Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c5/4c9fbe-1725-4116-9ef3-0af2c5c4cc0f/1/o95MO22qWmmL8wfMORKCqymH1hc.mft
File: o95MO22qWmmL8wfMORKCqymH1hc.mft (raw, json)
Hash identifier: hO0ad7DoJz9qTvXYzCI8CbX2pYuuIBjChTfFsrfyvQw=
Subject key identifier: 2B:04:31:9E:56:73:51:28:DE:78:32:23:3D:4A:0A:7C:A4:06:C0:FF
Authority key identifier: A3:DE:4C:3B:6D:AA:5A:69:8B:F3:07:CC:39:12:82:AB:29:87:D6:17
Certificate issuer: /CN=a3de4c3b6daa5a698bf307cc391282ab2987d617
Certificate serial: 0196B77E6D6D4C481CA819DB03E2F12F33DD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/o95MO22qWmmL8wfMORKCqymH1hc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c5/4c9fbe-1725-4116-9ef3-0af2c5c4cc0f/1/o95MO22qWmmL8wfMORKCqymH1hc.mft
Manifest number: 0A7B
Signing time: Sat 10 May 2025 00:00:38 +0000
Manifest this update: Sat 10 May 2025 00:00:38 +0000
Manifest next update: Sun 11 May 2025 00:00:38 +0000
Files and hashes: 1: aaz13NJRzQSWik1cFJTAx8gsPnU.roa (hash: CsCDTEtayCoWB3zZSGEuzJzCmVEA7r5a08XAY8x/Hbg=)
2: o95MO22qWmmL8wfMORKCqymH1hc.crl (hash: j9uo8gOwlecCUKvdpqF0C1ZtFP6VunPlDD724FQCU5w=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c5/4c9fbe-1725-4116-9ef3-0af2c5c4cc0f/1/o95MO22qWmmL8wfMORKCqymH1hc.crl
rsync://rpki.ripe.net/repository/DEFAULT/c5/4c9fbe-1725-4116-9ef3-0af2c5c4cc0f/1/o95MO22qWmmL8wfMORKCqymH1hc.mft
rsync://rpki.ripe.net/repository/DEFAULT/o95MO22qWmmL8wfMORKCqymH1hc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 10 May 2025 19:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:b7:7e:6d:6d:4c:48:1c:a8:19:db:03:e2:f1:2f:33:dd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a3de4c3b6daa5a698bf307cc391282ab2987d617
Validity
Not Before: May 10 00:00:38 2025 GMT
Not After : May 11 00:00:38 2025 GMT
Subject: CN=2b04319e56735128de7832233d4a0a7ca406c0ff
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:90:c5:df:72:6e:02:63:8b:c9:80:03:36:e5:
d6:ae:19:f5:a3:c4:47:69:0a:f2:52:1e:7e:6f:f8:
e6:ff:50:f0:30:5a:eb:93:2d:11:60:c5:57:d7:0e:
71:38:db:70:e4:d4:1e:f5:f6:a6:e7:57:95:ca:97:
35:f9:e3:4c:6d:8f:10:6a:0e:11:60:17:cc:bb:48:
19:11:14:b1:38:3b:b6:39:20:4a:b0:70:44:2e:de:
13:29:ba:ea:ab:2e:26:23:8d:9b:f2:28:8c:ef:0e:
88:d6:63:2b:0a:45:ac:61:43:ab:f0:cc:a6:99:3e:
c1:9a:6d:52:c6:8d:b7:01:e6:c3:65:dd:db:ee:7f:
32:ed:37:e5:76:93:dc:5a:ea:e4:3a:71:03:49:d8:
9f:66:5e:f4:b5:49:2e:c0:5b:40:b7:d9:58:a8:7c:
02:8a:46:40:67:2f:e4:ac:75:18:ac:f8:e1:d2:63:
6e:f1:2e:0e:62:9e:bd:dc:f4:5b:5b:fa:b7:b0:c5:
87:e2:9b:81:1c:ba:c2:2d:92:66:b8:6c:dd:50:1d:
29:5b:c7:26:4c:b8:94:5f:2d:c2:a9:2d:63:92:48:
83:81:75:38:93:cb:e1:fd:b6:9b:e6:ef:cf:e6:94:
7c:59:a4:c5:ea:4d:62:4f:ef:b4:54:b7:c6:0e:bc:
f9:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2B:04:31:9E:56:73:51:28:DE:78:32:23:3D:4A:0A:7C:A4:06:C0:FF
X509v3 Authority Key Identifier:
keyid:A3:DE:4C:3B:6D:AA:5A:69:8B:F3:07:CC:39:12:82:AB:29:87:D6:17
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/o95MO22qWmmL8wfMORKCqymH1hc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/4c9fbe-1725-4116-9ef3-0af2c5c4cc0f/1/o95MO22qWmmL8wfMORKCqymH1hc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/4c9fbe-1725-4116-9ef3-0af2c5c4cc0f/1/o95MO22qWmmL8wfMORKCqymH1hc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
66:34:a0:81:76:52:f9:08:b7:ba:78:9d:b8:1f:ba:e2:3b:7c:
cd:a2:70:71:f4:00:de:db:e0:bb:bf:62:76:30:ef:67:db:09:
bd:a5:31:12:b2:61:b2:b3:00:7c:e8:0c:0b:8e:58:9b:16:89:
5d:ac:da:d8:16:8f:71:18:3b:a6:77:99:85:20:d5:be:86:96:
84:8a:78:37:60:9f:74:4e:df:cc:bd:f5:18:9b:26:be:92:a2:
9c:97:02:26:14:39:79:fa:0f:b4:bb:af:6f:60:48:a9:2c:17:
68:ce:ed:03:64:23:d8:40:a0:b7:51:e8:bd:8a:17:5c:db:40:
f6:79:f9:6e:26:ed:eb:85:64:d8:46:7a:77:1d:f4:7e:d7:27:
10:4c:6c:52:d1:8c:95:16:b2:b0:43:10:be:cc:45:52:5b:7f:
4d:3b:e6:72:16:ce:5c:07:d8:83:86:40:a3:1a:cb:3f:61:3f:
39:b7:94:4b:48:60:3a:2e:2e:6f:e1:82:c5:ef:21:81:5b:1d:
2b:f7:c9:ac:cd:ac:4a:82:36:05:9b:34:9c:56:a2:4c:d2:51:
6d:c6:fa:a1:df:b1:c4:71:9f:9d:96:cb:e6:3b:c2:7c:49:b3:
96:5c:80:22:5d:43:48:85:db:f7:66:b4:20:aa:9a:7a:bd:f6:
fe:a8:38:9e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 10 05:07:05 2025 by rpki-client