Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/23/77f5b9-5b8c-4546-9a0d-b8c5f84d9687/1/o6znPa9SECzbhLf1aBKWlXoMmng.mft
File: o6znPa9SECzbhLf1aBKWlXoMmng.mft (raw, json)
Hash identifier: vsmgNxJwWXGSRBCu9AJzd+CGNfI65ewlVuxZlakv92E=
Subject key identifier: A5:FE:35:52:F8:37:6F:04:89:78:19:4D:6A:6F:8B:0C:A2:40:7D:6E
Authority key identifier: A3:AC:E7:3D:AF:52:10:2C:DB:84:B7:F5:68:12:96:95:7A:0C:9A:78
Certificate issuer: /CN=a3ace73daf52102cdb84b7f5681296957a0c9a78
Certificate serial: 01964B90326180323DB36F2486BC3F983024
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/o6znPa9SECzbhLf1aBKWlXoMmng.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/23/77f5b9-5b8c-4546-9a0d-b8c5f84d9687/1/o6znPa9SECzbhLf1aBKWlXoMmng.mft
Manifest number: 06F6
Signing time: Sat 19 Apr 2025 01:01:03 +0000
Manifest this update: Sat 19 Apr 2025 01:01:03 +0000
Manifest next update: Sun 20 Apr 2025 01:01:03 +0000
Files and hashes: 1: PLwRwWOtSjw-0Pg41XEpQjuSA-U.roa (hash: lGtM/oEk7N2nkUdCvZFwDApY3dPL/dm/f6h+7RuL+gU=)
2: o6znPa9SECzbhLf1aBKWlXoMmng.crl (hash: MrFaTC+1sMZCu9UDYCQz0SSH3EoB/h5K58OfQmH81Oo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/23/77f5b9-5b8c-4546-9a0d-b8c5f84d9687/1/o6znPa9SECzbhLf1aBKWlXoMmng.crl
rsync://rpki.ripe.net/repository/DEFAULT/23/77f5b9-5b8c-4546-9a0d-b8c5f84d9687/1/o6znPa9SECzbhLf1aBKWlXoMmng.mft
rsync://rpki.ripe.net/repository/DEFAULT/o6znPa9SECzbhLf1aBKWlXoMmng.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 20 Apr 2025 01:01:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:4b:90:32:61:80:32:3d:b3:6f:24:86:bc:3f:98:30:24
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a3ace73daf52102cdb84b7f5681296957a0c9a78
Validity
Not Before: Apr 19 01:01:03 2025 GMT
Not After : Apr 20 01:01:03 2025 GMT
Subject: CN=a5fe3552f8376f048978194d6a6f8b0ca2407d6e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:34:a7:4c:a9:b3:32:5d:17:d0:ae:ac:2c:af:
d6:d8:b6:a5:a7:49:82:dc:13:20:95:22:6f:58:dc:
01:9b:09:67:07:55:b4:08:3b:50:44:2d:e5:d3:3c:
b4:b0:8d:e9:94:d5:c6:36:69:18:9b:48:88:93:93:
7b:d0:20:64:e7:c0:4c:1a:4f:eb:bc:be:5c:24:a5:
00:9c:40:cf:0f:68:65:c9:4e:6b:45:1d:b0:15:9c:
04:18:55:97:ee:a1:bc:04:ed:d7:6a:dd:4d:c5:94:
f7:9f:bb:55:c4:71:53:62:cf:e1:5d:58:7f:a5:ab:
d9:dd:6b:1a:f9:0c:bb:dd:0c:a4:50:c2:01:cc:20:
d4:0f:d0:ea:6b:27:bd:d3:cb:b1:2d:8d:f5:20:7c:
07:2e:0d:cb:79:7a:f8:ca:64:45:d2:46:51:b4:52:
61:a0:e6:aa:c7:1f:01:5f:58:fa:1b:62:ca:b1:7b:
8e:08:84:47:d4:df:09:60:7d:77:1d:c5:20:b8:96:
a4:0e:0e:c1:9b:45:9c:65:83:46:0c:df:85:45:b1:
25:ab:4e:41:97:90:e7:82:01:87:1a:f4:ec:da:0c:
8d:e7:96:b5:93:5d:01:f8:9e:65:23:19:99:76:76:
6d:28:0a:a2:33:49:9a:f1:94:ca:23:9d:0e:15:5c:
3c:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A5:FE:35:52:F8:37:6F:04:89:78:19:4D:6A:6F:8B:0C:A2:40:7D:6E
X509v3 Authority Key Identifier:
keyid:A3:AC:E7:3D:AF:52:10:2C:DB:84:B7:F5:68:12:96:95:7A:0C:9A:78
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/o6znPa9SECzbhLf1aBKWlXoMmng.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/23/77f5b9-5b8c-4546-9a0d-b8c5f84d9687/1/o6znPa9SECzbhLf1aBKWlXoMmng.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/23/77f5b9-5b8c-4546-9a0d-b8c5f84d9687/1/o6znPa9SECzbhLf1aBKWlXoMmng.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a9:cc:71:5e:9c:d9:dc:9c:8d:f5:26:08:5e:24:88:83:82:25:
23:68:7b:21:5d:1d:56:8a:44:f6:e6:f0:e5:d8:c7:04:91:a4:
0b:4d:33:b2:99:09:98:8f:80:32:f2:c1:01:56:ff:0f:04:86:
c4:d3:78:b8:72:08:d6:ae:e9:fe:7f:1c:18:b2:8d:a5:c3:e8:
9f:08:2b:d5:33:30:e4:56:70:08:32:85:67:6e:99:43:14:47:
90:cd:af:96:92:ca:06:86:fc:12:65:44:bb:16:27:e1:f2:01:
6f:c4:f9:0e:bb:43:db:7d:0c:d6:1b:85:a8:d0:d2:45:b4:2b:
cf:3c:c7:cf:09:b3:a7:82:1f:20:e6:35:04:b6:35:1e:1d:e4:
96:e8:26:02:11:5e:d7:2d:05:a5:32:85:1d:3f:79:29:e4:fe:
b7:e2:aa:1e:8f:2a:7e:b5:59:47:0c:82:35:17:01:86:9c:86:
05:c4:5b:cb:9e:98:86:20:8f:a9:9d:18:b5:d6:cf:51:59:13:
ae:6a:25:a8:fd:9f:d2:97:98:37:be:e4:52:98:fe:b6:99:aa:
ee:6c:f8:c5:bc:b6:66:16:96:80:70:c2:e3:35:85:8f:69:22:
85:51:10:34:5a:a9:23:48:fa:5b:49:5b:fb:f4:68:53:a3:33:
8b:73:ca:05
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 19 11:29:38 2025 by rpki-client