Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5f/09ec83-85e2-4e9c-a79c-4c959f6077a0/1/O6BcspZx0wpXo-hET0H-A0z3UjE.mft
File: O6BcspZx0wpXo-hET0H-A0z3UjE.mft (raw, json)
Hash identifier: 6XcDYuBAKgYhDr9nV/85aDSPihPEgD53DrokhLqj1AM=
Subject key identifier: EC:CC:0D:A0:AD:19:87:27:A5:D3:6C:30:BB:3D:9E:4B:97:50:F1:37
Authority key identifier: 3B:A0:5C:B2:96:71:D3:0A:57:A3:E8:44:4F:41:FE:03:4C:F7:52:31
Certificate issuer: /CN=3ba05cb29671d30a57a3e8444f41fe034cf75231
Certificate serial: 0196564A0DEF12CFBBB123F5DBE061FA24D8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/O6BcspZx0wpXo-hET0H-A0z3UjE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5f/09ec83-85e2-4e9c-a79c-4c959f6077a0/1/O6BcspZx0wpXo-hET0H-A0z3UjE.mft
Manifest number: 03C3
Signing time: Mon 21 Apr 2025 03:00:15 +0000
Manifest this update: Mon 21 Apr 2025 03:00:15 +0000
Manifest next update: Tue 22 Apr 2025 03:00:15 +0000
Files and hashes: 1: O6BcspZx0wpXo-hET0H-A0z3UjE.crl (hash: FB3vtFY8iQZ7U2nk2mfAYUJ7HHNA7ZnkO3Gu0XjR2qE=)
2: Rz-Vh9z4e03dlNgqerpia1XRL-k.roa (hash: 264nJ8QiwzT6QaHmYoFKRNYp0Sy9/H1JZeP4RPKrOd4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5f/09ec83-85e2-4e9c-a79c-4c959f6077a0/1/O6BcspZx0wpXo-hET0H-A0z3UjE.crl
rsync://rpki.ripe.net/repository/DEFAULT/5f/09ec83-85e2-4e9c-a79c-4c959f6077a0/1/O6BcspZx0wpXo-hET0H-A0z3UjE.mft
rsync://rpki.ripe.net/repository/DEFAULT/O6BcspZx0wpXo-hET0H-A0z3UjE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 22 Apr 2025 01:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:56:4a:0d:ef:12:cf:bb:b1:23:f5:db:e0:61:fa:24:d8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3ba05cb29671d30a57a3e8444f41fe034cf75231
Validity
Not Before: Apr 21 03:00:15 2025 GMT
Not After : Apr 22 03:00:15 2025 GMT
Subject: CN=eccc0da0ad198727a5d36c30bb3d9e4b9750f137
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:64:97:75:ca:7e:02:b8:b4:03:e1:1e:88:e3:
ab:9b:93:7d:21:18:af:60:bf:29:0b:df:07:28:6a:
b1:b3:eb:3e:72:40:17:6e:d5:39:ee:96:e8:a1:29:
5e:e3:8a:ed:44:4a:99:f5:e5:a2:e2:0c:f9:1f:c8:
07:7f:b1:45:33:1c:bb:fc:16:dc:f9:35:75:08:01:
99:4a:c1:17:e2:1e:23:16:60:8e:8c:3d:9d:af:e7:
63:fe:5b:32:f6:22:aa:71:c5:53:79:f7:39:65:e4:
96:e6:70:45:26:f8:ae:8b:a2:d4:de:19:67:21:a6:
31:e5:7f:0f:ad:57:50:53:ac:12:5d:79:fa:3e:a9:
32:4f:72:c9:08:84:98:b4:7f:6c:a5:53:95:7e:c3:
e3:41:c8:d9:d8:b0:c9:25:be:8b:78:a6:61:10:68:
d3:9a:ba:e9:a7:89:e7:e9:0b:44:4e:3f:93:5e:34:
b7:2c:25:d8:ca:9e:47:18:05:ad:4f:db:cf:db:f5:
8f:10:a2:13:b0:6f:27:c1:12:15:75:82:8b:be:d6:
69:0d:ee:23:6b:76:32:ba:d0:9b:74:78:62:3e:08:
e6:09:ee:98:ae:07:49:6b:20:1a:5f:b9:8d:72:2d:
86:3a:f7:a5:25:71:4b:7d:53:8f:c3:bf:9c:9d:54:
4b:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EC:CC:0D:A0:AD:19:87:27:A5:D3:6C:30:BB:3D:9E:4B:97:50:F1:37
X509v3 Authority Key Identifier:
keyid:3B:A0:5C:B2:96:71:D3:0A:57:A3:E8:44:4F:41:FE:03:4C:F7:52:31
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/O6BcspZx0wpXo-hET0H-A0z3UjE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/09ec83-85e2-4e9c-a79c-4c959f6077a0/1/O6BcspZx0wpXo-hET0H-A0z3UjE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/09ec83-85e2-4e9c-a79c-4c959f6077a0/1/O6BcspZx0wpXo-hET0H-A0z3UjE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8d:d0:49:44:89:c1:99:5b:fd:c0:1f:02:e0:7c:1d:21:c2:96:
c2:aa:9e:a1:d2:80:90:ac:35:f9:c2:6c:3a:f8:1e:31:47:87:
61:64:b5:ec:7c:48:87:97:e6:5c:27:69:ee:5e:17:5b:0e:91:
8f:b9:a3:de:61:0f:0c:b2:44:8c:8b:a9:c7:b7:fa:bb:cd:0e:
02:16:9b:d4:4e:12:4c:ca:88:95:bf:3b:a8:a5:73:bd:54:79:
ca:fc:2a:e4:9a:0f:e3:49:6c:2c:81:70:13:75:45:11:29:52:
2b:bc:59:5f:f2:e8:d4:f5:ac:b1:8d:e2:77:40:4f:cf:19:3d:
98:e5:b7:25:9a:1f:6b:8b:80:f6:b2:69:33:5b:11:7a:48:2d:
69:b5:43:3a:f0:68:6a:7b:a6:99:68:ef:0c:d7:c8:3d:c5:57:
d0:1e:73:0b:2f:7b:4b:3e:19:7f:b4:5c:06:15:a3:11:43:a0:
99:86:ca:6f:8d:21:b7:da:63:99:7b:37:43:7a:f7:4d:0c:19:
4a:24:2b:2b:f6:53:32:35:7a:b2:bb:3c:ba:72:25:72:29:4b:
af:b8:24:78:8c:05:c9:cf:f2:c9:24:72:35:6f:38:b0:1d:52:
a1:35:54:35:1d:65:3a:ec:ab:90:09:f5:5a:da:f5:44:0c:48:
b3:0b:97:0b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 21 10:38:12 2025 by rpki-client