Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e4/a948f3-67d9-4f35-9e0d-bc6d1b3f86b9/1/o7R_qStyxJ6grFNx3jU7HicdxdA.mft
File: o7R_qStyxJ6grFNx3jU7HicdxdA.mft (raw, json)
Hash identifier: KkVgYBr+bf+rleigNleEhBBogw/TqLAhkK3OwdREVlc=
Subject key identifier: BE:EF:C7:23:40:91:3B:CC:27:42:F0:FF:1D:C2:18:DB:A3:AC:52:BE
Authority key identifier: A3:B4:7F:A9:2B:72:C4:9E:A0:AC:53:71:DE:35:3B:1E:27:1D:C5:D0
Certificate issuer: /CN=a3b47fa92b72c49ea0ac5371de353b1e271dc5d0
Certificate serial: 0196470E48CACCFCF2140BD91BF0DD025509
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/o7R_qStyxJ6grFNx3jU7HicdxdA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e4/a948f3-67d9-4f35-9e0d-bc6d1b3f86b9/1/o7R_qStyxJ6grFNx3jU7HicdxdA.mft
Manifest number: 0C86
Signing time: Fri 18 Apr 2025 04:00:40 +0000
Manifest this update: Fri 18 Apr 2025 04:00:40 +0000
Manifest next update: Sat 19 Apr 2025 04:00:40 +0000
Files and hashes: 1: WIaOxFihvMngyRoJ51mATU-OelM.roa (hash: yYmLv2domUt4Svy4VBfcVVdHWZ/TicTJ4cMQnZnE8zs=)
2: o7R_qStyxJ6grFNx3jU7HicdxdA.crl (hash: 3W+4XYGq+ND6R+5GQHe1pyfbR8O5ZC7WD+FvRoROlCo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e4/a948f3-67d9-4f35-9e0d-bc6d1b3f86b9/1/o7R_qStyxJ6grFNx3jU7HicdxdA.crl
rsync://rpki.ripe.net/repository/DEFAULT/e4/a948f3-67d9-4f35-9e0d-bc6d1b3f86b9/1/o7R_qStyxJ6grFNx3jU7HicdxdA.mft
rsync://rpki.ripe.net/repository/DEFAULT/o7R_qStyxJ6grFNx3jU7HicdxdA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 19 Apr 2025 01:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:47:0e:48:ca:cc:fc:f2:14:0b:d9:1b:f0:dd:02:55:09
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a3b47fa92b72c49ea0ac5371de353b1e271dc5d0
Validity
Not Before: Apr 18 04:00:40 2025 GMT
Not After : Apr 19 04:00:40 2025 GMT
Subject: CN=beefc72340913bcc2742f0ff1dc218dba3ac52be
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:ce:0a:6f:89:be:71:f2:b3:2a:5f:9b:56:cf:
23:28:5a:e2:87:35:ea:af:52:40:44:31:ff:dd:84:
eb:24:53:6c:d2:4c:72:c3:6b:f8:55:8e:ff:6c:8d:
e7:ce:7e:63:f2:c5:16:b5:18:2f:9b:a2:99:18:0d:
1d:18:90:8b:75:54:7e:d1:83:6b:fc:fe:51:38:6c:
f9:7f:b2:83:86:95:e3:44:71:8e:4e:fd:b4:85:b0:
ff:58:25:07:21:0a:2b:4a:5a:19:26:4b:92:70:08:
10:16:2b:13:c9:2b:d9:cf:1f:85:e5:81:d7:39:16:
17:94:de:71:03:73:bf:3d:5f:65:15:a4:e6:3f:bf:
69:6a:ee:14:bf:fa:7e:26:93:07:d4:db:ca:ba:12:
3c:c9:04:9f:be:54:cf:c8:2c:85:2f:95:4c:63:c0:
ef:49:d8:19:4e:20:62:49:62:fa:24:a2:68:fa:1e:
17:dd:03:e7:88:23:4d:b3:c9:40:cb:2a:7c:02:aa:
16:46:a0:99:97:4c:07:93:05:44:03:1a:2d:0b:2b:
03:06:6b:0a:fa:49:cf:eb:df:35:45:cc:d5:a2:4d:
50:7e:49:6a:2a:d9:d5:f5:e1:64:d1:63:05:7d:9c:
ec:3b:8d:09:48:43:03:23:20:e8:a6:f1:1b:39:78:
72:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BE:EF:C7:23:40:91:3B:CC:27:42:F0:FF:1D:C2:18:DB:A3:AC:52:BE
X509v3 Authority Key Identifier:
keyid:A3:B4:7F:A9:2B:72:C4:9E:A0:AC:53:71:DE:35:3B:1E:27:1D:C5:D0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/o7R_qStyxJ6grFNx3jU7HicdxdA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/a948f3-67d9-4f35-9e0d-bc6d1b3f86b9/1/o7R_qStyxJ6grFNx3jU7HicdxdA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/a948f3-67d9-4f35-9e0d-bc6d1b3f86b9/1/o7R_qStyxJ6grFNx3jU7HicdxdA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5b:1a:e1:f7:03:b9:f5:59:23:5f:7c:21:48:c1:9e:f6:3b:8b:
8d:66:3e:87:55:2b:de:c4:af:a2:5d:a2:95:a5:a6:20:12:df:
ec:33:5b:62:d9:90:1e:78:4a:17:7a:7a:f8:c6:97:1d:84:5a:
19:65:a8:8e:2f:10:b9:5d:69:91:1c:56:f0:69:13:f6:b4:ae:
9c:2d:2b:4c:7a:d5:be:53:43:24:09:bb:f2:71:5b:d7:16:0f:
f0:cf:84:2d:9a:0f:63:19:95:86:8a:08:26:55:6d:7a:ac:8b:
83:92:dd:bd:06:72:30:19:00:78:f5:45:c2:66:36:15:a9:9e:
28:9b:b3:90:00:0d:b8:e1:a5:23:1c:b8:d2:f3:28:65:89:81:
b2:bd:d9:81:75:a4:79:a5:65:62:b5:63:57:0f:4a:d6:89:df:
ee:68:10:9a:be:ec:62:5f:45:25:e8:77:d4:d5:62:1f:40:fe:
0d:cd:c0:fc:be:60:3d:43:18:3c:a4:a8:70:9c:f1:2c:dd:b6:
9e:82:dd:bf:12:de:c0:5b:12:17:30:84:cd:20:81:b5:82:c6:
94:36:a1:7c:f1:42:bd:b0:40:61:c7:2e:a9:0d:bb:f6:c9:1f:
46:d8:a8:4c:26:6e:66:54:7d:da:99:12:2f:43:ba:e4:9b:f7:
d7:7a:63:5a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 18 05:53:58 2025 by rpki-client