Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b4/13bd77-d297-4689-bee4-466e9cab7864/1/O6WxwJqjH2cTxhsy5VgQnkeWbUI.mft
File: O6WxwJqjH2cTxhsy5VgQnkeWbUI.mft (raw, json)
Hash identifier: 214PZtcWAFeP+VUzeeeGgoheK9vMqIR6R9wNWs2yeiM=
Subject key identifier: 52:44:FA:B5:E5:57:CE:11:8E:2D:97:8E:38:3C:65:AB:A4:E6:B7:6A
Authority key identifier: 3B:A5:B1:C0:9A:A3:1F:67:13:C6:1B:32:E5:58:10:9E:47:96:6D:42
Certificate issuer: /CN=3ba5b1c09aa31f6713c61b32e558109e47966d42
Certificate serial: 019638E4730B403B2053B97960667C683FB3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/O6WxwJqjH2cTxhsy5VgQnkeWbUI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b4/13bd77-d297-4689-bee4-466e9cab7864/1/O6WxwJqjH2cTxhsy5VgQnkeWbUI.mft
Manifest number: 14FF
Signing time: Tue 15 Apr 2025 10:00:17 +0000
Manifest this update: Tue 15 Apr 2025 10:00:17 +0000
Manifest next update: Wed 16 Apr 2025 10:00:17 +0000
Files and hashes: 1: 1-kJ7dFfkbXY8GKTB51YoZp95upA.roa (hash: dR9vYcvJGh1CzLQ01rVJBBjGJtG77A8jF4vNPyZgLsk=)
2: BEfZLYm22ytL2TAUbAdVw1zX1Lw.roa (hash: klB/IG9rFDsKmRUAoHWuriGo/ZZNxkQ+BXChvVj85xk=)
3: HEUTASsEJ1XaEbGOmH7X4Jwc8WA.roa (hash: pY4BF2ACBH1qgVniWcBeMHaQwZVHstzR7MkwfTMJy6w=)
4: L2g5JebuYY7V2mQAYgdmVvxTDpM.roa (hash: NnNek1hVJzs9KMTpcStW+sGX8YKBScQrjrv4sJRJLuY=)
5: O6WxwJqjH2cTxhsy5VgQnkeWbUI.crl (hash: hf0LyPrw9q7zW4cHleW9ZT0jeQ990p9EnAyaSJGwrX0=)
6: XOraKSxzxrwhqKYes5-js7tbyMM.roa (hash: WQ2IBOPtnhThz+gIf7Qaas166QmuF5Q3ApP6XXJ39d4=)
7: g9BBfDc_1PLnz7Bt9VifF-7KO2o.roa (hash: egth43kB7TA1PASJjKkxy/iH4S+KR37qtj3zbkktKes=)
8: nqUZf1GLiVDPhsp8HEtZMlhp3BY.roa (hash: AwrhAC+0+48MNhq3fFji1sJrgTPkE6AyZbz5FDgm7So=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b4/13bd77-d297-4689-bee4-466e9cab7864/1/O6WxwJqjH2cTxhsy5VgQnkeWbUI.crl
rsync://rpki.ripe.net/repository/DEFAULT/b4/13bd77-d297-4689-bee4-466e9cab7864/1/O6WxwJqjH2cTxhsy5VgQnkeWbUI.mft
rsync://rpki.ripe.net/repository/DEFAULT/O6WxwJqjH2cTxhsy5VgQnkeWbUI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 16 Apr 2025 08:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:38:e4:73:0b:40:3b:20:53:b9:79:60:66:7c:68:3f:b3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3ba5b1c09aa31f6713c61b32e558109e47966d42
Validity
Not Before: Apr 15 10:00:17 2025 GMT
Not After : Apr 16 10:00:17 2025 GMT
Subject: CN=5244fab5e557ce118e2d978e383c65aba4e6b76a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:f2:0b:a6:d0:9b:53:9f:be:95:24:97:d6:2f:
3d:2b:72:8f:0b:bb:72:86:10:8e:02:08:9e:33:09:
e3:b2:af:3f:23:cf:fa:8e:ab:91:94:d5:11:78:92:
76:34:aa:ef:7d:38:77:e7:24:02:92:81:7e:c2:47:
78:01:db:74:c8:a9:9d:a9:5a:6f:58:72:7b:19:50:
92:bf:cd:95:43:48:a5:49:fe:f0:54:97:01:9a:f8:
3b:f5:9a:36:ad:76:fe:c3:db:1b:57:49:b2:7f:db:
45:ac:fd:35:a9:f3:5f:e3:9f:c9:ff:38:f4:0b:d9:
c6:71:9b:3f:c9:e7:be:34:c6:f5:52:8c:9b:5b:e4:
4d:a8:d9:45:d1:3c:5d:06:e7:e2:99:2f:ec:ce:43:
26:18:42:ce:85:d3:58:68:5a:29:8b:2c:c5:ce:50:
18:65:0a:bb:50:90:77:92:f3:c3:91:ea:6c:0b:88:
d1:b1:e7:83:79:3c:ab:6a:d9:76:31:9a:ee:36:d5:
65:68:da:f7:f5:b3:24:3e:63:be:15:9b:55:59:36:
e3:0d:6f:1e:51:7a:ac:1b:fa:28:80:36:e6:af:b9:
32:b6:36:a2:9d:14:e0:fa:dd:1a:a0:bf:2e:9e:d3:
74:bf:18:b4:16:bb:0e:fb:af:a0:4b:97:a9:96:b4:
9f:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
52:44:FA:B5:E5:57:CE:11:8E:2D:97:8E:38:3C:65:AB:A4:E6:B7:6A
X509v3 Authority Key Identifier:
keyid:3B:A5:B1:C0:9A:A3:1F:67:13:C6:1B:32:E5:58:10:9E:47:96:6D:42
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/O6WxwJqjH2cTxhsy5VgQnkeWbUI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/13bd77-d297-4689-bee4-466e9cab7864/1/O6WxwJqjH2cTxhsy5VgQnkeWbUI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/13bd77-d297-4689-bee4-466e9cab7864/1/O6WxwJqjH2cTxhsy5VgQnkeWbUI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8a:b5:77:d8:54:0c:27:75:ca:f7:a2:da:22:b6:ff:ae:52:34:
5e:be:89:50:ba:57:c7:2f:31:15:e3:0b:41:9e:52:b5:16:71:
fb:ec:72:dc:67:7d:3c:b6:5f:be:d4:ab:40:90:14:a6:f7:44:
de:eb:5f:b9:f0:5a:1e:dd:5d:44:df:08:48:30:86:f7:b2:43:
eb:12:11:5d:db:6a:a0:b4:4a:57:5c:b6:11:70:40:e2:3c:f2:
10:1a:46:be:9c:c5:87:b9:15:53:49:ce:7e:09:57:0a:2e:90:
80:50:43:e3:f3:ab:02:dd:bc:b4:01:cf:0b:c7:98:8a:c8:6d:
e7:1d:9f:e3:92:18:7e:55:9a:eb:be:5b:be:ab:af:85:06:c9:
bc:d8:d6:f6:3b:3c:30:18:03:b9:26:77:42:5a:9d:65:13:dd:
94:88:15:ce:90:19:62:1a:08:15:66:42:30:46:d8:6e:7b:c4:
7d:83:d6:03:4e:e2:2b:6c:1b:91:a9:bb:67:86:1f:80:9f:c1:
be:8d:e2:59:89:52:8c:e0:67:3d:bb:1e:8e:e8:17:c9:6e:11:
2b:94:05:97:b2:f7:cc:35:9d:09:e2:0c:74:17:b3:1e:47:c2:
55:f4:78:65:0c:32:75:a6:65:63:d8:45:2d:85:ef:6b:a4:fd:
59:a4:c1:c9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 15 13:57:32 2025 by rpki-client