Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c7/7d9854-969e-4e34-a1df-a302f6a74b08/1/o9oBlglsEcIx5JuzCJZwuU2_XoA.mft
File: o9oBlglsEcIx5JuzCJZwuU2_XoA.mft (raw, json)
Hash identifier: eQYA/CzX30QjV7H/Oq9uviT4+LUFtzYKUzFNyuGPEsk=
Subject key identifier: AA:14:0D:D3:47:84:1A:91:09:CF:DD:21:A5:98:55:60:12:A0:0D:36
Authority key identifier: A3:DA:01:96:09:6C:11:C2:31:E4:9B:B3:08:96:70:B9:4D:BF:5E:80
Certificate issuer: /CN=a3da0196096c11c231e49bb3089670b94dbf5e80
Certificate serial: 01961245D0363904B446AD1C59EF2F87AE8D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/o9oBlglsEcIx5JuzCJZwuU2_XoA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c7/7d9854-969e-4e34-a1df-a302f6a74b08/1/o9oBlglsEcIx5JuzCJZwuU2_XoA.mft
Manifest number: 111F
Signing time: Mon 07 Apr 2025 22:01:27 +0000
Manifest this update: Mon 07 Apr 2025 22:01:27 +0000
Manifest next update: Tue 08 Apr 2025 22:01:27 +0000
Files and hashes: 1: 6qcJyLkGHGKYEWJcRiN4L6Z8qn8.roa (hash: 5OQd3tPQBKWKRhlqwep2BEZpe6x6xAIuVkUwGHnZJ7w=)
2: o9oBlglsEcIx5JuzCJZwuU2_XoA.crl (hash: chq0WLCc/CsZOX6fjfZCvFUN/M52Qwrr3Ek8ghnh340=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c7/7d9854-969e-4e34-a1df-a302f6a74b08/1/o9oBlglsEcIx5JuzCJZwuU2_XoA.crl
rsync://rpki.ripe.net/repository/DEFAULT/c7/7d9854-969e-4e34-a1df-a302f6a74b08/1/o9oBlglsEcIx5JuzCJZwuU2_XoA.mft
rsync://rpki.ripe.net/repository/DEFAULT/o9oBlglsEcIx5JuzCJZwuU2_XoA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 08 Apr 2025 22:01:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:12:45:d0:36:39:04:b4:46:ad:1c:59:ef:2f:87:ae:8d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a3da0196096c11c231e49bb3089670b94dbf5e80
Validity
Not Before: Apr 7 22:01:27 2025 GMT
Not After : Apr 8 22:01:27 2025 GMT
Subject: CN=aa140dd347841a9109cfdd21a598556012a00d36
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:9b:93:73:e9:2b:b7:71:30:91:d0:a7:00:2c:
9d:ee:d6:0e:a6:51:a7:3e:e0:3b:8e:14:90:af:41:
a0:48:5d:f4:7d:e7:08:28:96:9c:cb:12:85:c8:52:
19:13:59:b5:ca:91:d3:1c:4e:d8:ee:ab:33:80:ed:
63:25:14:e6:bf:ef:15:eb:67:23:9f:da:80:e2:6d:
05:d8:c6:6b:a9:df:c7:ec:73:f3:b8:9a:93:5e:f2:
17:11:20:73:d9:34:00:1f:c0:6c:a7:04:33:73:77:
79:db:4a:25:45:d7:49:e7:50:cf:fa:4b:c0:47:4c:
f2:ea:e5:cf:1f:b4:4d:6d:0f:6b:7d:93:70:c4:0a:
c5:a4:98:fd:05:2a:de:9e:68:a4:67:91:29:ce:f6:
6a:c4:36:98:08:c9:ab:65:65:9a:7b:51:53:22:2e:
99:41:c5:fd:b6:87:80:d7:aa:ec:96:8d:f9:8b:1e:
88:f1:14:15:72:7b:55:50:eb:9b:2a:89:14:a4:74:
e7:28:db:4f:97:2a:b9:89:70:4e:47:ae:0f:2c:9d:
b7:d5:c4:07:f8:0e:3d:c8:cc:aa:6a:ed:cb:ce:e1:
1a:be:21:27:e3:55:95:12:40:ee:3e:36:fd:2e:ec:
83:c4:4b:5e:14:aa:0c:14:37:ab:64:47:31:fc:43:
40:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AA:14:0D:D3:47:84:1A:91:09:CF:DD:21:A5:98:55:60:12:A0:0D:36
X509v3 Authority Key Identifier:
keyid:A3:DA:01:96:09:6C:11:C2:31:E4:9B:B3:08:96:70:B9:4D:BF:5E:80
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/o9oBlglsEcIx5JuzCJZwuU2_XoA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/7d9854-969e-4e34-a1df-a302f6a74b08/1/o9oBlglsEcIx5JuzCJZwuU2_XoA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/7d9854-969e-4e34-a1df-a302f6a74b08/1/o9oBlglsEcIx5JuzCJZwuU2_XoA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
18:d5:c3:b8:3b:80:d6:09:bc:ee:1c:4b:99:8d:02:59:11:cb:
c8:5f:06:32:3c:a6:98:cb:be:2a:81:d2:4d:02:03:b8:fc:79:
6f:86:98:f1:dd:2d:cb:3f:f9:08:e0:e9:2f:68:2f:8a:1a:7c:
7d:e8:d9:76:cf:6b:ba:ba:33:6d:ae:6d:1b:7d:bf:39:cc:7c:
20:27:84:df:ce:17:b9:ab:7f:4b:b7:55:59:1c:f3:13:bd:85:
ab:a0:9d:b4:95:12:2d:80:68:af:df:4e:8e:9f:6a:82:28:2d:
92:67:ec:37:77:10:33:ce:e8:23:7e:1c:62:a0:22:e2:54:6a:
bd:8e:16:cc:18:ee:fc:f8:ff:90:da:7c:ac:1a:b5:28:7a:9f:
17:08:c1:90:2d:27:c6:9a:5e:8f:bf:74:86:0b:db:9e:5a:0b:
4e:c9:30:88:a7:d4:d6:22:cd:5e:95:a6:40:1e:b1:c8:a4:f0:
5f:ea:fd:27:8a:8a:48:7a:18:f1:84:6c:6f:36:65:b3:a1:4d:
a2:8e:f6:68:6a:ba:21:bc:15:04:9e:ee:2b:24:03:86:6c:71:
3d:d5:6c:a4:12:12:ef:42:ab:0d:f8:64:57:95:b9:b9:ee:70:
45:ea:17:57:f2:2f:a6:a2:33:17:fb:d0:ac:e1:4b:52:99:19:
da:59:be:e6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 8 04:58:34 2025 by rpki-client