Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5a/81d68a-536c-4442-b852-bbd311186950/1/o2mLAQU5EWB-2yp2CQpqztlaPtU.mft
File: o2mLAQU5EWB-2yp2CQpqztlaPtU.mft (raw, json)
Hash identifier: KB9z+ufL73nGyl+k4Ii5o4S1Vo0aEpXVk7sKJP2AsQA=
Subject key identifier: 48:46:6F:FE:19:4E:05:0D:C8:60:42:B0:45:4C:9C:FC:89:3C:D1:C5
Authority key identifier: A3:69:8B:01:05:39:11:60:7E:DB:2A:76:09:0A:6A:CE:D9:5A:3E:D5
Certificate issuer: /CN=a3698b01053911607edb2a76090a6aced95a3ed5
Certificate serial: 01960E3239A40AF6969116B4F11AC643B1CB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/o2mLAQU5EWB-2yp2CQpqztlaPtU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5a/81d68a-536c-4442-b852-bbd311186950/1/o2mLAQU5EWB-2yp2CQpqztlaPtU.mft
Manifest number: 14D9
Signing time: Mon 07 Apr 2025 03:01:34 +0000
Manifest this update: Mon 07 Apr 2025 03:01:34 +0000
Manifest next update: Tue 08 Apr 2025 03:01:34 +0000
Files and hashes: 1: R8ht10VeSoVhydPFwGD77r1yDU0.roa (hash: ofWmsTQNmoPWiH0DZLija6UpuCRIgTv7LLQ8ZzQiLho=)
2: iJkNbGwAvDr3zDBvNNp3PJrPffk.roa (hash: oWcx7oCuY2xi/nWkXX5PcJkqGrpEdipcr6e/fE61Yrk=)
3: o2mLAQU5EWB-2yp2CQpqztlaPtU.crl (hash: MDAMKo48YLgh0oWLM7tfiAImTSBIuavweTbaFUyyGng=)
4: tWQ9cnFy3imrP2HUU-YNNesXz-M.roa (hash: keNfuumhLj0esV6ivUODGor64VRXrwZusUQrseCHziI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5a/81d68a-536c-4442-b852-bbd311186950/1/o2mLAQU5EWB-2yp2CQpqztlaPtU.crl
rsync://rpki.ripe.net/repository/DEFAULT/5a/81d68a-536c-4442-b852-bbd311186950/1/o2mLAQU5EWB-2yp2CQpqztlaPtU.mft
rsync://rpki.ripe.net/repository/DEFAULT/o2mLAQU5EWB-2yp2CQpqztlaPtU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 08 Apr 2025 01:00:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:0e:32:39:a4:0a:f6:96:91:16:b4:f1:1a:c6:43:b1:cb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a3698b01053911607edb2a76090a6aced95a3ed5
Validity
Not Before: Apr 7 03:01:34 2025 GMT
Not After : Apr 8 03:01:34 2025 GMT
Subject: CN=48466ffe194e050dc86042b0454c9cfc893cd1c5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:08:c5:ea:70:d8:a2:41:50:8f:07:65:9d:cc:
80:aa:f0:8f:81:42:dc:c5:48:40:ed:4c:5b:35:53:
91:9f:4d:81:47:3c:12:61:f5:88:c6:da:6c:88:fd:
ee:7b:12:65:42:df:c3:1f:57:93:7f:f1:78:73:7e:
41:67:51:59:c2:86:8f:cb:38:a0:1d:5a:1a:d1:13:
4c:c3:37:70:8d:c7:37:eb:8a:e3:84:a1:b9:e6:a4:
ed:9a:45:9b:44:c3:78:97:a2:96:51:03:4e:e9:5b:
d8:b7:60:a6:a3:1f:6a:59:a7:24:4f:31:40:ed:f6:
45:55:b5:7c:a3:d0:a3:ed:fc:02:d0:3e:3c:c0:83:
1b:f1:cf:30:fb:27:45:b0:0f:43:73:58:e5:74:44:
10:d1:b9:d7:00:d9:d7:f6:f1:71:42:57:98:1e:26:
5a:60:fc:dc:8b:ae:a9:cc:b4:32:33:07:f2:b2:5d:
8d:76:34:90:bd:68:a8:0c:b2:ed:68:4b:38:a4:a0:
17:16:ad:0a:fa:b1:5b:6e:e5:df:3d:39:77:e6:63:
d6:08:c0:72:cb:a7:48:68:ee:78:a5:06:c7:5d:30:
8d:56:70:ba:5a:7b:07:1b:ce:c1:fe:ff:18:e3:63:
b5:b7:c3:fc:0e:cb:36:97:b2:d6:42:3e:06:e7:96:
6c:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
48:46:6F:FE:19:4E:05:0D:C8:60:42:B0:45:4C:9C:FC:89:3C:D1:C5
X509v3 Authority Key Identifier:
keyid:A3:69:8B:01:05:39:11:60:7E:DB:2A:76:09:0A:6A:CE:D9:5A:3E:D5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/o2mLAQU5EWB-2yp2CQpqztlaPtU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/81d68a-536c-4442-b852-bbd311186950/1/o2mLAQU5EWB-2yp2CQpqztlaPtU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/81d68a-536c-4442-b852-bbd311186950/1/o2mLAQU5EWB-2yp2CQpqztlaPtU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5b:52:81:67:b9:32:95:9b:47:a7:21:9c:0b:b9:6b:1e:8b:98:
17:69:10:09:c1:f6:e6:5f:ce:c0:d7:ad:b6:f4:69:c8:4e:86:
4e:61:1d:91:f4:e6:ab:11:d5:4b:c9:b9:fc:c0:6e:a8:b8:b4:
49:95:55:29:af:c0:de:d2:2b:49:26:9b:f5:3a:30:54:cd:2b:
bf:dd:7e:c1:93:f0:4a:3a:84:7a:e6:b8:34:15:15:e1:65:97:
a9:f2:a8:06:ae:88:a0:eb:bc:47:a0:09:bd:09:1d:aa:d6:43:
88:70:b6:07:1d:80:03:28:9e:81:f6:34:14:a2:f8:09:f6:f5:
63:57:d7:1b:82:1c:7d:f3:cc:0f:f6:78:57:f9:79:62:de:b2:
f3:3f:83:f9:e1:76:67:a3:31:8a:5a:90:92:8c:d6:4b:68:1f:
4b:ac:3d:74:bc:de:79:e7:10:a9:f2:00:6f:a0:89:ea:4d:b1:
88:b8:c3:2d:d4:11:27:54:94:f6:50:02:35:5a:41:7c:d8:cb:
d5:e2:9a:04:3b:10:c1:c3:1e:86:27:2b:9e:06:96:ad:f6:d8:
1e:58:18:1f:2a:ea:bd:35:88:d0:b5:62:6a:77:41:2d:e8:0a:
f2:67:d2:c0:1a:44:2c:f3:6c:cd:76:91:04:a5:86:22:16:0d:
a9:4f:51:0d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 08:38:54 2025 by rpki-client