Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/66/b58d94-b564-4d49-a8fd-5c096a87bb07/1/O1wkZ1RvSweKAiTaHMrFwofpNFM.mft
File: O1wkZ1RvSweKAiTaHMrFwofpNFM.mft (raw, json)
Hash identifier: BiITIpapxQGc8J0+Wy6TBro4VZ1j+JBml2ECvLoPxnk=
Subject key identifier: 3B:91:0D:18:72:67:EA:5A:4F:2C:89:E5:AB:CC:2E:C1:3E:1B:13:D4
Authority key identifier: 3B:5C:24:67:54:6F:4B:07:8A:02:24:DA:1C:CA:C5:C2:87:E9:34:53
Certificate issuer: /CN=3b5c2467546f4b078a0224da1ccac5c287e93453
Certificate serial: 01965CF1E02E93DCE513DA377B9199FE13D6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/O1wkZ1RvSweKAiTaHMrFwofpNFM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/66/b58d94-b564-4d49-a8fd-5c096a87bb07/1/O1wkZ1RvSweKAiTaHMrFwofpNFM.mft
Manifest number: 1251
Signing time: Tue 22 Apr 2025 10:01:17 +0000
Manifest this update: Tue 22 Apr 2025 10:01:17 +0000
Manifest next update: Wed 23 Apr 2025 10:01:17 +0000
Files and hashes: 1: O1wkZ1RvSweKAiTaHMrFwofpNFM.crl (hash: 9dBTaJo63VCPNPlf9lZT1l04zx7OjGxqyeUxN5sXUHY=)
2: sQpDgOG26LBxAtoQvMby9eHoei4.roa (hash: iQZWA+KQTMhcXUIcloqSusVcF2CDbPYkOlZRAImPXg4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/66/b58d94-b564-4d49-a8fd-5c096a87bb07/1/O1wkZ1RvSweKAiTaHMrFwofpNFM.crl
rsync://rpki.ripe.net/repository/DEFAULT/66/b58d94-b564-4d49-a8fd-5c096a87bb07/1/O1wkZ1RvSweKAiTaHMrFwofpNFM.mft
rsync://rpki.ripe.net/repository/DEFAULT/O1wkZ1RvSweKAiTaHMrFwofpNFM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 23 Apr 2025 10:01:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:5c:f1:e0:2e:93:dc:e5:13:da:37:7b:91:99:fe:13:d6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3b5c2467546f4b078a0224da1ccac5c287e93453
Validity
Not Before: Apr 22 10:01:17 2025 GMT
Not After : Apr 23 10:01:17 2025 GMT
Subject: CN=3b910d187267ea5a4f2c89e5abcc2ec13e1b13d4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:56:c4:5d:72:e1:ec:47:83:2f:7a:23:fd:7c:
45:60:d9:1b:79:11:34:b3:a1:3a:14:70:2b:16:f1:
20:2d:48:5f:96:c5:4a:35:38:7d:2b:7b:cd:ae:fa:
51:68:cd:bd:c8:4d:d5:63:bc:4c:11:39:fd:65:a9:
e5:80:12:e8:eb:1d:a4:ba:97:fd:8e:2e:86:8a:9c:
a6:40:26:db:cc:36:82:2f:96:52:67:66:eb:69:1a:
2e:cf:df:4e:9b:26:09:f9:af:d5:e4:83:3e:ab:87:
a1:7f:8c:5d:d8:18:f6:8a:17:8a:68:66:4f:9c:8f:
d0:f4:e0:ae:56:ce:8d:88:1b:e8:11:9d:02:11:6d:
ea:4b:36:cb:ee:17:8c:47:15:18:25:3b:de:d9:68:
05:18:31:0f:6f:f3:8f:af:f5:bf:a9:d2:34:7c:b3:
7d:4c:21:dc:a3:50:00:d3:b5:ff:34:5c:8b:9d:a1:
da:43:55:7d:dc:20:3f:30:16:f3:8d:13:5b:10:21:
29:56:54:16:87:5a:d8:52:40:16:ec:43:f7:17:a4:
a5:84:06:f5:1a:0f:69:0e:fa:75:b9:96:2c:d9:22:
7d:df:0c:23:f1:2b:6c:7a:d3:f5:bb:a8:82:3c:9e:
94:70:9c:f4:4d:ae:a8:13:6a:29:6f:9b:3d:d3:3c:
05:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3B:91:0D:18:72:67:EA:5A:4F:2C:89:E5:AB:CC:2E:C1:3E:1B:13:D4
X509v3 Authority Key Identifier:
keyid:3B:5C:24:67:54:6F:4B:07:8A:02:24:DA:1C:CA:C5:C2:87:E9:34:53
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/O1wkZ1RvSweKAiTaHMrFwofpNFM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/66/b58d94-b564-4d49-a8fd-5c096a87bb07/1/O1wkZ1RvSweKAiTaHMrFwofpNFM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/66/b58d94-b564-4d49-a8fd-5c096a87bb07/1/O1wkZ1RvSweKAiTaHMrFwofpNFM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1a:9f:89:80:f1:52:87:15:ee:5d:55:ec:2b:fb:90:a2:bb:f9:
41:2f:1a:db:1e:bb:f8:7b:d4:ad:c1:bb:88:41:cf:5a:a2:3a:
12:9f:d9:f6:ef:2c:af:ca:9c:f2:f7:7b:2a:6b:5f:c0:4d:63:
f9:06:59:bc:ba:3d:52:82:c7:cd:90:20:4b:ba:b3:b2:24:79:
0b:1f:aa:3d:1e:56:e3:45:2a:04:dc:0b:6c:97:37:b1:6a:b5:
3b:fa:82:11:1e:ea:f0:e3:3e:b7:87:c0:0d:62:86:7f:47:a5:
1c:be:b6:b3:ea:e2:c8:aa:33:9f:45:06:7a:63:18:26:c1:1d:
d4:80:0a:52:12:ef:36:6f:90:57:af:17:d9:d9:65:b0:9d:78:
8b:d8:83:1d:a0:aa:16:30:d9:25:3f:7b:b1:86:76:5e:a0:35:
1c:4d:8e:6e:05:d2:e3:0c:ab:b6:85:2b:a1:27:ae:f4:ad:64:
9a:ad:b0:58:c8:9a:ec:a7:88:23:af:86:b8:87:9c:74:66:f8:
42:e9:6c:16:99:9b:b3:2f:18:8e:09:05:e9:1c:97:bd:4c:d8:
be:40:86:bb:c2:72:3c:64:ac:db:88:7a:06:8a:0f:e0:1a:a1:
52:82:26:40:e4:c8:bb:c2:b3:a8:87:e6:c5:37:cb:b2:7e:c5:
48:c9:c9:a3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 22 17:59:09 2025 by rpki-client