Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9f/2a8832-cdd6-4d8c-93f3-d825d0365789/1/oInbclD9hHbImK7gpfvyqYg0Af4.mft
File: oInbclD9hHbImK7gpfvyqYg0Af4.mft (raw, json)
Hash identifier: 5N4b4puWP6sxQObICVKDTuJvQX4Kz8I+6DqsnhI3cIQ=
Subject key identifier: 3C:2C:96:B3:40:67:76:6E:E2:06:99:5B:6C:82:59:BA:86:AA:57:BD
Authority key identifier: A0:89:DB:72:50:FD:84:76:C8:98:AE:E0:A5:FB:F2:A9:88:34:01:FE
Certificate issuer: /CN=a089db7250fd8476c898aee0a5fbf2a9883401fe
Certificate serial: 01958C6115C66A2D52422C8CC98BFB831DD3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/oInbclD9hHbImK7gpfvyqYg0Af4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9f/2a8832-cdd6-4d8c-93f3-d825d0365789/1/oInbclD9hHbImK7gpfvyqYg0Af4.mft
Manifest number: 1497
Signing time: Wed 12 Mar 2025 22:02:07 +0000
Manifest this update: Wed 12 Mar 2025 22:02:07 +0000
Manifest next update: Thu 13 Mar 2025 22:02:07 +0000
Files and hashes: 1: PRBRLMqw-2-Iz8UAT3zfg4Sw6lo.roa (hash: GVRCRwJe0CJRmQR55/f83gphK42VF5Ywz7text0ZVtk=)
2: oInbclD9hHbImK7gpfvyqYg0Af4.crl (hash: EAMs5bNbHUGYCqzWkgbIRXiSyZ3Ma5XVJaqXjeYWOZA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9f/2a8832-cdd6-4d8c-93f3-d825d0365789/1/oInbclD9hHbImK7gpfvyqYg0Af4.crl
rsync://rpki.ripe.net/repository/DEFAULT/9f/2a8832-cdd6-4d8c-93f3-d825d0365789/1/oInbclD9hHbImK7gpfvyqYg0Af4.mft
rsync://rpki.ripe.net/repository/DEFAULT/oInbclD9hHbImK7gpfvyqYg0Af4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 13 Mar 2025 19:14:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:8c:61:15:c6:6a:2d:52:42:2c:8c:c9:8b:fb:83:1d:d3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a089db7250fd8476c898aee0a5fbf2a9883401fe
Validity
Not Before: Mar 12 22:02:07 2025 GMT
Not After : Mar 13 22:02:07 2025 GMT
Subject: CN=3c2c96b34067766ee206995b6c8259ba86aa57bd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:a9:c4:4b:2a:27:c1:ba:b9:b7:2a:4b:1b:30:
f2:b7:14:83:79:9d:d8:b5:63:97:07:8d:6f:a0:9d:
bc:ec:90:fa:9e:a5:91:24:74:7a:aa:cc:f7:be:1e:
c5:ec:1d:53:d7:cb:d5:65:1d:16:cd:7a:40:f8:0b:
28:fe:87:f5:a2:4a:a0:24:7b:ab:94:c6:fc:ea:39:
59:3f:71:1d:4a:88:ad:b5:fc:21:ec:72:08:a1:ad:
dd:53:2e:27:7c:34:88:e8:d6:06:1b:e1:34:9f:36:
74:78:5b:c7:27:fb:7b:c8:c4:57:74:13:cb:25:4f:
1f:79:18:5a:fd:96:6d:b8:e7:1c:32:86:14:43:fe:
8d:6e:c9:a2:b2:22:16:3f:f6:dd:a2:3d:be:22:21:
45:08:88:64:b1:a3:3b:2f:25:02:3e:dd:fa:22:1a:
68:d6:e0:52:8a:28:0f:f0:d4:2e:6f:21:07:21:94:
9b:6e:a1:ae:82:51:ff:a0:26:f1:8c:6b:a8:d1:2b:
b8:80:b6:86:7a:25:82:7e:fb:de:16:cd:c4:f0:f1:
3c:9a:a9:08:81:e1:42:5d:f8:63:b8:48:c5:ab:d0:
d1:41:3c:d3:0c:21:cd:58:f4:07:44:9e:c0:09:56:
58:59:ab:c1:ef:85:e9:e7:89:a8:c8:52:b2:17:ad:
3c:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3C:2C:96:B3:40:67:76:6E:E2:06:99:5B:6C:82:59:BA:86:AA:57:BD
X509v3 Authority Key Identifier:
keyid:A0:89:DB:72:50:FD:84:76:C8:98:AE:E0:A5:FB:F2:A9:88:34:01:FE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/oInbclD9hHbImK7gpfvyqYg0Af4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9f/2a8832-cdd6-4d8c-93f3-d825d0365789/1/oInbclD9hHbImK7gpfvyqYg0Af4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9f/2a8832-cdd6-4d8c-93f3-d825d0365789/1/oInbclD9hHbImK7gpfvyqYg0Af4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0b:e2:66:29:4a:26:84:f4:b7:b7:17:24:3a:f8:f9:9f:2e:2b:
01:a0:ef:b2:00:1f:db:46:ab:6b:d3:e1:e5:b2:c3:a3:b4:56:
1c:a3:a6:97:17:4f:9c:2e:4d:92:78:09:3e:06:25:14:a0:8e:
c8:5a:13:58:2f:4e:f2:16:49:c2:b0:b8:ae:4c:05:e2:46:fe:
52:20:a4:34:1c:5a:a0:05:23:44:92:07:0b:a9:f7:4f:15:78:
81:f5:13:53:6c:55:e0:b9:68:8e:a1:27:6f:84:c7:6c:fe:88:
41:fe:7d:8a:30:c4:57:30:3a:a7:8c:bd:76:60:44:9c:50:81:
a0:dd:63:3b:8e:27:7a:09:78:7b:ff:cf:08:05:c4:65:c1:5c:
62:d5:50:65:ca:5c:8b:b9:a6:e2:45:6d:85:ff:b6:47:f9:87:
b1:7d:a9:73:c0:88:8a:49:af:e5:e9:11:f5:e7:29:43:61:cd:
21:02:a6:33:85:3d:ad:13:5a:3b:ad:32:b4:30:3c:08:b8:90:
82:00:89:68:f7:73:04:44:38:a6:81:b2:5a:e9:d4:d8:be:32:
be:58:d6:72:c2:2a:2a:f1:f1:9e:cd:7a:55:b2:65:08:19:5c:
5f:6d:fb:8d:fe:9c:31:89:68:af:50:b2:45:98:1d:2e:05:40:
11:00:36:79
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 13 02:41:09 2025 by rpki-client