Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ec/ab3f36-7850-4266-b67a-023cc1fc1910/1/O5WuuspzMW3EaAyAi3k-aglWXxs.mft
File: O5WuuspzMW3EaAyAi3k-aglWXxs.mft (raw, json)
Hash identifier: nCsVfWr3RcYUJPDrmYH9ybm8RJWwfSmeH4D1z4nNxS8=
Subject key identifier: 8D:4D:CD:C7:8E:61:07:F4:21:17:AD:BE:A3:37:D1:68:5B:BA:BE:AB
Authority key identifier: 3B:95:AE:BA:CA:73:31:6D:C4:68:0C:80:8B:79:3E:6A:09:56:5F:1B
Certificate issuer: /CN=3b95aebaca73316dc4680c808b793e6a09565f1b
Certificate serial: 01963BAEBDF5F8698D0E08BB8408FD154494
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/O5WuuspzMW3EaAyAi3k-aglWXxs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ec/ab3f36-7850-4266-b67a-023cc1fc1910/1/O5WuuspzMW3EaAyAi3k-aglWXxs.mft
Manifest number: 0347
Signing time: Tue 15 Apr 2025 23:00:29 +0000
Manifest this update: Tue 15 Apr 2025 23:00:29 +0000
Manifest next update: Wed 16 Apr 2025 23:00:29 +0000
Files and hashes: 1: O5WuuspzMW3EaAyAi3k-aglWXxs.crl (hash: xLapZp+61O/+kTv9SZcPujicryihSj2La5n2QuqqF20=)
2: tsimjRApcLdxNhZEKgAs63IqA5I.roa (hash: HrZUtgrX3ioBRBNFpZduF4ySYEUBH1QJ3tZ4kshDhvk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ec/ab3f36-7850-4266-b67a-023cc1fc1910/1/O5WuuspzMW3EaAyAi3k-aglWXxs.crl
rsync://rpki.ripe.net/repository/DEFAULT/ec/ab3f36-7850-4266-b67a-023cc1fc1910/1/O5WuuspzMW3EaAyAi3k-aglWXxs.mft
rsync://rpki.ripe.net/repository/DEFAULT/O5WuuspzMW3EaAyAi3k-aglWXxs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 16 Apr 2025 23:00:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:3b:ae:bd:f5:f8:69:8d:0e:08:bb:84:08:fd:15:44:94
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3b95aebaca73316dc4680c808b793e6a09565f1b
Validity
Not Before: Apr 15 23:00:29 2025 GMT
Not After : Apr 16 23:00:29 2025 GMT
Subject: CN=8d4dcdc78e6107f42117adbea337d1685bbabeab
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e4:4f:2d:69:95:b9:a6:4b:6a:ee:39:4c:29:4e:
0b:3b:75:8d:1c:e0:8b:77:f7:b6:ef:c2:ed:c2:ed:
07:1a:68:ec:61:82:87:55:29:c6:b5:79:aa:26:f3:
e8:1a:2f:df:0a:a1:4d:9b:eb:79:f4:20:6c:66:78:
2c:c8:3a:b1:12:07:b2:49:e2:b3:19:01:7f:ac:ce:
5c:37:ba:28:e4:d0:bb:7b:96:5e:3b:22:21:83:f6:
ef:22:af:44:4a:c5:2a:2a:92:fc:57:f7:69:6d:4e:
30:12:d4:d2:04:4c:65:c5:5b:1d:eb:ff:f3:f7:20:
3e:8b:73:d5:ae:11:0c:89:f0:54:2f:02:b8:a6:67:
98:e0:4b:c5:cd:ca:45:74:00:d0:ea:6e:ea:62:e5:
ba:cf:2a:48:26:7b:bc:d0:5d:ef:92:ce:1f:91:77:
93:d6:e2:22:87:3d:7c:31:bf:bf:16:77:03:22:27:
38:b8:21:3a:50:c8:de:55:e1:28:c6:68:29:5e:a7:
8c:ac:bc:6d:b5:da:13:05:87:ba:25:b8:c2:e6:bf:
e6:d9:8c:49:a5:d7:22:73:5d:87:d3:4a:3a:f5:75:
3a:ef:db:77:fd:af:41:8d:be:06:69:16:64:a5:d7:
17:87:08:28:fb:f7:35:2d:7a:95:f9:44:77:63:42:
6e:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8D:4D:CD:C7:8E:61:07:F4:21:17:AD:BE:A3:37:D1:68:5B:BA:BE:AB
X509v3 Authority Key Identifier:
keyid:3B:95:AE:BA:CA:73:31:6D:C4:68:0C:80:8B:79:3E:6A:09:56:5F:1B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/O5WuuspzMW3EaAyAi3k-aglWXxs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ec/ab3f36-7850-4266-b67a-023cc1fc1910/1/O5WuuspzMW3EaAyAi3k-aglWXxs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ec/ab3f36-7850-4266-b67a-023cc1fc1910/1/O5WuuspzMW3EaAyAi3k-aglWXxs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6b:28:10:08:7a:71:6e:5f:ed:0e:ec:06:c3:32:d4:4c:ff:90:
61:9f:64:29:11:ba:86:fe:0a:c6:a1:6e:f8:03:e4:ff:64:14:
28:5a:02:71:6f:06:85:89:08:40:b0:bb:67:56:a1:b7:45:e5:
1b:55:f1:50:81:ec:98:31:95:bd:1a:a4:ae:c7:26:7d:42:18:
46:c0:b6:91:89:eb:f7:ef:52:cd:79:cb:22:db:ce:c8:b3:53:
64:bf:a0:45:6f:77:b6:c8:ed:5b:72:35:d7:f9:d8:8d:62:14:
ab:bb:52:16:7c:9f:4d:10:ce:96:54:49:b6:72:8c:d8:b8:f5:
f8:32:24:7d:3a:b6:14:f7:fa:c9:6c:b5:d0:09:48:3a:53:05:
75:0f:b8:46:be:c2:b2:89:e6:9d:1f:87:99:99:3b:c2:c9:99:
1c:86:4d:b8:09:ed:12:65:ae:19:bf:9d:00:05:e0:5e:9b:d5:
9c:31:c6:02:44:05:f5:8c:ca:bb:b2:e7:e0:85:10:e7:31:13:
63:a2:2c:c2:8d:ca:cb:8d:81:96:6d:bf:fc:80:41:0c:6a:68:
7d:8d:86:e4:f7:13:dc:63:c2:e9:85:fd:ed:30:88:5f:11:54:
bf:f5:78:5d:16:6f:9e:4a:c5:bf:41:86:34:12:1c:f6:2e:52:
e1:77:82:f6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 16 06:54:59 2025 by rpki-client