Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f0/61db6b-1d73-4ec2-8be0-f37cbaf7ce5a/1/OnsDkT46KF7-Uc2sZfVQTIejRGA.mft
File: OnsDkT46KF7-Uc2sZfVQTIejRGA.mft (raw, json)
Hash identifier: ZotLFx22Tm7uNRmwqkl8eAGm2EPSYxRUV4bKGpnynys=
Subject key identifier: 2C:CC:D4:28:D7:FB:EA:5D:78:8F:EA:D6:19:91:31:E3:A8:DF:55:F8
Authority key identifier: 3A:7B:03:91:3E:3A:28:5E:FE:51:CD:AC:65:F5:50:4C:87:A3:44:60
Certificate issuer: /CN=3a7b03913e3a285efe51cdac65f5504c87a34460
Certificate serial: 0196A2772CF75FE55BBACC5063EEFB41BA48
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OnsDkT46KF7-Uc2sZfVQTIejRGA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f0/61db6b-1d73-4ec2-8be0-f37cbaf7ce5a/1/OnsDkT46KF7-Uc2sZfVQTIejRGA.mft
Manifest number: 122C
Signing time: Mon 05 May 2025 22:00:41 +0000
Manifest this update: Mon 05 May 2025 22:00:41 +0000
Manifest next update: Tue 06 May 2025 22:00:41 +0000
Files and hashes: 1: OnsDkT46KF7-Uc2sZfVQTIejRGA.crl (hash: +uljv5/PF8lqbrNU54KoZg5xFbbqy6v/++sabTZAwS4=)
2: bXuLlzwCurMedfx4RUMXi7r1h0M.roa (hash: sXVX+GwCrEzWh3/PYurD7SBft7awlkJnghtSxD3UtHo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f0/61db6b-1d73-4ec2-8be0-f37cbaf7ce5a/1/OnsDkT46KF7-Uc2sZfVQTIejRGA.crl
rsync://rpki.ripe.net/repository/DEFAULT/f0/61db6b-1d73-4ec2-8be0-f37cbaf7ce5a/1/OnsDkT46KF7-Uc2sZfVQTIejRGA.mft
rsync://rpki.ripe.net/repository/DEFAULT/OnsDkT46KF7-Uc2sZfVQTIejRGA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 06 May 2025 18:19:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:a2:77:2c:f7:5f:e5:5b:ba:cc:50:63:ee:fb:41:ba:48
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3a7b03913e3a285efe51cdac65f5504c87a34460
Validity
Not Before: May 5 22:00:41 2025 GMT
Not After : May 6 22:00:41 2025 GMT
Subject: CN=2cccd428d7fbea5d788fead6199131e3a8df55f8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:a2:e1:fe:87:a0:44:ec:24:43:6e:a8:5c:57:
03:12:ee:bc:55:bd:f3:d1:f5:43:fb:89:9d:62:81:
93:fa:bd:65:a2:3d:c3:3f:ce:45:7c:f6:67:19:e9:
3c:01:8c:01:db:2e:70:83:ec:6f:b1:96:13:53:20:
19:ad:cb:c4:d7:36:c0:9f:9c:34:2b:32:48:b6:37:
27:15:25:58:4d:03:4b:20:d3:a2:03:66:4f:19:d1:
b0:e2:63:44:48:83:fd:ac:8d:ab:d1:cf:14:20:83:
bd:b3:33:83:74:c6:d2:92:6b:eb:82:c2:57:77:e6:
77:f7:be:a2:04:44:3e:70:dc:d5:22:21:ff:3d:37:
47:ba:c4:a8:61:da:22:87:2f:47:bc:63:ef:58:ae:
12:06:25:e9:76:31:bf:fc:9c:0b:90:50:c0:ec:a2:
b1:d2:a5:91:d1:4b:47:cb:8f:c6:20:46:08:b4:47:
5b:6d:88:80:26:47:9f:4b:94:a8:37:04:35:9e:03:
e3:e4:bf:ec:c4:64:12:73:37:d0:b6:2a:33:5f:b4:
a0:e8:68:5d:f7:89:09:50:c0:35:77:8d:b9:46:f0:
f5:c0:b9:e7:9b:91:97:bb:06:74:18:8f:48:68:20:
96:f8:f8:3d:94:ff:da:46:0d:7e:20:55:11:75:f6:
11:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2C:CC:D4:28:D7:FB:EA:5D:78:8F:EA:D6:19:91:31:E3:A8:DF:55:F8
X509v3 Authority Key Identifier:
keyid:3A:7B:03:91:3E:3A:28:5E:FE:51:CD:AC:65:F5:50:4C:87:A3:44:60
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OnsDkT46KF7-Uc2sZfVQTIejRGA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/61db6b-1d73-4ec2-8be0-f37cbaf7ce5a/1/OnsDkT46KF7-Uc2sZfVQTIejRGA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/61db6b-1d73-4ec2-8be0-f37cbaf7ce5a/1/OnsDkT46KF7-Uc2sZfVQTIejRGA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
89:66:10:ac:f2:01:25:38:78:18:e1:9d:2f:8c:ae:21:06:6f:
43:4e:81:72:da:22:bc:19:94:4a:57:87:04:95:a2:93:17:00:
b0:bd:19:b4:47:19:80:50:5c:c3:bc:65:47:42:5d:07:30:3c:
78:3f:82:3d:9d:48:9b:0f:00:9c:65:a4:98:29:bf:1a:d1:44:
25:a2:a0:6b:63:54:d0:44:02:f0:81:9e:dc:e1:58:6b:f1:85:
f4:77:c0:11:8e:08:0c:6e:84:9a:6c:69:48:e3:bd:0f:e7:28:
6d:a2:e6:23:95:01:61:d6:2d:16:94:e8:6a:b3:cc:5c:a6:35:
b3:f3:48:76:59:f4:53:9f:f7:d2:27:f3:1d:9e:20:de:f8:0b:
7c:5f:e9:33:4c:e7:8c:7f:d7:83:c8:14:e7:d8:7c:7a:22:53:
a5:61:0e:12:7d:f8:8d:5e:ff:0f:d4:89:be:23:d4:02:d2:11:
c8:ad:5f:f6:34:53:b0:9b:96:64:39:29:50:c4:5c:66:28:ba:
c8:70:ae:60:f8:5a:e7:74:44:65:bf:34:57:33:90:47:54:c6:
ac:5f:76:b4:9d:15:85:a9:01:72:d8:ad:22:14:c0:01:a9:92:
88:b3:0b:7d:e9:61:f3:47:5b:5e:35:89:79:37:27:75:56:26:
6e:7d:f7:94
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 6 02:13:15 2025 by rpki-client