Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f4/c566c7-3cac-45a9-82a1-04b09057522f/1/oK89hVH73Tti9P_f1ZytQWHkRx4.mft
File: oK89hVH73Tti9P_f1ZytQWHkRx4.mft (raw, json)
Hash identifier: KTZ0oRy8GwCJ451fLTSgXMRvlvOY2+B6vlL7QpjRYFU=
Subject key identifier: 61:F5:6B:83:4C:1F:A5:28:94:BE:89:46:89:14:7B:C0:CC:5A:79:CC
Authority key identifier: A0:AF:3D:85:51:FB:DD:3B:62:F4:FF:DF:D5:9C:AD:41:61:E4:47:1E
Certificate issuer: /CN=a0af3d8551fbdd3b62f4ffdfd59cad4161e4471e
Certificate serial: 0196B822EDFF235FFF1B2AE06C66D8361D53
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/oK89hVH73Tti9P_f1ZytQWHkRx4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f4/c566c7-3cac-45a9-82a1-04b09057522f/1/oK89hVH73Tti9P_f1ZytQWHkRx4.mft
Manifest number: 0CB8
Signing time: Sat 10 May 2025 03:00:18 +0000
Manifest this update: Sat 10 May 2025 03:00:18 +0000
Manifest next update: Sun 11 May 2025 03:00:18 +0000
Files and hashes: 1: Fa0oKJS-5OytgjD9FfEKRTyYbH4.roa (hash: uvEwc2Oby4x64qeSjPHNoFr0vjSUe2G9BJiy9VMRAr0=)
2: oK89hVH73Tti9P_f1ZytQWHkRx4.crl (hash: ocGx5kRAvOPbBCLGCDgNLgoqUyQdjIHUzapaRS2uW34=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f4/c566c7-3cac-45a9-82a1-04b09057522f/1/oK89hVH73Tti9P_f1ZytQWHkRx4.crl
rsync://rpki.ripe.net/repository/DEFAULT/f4/c566c7-3cac-45a9-82a1-04b09057522f/1/oK89hVH73Tti9P_f1ZytQWHkRx4.mft
rsync://rpki.ripe.net/repository/DEFAULT/oK89hVH73Tti9P_f1ZytQWHkRx4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 11 May 2025 03:00:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:b8:22:ed:ff:23:5f:ff:1b:2a:e0:6c:66:d8:36:1d:53
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a0af3d8551fbdd3b62f4ffdfd59cad4161e4471e
Validity
Not Before: May 10 03:00:18 2025 GMT
Not After : May 11 03:00:18 2025 GMT
Subject: CN=61f56b834c1fa52894be894689147bc0cc5a79cc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:f0:b3:25:d1:9d:dd:53:63:c0:37:3d:65:be:
81:22:19:de:6a:50:2c:9b:14:7a:56:8b:2f:ba:cd:
1d:03:55:18:b5:2d:9a:b4:4a:fa:4e:56:ee:f0:08:
0d:5a:17:72:af:9f:d7:b6:77:c2:c1:aa:8f:e8:d4:
5a:8b:d7:4d:7c:84:43:ce:a6:c5:6a:f9:a1:a4:c7:
2f:7f:f4:e9:bb:52:13:7a:1f:45:e4:82:4f:5f:d9:
90:3f:80:3b:d9:16:97:16:ec:7a:84:13:fb:d7:94:
17:9e:8a:78:39:18:f3:4f:87:ac:23:dc:7b:06:3a:
fc:0e:66:8e:3d:f1:3f:e8:94:c8:ac:a1:ea:49:ff:
11:76:4e:bf:52:7b:5a:84:6d:d7:78:28:2e:69:7a:
b7:cd:e9:11:63:6c:fd:cc:7f:86:27:90:d1:63:fe:
a6:c4:ff:b0:c0:98:b7:46:ed:7e:81:48:97:06:c4:
35:ff:e7:e4:58:38:2f:93:3a:7c:10:a6:34:78:67:
38:00:b7:0b:78:1d:d7:07:41:d1:c8:5b:a5:a3:51:
8b:44:2c:48:8c:b4:04:c4:43:63:98:76:28:f5:d7:
71:e8:41:db:ee:b3:c8:d9:de:cd:3d:d6:e0:58:23:
a0:9c:c5:75:cb:c3:2a:dc:9b:43:0e:06:4c:8b:28:
99:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
61:F5:6B:83:4C:1F:A5:28:94:BE:89:46:89:14:7B:C0:CC:5A:79:CC
X509v3 Authority Key Identifier:
keyid:A0:AF:3D:85:51:FB:DD:3B:62:F4:FF:DF:D5:9C:AD:41:61:E4:47:1E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/oK89hVH73Tti9P_f1ZytQWHkRx4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/c566c7-3cac-45a9-82a1-04b09057522f/1/oK89hVH73Tti9P_f1ZytQWHkRx4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/c566c7-3cac-45a9-82a1-04b09057522f/1/oK89hVH73Tti9P_f1ZytQWHkRx4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
11:3a:2c:0b:62:0e:ff:f4:be:94:2f:79:e3:f4:8a:28:0b:4b:
2e:94:17:6b:e7:b2:71:04:50:09:48:82:dd:15:c3:fb:30:94:
39:e7:10:45:65:cd:5d:19:2b:5b:80:17:4c:86:6a:fd:29:21:
76:d3:1d:4b:3b:aa:ff:44:48:41:3f:ff:c1:d2:0f:67:c2:3d:
0b:ae:04:36:29:02:8a:50:99:99:22:4b:f7:9d:ca:f5:89:46:
42:4a:2b:67:7c:4b:e1:69:6e:85:ee:b4:3a:39:4f:3b:c7:51:
16:42:2c:ab:67:ed:11:fe:0f:0b:ad:39:52:88:10:37:82:7d:
1c:2d:3d:4b:08:95:58:93:bf:eb:0c:17:ed:1d:26:d4:b6:6a:
d4:c0:12:35:2f:7f:bb:38:6f:a5:6c:69:8a:7f:81:a7:20:44:
af:a3:22:3f:52:72:4b:ab:73:1e:0a:bf:37:88:0a:91:d3:7b:
6f:88:ce:91:f3:ce:e0:3a:49:d5:eb:87:5d:e7:3e:4c:a9:df:
4c:23:a1:99:50:72:c7:14:ed:42:7e:98:95:c8:5d:93:20:d1:
1f:f3:15:e9:3a:b1:53:7c:c6:0c:1d:a2:6f:19:3f:a5:b6:21:
aa:ca:57:29:63:ea:e7:24:78:17:5c:14:ef:de:10:ef:c0:81:
cc:af:c4:c6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 10 13:25:59 2025 by rpki-client