Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/90/c72b67-76ec-4afa-b376-f9ad38051220/1/O-LwFktmp2eVhgtOo1hvrVY7rEc.mft
File: O-LwFktmp2eVhgtOo1hvrVY7rEc.mft (raw, json)
Hash identifier: SMiRATbVkzEmL/9BNrrR7KNCWoWb/pt4UEetrHIfFws=
Subject key identifier: 56:F4:08:C2:A8:4F:E1:D9:56:95:45:7E:34:51:8D:08:E7:56:FC:D9
Authority key identifier: 3B:E2:F0:16:4B:66:A7:67:95:86:0B:4E:A3:58:6F:AD:56:3B:AC:47
Certificate issuer: /CN=3be2f0164b66a76795860b4ea3586fad563bac47
Certificate serial: 0197586DE44279B499B76504CBD52AE05F5D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/O-LwFktmp2eVhgtOo1hvrVY7rEc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/90/c72b67-76ec-4afa-b376-f9ad38051220/1/O-LwFktmp2eVhgtOo1hvrVY7rEc.mft
Manifest number: 158C
Signing time: Tue 10 Jun 2025 06:01:26 +0000
Manifest this update: Tue 10 Jun 2025 06:01:26 +0000
Manifest next update: Wed 11 Jun 2025 06:01:26 +0000
Files and hashes: 1: O-LwFktmp2eVhgtOo1hvrVY7rEc.crl (hash: o33oCDvsNRced21Dgo0BeSQlEzbzZkIoU5pJuJbBISA=)
2: ZlDfI1uu-dfJ7bkWIwNbrouZ8LU.roa (hash: RwbfiOlsTOjHsdHQ269mkGq2Xn2wHvdgM/XYUPYNH8I=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/90/c72b67-76ec-4afa-b376-f9ad38051220/1/O-LwFktmp2eVhgtOo1hvrVY7rEc.crl
rsync://rpki.ripe.net/repository/DEFAULT/90/c72b67-76ec-4afa-b376-f9ad38051220/1/O-LwFktmp2eVhgtOo1hvrVY7rEc.mft
rsync://rpki.ripe.net/repository/DEFAULT/O-LwFktmp2eVhgtOo1hvrVY7rEc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 11 Jun 2025 06:01:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:58:6d:e4:42:79:b4:99:b7:65:04:cb:d5:2a:e0:5f:5d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3be2f0164b66a76795860b4ea3586fad563bac47
Validity
Not Before: Jun 10 06:01:26 2025 GMT
Not After : Jun 11 06:01:26 2025 GMT
Subject: CN=56f408c2a84fe1d95695457e34518d08e756fcd9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:79:8b:70:16:b0:ec:01:ed:11:14:35:2f:7e:
ff:27:02:34:61:6b:88:f7:43:b7:4e:4b:d9:a5:1b:
b8:72:cd:5c:4b:60:1f:21:56:c2:d8:87:6c:e1:2e:
55:4c:af:62:97:c9:e9:a2:84:31:e7:d9:80:c4:a4:
5b:a6:a3:1a:f5:e3:71:b3:eb:7e:dc:eb:b7:f1:b0:
d5:50:d5:77:68:a9:7f:2b:4f:06:32:75:bb:57:3a:
d7:ee:1f:80:95:55:8a:dc:88:25:9f:d9:e2:21:be:
29:e9:f0:0f:28:5f:19:49:99:f5:05:13:07:45:f7:
78:8b:8f:83:02:e5:1b:40:fa:c9:85:d4:dd:ae:f9:
6c:14:86:b5:db:d8:49:68:f4:b6:bf:83:de:c9:e3:
1d:1a:b6:78:2c:50:d1:a8:1d:21:48:89:74:c5:29:
a1:f9:75:bc:a9:df:b3:f3:36:67:6f:6b:df:1f:84:
18:b3:c1:0b:9f:45:e6:c9:6f:37:b8:0c:a7:86:53:
fc:c1:6d:6b:b9:b7:3d:c1:08:3a:18:a5:a9:09:4b:
88:e1:f1:25:24:17:06:54:21:91:45:95:62:70:3f:
60:12:38:c2:84:11:26:82:9d:8f:08:61:63:d4:88:
dc:e4:e1:fc:df:e4:ab:36:57:3b:04:c7:c2:e4:da:
cc:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
56:F4:08:C2:A8:4F:E1:D9:56:95:45:7E:34:51:8D:08:E7:56:FC:D9
X509v3 Authority Key Identifier:
keyid:3B:E2:F0:16:4B:66:A7:67:95:86:0B:4E:A3:58:6F:AD:56:3B:AC:47
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/O-LwFktmp2eVhgtOo1hvrVY7rEc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/90/c72b67-76ec-4afa-b376-f9ad38051220/1/O-LwFktmp2eVhgtOo1hvrVY7rEc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/90/c72b67-76ec-4afa-b376-f9ad38051220/1/O-LwFktmp2eVhgtOo1hvrVY7rEc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
50:8d:93:0a:8f:34:cc:3c:56:76:1c:34:f2:a3:11:22:72:d6:
cc:82:1e:17:49:e5:8d:f5:43:03:26:ea:f6:60:b3:d8:2c:67:
b6:0d:21:86:54:76:da:01:9c:5f:db:2a:d6:e8:92:17:99:71:
cb:39:0a:d2:64:d9:ba:26:97:a8:04:81:65:db:4c:dc:17:1f:
d6:40:cd:d1:4e:72:c8:55:47:8b:d6:d9:f3:40:d2:bf:42:85:
7f:cc:70:ee:e4:8e:85:df:4f:f6:0d:ff:fc:1c:c2:50:18:fc:
27:d4:30:67:2b:b9:cf:ea:d5:a0:45:3e:3f:0d:f5:9c:28:8b:
d8:3f:e1:8c:e9:e1:66:3b:76:0e:72:fb:80:a9:8f:16:40:b1:
1c:26:04:d7:20:4c:f0:00:f3:93:21:14:58:d1:53:7d:ab:4f:
84:3d:08:09:2a:1a:01:86:bd:c3:c2:e6:e6:06:34:52:0f:b1:
40:30:42:2c:21:d8:57:e4:5e:f1:d8:62:2a:00:4d:f0:47:fb:
ed:70:7a:c3:47:d2:f3:da:47:f4:83:32:35:9e:35:d9:a5:39:
31:e4:13:06:1d:e1:9d:79:30:86:7a:f0:47:88:e3:8c:3c:71:
8c:a2:d9:f7:a3:b3:93:bb:8d:6d:39:97:02:a8:f4:5c:fc:83:
e2:59:2c:ec
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 10 13:15:43 2025 by rpki-client