Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f6/b1a4e1-877b-4380-bfbf-b038db898b7e/1/OCnRMb5SgQ5Hycu_g6P_vU98vb8.mft
File: OCnRMb5SgQ5Hycu_g6P_vU98vb8.mft (raw, json)
Hash identifier: 8404khwVnYxevGYpaDlmr3zJW2gE/iwl8y7H/59ztuE=
Subject key identifier: B8:69:79:AB:A0:89:6F:C7:08:FE:A6:7B:01:4D:E8:EE:2E:CB:A2:92
Authority key identifier: 38:29:D1:31:BE:52:81:0E:47:C9:CB:BF:83:A3:FF:BD:4F:7C:BD:BF
Certificate issuer: /CN=3829d131be52810e47c9cbbf83a3ffbd4f7cbdbf
Certificate serial: 0196AF202CDF3B613A630272E330920ECDFC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OCnRMb5SgQ5Hycu_g6P_vU98vb8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f6/b1a4e1-877b-4380-bfbf-b038db898b7e/1/OCnRMb5SgQ5Hycu_g6P_vU98vb8.mft
Manifest number: 0C20
Signing time: Thu 08 May 2025 09:00:43 +0000
Manifest this update: Thu 08 May 2025 09:00:43 +0000
Manifest next update: Fri 09 May 2025 09:00:43 +0000
Files and hashes: 1: OCnRMb5SgQ5Hycu_g6P_vU98vb8.crl (hash: Nz7qJPpUXGHXNP1ijMKsubDzjJgWg35w2ycIGsQdtZg=)
2: dxC4OOVdD7y8lzmmwGYNpdpf-D0.roa (hash: 1F32hSGI4pbAFMDzlkPoS+O8tvJxdYgPLvmfvhN+IXU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f6/b1a4e1-877b-4380-bfbf-b038db898b7e/1/OCnRMb5SgQ5Hycu_g6P_vU98vb8.crl
rsync://rpki.ripe.net/repository/DEFAULT/f6/b1a4e1-877b-4380-bfbf-b038db898b7e/1/OCnRMb5SgQ5Hycu_g6P_vU98vb8.mft
rsync://rpki.ripe.net/repository/DEFAULT/OCnRMb5SgQ5Hycu_g6P_vU98vb8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 09 May 2025 07:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:af:20:2c:df:3b:61:3a:63:02:72:e3:30:92:0e:cd:fc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3829d131be52810e47c9cbbf83a3ffbd4f7cbdbf
Validity
Not Before: May 8 09:00:43 2025 GMT
Not After : May 9 09:00:43 2025 GMT
Subject: CN=b86979aba0896fc708fea67b014de8ee2ecba292
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:58:2c:be:7f:17:10:93:17:40:29:e4:74:49:
82:fd:b8:6d:02:58:0e:1b:1f:18:1a:ad:36:7c:73:
53:e8:2b:67:a9:70:db:35:c3:fd:e1:83:d3:22:8f:
a0:5a:09:23:3b:7e:b6:d8:3a:9e:64:4f:c8:8f:5d:
a1:1a:0c:20:84:ef:9a:5f:a1:b4:98:b5:b7:f0:d6:
3f:22:08:14:e9:90:a4:64:da:50:2f:d8:4a:16:20:
76:33:0e:30:2e:f8:ee:3e:51:e4:63:a1:2b:92:99:
df:f4:58:48:28:45:b1:89:fd:73:6b:b4:90:5f:b7:
15:18:55:4c:38:e4:a3:fa:2e:be:80:a4:0e:2b:91:
8a:0e:7a:b7:a6:74:43:bd:3e:4a:27:30:72:71:7c:
66:f1:2e:5d:17:e8:9d:5d:d6:e5:ce:29:c7:67:10:
e7:ca:b6:ba:9b:2d:ec:b0:d5:49:7f:fa:52:10:c8:
ec:27:be:0c:e4:14:82:79:c0:99:66:01:66:1d:fa:
a9:7f:88:ae:12:22:42:4b:7a:10:73:aa:8f:29:1b:
e1:fe:6e:71:94:0c:53:84:ec:be:d3:f3:8a:c9:9a:
78:8d:c9:fe:f6:11:d9:8e:fd:4d:30:ae:ae:12:bd:
b3:da:91:73:a2:87:aa:35:b4:41:fe:68:af:7e:3a:
fe:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B8:69:79:AB:A0:89:6F:C7:08:FE:A6:7B:01:4D:E8:EE:2E:CB:A2:92
X509v3 Authority Key Identifier:
keyid:38:29:D1:31:BE:52:81:0E:47:C9:CB:BF:83:A3:FF:BD:4F:7C:BD:BF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OCnRMb5SgQ5Hycu_g6P_vU98vb8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/b1a4e1-877b-4380-bfbf-b038db898b7e/1/OCnRMb5SgQ5Hycu_g6P_vU98vb8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/b1a4e1-877b-4380-bfbf-b038db898b7e/1/OCnRMb5SgQ5Hycu_g6P_vU98vb8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
89:e0:0b:04:61:27:82:0f:ea:d7:dc:0e:02:55:c9:82:05:e8:
c6:49:fc:e1:71:a6:a7:92:9d:de:41:0f:ea:48:99:d6:05:19:
64:71:54:cf:28:bf:55:0d:96:b9:d8:47:71:16:76:c2:3c:ad:
06:99:f4:11:13:f7:31:bb:78:22:8b:6e:57:31:23:be:87:a3:
52:03:5e:e2:31:26:ef:18:5c:cc:4a:78:c5:0d:5a:c8:91:99:
42:46:cc:c9:04:30:47:69:96:86:44:81:3d:f8:99:c6:22:7f:
69:91:61:08:2d:35:f3:c5:de:5c:53:a1:a3:bc:10:96:a9:01:
09:07:08:38:1f:fb:75:66:81:f1:b1:56:8e:5c:73:f4:7a:e0:
e6:72:89:76:86:65:49:b6:eb:34:44:20:d3:b0:be:26:04:87:
90:67:49:fb:fa:b2:43:5d:1f:13:c5:08:9b:d2:e1:85:2b:6e:
9e:22:5d:5b:ac:ff:cd:50:53:f0:72:2d:26:9c:db:dd:44:86:
b7:4f:7e:22:ba:6d:0a:f7:00:b1:b6:a8:f8:79:e2:52:4d:78:
00:64:f2:93:40:2c:47:9d:17:aa:0d:05:e9:fd:cb:8c:eb:e7:
d4:8a:da:56:ba:e5:07:fa:de:85:d9:d3:10:89:13:ed:44:4d:
a4:fb:1f:73
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 8 14:10:26 2025 by rpki-client