:69:fd:ca:c7:aa:f0:a4:76:
46:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DB:6F:ED:6B:8A:E9:F1:EC:1D:94:1C:22:AC:95:45:BD:8A:80:8F:79
X509v3 Authority Key Identifier:
keyid:C7:71:FB:42:49:FC:51:88:A9:8B:62:B0:D4:0B:BA:9B:F7:E3:39:23
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/x3H7Qkn8UYipi2Kw1Au6m_fjOSM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c1/a878ae-e977-45b0-923c-c90fa345c66e/1/x3H7Qkn8UYipi2Kw1Au6m_fjOSM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c1/a878ae-e977-45b0-923c-c90fa345c66e/1/x3H7Qkn8UYipi2Kw1Au6m_fjOSM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5c:34:35:68:84:c4:16:e7:ca:6b:43:18:d4:41:60:f0:d7:51:
cf:38:9b:36:b9:37:11:df:c9:8f:6d:c9:1c:f6:99:22:17:b6:
23:aa:6b:e1:b2:a5:53:7f:6d:91:b7:52:73:ea:66:70:bf:0f:
b0:cd:77:19:d4:fd:f6:2c:cb:9b:77:99:ca:b1:68:f9:24:dd:
0e:da:16:90:54:17:ba:ad:c3:94:33:81:5f:59:0a:0e:71:7e:
e2:16:80:a3:fd:23:aa:68:66:79:36:06:30:e8:cc:68:b4:79:
d4:c1:3c:58:4e:e1:c4:2d:2d:25:1e:b9:51:53:40:fa:3f:20:
5e:59:74:e6:df:e9:3f:69:f1:5e:9e:26:2f:73:ed:c7:36:7d:
db:d4:25:44:6f:3b:fc:6e:5b:2b:41:4e:02:1f:69:1c:ed:b7:
fb:d8:1b:e3:25:d2:5c:e3:50:79:e5:cc:39:0e:94:4e:4c:56:
b5:82:2f:42:56:7c:9c:06:a0:8e:c8:56:df:21:9b:27:c0:1b:
c5:28:dd:6a:44:a1:38:ea:c4:a9:35:67:28:0b:f0:f1:4e:47:
65:03:18:47:98:87:53:d0:83:14:81:01:26:f0:ed:1b:70:7f:
f9:7c:c3:c4:29:5e:53:f2:8e:a7:15:4c:46:5c:48:e9:ff:8b:
02:af:28:4f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 12 10:47:52 2025 by rpki-client