Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/78/c53c3e-aa2d-41ab-a312-2637d13338f1/1/O9lDbSE1wISJe3TGrTbaFwCnqY0.mft
File: O9lDbSE1wISJe3TGrTbaFwCnqY0.mft (raw, json)
Hash identifier: Me1iiN6P0ZS+QqRuJGQoDDAwwfnbK+0Y0J7NWD0O58c=
Subject key identifier: 3E:EC:E8:34:34:25:AA:4E:01:2B:CB:88:7A:6A:97:37:73:62:DF:C9
Authority key identifier: 3B:D9:43:6D:21:35:C0:84:89:7B:74:C6:AD:36:DA:17:00:A7:A9:8D
Certificate issuer: /CN=3bd9436d2135c084897b74c6ad36da1700a7a98d
Certificate serial: 01964AEAB543D6FD9C00B28DE983CC9A1004
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/O9lDbSE1wISJe3TGrTbaFwCnqY0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/78/c53c3e-aa2d-41ab-a312-2637d13338f1/1/O9lDbSE1wISJe3TGrTbaFwCnqY0.mft
Manifest number: 12DF
Signing time: Fri 18 Apr 2025 22:00:17 +0000
Manifest this update: Fri 18 Apr 2025 22:00:17 +0000
Manifest next update: Sat 19 Apr 2025 22:00:17 +0000
Files and hashes: 1: MkGUvFc5JSBVNeM_VILad8s5zXE.roa (hash: y7TqFtSF44B35KxghjCNu7WMj5pJpzLxmoZgRpNM7r8=)
2: O9lDbSE1wISJe3TGrTbaFwCnqY0.crl (hash: 2A4mET2yzz7aCf413d2oPPFjRkcZHpIiiUCZoTwoUCU=)
3: VekG2JeXHUDy0fRDzXtFdNU8lfE.roa (hash: S50KN9jOHHSMt2/wCQRFtxbSHAYvoJTEJC1VbDgG6ns=)
4: XlsfqVnPq85M-ZJSh02UMv7bAq8.roa (hash: RvxcNQlHBl5xgY24wu2zM7ZcwbvvsV992ncfxEdC62I=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/78/c53c3e-aa2d-41ab-a312-2637d13338f1/1/O9lDbSE1wISJe3TGrTbaFwCnqY0.crl
rsync://rpki.ripe.net/repository/DEFAULT/78/c53c3e-aa2d-41ab-a312-2637d13338f1/1/O9lDbSE1wISJe3TGrTbaFwCnqY0.mft
rsync://rpki.ripe.net/repository/DEFAULT/O9lDbSE1wISJe3TGrTbaFwCnqY0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 19 Apr 2025 19:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:4a:ea:b5:43:d6:fd:9c:00:b2:8d:e9:83:cc:9a:10:04
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3bd9436d2135c084897b74c6ad36da1700a7a98d
Validity
Not Before: Apr 18 22:00:17 2025 GMT
Not After : Apr 19 22:00:17 2025 GMT
Subject: CN=3eece8343425aa4e012bcb887a6a97377362dfc9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:2f:06:67:3a:e3:27:26:e4:7c:0b:c1:bc:d0:
8a:a9:a4:2a:8b:d7:8c:24:df:81:07:ef:02:94:28:
b9:99:c3:a6:e4:09:1a:ab:88:3b:97:e9:2e:db:fb:
37:34:62:fd:25:c4:e1:6e:95:b6:5a:c5:ff:06:02:
c5:1c:0c:a9:d2:89:f7:41:a7:a7:b6:9a:0f:97:57:
a7:01:75:51:da:8d:80:ab:d3:77:41:95:12:8b:cb:
7f:e8:20:cb:55:e7:a1:7b:9c:87:a7:f2:8d:f4:0b:
a4:e2:b3:59:c3:a1:83:8c:68:d4:6b:2f:c6:48:34:
60:66:2e:60:2f:79:a6:06:87:2a:e9:c6:d5:e7:78:
4b:5a:eb:63:76:42:55:b0:d8:66:1e:25:e1:d9:79:
a3:a4:6e:71:40:4f:b7:0e:fb:fd:fc:fe:eb:15:02:
f8:24:57:11:95:e0:be:23:cc:44:a2:cd:74:87:7e:
50:c8:c2:9b:11:d4:37:7b:36:ae:56:46:7f:a9:c8:
9e:99:1d:a3:77:05:77:55:c8:89:8f:a2:7e:ca:82:
78:6e:b6:89:a8:e5:25:2f:80:78:87:8e:c6:79:54:
85:98:ab:76:e2:d2:6a:fc:f2:7d:e7:d7:ff:e2:cf:
92:12:c4:19:ad:0f:f8:b2:fa:7d:b2:4d:67:17:ef:
7d:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3E:EC:E8:34:34:25:AA:4E:01:2B:CB:88:7A:6A:97:37:73:62:DF:C9
X509v3 Authority Key Identifier:
keyid:3B:D9:43:6D:21:35:C0:84:89:7B:74:C6:AD:36:DA:17:00:A7:A9:8D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/O9lDbSE1wISJe3TGrTbaFwCnqY0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/78/c53c3e-aa2d-41ab-a312-2637d13338f1/1/O9lDbSE1wISJe3TGrTbaFwCnqY0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/78/c53c3e-aa2d-41ab-a312-2637d13338f1/1/O9lDbSE1wISJe3TGrTbaFwCnqY0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a1:65:3d:42:3b:66:a8:e4:ae:84:a4:a2:ef:c9:1a:f6:08:fa:
74:0e:07:32:1f:95:6b:de:22:96:0a:b9:1f:33:6e:79:16:ec:
f0:44:21:45:6a:9d:06:04:f9:c8:ff:d0:b3:a5:ee:62:24:af:
68:7c:c6:78:8c:e3:d6:16:77:57:f4:a1:bf:df:d5:a6:8c:fb:
15:17:84:74:05:32:9b:d4:20:97:49:4d:89:be:2d:1e:ee:49:
6c:ce:49:c3:7a:67:18:4a:4c:ad:6f:d3:2a:f5:2e:f9:e4:d4:
a4:cc:66:7b:a6:53:0e:08:8e:ec:d1:69:3d:9f:b6:40:34:f6:
04:3e:d5:63:ff:f8:40:32:14:d5:e6:2a:20:3f:dd:aa:ac:6c:
bc:8f:80:d9:d5:3a:a7:ad:79:eb:0c:0c:79:6f:d0:4d:5e:af:
2a:4e:d4:53:4d:a5:3a:4c:c0:50:df:f4:90:9d:d7:d3:a4:9c:
85:81:3d:6c:cd:03:c4:39:cc:51:00:56:bf:d8:2c:91:0f:9d:
95:30:98:21:66:8c:24:2c:d2:c7:d1:0f:bd:b9:61:d0:01:36:
b1:d4:12:7e:1f:85:a7:0d:0a:8d:f1:02:9b:f4:c8:ef:90:1b:
33:4a:56:6d:f8:5b:8c:43:5e:b1:4e:d2:2e:c7:96:de:1b:ed:
53:d1:6e:d7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 19 00:39:03 2025 by rpki-client