Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ec/ab3f36-7850-4266-b67a-023cc1fc1910/1/O5WuuspzMW3EaAyAi3k-aglWXxs.mft
File: O5WuuspzMW3EaAyAi3k-aglWXxs.mft (raw, json)
Hash identifier: G3BspcyHK+5MuwC5s3JeJs2ykz1CIa0e4xsSb+I1MwQ=
Subject key identifier: BB:10:80:09:B0:25:60:6A:0B:5E:5B:24:48:B2:79:38:02:64:74:38
Authority key identifier: 3B:95:AE:BA:CA:73:31:6D:C4:68:0C:80:8B:79:3E:6A:09:56:5F:1B
Certificate issuer: /CN=3b95aebaca73316dc4680c808b793e6a09565f1b
Certificate serial: 0196D81C50DB56E4444F8F8674DBCB6A6FEE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/O5WuuspzMW3EaAyAi3k-aglWXxs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ec/ab3f36-7850-4266-b67a-023cc1fc1910/1/O5WuuspzMW3EaAyAi3k-aglWXxs.mft
Manifest number: 0398
Signing time: Fri 16 May 2025 08:00:56 +0000
Manifest this update: Fri 16 May 2025 08:00:56 +0000
Manifest next update: Sat 17 May 2025 08:00:56 +0000
Files and hashes: 1: O5WuuspzMW3EaAyAi3k-aglWXxs.crl (hash: zp0vHeG7CXov65A9u7XLVCizRLKRyVGnpvJHKTELoI0=)
2: tsimjRApcLdxNhZEKgAs63IqA5I.roa (hash: HrZUtgrX3ioBRBNFpZduF4ySYEUBH1QJ3tZ4kshDhvk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ec/ab3f36-7850-4266-b67a-023cc1fc1910/1/O5WuuspzMW3EaAyAi3k-aglWXxs.crl
rsync://rpki.ripe.net/repository/DEFAULT/ec/ab3f36-7850-4266-b67a-023cc1fc1910/1/O5WuuspzMW3EaAyAi3k-aglWXxs.mft
rsync://rpki.ripe.net/repository/DEFAULT/O5WuuspzMW3EaAyAi3k-aglWXxs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 17 May 2025 08:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:d8:1c:50:db:56:e4:44:4f:8f:86:74:db:cb:6a:6f:ee
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3b95aebaca73316dc4680c808b793e6a09565f1b
Validity
Not Before: May 16 08:00:56 2025 GMT
Not After : May 17 08:00:56 2025 GMT
Subject: CN=bb108009b025606a0b5e5b2448b2793802647438
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:4a:77:0c:54:fb:4d:51:fa:6e:75:42:23:3d:
34:6e:98:79:34:bd:2a:33:33:10:cc:87:96:2f:eb:
80:d9:ad:af:61:98:53:38:c8:49:34:e5:62:78:32:
d6:f0:21:f1:7d:c6:17:8c:10:ba:7e:b5:0c:85:59:
de:ee:bc:0b:cc:38:29:20:98:6e:3b:60:01:f2:b7:
28:7a:23:66:32:b3:23:78:b2:86:9c:bf:b3:8d:4e:
21:9f:56:19:fa:e3:9d:c1:72:f6:b8:1e:71:1a:68:
e8:1e:2c:3a:8a:dd:3d:a4:8b:a4:1d:1b:ca:13:c3:
fe:b1:51:d7:74:00:8a:60:a3:26:73:4b:c8:92:1b:
0e:cf:83:af:80:0f:1e:ab:a4:8d:eb:34:db:6c:1c:
90:30:23:db:87:e3:22:b0:e6:c3:9c:8a:69:0d:47:
25:87:0f:ad:68:60:50:95:57:94:a0:a1:c3:4e:df:
88:ae:d9:d8:5e:13:a9:73:66:76:d0:59:6b:7d:22:
71:63:06:4a:fe:53:23:8f:f6:39:53:e8:a4:c1:44:
a4:83:6f:35:c9:7d:cd:40:06:5c:73:cf:45:21:aa:
18:f7:67:59:7f:0b:fa:93:1a:23:3c:bf:42:24:97:
a5:17:7c:de:8c:44:db:c3:3a:69:08:d5:f8:36:82:
41:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BB:10:80:09:B0:25:60:6A:0B:5E:5B:24:48:B2:79:38:02:64:74:38
X509v3 Authority Key Identifier:
keyid:3B:95:AE:BA:CA:73:31:6D:C4:68:0C:80:8B:79:3E:6A:09:56:5F:1B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/O5WuuspzMW3EaAyAi3k-aglWXxs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ec/ab3f36-7850-4266-b67a-023cc1fc1910/1/O5WuuspzMW3EaAyAi3k-aglWXxs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ec/ab3f36-7850-4266-b67a-023cc1fc1910/1/O5WuuspzMW3EaAyAi3k-aglWXxs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
79:8c:4b:2d:44:31:7a:05:2d:b5:db:53:73:74:65:4c:30:d9:
c1:71:01:ab:4a:50:45:e2:c8:30:de:80:25:28:8e:06:81:86:
db:37:8e:b8:ce:b2:d9:79:3a:6f:f0:54:b8:05:9c:6e:51:2c:
58:67:5c:f9:7d:fd:91:28:4d:b7:b8:0c:a3:2f:51:e3:8d:5c:
b2:9d:fc:14:d5:86:c3:23:0b:a6:c4:e4:36:16:08:b7:2e:34:
ae:9f:d3:70:3d:52:a8:33:6a:f2:bb:3b:ec:9e:e2:5b:94:4a:
bf:ea:a6:4e:9f:ef:ea:07:8f:41:69:ff:d1:cb:54:de:3f:54:
58:0d:ef:80:80:d2:71:a9:2c:57:54:2f:7e:60:8f:21:29:58:
05:e3:e3:7c:e9:49:6d:9f:07:e6:aa:33:56:2e:d2:fd:ed:ac:
85:e5:df:ba:d8:61:4a:d2:e5:ef:3c:aa:86:14:13:87:8d:bd:
64:e6:e0:e5:f1:8e:8a:a3:a1:e0:fd:0e:96:c7:24:34:6f:5a:
97:1e:b9:fb:8b:fb:0f:fb:ab:a6:ca:60:96:03:91:a6:c8:80:
a9:e3:cb:3e:86:ba:77:11:11:f6:b3:9e:0f:cc:26:93:2a:e4:
e7:e4:14:75:81:de:a6:bf:6c:c9:a8:5d:57:ae:7c:28:90:ef:
64:4d:1f:ba
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 16 14:12:05 2025 by rpki-client