Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cb/d1245c-02cf-48b5-9e42-89753f2b47dc/1/O8o0owNBd9CEM40zsIm34DzKOoo.mft
File: O8o0owNBd9CEM40zsIm34DzKOoo.mft (raw, json)
Hash identifier: fPuDVmEaN59FnVvEF5i86WfewCwXNNppcc6HDkrEIwk=
Subject key identifier: 67:29:AB:88:7F:25:FC:C1:BA:65:FE:E9:C5:D3:A1:F3:56:6B:26:1C
Authority key identifier: 3B:CA:34:A3:03:41:77:D0:84:33:8D:33:B0:89:B7:E0:3C:CA:3A:8A
Certificate issuer: /CN=3bca34a3034177d084338d33b089b7e03cca3a8a
Certificate serial: 0196B4B3F0677FD88754F3CF36BDF891A520
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/O8o0owNBd9CEM40zsIm34DzKOoo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cb/d1245c-02cf-48b5-9e42-89753f2b47dc/1/O8o0owNBd9CEM40zsIm34DzKOoo.mft
Manifest number: 08F5
Signing time: Fri 09 May 2025 11:00:13 +0000
Manifest this update: Fri 09 May 2025 11:00:13 +0000
Manifest next update: Sat 10 May 2025 11:00:13 +0000
Files and hashes: 1: 9gtsAx5FJEnGGDpA05vpeEmKqKo.roa (hash: o4FWNQc0AMne1CzN76Z/FZhfpanxpLPH29H5fHhS0kY=)
2: O8o0owNBd9CEM40zsIm34DzKOoo.crl (hash: BfqejGX9DdJorrKV6YyUnOPhcNraBpXx8iuACkrlUkM=)
3: hLarQu01JmUX4vnwkcXB98ezIuw.roa (hash: iDJuyq+rVzU9ZgKvDwW/L+MmLaOlvdq9nbxde1XNlsM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cb/d1245c-02cf-48b5-9e42-89753f2b47dc/1/O8o0owNBd9CEM40zsIm34DzKOoo.crl
rsync://rpki.ripe.net/repository/DEFAULT/cb/d1245c-02cf-48b5-9e42-89753f2b47dc/1/O8o0owNBd9CEM40zsIm34DzKOoo.mft
rsync://rpki.ripe.net/repository/DEFAULT/O8o0owNBd9CEM40zsIm34DzKOoo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 10 May 2025 10:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:b4:b3:f0:67:7f:d8:87:54:f3:cf:36:bd:f8:91:a5:20
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3bca34a3034177d084338d33b089b7e03cca3a8a
Validity
Not Before: May 9 11:00:13 2025 GMT
Not After : May 10 11:00:13 2025 GMT
Subject: CN=6729ab887f25fcc1ba65fee9c5d3a1f3566b261c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:58:d8:56:fb:e1:0b:cd:93:38:3a:88:ff:5b:
92:ac:fa:0a:f8:f9:66:ef:df:1e:2f:58:e8:07:dc:
77:b9:83:24:a7:a2:21:d6:20:80:a1:01:01:d4:f0:
e1:63:e4:5c:04:93:42:c8:79:d8:4d:e0:b7:c7:26:
f8:60:1e:fe:27:9d:7c:0e:cd:cb:ee:bd:79:d9:61:
53:59:bb:1e:dc:db:04:27:c0:31:07:4e:2a:f1:cd:
e0:ea:93:a4:c9:8d:3a:50:38:c1:df:9b:c3:7d:2f:
02:e9:ab:40:1d:f9:dd:6c:a8:7e:11:98:5a:4c:45:
99:ed:c6:c9:a5:50:8f:7a:c4:bd:94:1d:d7:a9:79:
5f:62:cc:6c:2a:9e:44:66:77:c7:06:62:aa:9d:4c:
70:cc:79:21:2e:4b:e8:2a:71:e8:45:cb:e4:9a:72:
48:e4:90:48:c6:40:ad:b5:54:9a:0a:d3:07:ef:17:
f8:82:9c:87:9c:ff:dd:99:26:88:8b:0d:78:5d:6f:
38:9d:71:13:3f:1f:48:b5:c1:0c:61:68:c9:2b:c4:
84:54:a8:8e:c9:e1:09:d4:8f:ff:7d:ae:04:57:0a:
41:c6:d9:04:90:3e:4a:c3:d1:ab:27:2d:e1:a2:08:
95:c7:ff:32:4f:fc:81:3d:20:48:ab:81:27:ee:d6:
51:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
67:29:AB:88:7F:25:FC:C1:BA:65:FE:E9:C5:D3:A1:F3:56:6B:26:1C
X509v3 Authority Key Identifier:
keyid:3B:CA:34:A3:03:41:77:D0:84:33:8D:33:B0:89:B7:E0:3C:CA:3A:8A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/O8o0owNBd9CEM40zsIm34DzKOoo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cb/d1245c-02cf-48b5-9e42-89753f2b47dc/1/O8o0owNBd9CEM40zsIm34DzKOoo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cb/d1245c-02cf-48b5-9e42-89753f2b47dc/1/O8o0owNBd9CEM40zsIm34DzKOoo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7d:10:83:5f:94:c6:54:99:f7:0f:48:a9:ff:81:35:41:42:d3:
5c:cb:e2:26:8a:1a:20:6c:08:3a:b5:68:98:3a:cc:d1:72:9a:
41:fd:a1:3d:f1:3b:e5:f7:70:16:67:8a:43:21:88:89:a5:e2:
f1:d6:cb:44:35:46:43:48:06:b9:b1:1c:54:e0:fc:14:b3:1b:
ea:cb:39:a6:5c:8c:b0:30:4b:9d:49:82:48:e4:ad:ad:15:52:
e3:9f:5d:10:89:65:95:02:15:da:3d:21:2e:ef:73:31:64:6b:
21:63:21:3b:01:94:fe:30:81:f3:0b:ec:27:50:47:23:61:59:
89:0c:41:cb:ce:09:15:2f:e2:d2:ea:56:56:df:86:ff:ab:c5:
0a:86:6e:f7:ae:39:6b:15:4f:16:6f:f1:65:1b:04:5a:85:07:
87:4e:d0:c0:e8:6d:b4:1f:56:42:33:d4:dd:28:a5:c8:3f:67:
ae:dc:ea:b1:9c:2d:4c:20:ec:39:40:28:3a:6f:0c:de:a1:40:
7c:86:95:83:2b:cb:68:ee:85:bb:51:bd:d3:39:b3:15:71:6d:
8f:05:2e:6a:e8:d0:f9:25:c5:fd:93:6f:87:7a:58:55:9c:50:
ba:c2:7b:7c:dd:fc:51:6e:53:97:f7:2a:8c:84:e4:f9:7e:c8:
93:65:b8:5f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 9 14:24:13 2025 by rpki-client