Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f5/303105-e7c8-4a44-a181-cb40ee048dc0/1/oH3LbbmnXBAX_uZy9zuWF3G3fKE.mft
File: oH3LbbmnXBAX_uZy9zuWF3G3fKE.mft (raw, json)
Hash identifier: q/ZqyddnR0798M6fO2lYvoY/MG6TUJzkS8o/V3kdYd8=
Subject key identifier: 1D:8A:77:7B:73:1F:D6:D7:9B:C1:A8:F1:B1:BA:07:E9:A8:54:65:7B
Authority key identifier: A0:7D:CB:6D:B9:A7:5C:10:17:FE:E6:72:F7:3B:96:17:71:B7:7C:A1
Certificate issuer: /CN=a07dcb6db9a75c1017fee672f73b961771b77ca1
Certificate serial: 01964C6BFE6165B9D79314F0894CA093EDF9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/oH3LbbmnXBAX_uZy9zuWF3G3fKE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f5/303105-e7c8-4a44-a181-cb40ee048dc0/1/oH3LbbmnXBAX_uZy9zuWF3G3fKE.mft
Manifest number: 0BE6
Signing time: Sat 19 Apr 2025 05:01:07 +0000
Manifest this update: Sat 19 Apr 2025 05:01:07 +0000
Manifest next update: Sun 20 Apr 2025 05:01:07 +0000
Files and hashes: 1: oH3LbbmnXBAX_uZy9zuWF3G3fKE.crl (hash: 7j9x1FCIJSvZtVqI2MSM/4dnvp1ET8FLUjkH5nEL2a4=)
2: q9BWcMARtQ3_HrPyS7FBIEXNhsI.roa (hash: D3KwQaIiGET5pyY7n2Q5pJoywyLFE76xEx7j4PCoCfY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f5/303105-e7c8-4a44-a181-cb40ee048dc0/1/oH3LbbmnXBAX_uZy9zuWF3G3fKE.crl
rsync://rpki.ripe.net/repository/DEFAULT/f5/303105-e7c8-4a44-a181-cb40ee048dc0/1/oH3LbbmnXBAX_uZy9zuWF3G3fKE.mft
rsync://rpki.ripe.net/repository/DEFAULT/oH3LbbmnXBAX_uZy9zuWF3G3fKE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 20 Apr 2025 04:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:4c:6b:fe:61:65:b9:d7:93:14:f0:89:4c:a0:93:ed:f9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a07dcb6db9a75c1017fee672f73b961771b77ca1
Validity
Not Before: Apr 19 05:01:07 2025 GMT
Not After : Apr 20 05:01:07 2025 GMT
Subject: CN=1d8a777b731fd6d79bc1a8f1b1ba07e9a854657b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:bd:7d:28:eb:e6:6f:b1:f3:51:da:28:42:a1:
04:41:80:5b:6f:4d:4a:bb:c7:07:1d:f9:38:52:f7:
b2:a2:39:41:f1:0c:82:10:c4:e9:22:55:0d:4b:14:
95:f1:28:a2:ef:89:3b:2f:9b:9a:a5:90:51:f2:62:
36:37:8e:ca:aa:15:0a:4c:fa:b1:07:49:45:17:de:
44:a0:ac:22:1c:df:38:5b:6e:b7:68:62:91:1f:30:
8a:87:3a:4d:bb:37:6c:b6:52:82:7e:53:ee:3e:5c:
0e:42:64:0b:4c:94:2e:dd:d3:f0:82:f6:1e:fa:d2:
b2:67:99:32:76:ca:1f:8d:88:87:98:15:95:1a:95:
f3:1f:41:b8:a5:69:15:33:c6:a5:8e:94:e4:68:5e:
08:7c:f9:0a:be:be:3f:e6:9c:97:ab:79:c4:77:21:
d8:a5:1a:ee:41:8b:93:c5:bb:3d:5c:81:c4:c8:5c:
ca:11:87:aa:6e:81:d2:10:dc:ff:93:5d:e2:00:de:
41:21:69:b9:f3:a1:f6:ef:31:ad:d0:14:38:9d:81:
70:27:d9:d9:1e:16:07:de:41:82:d0:01:89:44:51:
44:b1:20:79:c7:d0:c8:11:66:b0:1c:76:b7:5c:c4:
4b:fd:2f:83:87:6d:a7:c0:ad:98:9b:b4:21:27:9c:
55:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1D:8A:77:7B:73:1F:D6:D7:9B:C1:A8:F1:B1:BA:07:E9:A8:54:65:7B
X509v3 Authority Key Identifier:
keyid:A0:7D:CB:6D:B9:A7:5C:10:17:FE:E6:72:F7:3B:96:17:71:B7:7C:A1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/oH3LbbmnXBAX_uZy9zuWF3G3fKE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/303105-e7c8-4a44-a181-cb40ee048dc0/1/oH3LbbmnXBAX_uZy9zuWF3G3fKE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/303105-e7c8-4a44-a181-cb40ee048dc0/1/oH3LbbmnXBAX_uZy9zuWF3G3fKE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
65:c8:86:4a:5b:33:2f:3d:18:56:f3:0c:80:d0:b5:fc:d2:d0:
f4:63:43:9b:da:ed:9c:de:de:65:c2:bc:8a:2c:94:28:49:16:
f0:71:f2:4d:46:4b:ea:aa:7d:d4:8f:cc:32:e6:50:74:59:86:
2b:6b:1d:a6:87:e2:1e:7f:b5:f2:02:1e:5d:40:f7:da:3e:7d:
67:3a:a7:50:58:b7:16:f3:ac:c4:74:23:24:78:e3:f4:ba:9c:
ca:18:6f:fd:89:1d:af:97:57:95:fc:4f:7d:ac:1f:c3:3b:fd:
16:df:25:c6:b1:24:3b:57:90:91:f6:bd:73:38:5f:43:78:24:
a8:92:99:92:6d:5f:22:98:db:73:1d:92:cd:71:bd:14:94:ae:
aa:08:ce:ed:ac:fa:d7:8a:92:9d:f8:bd:14:f4:1b:54:da:63:
48:76:ae:5b:e0:f9:93:c2:9e:79:95:8f:21:af:31:a6:ee:ef:
dc:36:fb:0a:a5:65:82:22:d8:d0:af:6c:cc:0a:ff:84:b6:09:
32:7f:f9:61:50:64:d4:f5:33:19:c8:43:b7:a1:15:e2:1b:aa:
26:c7:b3:42:a6:1b:0d:13:12:ec:b6:52:68:49:26:ed:58:4b:
52:4b:57:7d:90:cb:34:59:57:67:d1:57:89:a8:7c:28:7a:34:
41:18:a5:52
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 19 12:04:11 2025 by rpki-client