Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/df/c27cd1-570b-47d1-b256-1814223d92ce/1/ORoOzCub6rqet21VGf54e0Az_BI.mft
File: ORoOzCub6rqet21VGf54e0Az_BI.mft (raw, json)
Hash identifier: yBl+9ieQL6QMKoKzacsfnjToAUu2tOQqNICkpFlPuhE=
Subject key identifier: 26:22:BF:1E:C9:30:73:A8:16:AF:76:A5:E5:CD:B9:7D:81:0E:72:A3
Authority key identifier: 39:1A:0E:CC:2B:9B:EA:BA:9E:B7:6D:55:19:FE:78:7B:40:33:FC:12
Certificate issuer: /CN=391a0ecc2b9beaba9eb76d5519fe787b4033fc12
Certificate serial: 0196AB0C979345F74925D3FACECCF02047AD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ORoOzCub6rqet21VGf54e0Az_BI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/df/c27cd1-570b-47d1-b256-1814223d92ce/1/ORoOzCub6rqet21VGf54e0Az_BI.mft
Manifest number: 14CC
Signing time: Wed 07 May 2025 14:00:51 +0000
Manifest this update: Wed 07 May 2025 14:00:51 +0000
Manifest next update: Thu 08 May 2025 14:00:51 +0000
Files and hashes: 1: 3Kw90ItO7TUOrV2eE5yvx9jqpuc.roa (hash: fbxMMDDeQ+we4nZz/v5oIPx4/3sbHXCdx1jupmXCzFU=)
2: 3bXgf6qiHkZ7wpe3NbEbqd19UII.roa (hash: GFgPfBtoaTen3iMblZ9KSc5rE6intd3/umoBeZq+ejs=)
3: MIKj6NwkBoijX5RCu9BLUoczIOA.roa (hash: TpSQaRTCbf9UYf4e5y2oNI5uWSWIkWo+nLWFnRcfelo=)
4: ORoOzCub6rqet21VGf54e0Az_BI.crl (hash: oqo13BgtABzGlEy/l7F9MIIF84PoQxjlcZ5YsLx5sWo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/df/c27cd1-570b-47d1-b256-1814223d92ce/1/ORoOzCub6rqet21VGf54e0Az_BI.crl
rsync://rpki.ripe.net/repository/DEFAULT/df/c27cd1-570b-47d1-b256-1814223d92ce/1/ORoOzCub6rqet21VGf54e0Az_BI.mft
rsync://rpki.ripe.net/repository/DEFAULT/ORoOzCub6rqet21VGf54e0Az_BI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 08 May 2025 14:00:51 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:ab:0c:97:93:45:f7:49:25:d3:fa:ce:cc:f0:20:47:ad
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=391a0ecc2b9beaba9eb76d5519fe787b4033fc12
Validity
Not Before: May 7 14:00:51 2025 GMT
Not After : May 8 14:00:51 2025 GMT
Subject: CN=2622bf1ec93073a816af76a5e5cdb97d810e72a3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:d9:a5:bc:1e:81:3f:e7:74:4d:d6:31:9b:7b:
7d:61:3b:3e:a9:57:c4:8d:6c:00:e3:cd:7f:c1:6e:
43:b9:8f:74:0f:da:6e:b2:d2:d4:33:8a:40:f4:b7:
2a:7f:33:c9:ca:41:69:33:b3:78:99:04:b2:4e:d5:
c0:35:e0:84:fc:b3:fc:18:35:9f:35:f2:6e:77:bf:
39:72:36:81:6d:70:9c:47:07:7b:1d:10:42:e2:1f:
9b:55:d9:96:3a:7a:03:56:2b:d7:cd:50:2d:a0:99:
ac:04:9e:77:ae:78:25:97:af:8e:46:36:55:d0:d8:
cf:c7:08:4f:18:1d:16:0a:1b:14:f5:7f:43:d9:18:
11:59:4d:9a:3e:5c:74:44:0e:4b:63:8d:2e:37:a1:
88:fa:3c:7b:f2:f4:22:8f:3d:72:4b:a2:f4:90:38:
6c:09:cf:d0:91:f3:c0:49:4b:72:47:ec:44:1d:59:
85:b4:8f:19:f9:9e:87:81:1e:bf:6b:a1:fd:46:38:
33:d2:47:ae:78:32:19:bd:fb:25:c5:de:8c:62:a1:
b7:b0:92:ab:4c:8d:26:20:74:2e:7f:99:ef:ef:84:
7c:ad:be:3e:5e:06:18:cc:25:77:7d:e3:db:6c:40:
48:20:4c:d5:53:c1:ba:b6:90:8e:77:75:52:52:80:
85:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
26:22:BF:1E:C9:30:73:A8:16:AF:76:A5:E5:CD:B9:7D:81:0E:72:A3
X509v3 Authority Key Identifier:
keyid:39:1A:0E:CC:2B:9B:EA:BA:9E:B7:6D:55:19:FE:78:7B:40:33:FC:12
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ORoOzCub6rqet21VGf54e0Az_BI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/df/c27cd1-570b-47d1-b256-1814223d92ce/1/ORoOzCub6rqet21VGf54e0Az_BI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/df/c27cd1-570b-47d1-b256-1814223d92ce/1/ORoOzCub6rqet21VGf54e0Az_BI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b2:61:e6:d5:4b:25:86:48:45:8d:40:d5:c9:b5:19:b1:95:f1:
b5:9d:39:b3:32:95:6f:46:c9:1a:a1:db:5d:53:c1:60:87:b4:
15:17:60:11:20:88:cd:2c:2f:c5:46:2b:38:b6:59:44:b9:14:
f2:e8:b7:e0:96:79:35:b5:84:16:e2:9e:8c:69:9f:71:ed:aa:
91:11:4a:86:d5:12:30:80:0b:72:f4:6b:5b:99:0e:34:59:9e:
76:d7:1f:ce:45:8e:ef:82:af:ed:49:29:4c:1e:1c:9d:1e:c7:
c6:2c:89:5e:83:a2:30:8b:57:b9:6d:eb:3f:7a:c6:64:0d:40:
3f:04:cc:d6:80:19:05:0c:f9:5b:c0:cc:ed:8d:75:15:d0:79:
e1:94:b5:14:6f:54:97:d8:e0:5f:f9:4e:67:19:76:bb:c5:c8:
f8:35:a6:51:3e:6e:9b:4f:fd:be:86:a7:91:68:53:6a:0b:5e:
38:6a:03:01:68:fc:6f:ad:68:b9:ff:06:77:22:2f:37:58:a5:
90:e5:f4:e9:d1:d0:8f:0a:9e:1f:af:8b:45:be:fd:ab:59:8a:
d4:02:77:94:c6:e6:96:fa:a6:58:24:a6:42:ea:37:bc:f8:e7:
0d:b1:57:3c:ef:dd:c0:53:25:a4:8d:e7:70:43:bd:e5:27:71:
ad:05:47:94
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 8 00:39:20 2025 by rpki-client