Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/81/834407-163d-410c-b949-786cb1296e58/1/o3oSbXhU7NVlroKXDGk_M1n4Xzc.mft
File: o3oSbXhU7NVlroKXDGk_M1n4Xzc.mft (raw, json)
Hash identifier: k/MdhBvqiKN3xaj+E8a3hEIXkpStpuWtetQxhpDoc4M=
Subject key identifier: 3E:8A:19:9C:82:FC:B8:84:E9:EE:0D:BD:45:86:DB:F1:75:5A:A0:85
Authority key identifier: A3:7A:12:6D:78:54:EC:D5:65:AE:82:97:0C:69:3F:33:59:F8:5F:37
Certificate issuer: /CN=a37a126d7854ecd565ae82970c693f3359f85f37
Certificate serial: 01963F54970D7E7CD54E2EF4F7DC05889665
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/o3oSbXhU7NVlroKXDGk_M1n4Xzc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/81/834407-163d-410c-b949-786cb1296e58/1/o3oSbXhU7NVlroKXDGk_M1n4Xzc.mft
Manifest number: 14F3
Signing time: Wed 16 Apr 2025 16:00:30 +0000
Manifest this update: Wed 16 Apr 2025 16:00:30 +0000
Manifest next update: Thu 17 Apr 2025 16:00:30 +0000
Files and hashes: 1: mCmdogU3kH7W3vnMnxNLVbtvTa4.roa (hash: gDJzKrp4zR1sht7C5P/Tek0HKRIcYsUf9kyhRMAnCbI=)
2: o3oSbXhU7NVlroKXDGk_M1n4Xzc.crl (hash: GuDekyDliDchcfOV+pYNOG6Ux/Kz4iLX14SlrfpvqM4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/81/834407-163d-410c-b949-786cb1296e58/1/o3oSbXhU7NVlroKXDGk_M1n4Xzc.crl
rsync://rpki.ripe.net/repository/DEFAULT/81/834407-163d-410c-b949-786cb1296e58/1/o3oSbXhU7NVlroKXDGk_M1n4Xzc.mft
rsync://rpki.ripe.net/repository/DEFAULT/o3oSbXhU7NVlroKXDGk_M1n4Xzc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 17 Apr 2025 13:16:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:3f:54:97:0d:7e:7c:d5:4e:2e:f4:f7:dc:05:88:96:65
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a37a126d7854ecd565ae82970c693f3359f85f37
Validity
Not Before: Apr 16 16:00:30 2025 GMT
Not After : Apr 17 16:00:30 2025 GMT
Subject: CN=3e8a199c82fcb884e9ee0dbd4586dbf1755aa085
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:d1:ba:ce:66:77:f6:45:f0:d8:0d:f4:b2:f7:
1d:40:3c:dd:f6:10:c4:95:17:a3:dc:35:69:da:89:
60:49:c9:56:a6:09:cd:f4:88:94:d0:99:83:57:a5:
d0:65:ea:bd:7c:2a:72:0c:e9:33:47:7b:7a:86:36:
fd:fc:34:4c:68:cb:3c:61:fe:2c:13:24:15:8b:89:
68:d8:2d:f7:2d:03:27:36:8f:1b:2c:0c:39:13:a6:
87:ec:e4:f9:53:7b:12:19:9a:9e:87:28:56:9b:9e:
3b:68:69:52:6e:1b:b8:6f:9f:51:2c:22:27:88:57:
39:07:49:a8:ae:a0:5a:ea:17:ee:c9:52:74:1d:62:
06:cd:88:16:ae:8e:19:65:c0:71:0c:59:64:72:f9:
aa:63:9a:4a:71:fe:22:29:5b:8a:d3:44:81:f3:a8:
43:0d:bd:af:4b:8b:8d:4d:3d:21:79:c9:55:fe:c7:
f6:96:89:bb:2b:6d:98:c7:54:2f:62:fd:30:fd:88:
b4:57:d1:6f:c4:60:12:a4:7e:30:01:bb:a1:d3:f5:
91:fb:22:ae:af:63:8f:97:3b:63:9c:d0:42:76:d4:
a0:13:c6:0f:34:2f:2c:be:da:ae:bb:9b:7c:55:ba:
b8:55:9a:8b:e1:fd:c7:f7:c7:51:2f:74:93:c2:5d:
4d:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3E:8A:19:9C:82:FC:B8:84:E9:EE:0D:BD:45:86:DB:F1:75:5A:A0:85
X509v3 Authority Key Identifier:
keyid:A3:7A:12:6D:78:54:EC:D5:65:AE:82:97:0C:69:3F:33:59:F8:5F:37
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/o3oSbXhU7NVlroKXDGk_M1n4Xzc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/81/834407-163d-410c-b949-786cb1296e58/1/o3oSbXhU7NVlroKXDGk_M1n4Xzc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/81/834407-163d-410c-b949-786cb1296e58/1/o3oSbXhU7NVlroKXDGk_M1n4Xzc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
83:b5:81:06:2f:1c:2b:64:a4:5d:22:7f:e9:9c:43:74:0b:6d:
10:7d:30:89:d7:52:3c:2a:8f:c4:19:16:f4:e4:b6:a1:4e:ac:
35:59:18:d2:6d:9c:68:80:89:5d:1a:94:41:5f:ae:6d:99:b7:
e6:18:e8:26:f5:8c:51:15:d3:ce:1c:5a:cc:0e:4d:0a:9b:6f:
06:ab:16:73:1b:bd:32:b0:f9:ad:e1:68:9e:83:5a:89:26:54:
13:5b:64:7b:73:03:5a:4e:4f:77:ba:38:3e:f4:b4:27:0c:79:
dd:65:df:15:d8:89:a0:0d:bd:ee:49:77:22:7c:94:ad:17:ad:
9f:69:39:74:fb:19:01:04:a7:c5:fd:38:e4:18:0b:c7:22:91:
ec:dc:fc:c4:e4:0f:29:2c:ad:b2:f7:f4:6e:07:5d:fc:ca:6f:
6a:fd:ef:c0:77:10:29:5b:f4:ef:f2:db:80:29:2e:97:4e:c4:
f6:f1:15:98:2b:ca:ee:fd:49:9a:de:df:9c:70:0a:aa:16:e4:
3e:90:78:ac:84:1f:14:33:53:4a:11:e2:b8:cf:51:40:02:0c:
12:0b:88:6f:83:28:88:aa:d0:5a:b3:9e:b3:8a:32:7b:02:cb:
97:61:74:a0:4d:1d:c3:d3:94:fe:73:af:fb:f4:da:84:0e:38:
3a:6f:1b:f9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 16 19:33:33 2025 by rpki-client