Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5a/c53a3e-f90d-4742-84fb-db319a31bdf7/1/O94s1SFek7-gym34ssH17SyUr3Q.mft
File: O94s1SFek7-gym34ssH17SyUr3Q.mft (raw, json)
Hash identifier: ErqbxI9je4w4FMy7UTtRUK+mjt3Jbd734SKfkg4Ur7E=
Subject key identifier: E2:D3:C8:4C:D9:50:36:33:CD:03:0C:4E:59:D5:CA:9B:C2:3C:91:5F
Authority key identifier: 3B:DE:2C:D5:21:5E:93:BF:A0:CA:6D:F8:B2:C1:F5:ED:2C:94:AF:74
Certificate issuer: /CN=3bde2cd5215e93bfa0ca6df8b2c1f5ed2c94af74
Certificate serial: 01965793915A7296719D5BD19F1910E021C9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/O94s1SFek7-gym34ssH17SyUr3Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5a/c53a3e-f90d-4742-84fb-db319a31bdf7/1/O94s1SFek7-gym34ssH17SyUr3Q.mft
Manifest number: 1500
Signing time: Mon 21 Apr 2025 09:00:10 +0000
Manifest this update: Mon 21 Apr 2025 09:00:10 +0000
Manifest next update: Tue 22 Apr 2025 09:00:10 +0000
Files and hashes: 1: O94s1SFek7-gym34ssH17SyUr3Q.crl (hash: TJrnXin3qD1IDHaQTs3Q8sniIE1/M6Ojsocn8NhWQO4=)
2: q9xJeN8PofnE74G9SyXfTH60ZME.roa (hash: yftwsdAWhtCdoWRv+jAeZvxiXWe//Rf4F2VF/Lbsjio=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5a/c53a3e-f90d-4742-84fb-db319a31bdf7/1/O94s1SFek7-gym34ssH17SyUr3Q.crl
rsync://rpki.ripe.net/repository/DEFAULT/5a/c53a3e-f90d-4742-84fb-db319a31bdf7/1/O94s1SFek7-gym34ssH17SyUr3Q.mft
rsync://rpki.ripe.net/repository/DEFAULT/O94s1SFek7-gym34ssH17SyUr3Q.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 22 Apr 2025 09:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:57:93:91:5a:72:96:71:9d:5b:d1:9f:19:10:e0:21:c9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3bde2cd5215e93bfa0ca6df8b2c1f5ed2c94af74
Validity
Not Before: Apr 21 09:00:10 2025 GMT
Not After : Apr 22 09:00:10 2025 GMT
Subject: CN=e2d3c84cd9503633cd030c4e59d5ca9bc23c915f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:8a:0d:90:36:31:7e:8a:1d:90:60:95:b0:e4:
50:ed:f6:f7:be:ff:0a:a9:98:47:61:e2:0e:6e:1f:
74:a6:b0:4d:53:da:3e:64:ed:ea:13:12:df:a5:8e:
51:21:fc:d9:26:38:d5:25:d2:33:73:bc:8e:20:ad:
07:b9:c9:d1:b7:0e:b7:23:f3:70:0e:6c:f2:75:1d:
9f:58:05:99:e0:a9:96:ed:2f:d4:f8:dd:d9:fb:c0:
25:2d:98:a0:45:d6:ae:97:91:43:2d:1a:7b:63:7a:
35:6e:ae:af:73:9f:b3:ca:32:ef:03:ef:50:92:db:
c1:d7:3b:39:a1:42:25:f1:6f:d6:ab:3c:11:43:c1:
c2:21:bd:bc:4b:ab:20:07:bb:58:dc:17:ec:13:e4:
21:45:b2:c7:dd:5c:ed:dd:a8:a0:74:a5:79:7d:82:
86:86:11:38:e4:77:71:cc:71:27:14:0d:c4:56:1d:
3b:85:b3:9a:93:53:52:97:87:cc:fd:a1:27:52:34:
63:fd:9c:93:a2:fa:ad:5e:a7:8d:13:ca:a6:2a:30:
a3:be:c1:62:5a:2a:78:bd:67:ff:21:ac:34:23:9f:
c8:e8:30:21:61:fc:38:10:ad:57:9d:4b:bc:b7:20:
e8:90:4d:18:58:bf:e5:59:ff:01:cd:6e:80:a9:1b:
fd:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E2:D3:C8:4C:D9:50:36:33:CD:03:0C:4E:59:D5:CA:9B:C2:3C:91:5F
X509v3 Authority Key Identifier:
keyid:3B:DE:2C:D5:21:5E:93:BF:A0:CA:6D:F8:B2:C1:F5:ED:2C:94:AF:74
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/O94s1SFek7-gym34ssH17SyUr3Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/c53a3e-f90d-4742-84fb-db319a31bdf7/1/O94s1SFek7-gym34ssH17SyUr3Q.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/c53a3e-f90d-4742-84fb-db319a31bdf7/1/O94s1SFek7-gym34ssH17SyUr3Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
58:6e:55:a9:13:6e:a6:2f:ce:c4:17:d7:6e:58:57:c7:1b:16:
e4:d4:bb:87:ae:f9:36:26:1e:3d:65:12:ef:4b:cb:b2:13:81:
e2:32:87:1e:a7:22:8a:aa:0e:47:30:09:8c:c3:57:d4:62:22:
ee:db:3e:72:a0:ba:6e:e8:3d:47:79:11:83:63:ff:08:d8:bc:
41:86:db:49:56:34:fa:60:96:fe:40:24:3e:4c:df:e1:96:65:
1e:d2:6e:b1:30:58:3c:54:02:69:0d:c8:b2:47:c5:f0:50:06:
32:29:2f:e5:00:c4:f2:46:13:6d:ad:89:f0:58:8b:44:db:a2:
28:25:34:c2:c0:22:54:b7:74:37:2b:4b:77:6d:92:5f:32:ca:
49:4d:e6:46:2a:f2:92:78:7a:54:ca:84:f8:90:4c:79:16:94:
2e:d0:fb:10:7d:ef:d1:ba:af:cf:c2:9a:3b:45:1d:44:36:7e:
f8:e1:ec:f5:a3:39:d0:b3:c2:7a:48:57:26:d0:d5:7f:34:f6:
77:d8:3b:1c:bf:59:0f:7b:06:2e:09:95:be:49:a2:6c:88:42:
3b:f7:0c:6e:33:fa:89:86:78:c6:d5:fe:d7:d0:48:63:dd:ad:
08:a9:5f:60:b7:a0:51:fc:e0:bf:08:0d:30:e6:3c:81:70:38:
a4:c0:89:63
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 21 14:59:47 2025 by rpki-client