Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/50/ad7ac3-b8ad-42b0-ad2a-ae967d739dd3/1/O6F4K2r7p8a88HC5P-1MyEr0E1I.mft
File: O6F4K2r7p8a88HC5P-1MyEr0E1I.mft (raw, json)
Hash identifier: pR2eDgGZ/9y+KKVm2F4IQLNgYyp93Z4S1QD+JJRqSb0=
Subject key identifier: 32:07:8B:4A:EB:32:36:6B:6C:A2:AC:11:13:B6:F9:A9:38:8D:A0:44
Authority key identifier: 3B:A1:78:2B:6A:FB:A7:C6:BC:F0:70:B9:3F:ED:4C:C8:4A:F4:13:52
Certificate issuer: /CN=3ba1782b6afba7c6bcf070b93fed4cc84af41352
Certificate serial: 01965500C02FA1A8A06AF1CBB2719598F98A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/O6F4K2r7p8a88HC5P-1MyEr0E1I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/50/ad7ac3-b8ad-42b0-ad2a-ae967d739dd3/1/O6F4K2r7p8a88HC5P-1MyEr0E1I.mft
Manifest number: 1502
Signing time: Sun 20 Apr 2025 21:00:34 +0000
Manifest this update: Sun 20 Apr 2025 21:00:34 +0000
Manifest next update: Mon 21 Apr 2025 21:00:34 +0000
Files and hashes: 1: 3jF5JkqZzpwDg2CUyKrMHDx4QqM.roa (hash: Ct22y3Kn4dpY61h6fsUyGmJkOxPrtpccRirSLUmpVtY=)
2: O6F4K2r7p8a88HC5P-1MyEr0E1I.crl (hash: DQ073m9fonpWYI8BrDAxAnJZC59Dx6BOnpBpm7TFJ+A=)
3: caUBuUxU945I82DD831l9nsD-jo.roa (hash: fcv+cYVXy7t+Ay1RhyoB8XEGTuHAujkCAZt9GTjK/IA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/50/ad7ac3-b8ad-42b0-ad2a-ae967d739dd3/1/O6F4K2r7p8a88HC5P-1MyEr0E1I.crl
rsync://rpki.ripe.net/repository/DEFAULT/50/ad7ac3-b8ad-42b0-ad2a-ae967d739dd3/1/O6F4K2r7p8a88HC5P-1MyEr0E1I.mft
rsync://rpki.ripe.net/repository/DEFAULT/O6F4K2r7p8a88HC5P-1MyEr0E1I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 21 Apr 2025 21:00:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:55:00:c0:2f:a1:a8:a0:6a:f1:cb:b2:71:95:98:f9:8a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3ba1782b6afba7c6bcf070b93fed4cc84af41352
Validity
Not Before: Apr 20 21:00:34 2025 GMT
Not After : Apr 21 21:00:34 2025 GMT
Subject: CN=32078b4aeb32366b6ca2ac1113b6f9a9388da044
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:c8:45:ae:99:04:81:bb:41:69:57:7a:b3:31:
2d:d9:bb:50:96:2b:ae:89:cc:6a:73:e3:dd:74:1e:
07:38:b7:8a:09:80:b6:87:e2:14:27:97:f0:f4:6b:
c3:11:70:4f:5f:04:fc:31:b9:02:e0:61:f5:7e:2c:
6e:11:6b:ee:62:d0:15:f7:37:c6:fa:49:77:66:dc:
b7:3a:0f:41:3e:3b:df:a5:99:1d:cc:ee:cf:43:fd:
83:ef:9d:9d:17:00:c2:f1:e1:30:31:24:9b:24:db:
a2:86:d6:8c:c5:ce:4b:77:45:74:20:91:9e:a4:34:
d0:53:29:46:47:a8:f1:0c:1a:21:1f:d8:26:d9:2c:
fa:1c:c3:dc:6c:67:62:9b:a0:64:96:ba:dc:cf:f7:
a7:08:fb:e9:88:93:7a:e9:a7:b4:6e:44:93:4f:f4:
ea:88:e1:f5:5b:47:06:21:75:52:1b:e5:6c:36:32:
58:90:7f:f5:5e:e0:ee:f0:1d:42:ff:fd:14:92:5f:
6c:85:b0:44:19:35:0f:fa:8e:92:f5:b4:e8:98:c5:
77:8a:2c:96:68:90:f2:1d:ec:b7:dc:b7:8f:74:6e:
0a:4c:d9:11:16:99:19:73:bc:bd:10:fb:37:12:8c:
3c:73:e5:46:19:e4:27:4e:49:4b:ea:fa:de:72:da:
c7:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
32:07:8B:4A:EB:32:36:6B:6C:A2:AC:11:13:B6:F9:A9:38:8D:A0:44
X509v3 Authority Key Identifier:
keyid:3B:A1:78:2B:6A:FB:A7:C6:BC:F0:70:B9:3F:ED:4C:C8:4A:F4:13:52
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/O6F4K2r7p8a88HC5P-1MyEr0E1I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/50/ad7ac3-b8ad-42b0-ad2a-ae967d739dd3/1/O6F4K2r7p8a88HC5P-1MyEr0E1I.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/50/ad7ac3-b8ad-42b0-ad2a-ae967d739dd3/1/O6F4K2r7p8a88HC5P-1MyEr0E1I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
bf:f1:43:23:13:7c:ec:4e:34:03:0d:cc:c7:40:77:16:1d:e5:
79:b3:76:f0:e3:9f:bd:04:42:c5:98:d8:f4:36:a6:76:23:4b:
1e:4f:d6:9d:24:0e:5a:87:fb:26:c6:c9:98:68:37:49:99:eb:
24:c5:f7:d4:e7:4c:4e:de:91:0e:df:06:c4:99:b0:10:d7:16:
ba:30:c2:15:2b:2e:8c:72:3e:b4:52:51:43:59:eb:f1:e4:c7:
19:26:92:78:72:b9:59:7d:90:69:f4:b0:90:8a:e7:b5:48:ce:
47:78:9c:7b:07:4d:e2:f5:24:00:c0:fc:ca:07:80:d0:77:5f:
fc:bb:b7:68:87:47:16:65:eb:68:50:02:a4:2e:98:70:59:dd:
46:b7:8f:16:d6:53:b3:ed:8b:51:60:8f:e7:2f:83:eb:4f:db:
86:ad:90:22:c0:48:fa:85:7f:60:ff:c4:31:16:7b:98:8f:80:
10:c3:be:ec:9c:17:27:5b:6f:a3:8f:22:52:15:14:9d:26:13:
6f:89:9b:a3:77:77:fd:0e:ea:8a:3d:dc:40:f6:0e:6f:8a:10:
08:ea:de:0c:77:1b:31:fb:ae:24:01:6c:49:61:2c:1e:c6:fb:
4f:c6:7a:97:b3:73:99:36:37:fd:a8:73:19:d4:0b:09:79:0c:
93:d3:e0:3a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 21 06:14:23 2025 by rpki-client