Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c2/fff514-1e0e-493e-9ee5-6e99b79da520/1/O85exzYI4kiFKD6RDrh78e-COgI.mft
File: O85exzYI4kiFKD6RDrh78e-COgI.mft (raw, json)
Hash identifier: IYz2MOdCA6nN7O2qGXdLCL/NlVgrKVUdLtYNd6tKIwk=
Subject key identifier: 86:75:50:D6:01:C8:7B:B9:0D:15:AC:A0:D3:D6:AF:05:88:FF:82:E9
Authority key identifier: 3B:CE:5E:C7:36:08:E2:48:85:28:3E:91:0E:B8:7B:F1:EF:82:3A:02
Certificate issuer: /CN=3bce5ec73608e24885283e910eb87bf1ef823a02
Certificate serial: 0196B8911625F4A8D3D0DCF9CF1D6E37A65E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/O85exzYI4kiFKD6RDrh78e-COgI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c2/fff514-1e0e-493e-9ee5-6e99b79da520/1/O85exzYI4kiFKD6RDrh78e-COgI.mft
Manifest number: 0494
Signing time: Sat 10 May 2025 05:00:38 +0000
Manifest this update: Sat 10 May 2025 05:00:38 +0000
Manifest next update: Sun 11 May 2025 05:00:38 +0000
Files and hashes: 1: 7cL3elWEFj-zEjkndRVYAEQ9BU4.roa (hash: BiE9iKHIrEyTAK4OlfqCnHobFVMclVFQTAE1yqSmgDQ=)
2: O85exzYI4kiFKD6RDrh78e-COgI.crl (hash: dJtRlEGrvhhKoMYqQ9VeEjTKP2TxQAsCvLXMXwCC33M=)
3: Wt4F1aNYpi_rzNFrCL_NrPrA99M.roa (hash: 7DVwsBm/G3K9SUMur3fB8M/J4z9MO5eSnY7FeGY9wFE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c2/fff514-1e0e-493e-9ee5-6e99b79da520/1/O85exzYI4kiFKD6RDrh78e-COgI.crl
rsync://rpki.ripe.net/repository/DEFAULT/c2/fff514-1e0e-493e-9ee5-6e99b79da520/1/O85exzYI4kiFKD6RDrh78e-COgI.mft
rsync://rpki.ripe.net/repository/DEFAULT/O85exzYI4kiFKD6RDrh78e-COgI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 11 May 2025 04:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:b8:91:16:25:f4:a8:d3:d0:dc:f9:cf:1d:6e:37:a6:5e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3bce5ec73608e24885283e910eb87bf1ef823a02
Validity
Not Before: May 10 05:00:38 2025 GMT
Not After : May 11 05:00:38 2025 GMT
Subject: CN=867550d601c87bb90d15aca0d3d6af0588ff82e9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:23:bd:cc:7a:39:12:ce:5f:e3:86:6b:ec:a6:
e6:6a:99:1d:62:13:30:b3:5c:a5:f1:8a:64:12:55:
39:0e:ee:b3:86:85:14:00:a9:65:09:59:54:bf:af:
e3:db:0c:b4:7a:4d:3c:78:c3:61:5f:c3:af:a8:ce:
7e:d9:cd:4e:e3:52:aa:5f:13:c7:6f:41:42:d5:27:
47:3b:83:e5:f7:0e:3c:8d:a9:f2:89:0a:bd:43:fe:
9d:c7:38:29:01:6d:df:df:6b:09:9c:2a:c4:56:58:
d1:43:b2:9f:75:dd:9e:d4:27:43:ec:26:de:f1:cb:
ed:da:fe:ae:f1:21:c6:e6:b0:6b:fa:90:33:10:68:
7a:68:10:d6:74:23:c7:9a:67:c6:6d:13:6e:29:67:
5a:38:a5:99:a4:39:ec:ac:84:4e:38:a9:4c:6b:3d:
5a:23:fe:b5:67:3c:0f:b1:0a:44:80:1a:83:fd:96:
7f:a8:68:7b:4b:f6:8d:15:f5:c2:c5:48:1f:a7:82:
4d:bb:01:43:7c:8b:37:cc:d5:df:64:32:4d:2c:02:
f6:17:72:68:e6:23:8d:63:c8:26:f1:5c:96:fe:25:
3f:6c:93:4a:f9:02:b5:b1:2a:45:30:dd:03:4c:19:
8d:10:ad:c7:17:e6:f5:28:50:e0:81:a7:dc:19:d9:
18:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
86:75:50:D6:01:C8:7B:B9:0D:15:AC:A0:D3:D6:AF:05:88:FF:82:E9
X509v3 Authority Key Identifier:
keyid:3B:CE:5E:C7:36:08:E2:48:85:28:3E:91:0E:B8:7B:F1:EF:82:3A:02
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/O85exzYI4kiFKD6RDrh78e-COgI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/fff514-1e0e-493e-9ee5-6e99b79da520/1/O85exzYI4kiFKD6RDrh78e-COgI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/fff514-1e0e-493e-9ee5-6e99b79da520/1/O85exzYI4kiFKD6RDrh78e-COgI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
83:7f:de:2d:db:91:6e:02:cf:61:c1:83:bf:12:05:b6:8e:f8:
c6:f9:27:fa:52:af:db:f7:3c:88:98:0a:0b:6f:3b:5f:54:a2:
c7:dd:0c:4b:04:73:63:3f:4a:47:9e:90:fa:54:0e:32:9e:1b:
a2:cf:04:2d:f1:a1:c6:9c:18:59:04:f1:21:a2:3c:46:a6:ff:
fd:4f:51:72:57:23:99:1c:52:8b:f7:06:df:c4:12:09:ab:68:
a6:db:29:5a:29:82:af:8b:ed:01:72:75:f5:36:c7:b8:f2:d4:
6a:62:09:0f:48:f1:f2:b9:36:a0:34:f0:c5:5a:f7:45:e0:59:
01:e6:2c:b8:88:41:c3:b6:d5:5f:47:26:5d:a1:1a:bb:92:89:
98:cc:6b:64:b8:11:01:8d:a4:1a:d6:5e:14:22:d4:56:42:9e:
a3:86:e7:fb:4b:56:6c:a2:49:f7:85:9d:a2:07:8f:43:ad:03:
7f:e2:2e:a3:c7:ef:39:f1:16:a7:94:4d:12:09:a3:5b:7c:be:
88:ce:82:45:9e:92:c2:54:45:93:81:87:dd:c4:8c:f3:06:17:
06:f2:76:29:3e:4b:90:65:0f:46:84:35:4b:fe:87:09:20:b0:
84:da:ae:3a:fd:8f:26:f1:2a:b4:eb:0f:08:48:03:08:64:a8:
93:09:20:de
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 10 13:17:14 2025 by rpki-client