Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/da/20da60-c719-4be1-8e4f-e18052f381bb/1/o2n7GRvuUc3HQUppYxl_hrvzE6s.mft
File: o2n7GRvuUc3HQUppYxl_hrvzE6s.mft (raw, json)
Hash identifier: kXTDMFaDGjbDKRNNpE2WW+3GRM0uqlVaTYKCzxDrb7c=
Subject key identifier: A2:9B:B7:C5:EC:00:5C:D8:DF:24:61:49:8B:EA:0D:22:28:72:26:11
Authority key identifier: A3:69:FB:19:1B:EE:51:CD:C7:41:4A:69:63:19:7F:86:BB:F3:13:AB
Certificate issuer: /CN=a369fb191bee51cdc7414a6963197f86bbf313ab
Certificate serial: 0196C26FBA17BDC802834ADB9FA23FC3DCF4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/o2n7GRvuUc3HQUppYxl_hrvzE6s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/da/20da60-c719-4be1-8e4f-e18052f381bb/1/o2n7GRvuUc3HQUppYxl_hrvzE6s.mft
Manifest number: 0F97
Signing time: Mon 12 May 2025 03:00:23 +0000
Manifest this update: Mon 12 May 2025 03:00:23 +0000
Manifest next update: Tue 13 May 2025 03:00:23 +0000
Files and hashes: 1: DfIfeCsjxuTLGxOswS1IRTtCtFo.roa (hash: BfLaITLvBopGuXyhXf+VexAjyd8LBGCkT8+9wJK+KLI=)
2: o2n7GRvuUc3HQUppYxl_hrvzE6s.crl (hash: gD1M0Vrp2Ju7Id6bnASs/SftHGCBFRtSTRG5KU4n0M8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/da/20da60-c719-4be1-8e4f-e18052f381bb/1/o2n7GRvuUc3HQUppYxl_hrvzE6s.crl
rsync://rpki.ripe.net/repository/DEFAULT/da/20da60-c719-4be1-8e4f-e18052f381bb/1/o2n7GRvuUc3HQUppYxl_hrvzE6s.mft
rsync://rpki.ripe.net/repository/DEFAULT/o2n7GRvuUc3HQUppYxl_hrvzE6s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 13 May 2025 01:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:c2:6f:ba:17:bd:c8:02:83:4a:db:9f:a2:3f:c3:dc:f4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a369fb191bee51cdc7414a6963197f86bbf313ab
Validity
Not Before: May 12 03:00:23 2025 GMT
Not After : May 13 03:00:23 2025 GMT
Subject: CN=a29bb7c5ec005cd8df2461498bea0d2228722611
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:c2:d8:1e:9c:73:51:c5:bc:8b:9b:4a:34:55:
3a:c9:59:a9:5e:ef:a2:e1:88:93:90:d2:79:78:15:
b2:21:f3:39:c3:c9:8f:71:6a:6f:44:aa:6b:cd:b0:
ea:cb:63:9f:68:92:5d:59:05:d5:23:1a:52:28:d1:
b6:de:c6:cd:c7:9c:4b:03:7d:f1:72:ac:af:32:00:
21:73:d8:d3:d5:74:33:ac:c6:e4:5c:7e:3d:7d:73:
50:aa:e3:4b:b3:7d:d2:4f:3c:b4:f4:63:68:0b:a7:
69:89:e8:44:53:dc:09:61:ad:8e:91:d3:25:30:64:
b1:e3:b5:bc:bc:74:6b:04:f8:4e:a1:12:ec:de:b9:
de:50:32:d5:95:07:f4:19:c4:c6:d7:53:0b:2e:40:
e5:82:fc:25:09:23:bb:d4:bd:42:b7:9a:16:51:93:
bd:b6:7a:31:b5:aa:e9:cd:ae:5d:e9:10:24:53:ba:
9b:98:fc:49:31:90:2e:9c:04:6d:f2:72:b1:aa:73:
99:1d:2d:8c:e0:d3:e4:ba:34:18:b2:0b:12:36:01:
06:e9:4a:5c:f5:0e:79:21:6c:f5:73:be:e3:55:55:
b7:a6:cc:0b:5d:d6:27:35:f5:cc:85:1c:52:53:0e:
13:86:5b:3b:5b:21:57:d2:4b:9a:5e:96:66:b5:8b:
e2:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A2:9B:B7:C5:EC:00:5C:D8:DF:24:61:49:8B:EA:0D:22:28:72:26:11
X509v3 Authority Key Identifier:
keyid:A3:69:FB:19:1B:EE:51:CD:C7:41:4A:69:63:19:7F:86:BB:F3:13:AB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/o2n7GRvuUc3HQUppYxl_hrvzE6s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/da/20da60-c719-4be1-8e4f-e18052f381bb/1/o2n7GRvuUc3HQUppYxl_hrvzE6s.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/da/20da60-c719-4be1-8e4f-e18052f381bb/1/o2n7GRvuUc3HQUppYxl_hrvzE6s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
69:18:5c:3c:68:29:99:0c:7c:b8:f2:a2:eb:af:d4:aa:97:25:
d7:a5:bb:cf:aa:78:e8:f7:de:b2:a0:7b:89:f3:72:8f:4b:e4:
bf:72:26:b0:3c:c8:f0:b4:61:71:27:25:6f:e3:40:1c:47:6c:
f4:e0:fe:98:1f:5b:c7:d0:ec:16:3b:5d:41:59:f9:e9:5b:ec:
f2:b1:31:42:44:6f:be:d6:12:62:3a:d2:7e:5a:aa:39:38:7e:
4c:37:f2:a1:24:d6:d8:2d:ef:01:fd:3e:b2:3e:e9:5a:5d:9f:
a2:4a:df:dc:41:0f:d4:a7:e5:35:4d:1f:4a:f9:8f:b9:cf:f9:
8f:cf:f5:f0:0a:06:f7:4e:f2:e7:5f:51:9e:36:4c:b8:36:2e:
db:68:be:3f:98:40:20:77:58:e8:5d:38:25:94:e9:03:ad:b3:
1f:3c:5f:f1:98:7c:0e:57:8b:f4:20:77:8d:97:39:49:a0:1b:
d8:c3:8c:18:17:b0:42:f8:72:47:44:33:c6:0c:19:46:67:b0:
7a:f2:dc:ee:cb:6a:55:e2:ab:0d:62:bb:ab:ba:63:69:ec:6e:
96:65:20:bd:73:1a:0b:58:bd:aa:b1:8d:3f:04:6d:66:99:65:
58:21:5f:cd:91:4f:5b:30:f4:0c:e7:a4:12:47:70:b8:4b:b4:
79:78:46:9d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 12 06:18:38 2025 by rpki-client