Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/98/1acd6c-892f-45e1-b145-ade5261c1043/1/o9MfF5m_VYj_qYjkkoa_xwpLNL4.mft
File: o9MfF5m_VYj_qYjkkoa_xwpLNL4.mft (raw, json)
Hash identifier: awP1G4yyyhmXnaNR0rKKXUx6aRBFFz0LBJ/L/rmEIj0=
Subject key identifier: 94:60:0D:E1:E3:93:EE:77:19:B7:F5:A4:28:DC:B2:4A:4F:57:5A:69
Authority key identifier: A3:D3:1F:17:99:BF:55:88:FF:A9:88:E4:92:86:BF:C7:0A:4B:34:BE
Certificate issuer: /CN=a3d31f1799bf5588ffa988e49286bfc70a4b34be
Certificate serial: 019659F01B2306D8091B96C61B1D7270473E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/o9MfF5m_VYj_qYjkkoa_xwpLNL4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/98/1acd6c-892f-45e1-b145-ade5261c1043/1/o9MfF5m_VYj_qYjkkoa_xwpLNL4.mft
Manifest number: 0ADD
Signing time: Mon 21 Apr 2025 20:00:29 +0000
Manifest this update: Mon 21 Apr 2025 20:00:29 +0000
Manifest next update: Tue 22 Apr 2025 20:00:29 +0000
Files and hashes: 1: 1-JVHfdgfgX9obL5uDihzl6u5be0.roa (hash: 5fhgSJOuf6zlLlFO7nClbQrHjOcLY4QSzZjarquKLMI=)
2: o9MfF5m_VYj_qYjkkoa_xwpLNL4.crl (hash: ywFxLCD9gyiiKLs/CI5TnCLRjBRWQPs7cIDErUlSwoE=)
3: r3cWbqyb9HgoTXK9cVNeKGx5WVc.roa (hash: yyB4q0s1+lO0MUxRgNhJm9ecE94W+tKbHHcE3lo6URY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/98/1acd6c-892f-45e1-b145-ade5261c1043/1/o9MfF5m_VYj_qYjkkoa_xwpLNL4.crl
rsync://rpki.ripe.net/repository/DEFAULT/98/1acd6c-892f-45e1-b145-ade5261c1043/1/o9MfF5m_VYj_qYjkkoa_xwpLNL4.mft
rsync://rpki.ripe.net/repository/DEFAULT/o9MfF5m_VYj_qYjkkoa_xwpLNL4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 22 Apr 2025 13:46:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:59:f0:1b:23:06:d8:09:1b:96:c6:1b:1d:72:70:47:3e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a3d31f1799bf5588ffa988e49286bfc70a4b34be
Validity
Not Before: Apr 21 20:00:29 2025 GMT
Not After : Apr 22 20:00:29 2025 GMT
Subject: CN=94600de1e393ee7719b7f5a428dcb24a4f575a69
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:97:db:d3:ca:31:2a:b9:e7:3b:1d:53:df:c5:
16:5c:c6:cd:5d:a5:69:8c:24:1a:0f:15:fb:7d:38:
2f:56:af:c1:f6:c9:0a:90:b5:65:a8:1d:bb:12:e7:
65:34:06:08:81:e4:da:c9:04:07:24:82:83:91:0d:
d0:c3:a2:a3:a9:3e:b8:29:13:35:5f:34:07:2d:59:
f1:ef:a5:d4:48:f2:8b:1b:77:53:22:85:86:45:a7:
ee:80:4a:41:bd:f1:15:cf:1a:21:03:b1:78:50:bc:
95:7a:0d:24:d3:68:a5:74:24:d1:02:95:8d:97:2a:
52:46:f8:4b:1d:a3:1a:8b:d4:1c:de:32:f1:be:36:
6c:57:3a:b6:bf:3d:6a:e1:e8:72:82:61:f0:eb:7a:
bc:4d:de:c2:21:7a:3c:7d:b4:bf:b2:04:62:c5:ea:
84:30:5e:79:7f:3e:28:40:2a:02:2a:77:cd:62:37:
b7:4d:e1:ac:30:4b:96:bf:43:93:36:df:33:ec:56:
0c:69:d5:c6:76:83:8d:9f:67:a8:38:61:93:bd:ec:
6b:7d:58:6c:f1:b9:94:ad:f9:fe:eb:1a:8b:76:2c:
31:e6:ec:8e:ab:65:e8:27:c7:ae:35:40:32:46:d3:
06:d4:70:38:8e:00:bb:16:7a:e7:58:83:e2:b0:34:
ac:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
94:60:0D:E1:E3:93:EE:77:19:B7:F5:A4:28:DC:B2:4A:4F:57:5A:69
X509v3 Authority Key Identifier:
keyid:A3:D3:1F:17:99:BF:55:88:FF:A9:88:E4:92:86:BF:C7:0A:4B:34:BE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/o9MfF5m_VYj_qYjkkoa_xwpLNL4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/98/1acd6c-892f-45e1-b145-ade5261c1043/1/o9MfF5m_VYj_qYjkkoa_xwpLNL4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/98/1acd6c-892f-45e1-b145-ade5261c1043/1/o9MfF5m_VYj_qYjkkoa_xwpLNL4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
15:84:e6:f9:e6:ea:93:10:c1:a7:61:ac:22:26:0c:cb:01:36:
5a:ea:a5:83:3f:9c:b0:f2:f9:e1:54:60:4f:70:41:d5:19:69:
80:71:e7:2e:d1:5c:98:b8:69:22:13:be:36:ea:27:a8:1f:30:
6f:17:a2:99:09:33:59:c5:b1:13:f9:01:96:39:d4:79:8f:4f:
02:81:76:ec:22:37:90:94:ea:25:f8:b1:c1:4d:d6:87:02:41:
5d:04:f1:12:af:c3:dc:ab:13:19:48:e1:29:af:16:3f:9f:ab:
a1:71:b3:9a:ec:af:8c:ce:81:0f:be:38:c2:f5:25:72:23:38:
bd:aa:4d:f9:17:47:95:b5:fe:9d:0c:f2:3a:ec:ac:26:3c:c2:
35:e3:09:77:0d:b4:94:42:0f:7e:4a:65:f0:5d:7f:f6:1d:a0:
cc:ea:2b:a9:a7:2f:b2:dd:36:0c:f3:6e:22:0d:fd:73:7e:84:
f8:27:ef:1a:18:be:08:06:77:b6:da:9f:07:a0:91:f5:65:23:
db:ea:89:1a:e7:45:9f:ef:28:d2:6a:e5:1c:95:c1:4b:5a:b2:
30:ff:17:e6:00:71:17:df:9a:d8:2d:5a:93:3a:1a:b0:00:23:
0a:9b:39:03:2d:50:b5:87:35:3b:3c:55:8a:85:71:93:46:04:
b3:d0:18:d4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 21 22:33:55 2025 by rpki-client