Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f9/391e54-c21a-405a-88aa-6079789100ca/1/o6qN0Rh2au07Ce1p8uR9wdLBYVk.mft
File: o6qN0Rh2au07Ce1p8uR9wdLBYVk.mft (raw, json)
Hash identifier: ldW81QqqfNv4aAb8cgThzh2FW/0T5pRZIf969RmGDU0=
Subject key identifier: 39:0B:EF:5B:47:63:15:33:3E:AA:EA:65:FD:2A:2E:17:B1:BE:AF:A6
Authority key identifier: A3:AA:8D:D1:18:76:6A:ED:3B:09:ED:69:F2:E4:7D:C1:D2:C1:61:59
Certificate issuer: /CN=a3aa8dd118766aed3b09ed69f2e47dc1d2c16159
Certificate serial: 01965B70946F9CB29A390CEEB05014BD62EF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/o6qN0Rh2au07Ce1p8uR9wdLBYVk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f9/391e54-c21a-405a-88aa-6079789100ca/1/o6qN0Rh2au07Ce1p8uR9wdLBYVk.mft
Manifest number: 1501
Signing time: Tue 22 Apr 2025 03:00:26 +0000
Manifest this update: Tue 22 Apr 2025 03:00:26 +0000
Manifest next update: Wed 23 Apr 2025 03:00:26 +0000
Files and hashes: 1: HwLcn2tbXfaewoRLUqvEJHtXkUs.roa (hash: W1uC8oFLMGagyUd1+ow2TTRqqrP/F081zqAOESqRLNw=)
2: Mx-fCqDASlNjjbccZ-B5nKyFs1w.roa (hash: 1mo/7uKD2fUUwhxoh/B2HIiYyRaaQnMnmEkbBF+A3yk=)
3: o6qN0Rh2au07Ce1p8uR9wdLBYVk.crl (hash: rv6nEpoFobVvZ65wj3nz1coiSGqEUVo60w/RTz8Z09Q=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f9/391e54-c21a-405a-88aa-6079789100ca/1/o6qN0Rh2au07Ce1p8uR9wdLBYVk.crl
rsync://rpki.ripe.net/repository/DEFAULT/f9/391e54-c21a-405a-88aa-6079789100ca/1/o6qN0Rh2au07Ce1p8uR9wdLBYVk.mft
rsync://rpki.ripe.net/repository/DEFAULT/o6qN0Rh2au07Ce1p8uR9wdLBYVk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 23 Apr 2025 03:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:5b:70:94:6f:9c:b2:9a:39:0c:ee:b0:50:14:bd:62:ef
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a3aa8dd118766aed3b09ed69f2e47dc1d2c16159
Validity
Not Before: Apr 22 03:00:26 2025 GMT
Not After : Apr 23 03:00:26 2025 GMT
Subject: CN=390bef5b476315333eaaea65fd2a2e17b1beafa6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:f2:c5:ef:f5:c0:d2:ae:cd:f1:65:c0:f7:75:
3f:6f:d5:83:31:d5:3c:0f:91:bf:30:38:fd:b5:b4:
5d:63:14:f6:5e:62:90:00:64:18:12:b3:7d:ab:07:
72:41:e3:c1:88:57:9c:1b:94:62:90:73:df:bf:9b:
b1:2c:39:fd:b4:b0:b3:a9:a5:16:16:f3:c8:13:63:
e2:e9:ab:54:9d:c9:ed:44:08:54:7b:39:7c:35:b2:
12:33:71:a0:af:62:04:63:e4:67:4d:1a:9b:f2:e6:
f1:ae:fb:7f:03:1d:9b:7a:ab:01:09:83:72:9d:b7:
35:5a:ad:9e:90:60:da:b8:8b:1c:90:a9:d3:1f:52:
df:7f:7c:59:38:95:cb:cf:f7:72:49:8c:6a:d1:e2:
dc:81:3d:00:1d:d7:0f:52:b2:6f:13:c5:46:31:4c:
06:69:98:32:58:58:44:6d:03:73:6e:ca:bc:a5:74:
df:15:fe:88:c6:51:08:8d:18:3b:7b:19:dc:e9:dc:
53:01:fb:17:25:02:dc:ef:53:db:c6:43:23:b4:78:
a0:0f:47:6e:8e:17:b7:94:1e:32:40:36:80:0f:45:
2e:3a:55:8c:72:77:5a:eb:a5:26:5f:4b:7b:6f:85:
b1:6c:c2:f3:c8:17:12:d5:99:d6:cc:f8:29:85:b5:
77:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
39:0B:EF:5B:47:63:15:33:3E:AA:EA:65:FD:2A:2E:17:B1:BE:AF:A6
X509v3 Authority Key Identifier:
keyid:A3:AA:8D:D1:18:76:6A:ED:3B:09:ED:69:F2:E4:7D:C1:D2:C1:61:59
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/o6qN0Rh2au07Ce1p8uR9wdLBYVk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f9/391e54-c21a-405a-88aa-6079789100ca/1/o6qN0Rh2au07Ce1p8uR9wdLBYVk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f9/391e54-c21a-405a-88aa-6079789100ca/1/o6qN0Rh2au07Ce1p8uR9wdLBYVk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
53:a8:e3:6e:ac:37:e2:c0:d2:d5:bf:de:eb:2f:96:1e:19:bb:
7a:d4:3c:b3:59:fa:a5:9b:2d:b8:1e:b2:76:67:3b:12:93:67:
cc:0f:39:cf:4f:96:c2:48:51:c5:29:a6:f6:15:28:99:f8:a1:
11:35:2e:f3:4e:10:ff:73:3d:64:71:b9:fd:d5:48:b8:54:2b:
bb:f6:43:65:38:50:7a:83:a2:c1:4b:4c:48:d5:bf:bc:12:f9:
5a:34:ac:b0:c4:8a:05:5e:e5:04:72:fc:0e:f0:92:f3:d7:c2:
00:99:dc:8d:53:fb:f9:c4:b9:f4:f1:d3:8a:69:41:36:2a:9c:
be:7f:60:2b:ab:c9:0e:e9:24:fc:a3:92:97:0a:f4:1c:6f:d4:
80:9c:ce:51:45:e0:54:87:05:e6:e2:d0:08:f1:ad:bc:2d:96:
9c:87:be:2d:cd:a5:9e:f4:60:41:93:7e:d5:40:b1:c6:40:27:
6d:97:6c:2d:a4:45:08:01:bf:6b:fb:7e:ad:8f:c2:c7:5f:49:
c8:47:c6:06:12:37:7b:75:d0:89:5a:4a:db:75:9b:73:23:40:
70:36:69:4e:c0:cb:8c:9b:18:98:ec:26:0d:31:f5:e9:a4:fe:
3a:a6:d9:ce:6b:87:3d:be:69:ca:0f:ac:ff:aa:e7:51:49:e1:
58:13:99:66
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 22 12:38:58 2025 by rpki-client