Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4e/f2e150-3e9e-4f18-a53d-72ac79d7bb09/1/O1jrWLXGGiPQ8kZsXNc86eyWW5Y.mft
File: O1jrWLXGGiPQ8kZsXNc86eyWW5Y.mft (raw, json)
Hash identifier: 3BvGVMjxaJmplQksM4ZVQTWvlPlaMgPuyeKQvD4/VUw=
Subject key identifier: 52:5C:A5:34:7D:DE:C9:BF:51:DB:C9:7C:3A:98:E8:72:98:74:AA:52
Authority key identifier: 3B:58:EB:58:B5:C6:1A:23:D0:F2:46:6C:5C:D7:3C:E9:EC:96:5B:96
Certificate issuer: /CN=3b58eb58b5c61a23d0f2466c5cd73ce9ec965b96
Certificate serial: 01965492D66C5D97CBC1FE59290F8E007457
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/O1jrWLXGGiPQ8kZsXNc86eyWW5Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4e/f2e150-3e9e-4f18-a53d-72ac79d7bb09/1/O1jrWLXGGiPQ8kZsXNc86eyWW5Y.mft
Manifest number: 0108
Signing time: Sun 20 Apr 2025 19:00:31 +0000
Manifest this update: Sun 20 Apr 2025 19:00:31 +0000
Manifest next update: Mon 21 Apr 2025 19:00:31 +0000
Files and hashes: 1: O1jrWLXGGiPQ8kZsXNc86eyWW5Y.crl (hash: m262nTAgr+JlpFK2HfyM5Qj4G/Pj1rS6HY+PvUoAdpc=)
2: f0dwYiFEnOu3_JgUSzuAzEREF1g.roa (hash: finZQb06qlnebE/7uJEc9oVyw8NWrlEdleXzIM/XsmQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4e/f2e150-3e9e-4f18-a53d-72ac79d7bb09/1/O1jrWLXGGiPQ8kZsXNc86eyWW5Y.crl
rsync://rpki.ripe.net/repository/DEFAULT/4e/f2e150-3e9e-4f18-a53d-72ac79d7bb09/1/O1jrWLXGGiPQ8kZsXNc86eyWW5Y.mft
rsync://rpki.ripe.net/repository/DEFAULT/O1jrWLXGGiPQ8kZsXNc86eyWW5Y.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 21 Apr 2025 19:00:31 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:54:92:d6:6c:5d:97:cb:c1:fe:59:29:0f:8e:00:74:57
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3b58eb58b5c61a23d0f2466c5cd73ce9ec965b96
Validity
Not Before: Apr 20 19:00:31 2025 GMT
Not After : Apr 21 19:00:31 2025 GMT
Subject: CN=525ca5347ddec9bf51dbc97c3a98e8729874aa52
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:15:2f:18:9b:71:ba:52:01:85:a7:67:18:3d:
c1:0f:d8:b7:63:0b:01:45:2b:8b:f0:c0:8e:5e:7d:
81:7e:04:13:ec:52:fc:3f:1e:8b:97:c1:4d:fa:bf:
9e:55:ae:16:84:5a:76:00:20:0d:dc:1f:c7:f5:f7:
33:3c:69:b6:b5:c2:eb:70:73:2d:06:58:08:67:3d:
64:7e:77:e8:bf:9b:bb:f2:6f:65:16:4c:3a:55:e5:
91:4a:a7:8b:ed:4d:3b:3e:d8:7a:3e:ca:02:dd:90:
18:b0:a1:68:f7:c0:3b:b6:c2:c5:ff:09:7c:1e:6d:
6e:f6:64:22:71:e9:bd:2b:0e:45:a8:af:4a:99:e5:
da:48:f5:95:eb:df:dc:19:70:ca:30:64:aa:c8:9e:
b6:6c:39:ba:c9:07:8a:f7:15:bd:56:47:39:de:7a:
fe:11:bf:d0:41:57:79:65:b1:86:cf:39:27:aa:22:
9f:28:7b:45:19:21:14:e8:55:9e:2d:4e:3d:dd:7f:
e1:62:34:ac:f4:e8:7e:8f:c0:d7:6a:55:82:a5:36:
5d:d0:25:ee:ba:27:b5:b5:34:39:7f:be:3b:69:05:
71:f8:36:37:56:d8:61:19:d0:7f:c2:fd:e8:6d:79:
d1:49:4d:fe:d7:3f:db:09:1c:af:94:58:fb:dc:88:
1d:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
52:5C:A5:34:7D:DE:C9:BF:51:DB:C9:7C:3A:98:E8:72:98:74:AA:52
X509v3 Authority Key Identifier:
keyid:3B:58:EB:58:B5:C6:1A:23:D0:F2:46:6C:5C:D7:3C:E9:EC:96:5B:96
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/O1jrWLXGGiPQ8kZsXNc86eyWW5Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/f2e150-3e9e-4f18-a53d-72ac79d7bb09/1/O1jrWLXGGiPQ8kZsXNc86eyWW5Y.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/f2e150-3e9e-4f18-a53d-72ac79d7bb09/1/O1jrWLXGGiPQ8kZsXNc86eyWW5Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3d:22:29:11:f6:ee:10:3c:9c:ac:c2:44:70:96:f1:68:4b:1c:
a6:58:4f:47:66:c0:8b:4d:a1:29:87:fd:0b:3d:96:e9:cd:35:
47:26:9b:2b:09:43:3e:51:af:5c:9e:29:7b:66:72:cc:cc:81:
29:68:81:48:3c:fa:f0:dc:f9:75:de:0d:a5:77:56:56:46:1b:
4e:90:95:e5:22:0f:49:6c:b5:68:10:5d:a9:67:73:58:fb:f3:
df:08:40:55:3d:6a:6a:8b:5b:53:ec:6a:f7:60:f9:6e:8a:93:
61:d5:60:d4:fb:6f:2a:ef:73:32:fd:d1:b4:40:33:c2:c1:42:
24:84:54:2b:92:57:de:57:8b:1f:ea:28:ab:f5:bc:8e:ab:40:
0b:99:06:6a:b4:39:11:a4:a1:0e:ef:df:b8:39:f1:76:ea:2f:
72:35:91:ee:fd:74:c8:21:60:38:8b:d7:bb:4e:e0:b1:03:73:
99:4c:6d:ca:e6:1c:f4:fd:6c:68:50:94:02:1f:72:d7:e9:0c:
c3:81:9f:a2:ff:49:bb:40:62:93:5c:c7:24:b8:14:96:f9:1c:
b8:4b:43:f4:e3:83:7e:33:20:9e:66:c4:ff:cb:dc:03:a3:15:
54:58:3a:d0:74:29:7b:8a:44:60:a5:dc:47:3a:4c:89:4a:c9:
d6:1a:4c:f2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 21 06:20:19 2025 by rpki-client