Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ee/204cdf-f6e7-4874-9802-650dd138e6a2/1/O9n7V_Sw8lP5r4WDA-a0alKcGU4.mft
File: O9n7V_Sw8lP5r4WDA-a0alKcGU4.mft (raw, json)
Hash identifier: dsxr2W16/AjNOT5x6BHPyCVhl9sPUuzeFaSGAmgYF/M=
Subject key identifier: AB:D0:03:7A:1E:76:31:F5:E0:CD:55:78:A0:8F:56:23:39:71:01:6C
Authority key identifier: 3B:D9:FB:57:F4:B0:F2:53:F9:AF:85:83:03:E6:B4:6A:52:9C:19:4E
Certificate issuer: /CN=3bd9fb57f4b0f253f9af858303e6b46a529c194e
Certificate serial: 01962B607AE8F65B7D2773498B63197F7E19
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/O9n7V_Sw8lP5r4WDA-a0alKcGU4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ee/204cdf-f6e7-4874-9802-650dd138e6a2/1/O9n7V_Sw8lP5r4WDA-a0alKcGU4.mft
Manifest number: 116C
Signing time: Sat 12 Apr 2025 19:01:05 +0000
Manifest this update: Sat 12 Apr 2025 19:01:05 +0000
Manifest next update: Sun 13 Apr 2025 19:01:05 +0000
Files and hashes: 1: O9n7V_Sw8lP5r4WDA-a0alKcGU4.crl (hash: W0BtT32QClqXlwYz2BdKwvGrJiS+qGmTqse2I+LfuCs=)
2: OcIpHvqAwT2M9dTBJHDbqY1xej4.roa (hash: gnCvl1Md/DWtZz5X5Y7WYVBP9HfFDhgD11ts2150gvI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ee/204cdf-f6e7-4874-9802-650dd138e6a2/1/O9n7V_Sw8lP5r4WDA-a0alKcGU4.crl
rsync://rpki.ripe.net/repository/DEFAULT/ee/204cdf-f6e7-4874-9802-650dd138e6a2/1/O9n7V_Sw8lP5r4WDA-a0alKcGU4.mft
rsync://rpki.ripe.net/repository/DEFAULT/O9n7V_Sw8lP5r4WDA-a0alKcGU4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 13 Apr 2025 18:34:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:2b:60:7a:e8:f6:5b:7d:27:73:49:8b:63:19:7f:7e:19
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3bd9fb57f4b0f253f9af858303e6b46a529c194e
Validity
Not Before: Apr 12 19:01:05 2025 GMT
Not After : Apr 13 19:01:05 2025 GMT
Subject: CN=abd0037a1e7631f5e0cd5578a08f56233971016c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:aa:58:f8:d3:c7:28:d8:ee:2f:4b:99:0b:02:
c7:1b:f1:f4:0f:7f:c6:6f:1b:bf:54:87:9c:a4:5f:
c8:63:a7:44:7a:2b:e0:83:d1:15:0d:17:ab:77:d6:
df:c5:10:98:4a:ce:71:8b:bb:48:c3:69:ba:a6:98:
9f:6d:5d:14:8b:33:59:8a:0c:bc:e8:df:c9:a1:c4:
f2:68:47:1c:4d:54:ed:05:28:77:9d:97:12:91:20:
d2:6b:8b:5d:3c:94:53:b3:5b:83:16:16:7e:2a:14:
dd:40:12:a8:f9:dc:95:be:79:c4:69:cd:1a:b2:da:
1b:f3:b2:2b:04:9b:28:4d:47:cb:96:a6:4b:cb:01:
3c:45:5f:03:c1:be:f2:ee:77:9a:4e:c3:42:dd:21:
0b:17:23:d3:8b:30:a7:cd:49:a4:50:b8:bd:2c:12:
29:1c:d5:9d:ca:9d:31:eb:e2:68:dc:26:0c:34:ca:
9b:21:07:ce:8a:fd:c3:ea:ec:d0:1e:84:23:1f:b6:
73:c7:a4:89:ad:e2:bf:de:b5:55:4b:8e:ab:e4:83:
8b:6c:38:aa:10:51:6e:7a:69:3a:cd:a8:dc:7a:e2:
a7:c5:71:20:c6:f4:b8:b0:fa:69:e1:93:b4:f0:4f:
8c:f1:41:71:bb:df:b2:e9:9b:b9:0a:90:6a:ef:02:
57:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AB:D0:03:7A:1E:76:31:F5:E0:CD:55:78:A0:8F:56:23:39:71:01:6C
X509v3 Authority Key Identifier:
keyid:3B:D9:FB:57:F4:B0:F2:53:F9:AF:85:83:03:E6:B4:6A:52:9C:19:4E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/O9n7V_Sw8lP5r4WDA-a0alKcGU4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ee/204cdf-f6e7-4874-9802-650dd138e6a2/1/O9n7V_Sw8lP5r4WDA-a0alKcGU4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ee/204cdf-f6e7-4874-9802-650dd138e6a2/1/O9n7V_Sw8lP5r4WDA-a0alKcGU4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
46:1d:bc:65:53:b0:e6:86:25:00:70:2a:79:44:13:0b:32:7f:
32:4b:4f:ca:81:f1:5f:20:4e:07:05:2b:b1:3c:86:89:3a:f3:
6e:e6:34:55:ed:b1:16:e6:bc:e2:ac:1d:f7:f3:b7:0c:0d:b9:
2a:85:24:af:01:82:22:ee:a5:76:9e:72:7c:fb:44:41:41:39:
40:e9:7b:05:ff:30:4d:3d:99:35:69:cb:7b:18:2a:2b:2b:d4:
a6:90:c8:60:30:f2:fd:e9:c0:d6:df:1f:29:ff:85:21:9e:be:
ca:10:fe:81:98:dd:60:46:b1:5f:42:d1:22:e8:60:27:28:f9:
3a:b8:ca:98:bb:11:d3:7d:57:5a:82:75:20:12:ae:f3:ad:8e:
d4:9a:30:70:7b:50:d5:d7:92:38:90:7e:8d:15:41:f3:d0:f3:
5d:e8:51:ce:26:0e:c1:99:d5:f8:c7:9b:64:e0:b0:4e:7e:42:
be:91:dd:f5:88:46:9c:19:dd:4a:6a:43:75:60:07:65:25:07:
bb:df:dd:a4:4a:70:04:a1:46:d2:da:17:64:f4:3b:2a:80:10:
3d:ac:db:d8:81:f0:40:ab:52:a1:e9:94:70:29:fa:d8:8b:5a:
b9:10:3c:46:db:a5:b3:79:36:f9:95:98:39:fe:71:7f:24:92:
2b:5b:a9:8a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 13 02:54:42 2025 by rpki-client