Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/61/d2c38e-0aaf-4e3b-8ed8-b54ae6f08f4f/1/O-R2HUTYBsP55OdrecjyKWzHu88.mft
File: O-R2HUTYBsP55OdrecjyKWzHu88.mft (raw, json)
Hash identifier: CWiGJZcIe9lAfEMu4kgraOfl7VEHXYIZjyhNfQqIx8g=
Subject key identifier: F4:4B:84:9F:DF:CA:25:42:8A:18:B9:A2:1E:2E:56:37:32:3D:3F:17
Authority key identifier: 3B:E4:76:1D:44:D8:06:C3:F9:E4:E7:6B:79:C8:F2:29:6C:C7:BB:CF
Certificate issuer: /CN=3be4761d44d806c3f9e4e76b79c8f2296cc7bbcf
Certificate serial: 01964C348C00A51F196A17875C15CACFA9C5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/O-R2HUTYBsP55OdrecjyKWzHu88.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/61/d2c38e-0aaf-4e3b-8ed8-b54ae6f08f4f/1/O-R2HUTYBsP55OdrecjyKWzHu88.mft
Manifest number: 0522
Signing time: Sat 19 Apr 2025 04:00:34 +0000
Manifest this update: Sat 19 Apr 2025 04:00:34 +0000
Manifest next update: Sun 20 Apr 2025 04:00:34 +0000
Files and hashes: 1: 6bG4bMO_DWkIG7hWGALOlgBVxos.roa (hash: HbRjK6s2T5/MfaBv/xCsS95H1q1BLsLbojSKMEeMqMg=)
2: O-R2HUTYBsP55OdrecjyKWzHu88.crl (hash: c9vnFJwbHf+L625OFLoGnXytjbTgmF9HMLGI/xCeByw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/61/d2c38e-0aaf-4e3b-8ed8-b54ae6f08f4f/1/O-R2HUTYBsP55OdrecjyKWzHu88.crl
rsync://rpki.ripe.net/repository/DEFAULT/61/d2c38e-0aaf-4e3b-8ed8-b54ae6f08f4f/1/O-R2HUTYBsP55OdrecjyKWzHu88.mft
rsync://rpki.ripe.net/repository/DEFAULT/O-R2HUTYBsP55OdrecjyKWzHu88.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 19 Apr 2025 23:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:4c:34:8c:00:a5:1f:19:6a:17:87:5c:15:ca:cf:a9:c5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3be4761d44d806c3f9e4e76b79c8f2296cc7bbcf
Validity
Not Before: Apr 19 04:00:34 2025 GMT
Not After : Apr 20 04:00:34 2025 GMT
Subject: CN=f44b849fdfca25428a18b9a21e2e5637323d3f17
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:1f:b8:59:54:c3:76:20:5e:3c:9d:7f:ab:b6:
e8:a4:a2:e5:e8:68:ff:8a:8f:29:a4:d4:a3:9a:a1:
39:d9:3d:ef:1c:d0:20:dd:38:38:bf:40:f5:f5:c2:
3d:eb:ba:10:a1:bd:4d:1b:2d:d4:72:33:69:72:64:
7f:ec:7c:85:41:cd:b6:3e:c3:69:f5:51:cf:32:a5:
14:84:00:99:22:f9:71:40:a3:ce:e8:c3:8d:eb:c0:
ab:54:7f:00:6d:88:6a:f4:fa:6c:bd:0b:7e:92:98:
3b:f2:c3:8b:98:97:d6:cb:11:b4:5f:c0:c2:8e:c2:
2c:61:78:a0:c8:9e:7b:42:62:a6:1c:3d:94:69:de:
c6:3c:51:83:92:a8:5e:51:5b:57:f1:06:68:b1:fa:
ca:9c:5a:93:1e:eb:a2:49:82:b9:be:9a:3a:4e:0c:
e0:19:9f:e3:2c:25:b1:18:ed:50:6b:42:11:3a:f8:
68:86:9f:20:d9:02:0e:35:5f:c1:65:f9:7c:07:27:
cc:91:99:33:d3:ee:e8:38:e5:fc:91:00:b5:39:38:
ce:40:25:da:24:49:5c:4a:74:b1:1d:fb:02:05:5b:
7d:1d:39:9a:d9:27:10:d4:0d:ab:38:a9:f2:d0:45:
78:a7:76:c0:18:0e:2a:54:9e:27:6d:4a:c6:7b:c3:
36:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F4:4B:84:9F:DF:CA:25:42:8A:18:B9:A2:1E:2E:56:37:32:3D:3F:17
X509v3 Authority Key Identifier:
keyid:3B:E4:76:1D:44:D8:06:C3:F9:E4:E7:6B:79:C8:F2:29:6C:C7:BB:CF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/O-R2HUTYBsP55OdrecjyKWzHu88.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/61/d2c38e-0aaf-4e3b-8ed8-b54ae6f08f4f/1/O-R2HUTYBsP55OdrecjyKWzHu88.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/61/d2c38e-0aaf-4e3b-8ed8-b54ae6f08f4f/1/O-R2HUTYBsP55OdrecjyKWzHu88.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
86:f8:60:45:be:39:08:ef:d7:69:fd:be:42:be:95:3a:a4:86:
f1:9d:a0:1d:d9:db:a5:7f:b1:78:4d:21:1b:16:22:e9:1c:c3:
c7:31:9e:ef:96:ae:fb:c4:16:b5:9c:b4:e3:11:13:ec:44:e9:
b7:4c:13:a4:95:0b:b4:a5:85:42:00:c5:a4:66:06:9b:89:4c:
31:69:5b:6d:f7:20:09:49:28:58:c8:33:de:2d:13:03:a4:e7:
6e:d9:65:9a:b1:de:d5:59:0e:b8:81:9c:26:ef:d2:3f:23:b4:
2a:a7:32:38:db:2f:57:3a:7b:2a:5e:6e:4e:17:60:e1:88:a6:
0e:fd:43:8c:b2:5b:a7:2a:f7:94:28:ec:2e:94:ad:af:3f:3d:
3a:9a:44:39:7a:e5:18:35:3b:c1:b6:3f:8c:d7:5b:30:32:b8:
67:44:e1:e6:6b:a2:72:5d:06:09:72:ad:83:4e:19:7b:69:f4:
2a:5c:f9:ff:5e:f9:01:3f:b6:fc:68:b7:4b:1c:20:4a:72:f8:
d0:fe:fa:c2:76:b4:96:09:b7:f3:a3:aa:34:05:b5:a6:a6:70:
95:2a:e3:c3:bb:84:14:5f:97:95:30:ee:7f:8c:c5:78:32:f1:
83:3b:5c:8b:5d:a2:f2:24:92:50:89:3e:ce:b2:f4:fa:19:01:
da:cd:4e:c2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 19 07:44:48 2025 by rpki-client