Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cb/d4c891-4bc0-4a3e-8457-44276f604233/1/O1T6YLMnoIA9yF6XCpt2pFFM614.mft
File: O1T6YLMnoIA9yF6XCpt2pFFM614.mft (raw, json)
Hash identifier: XMigcCvovbu3USG+ZuNhFcrfuvRWRwmMqrqaXCes2RQ=
Subject key identifier: 85:E4:E0:90:66:FC:F0:6C:DF:94:F8:5C:82:DE:85:F8:D7:02:B2:05
Authority key identifier: 3B:54:FA:60:B3:27:A0:80:3D:C8:5E:97:0A:9B:76:A4:51:4C:EB:5E
Certificate issuer: /CN=3b54fa60b327a0803dc85e970a9b76a4514ceb5e
Certificate serial: 01969DBE75A6410DD18201FB9879FC5A2540
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/O1T6YLMnoIA9yF6XCpt2pFFM614.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cb/d4c891-4bc0-4a3e-8457-44276f604233/1/O1T6YLMnoIA9yF6XCpt2pFFM614.mft
Manifest number: 0CE9
Signing time: Mon 05 May 2025 00:00:26 +0000
Manifest this update: Mon 05 May 2025 00:00:26 +0000
Manifest next update: Tue 06 May 2025 00:00:26 +0000
Files and hashes: 1: O1T6YLMnoIA9yF6XCpt2pFFM614.crl (hash: m1EoA+d2i/RH9T5l1koUrvesCtxY/tymyXW3Q28wC7k=)
2: r00HzRw-RqO0vBCmPGerjiL7MBo.roa (hash: ZpMQBjz3xj36yREzwpqIfQv4H2OQrwN6wQoa/nm5NNo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cb/d4c891-4bc0-4a3e-8457-44276f604233/1/O1T6YLMnoIA9yF6XCpt2pFFM614.crl
rsync://rpki.ripe.net/repository/DEFAULT/cb/d4c891-4bc0-4a3e-8457-44276f604233/1/O1T6YLMnoIA9yF6XCpt2pFFM614.mft
rsync://rpki.ripe.net/repository/DEFAULT/O1T6YLMnoIA9yF6XCpt2pFFM614.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 05 May 2025 22:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:9d:be:75:a6:41:0d:d1:82:01:fb:98:79:fc:5a:25:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3b54fa60b327a0803dc85e970a9b76a4514ceb5e
Validity
Not Before: May 5 00:00:26 2025 GMT
Not After : May 6 00:00:26 2025 GMT
Subject: CN=85e4e09066fcf06cdf94f85c82de85f8d702b205
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:5c:b4:48:d7:67:5a:7f:85:c2:5d:97:74:9a:
7a:95:45:45:0a:30:ad:d6:eb:39:3a:db:65:83:d0:
4f:44:2c:87:54:f0:f3:85:14:a1:12:05:a8:40:43:
f4:ac:8b:04:e2:14:71:2a:3f:b8:45:1c:5c:96:7d:
e0:89:3c:f7:a6:e6:76:dd:43:ce:79:07:30:3c:a0:
70:81:7f:fa:25:4a:bc:aa:02:15:ec:dd:4c:ce:85:
3f:b0:f7:3d:c8:82:3b:30:2d:af:0f:b5:e6:0a:c7:
86:32:4f:83:a2:06:08:67:86:a3:cf:9b:82:4f:77:
75:0c:4a:1f:69:95:15:e2:70:ad:62:8c:bd:34:d0:
20:54:65:77:c5:ae:2b:0f:a4:c5:be:c9:80:fc:2b:
13:b5:f5:8f:41:10:de:f8:95:22:80:8b:10:a6:c0:
67:a6:ca:85:48:9a:ac:c1:b4:40:60:9e:af:8a:6e:
2b:e8:32:d0:63:a1:f8:ba:5a:cc:53:97:1b:11:19:
5c:66:9e:14:6c:09:45:8d:50:d1:63:8b:07:f1:e2:
0a:25:11:17:61:5a:30:62:ea:0b:a4:03:e0:9a:73:
9e:ed:18:d8:ef:0e:63:38:a8:7f:f6:75:e2:ee:65:
8b:14:2b:93:8f:c2:6b:67:d9:8c:74:0a:1a:c2:27:
f3:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
85:E4:E0:90:66:FC:F0:6C:DF:94:F8:5C:82:DE:85:F8:D7:02:B2:05
X509v3 Authority Key Identifier:
keyid:3B:54:FA:60:B3:27:A0:80:3D:C8:5E:97:0A:9B:76:A4:51:4C:EB:5E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/O1T6YLMnoIA9yF6XCpt2pFFM614.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cb/d4c891-4bc0-4a3e-8457-44276f604233/1/O1T6YLMnoIA9yF6XCpt2pFFM614.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cb/d4c891-4bc0-4a3e-8457-44276f604233/1/O1T6YLMnoIA9yF6XCpt2pFFM614.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0e:d1:66:2e:70:7c:bb:bd:6a:d7:50:29:2f:13:19:3d:b3:58:
40:a4:08:59:06:cd:22:af:98:97:5c:97:34:d7:a7:f4:8b:91:
96:fe:16:b0:36:67:44:ee:d7:f7:1e:09:25:df:3f:2b:a9:eb:
f3:ab:8d:9a:c7:00:c7:49:df:eb:be:ff:4d:4b:94:f3:8f:69:
16:6f:24:a4:90:a6:9b:d1:50:64:54:09:da:9f:39:15:bb:47:
e1:56:2c:9c:a4:cd:80:4c:3e:88:83:58:21:fe:ed:32:25:bc:
f8:ef:9a:73:ab:7f:ab:57:34:0b:73:a3:d7:04:fb:fa:88:c5:
6c:3c:76:2d:e6:b6:06:5f:e2:3e:88:70:ca:3d:f7:86:0a:e4:
a3:b2:36:44:2a:26:c0:f7:93:48:94:df:67:eb:55:09:51:83:
cc:bf:41:2f:41:f4:ce:50:3c:cc:6b:f3:f9:5e:eb:71:2a:92:
2a:c1:8e:4a:dc:3a:6b:2b:d5:57:8b:c8:c5:dd:3c:8d:db:b6:
c2:c1:01:4e:fe:8f:ea:bc:81:97:e3:cb:c9:7c:d7:44:ce:ff:
35:59:93:a0:16:4c:1e:20:79:13:1e:71:b0:c0:8b:d0:09:1a:
b9:fc:c7:4d:e7:98:14:80:e0:b1:a0:9a:bf:0d:97:e1:19:70:
08:3e:cb:95
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 5 05:30:17 2025 by rpki-client