Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9a/f565d7-32af-4be1-82ac-b602cedac36c/1/o3h9K-bqw2wdJ4D3hrh8nhU-gfE.mft
File: o3h9K-bqw2wdJ4D3hrh8nhU-gfE.mft (raw, json)
Hash identifier: TzBcNw6ZeQH5HAyS5hVw3o3bt3yoD8XabkH/QR0DzXM=
Subject key identifier: 24:75:17:55:67:4E:20:F8:59:1F:A6:71:8F:BB:90:C6:AA:1D:A0:53
Authority key identifier: A3:78:7D:2B:E6:EA:C3:6C:1D:27:80:F7:86:B8:7C:9E:15:3E:81:F1
Certificate issuer: /CN=a3787d2be6eac36c1d2780f786b87c9e153e81f1
Certificate serial: 0196439F26448E2AD7057CADA73645A6F454
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/o3h9K-bqw2wdJ4D3hrh8nhU-gfE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9a/f565d7-32af-4be1-82ac-b602cedac36c/1/o3h9K-bqw2wdJ4D3hrh8nhU-gfE.mft
Manifest number: 0EC8
Signing time: Thu 17 Apr 2025 12:00:25 +0000
Manifest this update: Thu 17 Apr 2025 12:00:25 +0000
Manifest next update: Fri 18 Apr 2025 12:00:25 +0000
Files and hashes: 1: 00IasE-o8chBNSoJdt3smuycCow.roa (hash: pV/5gFRP1JCOYIjBq4kIT8BYMxCvMc+8eXCSruPkrAc=)
2: OUfSr-obqja2htAQodOdBecQwpM.roa (hash: kYEhvKSYnyjKX9d+IlHmBvClGZqsfdLMn/6qKgbrz/8=)
3: lqiA_aAj9YiPmEY_ozKBdTXaK8U.roa (hash: FH++B616VrSvf6jbJ25EtMhVAMv/kHOEkuMZjWfUstA=)
4: o3h9K-bqw2wdJ4D3hrh8nhU-gfE.crl (hash: VDvwVzHmvBsAHurn3eGVgcFu6y4Ahf8sr+fdzQA2iZo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9a/f565d7-32af-4be1-82ac-b602cedac36c/1/o3h9K-bqw2wdJ4D3hrh8nhU-gfE.crl
rsync://rpki.ripe.net/repository/DEFAULT/9a/f565d7-32af-4be1-82ac-b602cedac36c/1/o3h9K-bqw2wdJ4D3hrh8nhU-gfE.mft
rsync://rpki.ripe.net/repository/DEFAULT/o3h9K-bqw2wdJ4D3hrh8nhU-gfE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 18 Apr 2025 12:00:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:43:9f:26:44:8e:2a:d7:05:7c:ad:a7:36:45:a6:f4:54
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a3787d2be6eac36c1d2780f786b87c9e153e81f1
Validity
Not Before: Apr 17 12:00:25 2025 GMT
Not After : Apr 18 12:00:25 2025 GMT
Subject: CN=24751755674e20f8591fa6718fbb90c6aa1da053
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:d9:10:f4:cc:a2:9d:f6:1b:cf:6b:76:21:b6:
26:33:d8:c1:ba:9a:af:a8:74:cb:b6:b6:b5:27:35:
0b:d1:46:ac:c7:1d:3f:d4:08:26:1e:83:37:5a:e9:
14:cd:5f:fb:81:fe:70:23:bb:2b:9a:4d:72:43:10:
85:8f:f0:ec:c5:b6:3e:6a:ea:d2:d0:30:70:7b:f1:
da:5b:2f:d4:f8:93:f0:f8:82:c3:d6:f1:79:97:13:
eb:ed:17:02:fb:e0:48:ba:fa:97:08:74:32:ed:e5:
4e:19:72:63:a3:e1:ff:25:00:e3:77:bb:cb:e5:8a:
63:60:9a:c6:b2:93:86:d6:46:e6:aa:82:3f:98:29:
02:9e:56:6e:58:fa:d7:91:b2:6d:9a:53:cb:dc:87:
c9:7b:09:46:98:90:ad:0e:d8:54:82:28:57:27:ae:
86:64:a4:5b:ca:98:fb:f4:e0:9a:03:6e:ab:fd:c1:
d4:af:67:43:63:31:57:7b:4e:1f:b7:20:e1:e0:ae:
c3:e7:14:f5:19:a1:3d:9f:1e:50:b9:5f:02:64:9c:
9f:01:b1:bc:33:ea:cb:59:56:73:64:c6:0c:dc:e9:
2b:e9:1b:83:f9:1c:fe:0d:9a:e7:f4:45:d2:a9:d8:
a1:a3:96:39:93:1d:66:18:ea:a6:17:cd:b6:6f:e3:
f3:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
24:75:17:55:67:4E:20:F8:59:1F:A6:71:8F:BB:90:C6:AA:1D:A0:53
X509v3 Authority Key Identifier:
keyid:A3:78:7D:2B:E6:EA:C3:6C:1D:27:80:F7:86:B8:7C:9E:15:3E:81:F1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/o3h9K-bqw2wdJ4D3hrh8nhU-gfE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9a/f565d7-32af-4be1-82ac-b602cedac36c/1/o3h9K-bqw2wdJ4D3hrh8nhU-gfE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9a/f565d7-32af-4be1-82ac-b602cedac36c/1/o3h9K-bqw2wdJ4D3hrh8nhU-gfE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
71:a2:a4:44:58:8d:b7:cd:60:2b:2f:38:76:f8:f5:70:4a:a0:
81:d2:e5:b2:9a:3b:40:91:1e:9f:40:55:eb:54:e8:55:aa:89:
88:cb:51:82:89:d2:fb:5a:f2:6a:86:04:aa:d8:d7:24:e6:aa:
b4:8c:c1:78:0f:7d:bc:c8:48:6b:43:4a:38:ea:43:89:ea:e8:
57:2c:dd:a2:68:ea:3d:0d:a2:48:5e:0f:29:11:84:4c:de:1c:
1f:cd:22:34:bb:cb:af:c3:73:7e:73:d7:58:95:61:39:4c:da:
b1:c7:34:a9:35:ca:3a:50:5a:e1:2a:73:31:96:e2:85:db:10:
28:94:9f:70:51:ee:4a:bf:72:12:00:84:0b:58:4e:9b:01:0d:
0a:72:ec:70:31:dc:0b:0f:f4:52:47:a7:16:d2:b5:4b:e1:45:
cc:d5:98:a0:1c:52:a5:dc:0b:52:5f:32:42:2f:7b:fe:62:aa:
b0:81:d8:42:79:a4:db:d7:28:f5:82:d9:03:db:ef:ce:96:78:
2d:61:c1:aa:b4:e2:49:76:5a:3a:bd:e2:76:d7:8d:d7:34:07:
a7:0d:40:22:13:50:46:cb:d5:ba:f5:2c:80:b5:31:eb:64:5e:
04:63:6f:05:00:13:43:47:83:ed:90:45:13:d9:10:ca:38:40:
65:b8:3d:4f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 17 22:54:39 2025 by rpki-client