Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cd/4ef02c-8f8d-46e3-8d0b-71948e3c9ad4/1/O33D0CKCjk9bNr3vehiwuwz7rgk.mft
File: O33D0CKCjk9bNr3vehiwuwz7rgk.mft (raw, json)
Hash identifier: Pz0Qoyan5O2mtdtDSc3r9OSJ+KCWXcxkaXCgrRttoS4=
Subject key identifier: 14:BC:A2:0A:99:7B:0A:D7:5E:EB:26:C1:DF:56:A0:21:2C:5C:57:25
Authority key identifier: 3B:7D:C3:D0:22:82:8E:4F:5B:36:BD:EF:7A:18:B0:BB:0C:FB:AE:09
Certificate issuer: /CN=3b7dc3d022828e4f5b36bdef7a18b0bb0cfbae09
Certificate serial: 0196AE4488D0B0A4782D47EAFF684D3D92BE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/O33D0CKCjk9bNr3vehiwuwz7rgk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cd/4ef02c-8f8d-46e3-8d0b-71948e3c9ad4/1/O33D0CKCjk9bNr3vehiwuwz7rgk.mft
Manifest number: 0D40
Signing time: Thu 08 May 2025 05:00:49 +0000
Manifest this update: Thu 08 May 2025 05:00:49 +0000
Manifest next update: Fri 09 May 2025 05:00:49 +0000
Files and hashes: 1: O33D0CKCjk9bNr3vehiwuwz7rgk.crl (hash: dFMf5b2A7LvCE7Jfy9Z21XaJUlWKBBQaVyqedpUrpi4=)
2: qE1MDKZGRZtaXQk1vt-cL_6WtUI.roa (hash: 3oUc3w7eQj0W70nllC5MQS//X4mPSXNpxrBOqqqOaLU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cd/4ef02c-8f8d-46e3-8d0b-71948e3c9ad4/1/O33D0CKCjk9bNr3vehiwuwz7rgk.crl
rsync://rpki.ripe.net/repository/DEFAULT/cd/4ef02c-8f8d-46e3-8d0b-71948e3c9ad4/1/O33D0CKCjk9bNr3vehiwuwz7rgk.mft
rsync://rpki.ripe.net/repository/DEFAULT/O33D0CKCjk9bNr3vehiwuwz7rgk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 08 May 2025 22:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:ae:44:88:d0:b0:a4:78:2d:47:ea:ff:68:4d:3d:92:be
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3b7dc3d022828e4f5b36bdef7a18b0bb0cfbae09
Validity
Not Before: May 8 05:00:49 2025 GMT
Not After : May 9 05:00:49 2025 GMT
Subject: CN=14bca20a997b0ad75eeb26c1df56a0212c5c5725
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:cd:dc:e6:0d:8f:56:db:57:b9:9c:c7:60:f7:
02:1a:18:f2:2a:23:7d:2f:6e:83:fa:46:4f:46:7c:
5c:d4:1f:45:89:5c:2c:04:6c:e2:f9:81:c7:06:7a:
09:fb:58:30:58:a8:86:5a:5c:b3:3b:6c:60:ed:d0:
c0:03:e9:96:9f:51:7e:cf:50:2a:b5:ec:42:73:9f:
50:6f:b6:02:c6:11:94:67:ab:4d:e8:5f:d4:81:9a:
de:dc:ce:63:0d:11:99:39:2e:19:46:f0:16:7e:5b:
7c:ac:69:2d:6b:bb:f3:f5:82:9c:02:3a:3d:8f:4b:
2b:78:24:e4:e8:54:d9:bd:eb:4c:c1:b4:ae:d4:9e:
49:54:38:0e:b2:8a:1b:13:a4:06:71:d2:f3:1e:f0:
f5:c1:ba:f7:32:6e:c1:bd:57:f1:a7:2b:41:81:be:
2a:31:0f:88:01:60:89:c3:9e:24:21:7a:42:69:50:
28:9e:ac:ff:52:61:8b:19:7f:0d:1f:56:8e:f8:86:
9f:55:b2:11:b6:56:fa:e6:04:7a:4b:38:98:fb:4b:
a6:9b:64:6b:63:e2:f7:c5:fb:a9:53:cb:48:fb:a0:
7a:9e:dc:49:f0:d8:41:ad:be:4f:a5:7f:06:13:76:
84:a3:bb:6a:bc:7e:5e:bf:09:49:e5:61:70:b7:79:
86:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
14:BC:A2:0A:99:7B:0A:D7:5E:EB:26:C1:DF:56:A0:21:2C:5C:57:25
X509v3 Authority Key Identifier:
keyid:3B:7D:C3:D0:22:82:8E:4F:5B:36:BD:EF:7A:18:B0:BB:0C:FB:AE:09
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/O33D0CKCjk9bNr3vehiwuwz7rgk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/4ef02c-8f8d-46e3-8d0b-71948e3c9ad4/1/O33D0CKCjk9bNr3vehiwuwz7rgk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/4ef02c-8f8d-46e3-8d0b-71948e3c9ad4/1/O33D0CKCjk9bNr3vehiwuwz7rgk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
08:4d:47:bc:07:5e:ce:9c:b1:84:7e:24:92:99:bb:20:5a:7f:
a9:7f:e7:17:fd:41:b9:dc:7e:5e:b4:5b:36:41:32:27:16:34:
16:9e:0d:65:15:e9:98:5d:02:0d:9d:10:de:67:da:37:75:4b:
3d:13:7e:69:f0:df:15:1a:09:4e:2d:73:de:3e:6b:e2:61:1f:
6f:3c:14:33:dd:4f:8f:9a:80:2e:1e:9a:d5:dc:e0:49:a8:bd:
85:fd:e5:6e:74:7d:31:0b:f7:7a:2c:f5:7f:3a:26:25:b7:53:
48:93:b8:36:f5:64:ba:7b:a8:33:a0:85:9c:85:1b:86:9e:00:
31:3a:c9:34:fe:71:59:48:fe:fd:71:fa:54:a1:d6:2a:7a:bc:
13:fc:4b:ba:cd:89:14:3b:78:44:84:83:73:90:58:cc:ba:61:
9d:b1:8c:7d:46:8d:0d:c7:1c:f0:09:39:cf:ff:99:b8:4c:f7:
55:a6:06:49:a8:6b:df:c0:6f:54:42:e7:0d:e2:2e:a3:11:e5:
35:8d:a6:a6:9e:64:56:da:a7:1e:11:f4:a0:64:e0:0c:ab:da:
2b:bd:1c:0b:f1:f3:dd:5f:45:80:04:37:1b:7e:54:3f:bf:da:
52:d8:da:ad:97:a0:2f:6f:1c:0f:a4:92:61:5e:2b:8d:d1:58:
d3:7b:d3:e3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 8 07:45:31 2025 by rpki-client