Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/90/c72b67-76ec-4afa-b376-f9ad38051220/1/O-LwFktmp2eVhgtOo1hvrVY7rEc.mft
File: O-LwFktmp2eVhgtOo1hvrVY7rEc.mft (raw, json)
Hash identifier: Smcb8fkB1DkUER/fDHnLFU6Xs/+6t7PyciCcrJ1qGJQ=
Subject key identifier: 8D:C7:F2:6D:9A:03:90:9D:60:FF:05:5F:79:BF:AE:1B:7D:09:DD:61
Authority key identifier: 3B:E2:F0:16:4B:66:A7:67:95:86:0B:4E:A3:58:6F:AD:56:3B:AC:47
Certificate issuer: /CN=3be2f0164b66a76795860b4ea3586fad563bac47
Certificate serial: 01965C4C850E9A3FBF5D83BC1B2516A7EA2F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/O-LwFktmp2eVhgtOo1hvrVY7rEc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/90/c72b67-76ec-4afa-b376-f9ad38051220/1/O-LwFktmp2eVhgtOo1hvrVY7rEc.mft
Manifest number: 1509
Signing time: Tue 22 Apr 2025 07:00:40 +0000
Manifest this update: Tue 22 Apr 2025 07:00:40 +0000
Manifest next update: Wed 23 Apr 2025 07:00:40 +0000
Files and hashes: 1: O-LwFktmp2eVhgtOo1hvrVY7rEc.crl (hash: ICgiomIKgvNVM/q2/AMBbsXNap5dQuc5VuhQcDsbnIA=)
2: bnVoAcKQpBUpBdJ_G4E6sEiT0wk.roa (hash: D5MR6IRxVzBiemlQt2yPaFHtcO6ch7oL0gJFMCA2LTc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/90/c72b67-76ec-4afa-b376-f9ad38051220/1/O-LwFktmp2eVhgtOo1hvrVY7rEc.crl
rsync://rpki.ripe.net/repository/DEFAULT/90/c72b67-76ec-4afa-b376-f9ad38051220/1/O-LwFktmp2eVhgtOo1hvrVY7rEc.mft
rsync://rpki.ripe.net/repository/DEFAULT/O-LwFktmp2eVhgtOo1hvrVY7rEc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 23 Apr 2025 04:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:5c:4c:85:0e:9a:3f:bf:5d:83:bc:1b:25:16:a7:ea:2f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3be2f0164b66a76795860b4ea3586fad563bac47
Validity
Not Before: Apr 22 07:00:40 2025 GMT
Not After : Apr 23 07:00:40 2025 GMT
Subject: CN=8dc7f26d9a03909d60ff055f79bfae1b7d09dd61
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e9:fb:40:c5:2c:0d:85:d5:14:5d:4d:07:7e:1b:
c4:1a:69:a8:a8:3a:d3:dc:af:9a:02:c7:0c:a1:9e:
e6:a7:53:a2:6a:83:b6:a0:59:82:31:f3:d3:9d:08:
93:1c:dc:c4:20:74:93:58:10:93:ee:20:6e:ec:b2:
37:8d:38:88:1b:49:2e:0f:9c:f7:90:0f:f0:33:fc:
39:2a:6f:5d:f7:1a:2f:26:c4:5c:01:7c:38:56:af:
74:2f:83:91:92:77:ba:79:8b:62:d2:7a:82:00:3c:
7d:97:74:3a:c4:1a:c8:91:06:54:ca:b7:d6:5b:49:
b0:28:65:ca:42:14:8e:ad:ff:4c:15:64:a9:e7:c0:
e6:08:cc:d9:9e:bf:4c:57:9d:2c:87:39:49:0b:1b:
a1:ac:e9:05:f4:b4:80:76:17:c7:7c:9b:fb:38:22:
20:6f:e5:27:1d:e7:b2:f7:5c:89:cc:71:aa:47:29:
a7:77:43:51:53:6a:94:02:2f:2f:9a:f6:38:e6:d3:
4b:6e:da:ea:f8:60:72:41:09:d1:33:8d:59:0b:bd:
72:c8:2f:db:bf:08:43:79:75:9f:a9:cc:2e:9b:37:
c6:1e:05:42:59:74:e9:49:e0:5a:44:60:39:99:e2:
f3:76:1d:5c:bc:21:a7:b4:5d:64:84:56:db:a3:93:
1c:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8D:C7:F2:6D:9A:03:90:9D:60:FF:05:5F:79:BF:AE:1B:7D:09:DD:61
X509v3 Authority Key Identifier:
keyid:3B:E2:F0:16:4B:66:A7:67:95:86:0B:4E:A3:58:6F:AD:56:3B:AC:47
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/O-LwFktmp2eVhgtOo1hvrVY7rEc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/90/c72b67-76ec-4afa-b376-f9ad38051220/1/O-LwFktmp2eVhgtOo1hvrVY7rEc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/90/c72b67-76ec-4afa-b376-f9ad38051220/1/O-LwFktmp2eVhgtOo1hvrVY7rEc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2c:1b:82:85:67:3b:9f:0c:db:81:c3:35:2c:74:e8:85:70:c9:
a0:48:29:fd:13:d1:8e:4f:e1:d8:db:49:06:94:e6:ab:e4:69:
c6:0c:07:ab:b5:a6:c0:72:66:52:f2:ac:2d:69:d8:d6:cd:a4:
e9:5e:f0:a6:a0:42:47:1c:99:2e:09:ba:e9:29:ee:6f:4a:28:
9c:33:fb:20:7b:e1:1f:ff:a0:dc:6f:3b:22:35:3f:c1:c1:86:
a2:f8:f4:7b:9a:dd:fa:20:02:55:0d:c5:a1:1a:4b:4e:65:82:
4a:9c:fe:c2:2f:15:7a:4f:46:b1:77:d3:cc:d5:02:6a:61:f5:
3f:27:cc:2a:d5:5b:a2:57:0f:97:c4:22:33:e4:b1:b1:b8:52:
1a:c2:e4:4b:01:60:09:3a:78:87:1c:e6:4b:e5:02:3d:54:0b:
50:2b:39:89:7d:af:c4:b8:db:0e:c4:3e:d9:49:5b:9b:85:16:
43:3e:56:82:85:5c:60:d2:40:00:be:92:a8:19:c3:74:b3:13:
d2:9d:f7:99:7b:83:7c:bc:0c:13:7c:3c:32:45:90:73:9d:46:
23:ac:03:92:f8:b4:8d:7a:1a:c7:55:7e:c2:ea:15:b8:11:75:
31:47:bf:27:aa:f6:e6:4c:ac:ce:53:0f:dc:3e:72:02:7e:9f:
60:4b:02:d5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 22 13:17:45 2025 by rpki-client