Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f1/ee6fd0-2792-49c4-b2d2-1714223b949e/1/o1MJNoqK0TuwgmRJf8LkMVHm1aY.mft
File: o1MJNoqK0TuwgmRJf8LkMVHm1aY.mft (raw, json)
Hash identifier: H6dcqV7bfCapmNKyCnlQGfPd6DmmRq48V+mg4+GhjRE=
Subject key identifier: 6F:6B:6B:59:05:30:9E:E7:BD:9B:4E:35:7D:4A:39:89:3D:B2:48:3D
Authority key identifier: A3:53:09:36:8A:8A:D1:3B:B0:82:64:49:7F:C2:E4:31:51:E6:D5:A6
Certificate issuer: /CN=a35309368a8ad13bb08264497fc2e43151e6d5a6
Certificate serial: 01965A274C68BC4F6A5A5015CAD4C1C1290C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/o1MJNoqK0TuwgmRJf8LkMVHm1aY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f1/ee6fd0-2792-49c4-b2d2-1714223b949e/1/o1MJNoqK0TuwgmRJf8LkMVHm1aY.mft
Manifest number: 03F1
Signing time: Mon 21 Apr 2025 21:00:46 +0000
Manifest this update: Mon 21 Apr 2025 21:00:46 +0000
Manifest next update: Tue 22 Apr 2025 21:00:46 +0000
Files and hashes: 1: Vsv3YCDw5vfXgq3TQuqdpudyKe4.roa (hash: x3+JtaVQNzIHFJZhtlaWx3hND6UzdPujPEcBiZLbG+Q=)
2: o1MJNoqK0TuwgmRJf8LkMVHm1aY.crl (hash: snn5VL+tDKoeHHjBMwyHltorJCrYnJkHAQOA0GKxWl0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f1/ee6fd0-2792-49c4-b2d2-1714223b949e/1/o1MJNoqK0TuwgmRJf8LkMVHm1aY.crl
rsync://rpki.ripe.net/repository/DEFAULT/f1/ee6fd0-2792-49c4-b2d2-1714223b949e/1/o1MJNoqK0TuwgmRJf8LkMVHm1aY.mft
rsync://rpki.ripe.net/repository/DEFAULT/o1MJNoqK0TuwgmRJf8LkMVHm1aY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 22 Apr 2025 19:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:5a:27:4c:68:bc:4f:6a:5a:50:15:ca:d4:c1:c1:29:0c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a35309368a8ad13bb08264497fc2e43151e6d5a6
Validity
Not Before: Apr 21 21:00:46 2025 GMT
Not After : Apr 22 21:00:46 2025 GMT
Subject: CN=6f6b6b5905309ee7bd9b4e357d4a39893db2483d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:cb:b9:4a:02:5b:4f:c7:c1:45:fe:eb:71:c8:
9b:1c:10:d6:b2:f3:ab:89:5c:b6:c3:0a:d4:1d:d7:
fe:62:ba:77:54:50:4c:37:8d:91:97:da:f6:df:e1:
57:12:4e:6f:fb:ef:6c:cb:9e:7b:49:a0:ac:d1:20:
03:e5:86:66:19:fa:91:22:84:5b:26:48:f5:83:3f:
23:07:f1:3e:c2:72:a8:b7:b9:e3:5f:d7:8d:9e:52:
a9:46:4a:30:5d:2c:e2:8b:c9:55:2a:47:b3:47:21:
8d:d5:0e:08:ac:8d:0f:c3:ee:02:ed:5c:9a:ad:b6:
b4:95:95:91:db:3b:ca:49:2b:87:5a:44:e5:28:3a:
3e:6f:e6:09:79:7a:b8:8b:dd:4d:16:a7:11:3b:a7:
9d:df:70:08:57:e7:54:7a:54:77:80:77:50:83:b4:
a4:c3:31:6c:fa:7d:e4:0f:85:5d:d9:8c:2f:87:82:
1d:53:48:ee:85:f5:fc:37:77:fa:e7:86:c2:cc:66:
72:b2:67:75:fd:07:4e:2e:5a:f4:39:36:78:d6:2b:
3b:ba:e7:79:56:86:99:f6:9d:c0:08:11:cb:2f:a3:
d0:a8:a0:c3:e7:32:36:a2:a2:f2:52:df:ce:15:7d:
0a:f1:90:0c:e7:f3:de:f6:75:d8:3b:a1:78:a6:c2:
f9:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6F:6B:6B:59:05:30:9E:E7:BD:9B:4E:35:7D:4A:39:89:3D:B2:48:3D
X509v3 Authority Key Identifier:
keyid:A3:53:09:36:8A:8A:D1:3B:B0:82:64:49:7F:C2:E4:31:51:E6:D5:A6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/o1MJNoqK0TuwgmRJf8LkMVHm1aY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f1/ee6fd0-2792-49c4-b2d2-1714223b949e/1/o1MJNoqK0TuwgmRJf8LkMVHm1aY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f1/ee6fd0-2792-49c4-b2d2-1714223b949e/1/o1MJNoqK0TuwgmRJf8LkMVHm1aY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a0:b1:9b:ad:a6:a6:83:32:70:51:78:38:c5:31:24:4a:54:d2:
8a:9a:32:0d:c4:55:25:23:21:de:01:16:7e:d6:eb:31:78:44:
03:48:d2:03:d3:34:65:68:56:fe:20:9a:97:bb:09:b5:ee:1c:
e7:8d:57:60:64:5f:b2:79:5e:d9:f0:d4:9d:7d:69:7d:d7:33:
49:35:67:8c:ca:a7:aa:47:d6:db:c9:b2:9f:83:52:e2:db:cb:
cb:8c:4b:f0:b2:75:73:bd:46:66:be:fb:83:5d:13:e6:d9:cf:
f9:0e:22:c5:e6:01:05:d7:85:7b:40:e9:df:96:a5:87:e6:3f:
87:db:f9:3f:88:46:a9:39:e9:e8:99:07:33:c0:ed:fa:a7:65:
58:9a:90:41:e8:8c:a7:89:bc:bf:25:99:81:2b:5a:6d:a5:8f:
b5:ac:3a:1e:fe:97:2e:1c:1f:65:12:72:bd:ed:21:6a:16:ca:
2a:79:6e:c4:ad:20:eb:aa:d5:97:47:0a:75:57:31:b7:01:ef:
b3:c8:f5:22:79:95:30:b3:cf:05:3d:e1:b2:8f:38:ae:42:6e:
37:8d:fe:93:3d:1d:f2:0a:a2:cf:9c:90:16:00:95:87:af:2d:
3f:ca:3d:33:26:06:c5:cf:ba:9b:48:60:b0:e6:9e:9c:d5:c7:
1f:ff:ce:d8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 22 00:54:55 2025 by rpki-client