Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/62/14486a-a7e6-4113-93b1-15cdc9a8c38f/1/o0kR6dK76mamwkAxnd4wez3vSME.mft
File: o0kR6dK76mamwkAxnd4wez3vSME.mft (raw, json)
Hash identifier: RbvMAuk9xtqHtYjGETd2wzQzyWPRffUlkjTZ1T8NIkg=
Subject key identifier: FA:92:3D:18:5E:7C:AD:FC:2C:F6:AB:01:B3:04:B4:B6:3E:45:63:2D
Authority key identifier: A3:49:11:E9:D2:BB:EA:66:A6:C2:40:31:9D:DE:30:7B:3D:EF:48:C1
Certificate issuer: /CN=a34911e9d2bbea66a6c240319dde307b3def48c1
Certificate serial: 01958C6105C2EC89EB1A83B12C601D713DCE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/o0kR6dK76mamwkAxnd4wez3vSME.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/62/14486a-a7e6-4113-93b1-15cdc9a8c38f/1/o0kR6dK76mamwkAxnd4wez3vSME.mft
Manifest number: 1497
Signing time: Wed 12 Mar 2025 22:02:03 +0000
Manifest this update: Wed 12 Mar 2025 22:02:03 +0000
Manifest next update: Thu 13 Mar 2025 22:02:03 +0000
Files and hashes: 1: o0kR6dK76mamwkAxnd4wez3vSME.crl (hash: 8XPnqksfigHqXz0irEM/KdumrqTsHCcNXt2EvWnHQMU=)
2: xtKHi03X1rn73LOhmyBcH9uojR8.roa (hash: zBGWZf4vklDM0mAZkH6NtmjYXdkW+BEyoU8BQG385Gc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/62/14486a-a7e6-4113-93b1-15cdc9a8c38f/1/o0kR6dK76mamwkAxnd4wez3vSME.crl
rsync://rpki.ripe.net/repository/DEFAULT/62/14486a-a7e6-4113-93b1-15cdc9a8c38f/1/o0kR6dK76mamwkAxnd4wez3vSME.mft
rsync://rpki.ripe.net/repository/DEFAULT/o0kR6dK76mamwkAxnd4wez3vSME.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 13 Mar 2025 19:14:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:8c:61:05:c2:ec:89:eb:1a:83:b1:2c:60:1d:71:3d:ce
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a34911e9d2bbea66a6c240319dde307b3def48c1
Validity
Not Before: Mar 12 22:02:03 2025 GMT
Not After : Mar 13 22:02:03 2025 GMT
Subject: CN=fa923d185e7cadfc2cf6ab01b304b4b63e45632d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e4:f9:1c:c8:28:16:84:8b:aa:7b:ac:0e:df:5e:
89:e1:f7:bb:97:7e:86:fc:fd:6c:96:de:ef:32:59:
e7:8f:e2:2a:ab:ab:5f:1c:81:ab:2a:d3:a7:22:62:
05:0e:05:94:8d:e8:bf:a6:37:78:ea:a3:11:64:79:
44:a7:ed:67:64:c7:9b:36:6d:17:49:09:66:ae:55:
70:3f:f8:c3:65:2a:73:f3:a7:07:e9:63:7c:2e:74:
d4:5c:ba:50:dc:6f:86:96:3c:b7:8b:1b:a9:89:f7:
5f:87:2a:aa:7b:af:6c:87:d9:e4:44:5a:ed:79:98:
91:11:1c:17:be:aa:ce:e7:a2:a6:c3:12:96:af:13:
1c:6c:3a:6f:33:7e:25:bb:1f:97:e5:71:08:7d:fd:
9a:d5:61:a3:4e:5a:2d:d5:e0:0c:f8:fa:9e:89:c8:
54:72:98:8e:d3:78:75:b4:ef:30:1b:48:32:d3:aa:
15:57:68:b1:ff:b6:03:ff:3b:fb:9a:1e:55:04:d0:
be:68:0f:89:5a:01:c1:a3:ab:b3:69:88:b7:1a:46:
9d:3f:7a:43:f6:f9:ce:1a:f7:80:db:bd:97:e4:e8:
de:5c:4a:77:44:99:54:d2:11:83:31:24:33:b8:81:
a8:c1:ba:db:0b:2d:2a:e6:a9:d1:b5:59:81:95:64:
fa:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FA:92:3D:18:5E:7C:AD:FC:2C:F6:AB:01:B3:04:B4:B6:3E:45:63:2D
X509v3 Authority Key Identifier:
keyid:A3:49:11:E9:D2:BB:EA:66:A6:C2:40:31:9D:DE:30:7B:3D:EF:48:C1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/o0kR6dK76mamwkAxnd4wez3vSME.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/62/14486a-a7e6-4113-93b1-15cdc9a8c38f/1/o0kR6dK76mamwkAxnd4wez3vSME.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/62/14486a-a7e6-4113-93b1-15cdc9a8c38f/1/o0kR6dK76mamwkAxnd4wez3vSME.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2d:eb:38:c2:13:a2:0e:fc:9c:7d:d5:30:f9:d4:c5:2d:4b:18:
3b:3c:06:b3:8e:3b:c0:d8:0c:18:55:75:84:aa:ed:44:10:db:
d1:17:c7:93:ea:e3:1a:7c:33:e1:35:95:56:06:3a:7b:74:84:
62:3e:9e:ed:7f:50:98:fe:e8:50:84:d7:63:de:73:b0:9c:bd:
f7:53:77:0b:ff:59:8d:51:86:a9:53:2b:43:13:a3:7b:63:cd:
18:cb:ba:da:56:b2:00:1b:ef:2c:46:a3:86:97:1d:12:44:e5:
85:43:ed:4a:82:e5:1f:fa:f0:33:a6:65:f2:57:a8:2a:7e:a1:
ab:d0:e5:30:d1:cd:53:da:42:b0:1c:a1:4d:84:b9:30:f1:75:
45:67:41:b0:6d:c5:53:5f:de:0e:3b:20:2d:51:5f:68:f9:6f:
c8:c7:75:5d:d3:fd:24:5b:b1:fd:a1:7e:ef:ba:33:6d:00:8d:
8a:d9:1c:9a:82:7e:e4:f4:fe:b8:b5:42:0b:f5:17:31:00:ce:
84:2d:0c:fd:43:c0:a6:8d:4d:ec:d9:44:a3:03:73:d8:1e:c3:
9d:2e:87:2d:9b:e5:c3:ef:7b:3e:f8:47:d1:51:47:96:4a:62:
e3:1b:83:15:70:ca:60:83:1d:0f:6f:10:c4:80:11:38:30:c2:
84:5d:06:9d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 13 02:30:09 2025 by rpki-client