Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b4/a3b11e-5909-49fe-bb75-790bc91a59e6/1/oNPtV5U0igTn7NFy12QvqWIJcoc.mft
File: oNPtV5U0igTn7NFy12QvqWIJcoc.mft (raw, json)
Hash identifier: zUiQGv4OPscW6Cx+r1xBzpVvfEiuqRDZIcVki93xUaI=
Subject key identifier: 61:2A:B2:74:21:5F:3E:97:12:0D:F1:A2:7A:B0:BE:B9:F3:B1:78:63
Authority key identifier: A0:D3:ED:57:95:34:8A:04:E7:EC:D1:72:D7:64:2F:A9:62:09:72:87
Certificate issuer: /CN=a0d3ed5795348a04e7ecd172d7642fa962097287
Certificate serial: 01965492D70B1CBEBB54C29325183A7C7DF3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/oNPtV5U0igTn7NFy12QvqWIJcoc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b4/a3b11e-5909-49fe-bb75-790bc91a59e6/1/oNPtV5U0igTn7NFy12QvqWIJcoc.mft
Manifest number: 01E4
Signing time: Sun 20 Apr 2025 19:00:31 +0000
Manifest this update: Sun 20 Apr 2025 19:00:31 +0000
Manifest next update: Mon 21 Apr 2025 19:00:31 +0000
Files and hashes: 1: JHrBDLJcPTsnCrG8bwT8t1HgBcs.roa (hash: EkBSfLVT+kDIdrM6KiFxSbKixbIyNKDlGgPJ4ui1fhc=)
2: oNPtV5U0igTn7NFy12QvqWIJcoc.crl (hash: avlGLVK8dbtvW4O0CIdCIdDleJXh9uqkHD2tYy68980=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b4/a3b11e-5909-49fe-bb75-790bc91a59e6/1/oNPtV5U0igTn7NFy12QvqWIJcoc.crl
rsync://rpki.ripe.net/repository/DEFAULT/b4/a3b11e-5909-49fe-bb75-790bc91a59e6/1/oNPtV5U0igTn7NFy12QvqWIJcoc.mft
rsync://rpki.ripe.net/repository/DEFAULT/oNPtV5U0igTn7NFy12QvqWIJcoc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 21 Apr 2025 16:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:54:92:d7:0b:1c:be:bb:54:c2:93:25:18:3a:7c:7d:f3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a0d3ed5795348a04e7ecd172d7642fa962097287
Validity
Not Before: Apr 20 19:00:31 2025 GMT
Not After : Apr 21 19:00:31 2025 GMT
Subject: CN=612ab274215f3e97120df1a27ab0beb9f3b17863
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e2:3d:4e:2c:df:13:a3:af:bb:9a:24:fa:a7:18:
1c:0b:b6:7a:20:cf:80:4e:51:a0:21:4d:8e:04:e6:
69:3b:50:b7:93:07:a8:c2:fa:34:5a:25:6f:d6:9b:
4a:8a:a5:eb:8e:6a:69:c4:bd:ed:ee:02:83:ca:72:
be:c0:8d:07:cd:23:bd:56:db:46:b0:5e:b8:5a:38:
a2:96:81:36:9a:7d:1f:38:cf:fc:f7:63:fa:a3:7d:
c9:4f:07:b9:10:99:fc:cb:43:bd:57:9d:82:1c:d7:
0f:f5:68:7d:78:90:d7:0c:4e:5e:c1:91:7d:87:e4:
40:88:6c:35:cd:25:8f:82:52:b4:06:9d:e2:ff:e4:
60:81:91:b1:a4:26:b4:ff:58:49:00:e4:b6:39:ef:
46:e7:eb:e7:00:8f:4c:08:96:08:08:c3:0b:c9:3b:
b9:46:7b:34:7f:9f:c5:75:95:5a:16:05:f9:8b:5f:
d1:52:e3:8a:be:37:87:ac:5e:62:ec:80:93:ec:2f:
8b:98:03:a8:6b:75:2c:20:14:0d:f9:b8:cc:f8:eb:
67:26:74:59:ea:e6:f7:e2:d0:bb:35:03:db:f1:2f:
c4:9d:cf:0b:53:59:1d:79:63:de:f3:8d:4c:42:c8:
f2:0e:77:d2:c5:9d:cc:c6:39:bb:1a:a4:64:9b:5e:
6c:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
61:2A:B2:74:21:5F:3E:97:12:0D:F1:A2:7A:B0:BE:B9:F3:B1:78:63
X509v3 Authority Key Identifier:
keyid:A0:D3:ED:57:95:34:8A:04:E7:EC:D1:72:D7:64:2F:A9:62:09:72:87
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/oNPtV5U0igTn7NFy12QvqWIJcoc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/a3b11e-5909-49fe-bb75-790bc91a59e6/1/oNPtV5U0igTn7NFy12QvqWIJcoc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/a3b11e-5909-49fe-bb75-790bc91a59e6/1/oNPtV5U0igTn7NFy12QvqWIJcoc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
45:20:1a:5b:31:41:8c:43:f1:5a:37:69:fd:45:00:66:1f:70:
10:5d:89:a6:9a:77:c9:6b:0f:a9:e9:44:bd:dd:54:3f:56:7f:
bb:71:ed:f4:72:17:e6:50:31:50:7b:ec:70:bd:43:4a:9d:44:
57:5e:a2:da:f8:23:0d:cc:3f:2a:b2:89:6f:d2:42:8d:68:b1:
bf:0a:29:ec:3a:02:5f:9a:9e:61:74:18:c7:80:59:cf:f4:ce:
eb:a6:2d:dc:56:53:11:f9:64:da:5c:e4:78:cb:65:69:40:58:
e9:22:2f:1a:61:4e:08:4a:68:f7:5f:79:88:5b:6d:fd:7e:05:
93:ec:da:66:8e:7b:39:95:e4:e1:d0:ec:2e:a6:0c:98:1d:c5:
c2:ed:65:f4:47:0f:f6:24:67:9c:53:27:2a:15:ed:a9:24:55:
9d:f3:2b:72:2b:7b:2a:06:1e:70:e9:06:e7:33:e3:b8:f5:ea:
7a:25:8f:7f:40:af:cc:9d:ad:02:00:45:b2:a3:56:e8:9b:76:
5d:a6:82:25:04:4c:38:15:2e:c6:ea:a6:e0:54:d5:74:0c:b1:
5f:4b:67:7b:a8:35:2b:94:ae:7a:a2:16:bb:b2:c1:34:0a:b1:
13:73:29:46:38:6c:49:a6:e2:4a:21:30:0e:9a:55:f7:73:3a:
42:56:fb:c4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 21 01:19:10 2025 by rpki-client