Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f1/8a4773-a2bd-40d2-bfc8-bbe60ea222c5/1/O8y8cOGLbGnlPvUqXpJeX08M3ME.mft
File: O8y8cOGLbGnlPvUqXpJeX08M3ME.mft (raw, json)
Hash identifier: haz5FwC2P+tlVB7j9BYU7emiv6cUDg5RW9CBKF+51SI=
Subject key identifier: B4:A8:02:63:21:29:DA:A6:72:95:3D:A0:02:4B:8F:51:F2:1D:99:20
Authority key identifier: 3B:CC:BC:70:E1:8B:6C:69:E5:3E:F5:2A:5E:92:5E:5F:4F:0C:DC:C1
Certificate issuer: /CN=3bccbc70e18b6c69e53ef52a5e925e5f4f0cdcc1
Certificate serial: 01969E2C223BEA6CBEF63B0F0E9CBF74A954
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/O8y8cOGLbGnlPvUqXpJeX08M3ME.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f1/8a4773-a2bd-40d2-bfc8-bbe60ea222c5/1/O8y8cOGLbGnlPvUqXpJeX08M3ME.mft
Manifest number: 0810
Signing time: Mon 05 May 2025 02:00:14 +0000
Manifest this update: Mon 05 May 2025 02:00:14 +0000
Manifest next update: Tue 06 May 2025 02:00:14 +0000
Files and hashes: 1: HabUl_PN48YzZNEWtBkjKb82MF0.roa (hash: 0wbJ0AQU5TxqX4mMc5xSS1a+CKR/ct/c7MrrwJkkz0M=)
2: O8y8cOGLbGnlPvUqXpJeX08M3ME.crl (hash: 31kJwQdtq1x6Xa8GxcWKQ1TNy+43BupqQ5NcrHYoiwE=)
3: Xi6D2TOsmKaKt73p2J8BVcS5X-U.roa (hash: bCMKnUY3Dzp0FpBoWOs1dTC9ELOluXfiQXdDZqb6JDc=)
4: ngjx-TB8ucax_4bLzcbBQjEnd4s.roa (hash: wWZqraR65yYRHuKrbldK9gSPA1D5WeOPM/TT1ybqX/k=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f1/8a4773-a2bd-40d2-bfc8-bbe60ea222c5/1/O8y8cOGLbGnlPvUqXpJeX08M3ME.crl
rsync://rpki.ripe.net/repository/DEFAULT/f1/8a4773-a2bd-40d2-bfc8-bbe60ea222c5/1/O8y8cOGLbGnlPvUqXpJeX08M3ME.mft
rsync://rpki.ripe.net/repository/DEFAULT/O8y8cOGLbGnlPvUqXpJeX08M3ME.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 06 May 2025 01:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:9e:2c:22:3b:ea:6c:be:f6:3b:0f:0e:9c:bf:74:a9:54
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3bccbc70e18b6c69e53ef52a5e925e5f4f0cdcc1
Validity
Not Before: May 5 02:00:14 2025 GMT
Not After : May 6 02:00:14 2025 GMT
Subject: CN=b4a802632129daa672953da0024b8f51f21d9920
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:69:5b:6b:ce:9d:4d:58:cc:37:8a:0d:61:ae:
38:71:99:12:d3:92:53:c0:d2:10:45:c3:15:e2:b9:
bb:41:27:e0:09:c2:75:8b:03:64:a6:c2:49:f4:34:
37:08:ae:ab:59:6d:77:36:f0:e5:ea:e7:33:aa:c0:
1f:94:96:41:aa:a4:7d:73:03:95:40:84:0f:73:c7:
10:d8:79:89:bc:0b:1a:bc:ef:14:70:64:f3:60:51:
c0:38:a4:a1:a8:94:26:1a:e4:d7:13:00:0b:0b:d9:
86:0e:e9:4d:bf:9f:9b:1b:db:f3:d5:23:c3:84:24:
d4:21:e5:72:e4:fe:62:ce:43:56:f7:7c:7a:35:6c:
3e:82:9a:94:3b:69:ce:4e:73:4e:e9:2a:55:82:56:
31:50:b5:fd:33:12:f8:e9:a5:c8:69:5b:c5:1e:24:
95:34:0e:bc:c9:85:22:29:e7:18:82:b3:16:f8:f8:
6e:94:82:b9:f3:73:09:0d:40:fb:89:7e:f8:e4:9a:
18:7d:cd:a8:f7:a6:2f:d6:96:d3:06:2d:44:ca:4e:
e9:3e:68:b4:56:ab:f5:71:3c:13:e7:86:60:db:0e:
3a:19:58:42:9d:4c:a4:9e:91:b6:13:61:8c:d0:29:
4f:33:4b:0c:60:c8:fe:14:c1:84:9e:b0:9e:56:cb:
7e:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B4:A8:02:63:21:29:DA:A6:72:95:3D:A0:02:4B:8F:51:F2:1D:99:20
X509v3 Authority Key Identifier:
keyid:3B:CC:BC:70:E1:8B:6C:69:E5:3E:F5:2A:5E:92:5E:5F:4F:0C:DC:C1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/O8y8cOGLbGnlPvUqXpJeX08M3ME.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f1/8a4773-a2bd-40d2-bfc8-bbe60ea222c5/1/O8y8cOGLbGnlPvUqXpJeX08M3ME.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f1/8a4773-a2bd-40d2-bfc8-bbe60ea222c5/1/O8y8cOGLbGnlPvUqXpJeX08M3ME.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
46:cf:3c:4e:05:58:5b:9b:43:6a:fa:26:a2:9a:22:27:1b:bb:
69:a2:36:42:27:b5:ac:74:26:7b:42:7f:8c:f0:e0:72:91:e0:
c6:64:85:93:e2:53:f4:aa:ba:8e:f7:dc:e0:d6:ed:25:e9:a3:
9b:f6:fa:5c:25:e6:d7:bb:b6:d6:e1:4c:1d:ee:32:cd:67:f8:
cc:ea:d4:b8:71:f9:5c:ee:f0:7a:21:e3:b3:76:b1:10:51:c9:
cb:30:d5:4d:8d:34:f2:84:38:3d:60:85:fb:3d:2b:3e:1b:43:
16:39:c8:ee:b7:d8:6e:5a:6e:90:ed:80:57:d1:20:6b:e4:12:
1c:72:92:07:de:4b:16:8a:55:4c:0a:eb:84:df:7e:40:96:a7:
60:87:a9:c9:25:eb:21:38:db:d7:04:21:9f:96:ad:66:17:5d:
23:79:08:59:58:81:91:45:c3:f7:2d:a0:fe:a0:2b:ca:9e:4f:
bd:7b:1c:5f:73:2a:d1:b3:45:d1:c7:87:d4:70:04:24:48:12:
68:e8:e1:97:28:4f:11:02:48:38:ff:43:3b:1a:df:d8:12:00:
a3:47:e8:38:a7:14:7c:2d:98:56:6f:26:15:1f:2f:c7:62:97:
b1:e9:21:fe:6a:ac:9a:f4:58:33:2d:f9:7f:49:44:1f:3c:2c:
ca:fa:2e:93
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 5 11:00:40 2025 by rpki-client