Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ec/ab3f36-7850-4266-b67a-023cc1fc1910/1/O5WuuspzMW3EaAyAi3k-aglWXxs.mft
File: O5WuuspzMW3EaAyAi3k-aglWXxs.mft (raw, json)
Hash identifier: MB8sXtEqDE2uYwDUF/mskiYhY+7Ky9Gyez7cEihmZZg=
Subject key identifier: 94:28:6F:6E:19:B6:00:81:29:82:FB:84:D6:5C:70:1A:5E:6D:87:43
Authority key identifier: 3B:95:AE:BA:CA:73:31:6D:C4:68:0C:80:8B:79:3E:6A:09:56:5F:1B
Certificate issuer: /CN=3b95aebaca73316dc4680c808b793e6a09565f1b
Certificate serial: 0197579195CAFE3869164B591D1772C7B5EB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/O5WuuspzMW3EaAyAi3k-aglWXxs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ec/ab3f36-7850-4266-b67a-023cc1fc1910/1/O5WuuspzMW3EaAyAi3k-aglWXxs.mft
Manifest number: 03DA
Signing time: Tue 10 Jun 2025 02:00:48 +0000
Manifest this update: Tue 10 Jun 2025 02:00:48 +0000
Manifest next update: Wed 11 Jun 2025 02:00:48 +0000
Files and hashes: 1: O5WuuspzMW3EaAyAi3k-aglWXxs.crl (hash: 9hvvmDiXHT6EfGqUI+QQdUB0AbNKHJ0unS/p+lAcqMA=)
2: tsimjRApcLdxNhZEKgAs63IqA5I.roa (hash: HrZUtgrX3ioBRBNFpZduF4ySYEUBH1QJ3tZ4kshDhvk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ec/ab3f36-7850-4266-b67a-023cc1fc1910/1/O5WuuspzMW3EaAyAi3k-aglWXxs.crl
rsync://rpki.ripe.net/repository/DEFAULT/ec/ab3f36-7850-4266-b67a-023cc1fc1910/1/O5WuuspzMW3EaAyAi3k-aglWXxs.mft
rsync://rpki.ripe.net/repository/DEFAULT/O5WuuspzMW3EaAyAi3k-aglWXxs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 11 Jun 2025 00:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:57:91:95:ca:fe:38:69:16:4b:59:1d:17:72:c7:b5:eb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3b95aebaca73316dc4680c808b793e6a09565f1b
Validity
Not Before: Jun 10 02:00:48 2025 GMT
Not After : Jun 11 02:00:48 2025 GMT
Subject: CN=94286f6e19b600812982fb84d65c701a5e6d8743
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:39:e6:f0:cd:bd:55:af:99:d0:7b:e6:fe:e5:
30:59:8b:9e:4e:15:f8:e0:6c:d6:f1:3e:f6:48:5e:
97:5f:10:c4:8f:91:55:be:0f:7f:bd:08:ee:66:40:
63:1d:d6:cb:5d:a6:75:bc:3e:8a:22:4b:8b:20:6a:
37:79:29:c1:fb:06:ee:b3:08:59:b9:47:05:00:35:
78:f4:fe:18:3a:06:48:45:df:ed:42:f5:85:da:2b:
0a:f1:93:f6:74:8d:c1:19:8a:99:28:ac:71:2d:a9:
e9:0d:f6:2d:f2:ac:26:af:5f:06:76:a8:32:9d:e3:
68:4e:ff:42:b8:38:47:f8:81:93:74:96:b2:0f:6a:
f2:0b:30:8f:bd:49:af:08:7a:77:38:fa:43:67:77:
80:0b:01:0e:d0:5d:97:d2:4b:08:89:c4:48:4f:5e:
e8:b3:ea:3b:59:18:39:5f:49:86:4a:71:11:99:6a:
f1:c7:d1:2a:fb:13:62:aa:ec:e2:4b:b0:00:af:dc:
06:e3:54:af:d0:e7:cb:ce:e0:9e:cf:12:4e:ae:92:
01:79:21:0f:66:30:68:e8:71:42:65:3d:62:b9:96:
b4:2f:7f:f1:c8:8d:f2:ef:8b:9f:63:79:f2:a0:4c:
77:66:65:69:eb:21:ce:f9:51:07:ac:3c:08:34:22:
10:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
94:28:6F:6E:19:B6:00:81:29:82:FB:84:D6:5C:70:1A:5E:6D:87:43
X509v3 Authority Key Identifier:
keyid:3B:95:AE:BA:CA:73:31:6D:C4:68:0C:80:8B:79:3E:6A:09:56:5F:1B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/O5WuuspzMW3EaAyAi3k-aglWXxs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ec/ab3f36-7850-4266-b67a-023cc1fc1910/1/O5WuuspzMW3EaAyAi3k-aglWXxs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ec/ab3f36-7850-4266-b67a-023cc1fc1910/1/O5WuuspzMW3EaAyAi3k-aglWXxs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
02:32:d7:f1:12:ab:ed:f6:bb:db:44:6a:53:72:2a:fe:ee:15:
da:8f:27:5f:82:f0:d3:d6:87:02:84:81:42:b9:a8:e8:3c:63:
d2:f9:cd:b1:a3:99:c7:7d:e6:59:19:a3:70:89:48:4f:6a:1b:
ba:96:a9:f2:70:1a:89:3a:4d:83:a9:21:fe:2c:66:5b:36:5f:
9c:e2:29:84:51:28:df:c3:03:20:48:07:6a:99:17:f7:bc:60:
3d:88:ab:9d:6f:96:d7:5f:ff:a4:aa:0e:35:58:ec:5d:22:35:
f1:7b:af:79:06:2b:36:a6:8c:a3:3f:27:06:da:b0:89:20:a4:
bf:51:88:ad:97:90:2d:d8:1a:42:ea:27:3c:98:3f:b8:4a:8a:
24:58:f3:89:f4:83:78:17:b8:bc:b5:2a:2f:c7:21:86:09:f9:
40:80:cb:b3:cf:fd:76:3c:75:e8:36:80:94:b6:0d:2e:cf:73:
19:fa:98:1a:c0:a0:24:c7:42:aa:4c:62:6e:12:f8:36:86:e2:
04:e4:28:95:d3:fb:3c:18:5f:a2:49:3a:12:b3:ff:74:fb:89:
fa:39:b8:e6:b4:3c:0d:68:12:1b:63:b1:90:c4:03:64:bc:8f:
4c:98:56:7d:1e:d6:7c:e8:f1:b6:a6:86:84:58:20:e8:c3:65:
a2:4b:5a:60
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 10 06:15:20 2025 by rpki-client