Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c2/110086-c0c3-4790-95ab-055112560fc9/1/O2jlRg26WHHb5SMhSEOeIVspvUQ.mft
File: O2jlRg26WHHb5SMhSEOeIVspvUQ.mft (raw, json)
Hash identifier: uFZCLMd6QBL5XpOvJvga5fHy2MCwEwBktU6qSK9H5FE=
Subject key identifier: 71:0D:8C:83:8B:48:84:41:05:58:1B:D9:79:97:FF:F7:96:7E:10:C6
Authority key identifier: 3B:68:E5:46:0D:BA:58:71:DB:E5:23:21:48:43:9E:21:5B:29:BD:44
Certificate issuer: /CN=3b68e5460dba5871dbe5232148439e215b29bd44
Certificate serial: 01958F6137AA4CD22D049C2BB37A57C10B7F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/O2jlRg26WHHb5SMhSEOeIVspvUQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c2/110086-c0c3-4790-95ab-055112560fc9/1/O2jlRg26WHHb5SMhSEOeIVspvUQ.mft
Manifest number: 1496
Signing time: Thu 13 Mar 2025 12:01:07 +0000
Manifest this update: Thu 13 Mar 2025 12:01:07 +0000
Manifest next update: Fri 14 Mar 2025 12:01:07 +0000
Files and hashes: 1: O2jlRg26WHHb5SMhSEOeIVspvUQ.crl (hash: k6mIYTTdXz7Nb1bapWaK0v5+rLK+U6MUqA/djpv/Amk=)
2: Pd3Tb2muXCCBgS-W8Cu_lBpJ2x8.roa (hash: nzjWO6dCtijYtA3RGgwEtQM/oq2xd/x0bLHHza1oxV4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c2/110086-c0c3-4790-95ab-055112560fc9/1/O2jlRg26WHHb5SMhSEOeIVspvUQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/c2/110086-c0c3-4790-95ab-055112560fc9/1/O2jlRg26WHHb5SMhSEOeIVspvUQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/O2jlRg26WHHb5SMhSEOeIVspvUQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 14 Mar 2025 09:00:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:8f:61:37:aa:4c:d2:2d:04:9c:2b:b3:7a:57:c1:0b:7f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3b68e5460dba5871dbe5232148439e215b29bd44
Validity
Not Before: Mar 13 12:01:07 2025 GMT
Not After : Mar 14 12:01:07 2025 GMT
Subject: CN=710d8c838b48844105581bd97997fff7967e10c6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:1e:49:12:83:17:70:71:de:9b:73:c6:85:c9:
cf:47:b3:20:15:f8:25:a2:7f:6e:fe:01:8d:7a:b5:
9a:93:29:61:9d:00:03:eb:54:01:ed:e3:75:58:e5:
01:5a:d5:c1:bc:34:bf:3e:82:4d:0c:15:7f:d7:a6:
e5:38:c2:da:a5:f3:ea:15:cc:7b:d6:9a:85:0e:fb:
0c:cd:92:f2:da:0d:eb:3e:ee:9b:27:85:75:63:f5:
2d:64:1d:7b:af:80:5b:4e:15:8a:26:7b:00:2c:1e:
62:73:c1:0b:bc:c8:24:bb:f8:cc:96:0f:61:7c:a6:
3d:53:7e:22:68:eb:11:59:77:24:a2:c9:a6:d2:f3:
eb:1f:45:a3:3e:eb:e9:e9:45:09:ab:f5:79:ee:ca:
5f:c5:c8:be:da:9a:6c:40:5d:7a:e0:ef:3e:ec:9e:
69:84:29:75:d8:9c:de:60:09:26:29:c2:b3:a3:90:
53:f2:8f:f2:97:c7:a2:2b:a6:2e:0a:d9:a5:19:75:
8f:0f:d2:1b:24:f6:a0:a7:f0:16:07:e5:da:eb:85:
8e:08:58:bd:da:c8:87:c9:96:b5:f1:ae:43:66:e7:
e8:e4:06:1a:e9:d4:86:c6:fe:19:2b:25:0d:e3:2f:
76:5b:6d:1b:26:ac:25:47:bd:54:32:01:5a:85:b4:
ca:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
71:0D:8C:83:8B:48:84:41:05:58:1B:D9:79:97:FF:F7:96:7E:10:C6
X509v3 Authority Key Identifier:
keyid:3B:68:E5:46:0D:BA:58:71:DB:E5:23:21:48:43:9E:21:5B:29:BD:44
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/O2jlRg26WHHb5SMhSEOeIVspvUQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/110086-c0c3-4790-95ab-055112560fc9/1/O2jlRg26WHHb5SMhSEOeIVspvUQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/110086-c0c3-4790-95ab-055112560fc9/1/O2jlRg26WHHb5SMhSEOeIVspvUQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0e:72:59:7b:e7:f8:e6:76:68:dd:77:a2:d2:ca:e2:91:7a:1f:
72:7e:a6:ad:3b:d2:ef:2e:87:ff:22:da:21:fb:87:72:69:c1:
e9:79:e7:dd:fb:f9:84:41:cc:3e:02:72:19:a0:5e:50:24:3b:
55:75:4b:8f:5a:7f:ef:59:fb:5a:27:0e:8e:6c:76:68:9e:48:
c7:a0:dc:8d:8b:58:90:c5:5d:76:1f:03:22:2d:53:65:d0:18:
99:4a:4b:40:21:3d:af:9c:87:67:79:53:a8:2c:e1:16:a2:36:
a2:60:21:1e:98:2b:8d:ca:13:76:a6:15:68:c6:ef:d6:a6:78:
e6:f1:49:2e:88:ed:e6:0e:49:8f:34:26:05:1f:3d:d1:a7:ab:
7f:06:eb:ad:63:98:73:56:0c:24:7b:64:77:7b:f9:74:f2:54:
1f:a1:6d:97:41:ab:d0:f7:f7:ed:7b:e8:3f:ef:01:ff:64:73:
72:c6:d3:a6:f5:f3:98:b6:82:85:74:91:23:7d:aa:c3:00:7a:
53:dd:45:fc:19:56:de:ac:ae:40:7b:06:f9:28:e3:07:a6:fc:
27:c6:ac:c5:8d:49:b3:55:f3:a4:4b:25:24:8f:6f:a4:7e:fe:
02:82:83:7c:18:bc:52:73:9b:a7:cd:be:fa:63:ca:96:0f:57:
0a:65:45:7f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 13 20:23:55 2025 by rpki-client