Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e4/a948f3-67d9-4f35-9e0d-bc6d1b3f86b9/1/o7R_qStyxJ6grFNx3jU7HicdxdA.mft
File: o7R_qStyxJ6grFNx3jU7HicdxdA.mft (raw, json)
Hash identifier: ZpxPXMzVdsf3LJE9hWycDx+IWBx98YY2J0zfvIt72OY=
Subject key identifier: 88:51:00:52:CF:9D:C9:EB:A4:9E:AF:B5:69:77:DC:4A:4D:4C:AC:2E
Authority key identifier: A3:B4:7F:A9:2B:72:C4:9E:A0:AC:53:71:DE:35:3B:1E:27:1D:C5:D0
Certificate issuer: /CN=a3b47fa92b72c49ea0ac5371de353b1e271dc5d0
Certificate serial: 0196B710D5A2EE37820586B44748645A41B9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/o7R_qStyxJ6grFNx3jU7HicdxdA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e4/a948f3-67d9-4f35-9e0d-bc6d1b3f86b9/1/o7R_qStyxJ6grFNx3jU7HicdxdA.mft
Manifest number: 0CC0
Signing time: Fri 09 May 2025 22:00:55 +0000
Manifest this update: Fri 09 May 2025 22:00:55 +0000
Manifest next update: Sat 10 May 2025 22:00:55 +0000
Files and hashes: 1: WIaOxFihvMngyRoJ51mATU-OelM.roa (hash: yYmLv2domUt4Svy4VBfcVVdHWZ/TicTJ4cMQnZnE8zs=)
2: o7R_qStyxJ6grFNx3jU7HicdxdA.crl (hash: eOljdsDkuK99njtwFJ7FuNqjRT/Snfl9CEfRJSWZnfw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e4/a948f3-67d9-4f35-9e0d-bc6d1b3f86b9/1/o7R_qStyxJ6grFNx3jU7HicdxdA.crl
rsync://rpki.ripe.net/repository/DEFAULT/e4/a948f3-67d9-4f35-9e0d-bc6d1b3f86b9/1/o7R_qStyxJ6grFNx3jU7HicdxdA.mft
rsync://rpki.ripe.net/repository/DEFAULT/o7R_qStyxJ6grFNx3jU7HicdxdA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 10 May 2025 22:00:55 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:b7:10:d5:a2:ee:37:82:05:86:b4:47:48:64:5a:41:b9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a3b47fa92b72c49ea0ac5371de353b1e271dc5d0
Validity
Not Before: May 9 22:00:55 2025 GMT
Not After : May 10 22:00:55 2025 GMT
Subject: CN=88510052cf9dc9eba49eafb56977dc4a4d4cac2e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:80:e0:d9:bb:6b:fc:52:b0:53:98:b1:9f:b1:
be:95:90:65:80:cf:76:c5:83:71:f3:8d:10:ae:9a:
8a:71:67:6c:b1:cc:ad:bc:ae:03:7f:26:c8:ab:3f:
d2:06:1b:2c:7e:22:35:d6:c5:bb:9b:24:52:0d:8e:
af:38:2b:da:55:51:05:b6:5e:91:43:93:b2:d5:b6:
70:64:8d:c1:1a:39:af:22:5b:25:d6:2f:e4:ab:26:
54:c7:d1:b3:ea:ea:b0:89:0c:a4:af:f8:6f:9e:3c:
37:30:2f:9f:ba:cc:18:1b:6f:6a:df:f6:ec:50:fa:
33:43:8e:22:a7:4f:2c:e3:4c:04:10:64:57:11:15:
ac:63:2a:db:a4:16:3e:d5:68:5c:48:86:95:32:1f:
22:02:ef:bc:ee:ba:cb:4b:2b:7d:43:07:6d:08:0e:
d9:c2:0c:55:0b:4c:29:3a:13:15:a4:13:34:f9:0b:
98:fe:f6:9f:c7:8d:e9:af:72:f5:9d:cd:91:4f:b4:
a8:fc:15:64:35:f2:4a:d5:f5:03:40:16:e8:5f:ba:
80:fb:67:de:ea:ee:33:56:e5:75:a8:6a:d0:2a:3f:
a8:4c:05:e4:04:76:da:c4:73:db:1c:64:bb:61:98:
6f:93:fa:91:93:a4:fc:f4:72:16:11:6f:98:19:60:
3b:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
88:51:00:52:CF:9D:C9:EB:A4:9E:AF:B5:69:77:DC:4A:4D:4C:AC:2E
X509v3 Authority Key Identifier:
keyid:A3:B4:7F:A9:2B:72:C4:9E:A0:AC:53:71:DE:35:3B:1E:27:1D:C5:D0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/o7R_qStyxJ6grFNx3jU7HicdxdA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/a948f3-67d9-4f35-9e0d-bc6d1b3f86b9/1/o7R_qStyxJ6grFNx3jU7HicdxdA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/a948f3-67d9-4f35-9e0d-bc6d1b3f86b9/1/o7R_qStyxJ6grFNx3jU7HicdxdA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
be:40:bc:45:34:a7:d4:90:bf:1b:9f:31:ab:26:75:d0:9f:d0:
1c:02:99:5e:aa:75:5d:1c:96:59:0a:09:2c:08:26:f9:d3:f9:
a3:0c:9a:65:a5:86:3f:30:1c:55:9a:f2:3f:da:d3:9c:b0:07:
4b:ae:49:1b:b4:67:cd:70:7c:24:6d:f6:1b:a3:77:cd:b1:1a:
6a:99:6e:17:a8:5b:ee:3f:85:b1:d3:b2:46:c1:e6:43:74:82:
30:db:d5:1a:b9:21:d2:3a:53:b0:04:69:cf:73:9c:15:9b:8a:
76:af:b4:46:02:ee:46:a0:e5:c1:e5:4e:ce:3a:75:71:ff:7b:
76:00:9a:3e:8f:21:e4:f6:69:c5:8e:b5:cf:10:d4:f6:bc:c4:
4f:65:82:13:9e:27:1b:3b:2c:07:da:8a:01:23:b9:2f:89:40:
13:ae:c9:3f:04:aa:df:77:81:05:a6:b9:b1:a8:fb:c8:aa:3f:
ac:4b:91:7c:a1:69:37:16:4a:64:f4:b5:ae:7e:e6:3e:03:e6:
26:3b:ad:13:98:55:f9:75:4c:e0:04:d4:d2:56:17:57:8a:d8:
02:f4:f1:ff:52:2a:74:bc:e0:97:9a:28:f3:f6:52:11:dc:1d:
fa:fe:11:b7:ce:8f:a6:3d:55:07:a4:48:88:65:8e:ff:09:6c:
e4:26:ae:ef
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 10 08:30:39 2025 by rpki-client