Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/22/7fd85d-0152-4ef2-9ebf-1e240b97d2c4/1/0tiRsOMo58hWrUt6B2TYLYVgltY.mft
File: 0tiRsOMo58hWrUt6B2TYLYVgltY.mft (raw, json)
Hash identifier: NaXEAEANs2HT7veNCrRIBrUVKOtmEdpZGwec4PSiPOc=
Subject key identifier: 02:35:E5:23:D8:68:BF:E9:48:81:1A:79:FF:3E:CC:8D:3E:E1:DB:71
Authority key identifier: D2:D8:91:B0:E3:28:E7:C8:56:AD:4B:7A:07:64:D8:2D:85:60:96:D6
Certificate issuer: /CN=d2d891b0e328e7c856ad4b7a0764d82d856096d6
Certificate serial: 0196556EA047C05100B2F8760237C0CB9AD4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0tiRsOMo58hWrUt6B2TYLYVgltY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/22/7fd85d-0152-4ef2-9ebf-1e240b97d2c4/1/0tiRsOMo58hWrUt6B2TYLYVgltY.mft
Manifest number: 0151
Signing time: Sun 20 Apr 2025 23:00:35 +0000
Manifest this update: Sun 20 Apr 2025 23:00:35 +0000
Manifest next update: Mon 21 Apr 2025 23:00:35 +0000
Files and hashes: 1: 0tiRsOMo58hWrUt6B2TYLYVgltY.crl (hash: adSERGCoKwy+rAZyiCGv8CU65rOhoh5bqP/7te3wtBQ=)
2: LL8JcAdqtBuww975zCJ3NT8wbIo.roa (hash: OazqFiciLO+01js5WnVLTxcyLBf+8JShIpJGoJGbyKE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/22/7fd85d-0152-4ef2-9ebf-1e240b97d2c4/1/0tiRsOMo58hWrUt6B2TYLYVgltY.crl
rsync://rpki.ripe.net/repository/DEFAULT/22/7fd85d-0152-4ef2-9ebf-1e240b97d2c4/1/0tiRsOMo58hWrUt6B2TYLYVgltY.mft
rsync://rpki.ripe.net/repository/DEFAULT/0tiRsOMo58hWrUt6B2TYLYVgltY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 21 Apr 2025 16:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:55:6e:a0:47:c0:51:00:b2:f8:76:02:37:c0:cb:9a:d4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d2d891b0e328e7c856ad4b7a0764d82d856096d6
Validity
Not Before: Apr 20 23:00:35 2025 GMT
Not After : Apr 21 23:00:35 2025 GMT
Subject: CN=0235e523d868bfe948811a79ff3ecc8d3ee1db71
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:9e:ae:d1:48:96:f4:24:dc:30:54:2c:fb:84:
a3:96:cf:a8:5c:39:e5:d7:09:b4:24:c4:2a:bb:73:
aa:c2:dd:18:7f:32:ad:f9:95:d7:e5:06:f9:c7:73:
35:92:91:33:7e:d5:a4:3d:ea:bb:08:3c:af:bd:28:
1b:13:28:c3:4d:23:27:87:7a:87:09:c3:ed:3c:77:
07:35:af:2a:55:75:89:41:51:a6:20:18:07:bf:10:
54:66:60:d4:b5:cb:1b:4d:0f:5c:a6:ec:52:9c:38:
da:9f:3d:d7:b8:6a:74:e6:b6:88:fe:6f:b3:90:19:
6d:d5:5f:9d:a8:10:e7:13:06:d2:19:a5:03:21:74:
8b:cd:d7:21:f6:90:3f:8d:16:90:ba:0a:a2:f5:af:
20:8b:1e:93:f8:02:c6:c3:5d:3f:fa:23:13:12:5f:
c0:b8:06:cb:55:9c:79:c4:f9:d4:76:a7:08:ab:23:
b8:87:53:97:e8:23:a9:2a:0a:ad:2a:2b:7e:9d:c3:
99:05:88:5f:6b:92:ed:0c:0c:2a:55:d4:77:1a:47:
39:2c:b6:1f:ce:f3:ad:b8:9c:03:42:09:80:94:bd:
02:40:5e:ca:65:a6:99:fd:1b:cb:1b:f3:35:f0:97:
91:43:00:b0:ac:c6:dd:d4:e1:9b:db:af:90:b2:10:
e8:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
02:35:E5:23:D8:68:BF:E9:48:81:1A:79:FF:3E:CC:8D:3E:E1:DB:71
X509v3 Authority Key Identifier:
keyid:D2:D8:91:B0:E3:28:E7:C8:56:AD:4B:7A:07:64:D8:2D:85:60:96:D6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0tiRsOMo58hWrUt6B2TYLYVgltY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/22/7fd85d-0152-4ef2-9ebf-1e240b97d2c4/1/0tiRsOMo58hWrUt6B2TYLYVgltY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/22/7fd85d-0152-4ef2-9ebf-1e240b97d2c4/1/0tiRsOMo58hWrUt6B2TYLYVgltY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
c6:f9:9c:5b:0f:99:85:00:9e:58:ec:6e:e3:7b:43:6e:1f:8b:
d4:22:9a:f0:0e:7b:cc:2c:c9:6c:e3:2f:b8:d8:42:bc:88:c4:
72:a1:d2:80:a6:ee:c6:0f:df:84:c8:a7:ff:10:95:ef:0a:8c:
08:2b:30:b7:6e:29:24:18:23:c7:9b:d1:bf:b0:49:38:2f:1a:
76:57:b1:3e:e1:85:4b:7b:e9:47:2f:1a:64:d4:51:ec:11:75:
3a:25:54:0c:94:f9:db:41:82:45:10:52:40:ba:ea:f2:5c:bd:
8e:74:3d:b4:46:4b:cc:02:20:66:0e:a8:76:fc:6d:0c:5b:f0:
82:4c:09:65:8b:6f:f8:cc:3f:9e:83:2f:f7:86:a1:af:a9:45:
8f:ed:3a:6c:15:59:2b:5d:a0:25:39:47:34:59:28:95:c0:53:
7d:e1:47:29:46:8e:e1:81:f8:f0:4e:9f:a4:d6:d0:5a:78:f2:
64:01:8b:50:95:1b:71:af:70:99:5c:88:83:f3:0a:00:ee:93:
8c:45:d8:e1:e8:9b:c0:7e:2a:7a:be:20:67:cf:61:f1:0c:6c:
ed:77:3c:34:f3:c4:08:85:57:a6:62:56:fa:58:41:c2:dd:9f:
96:9d:91:47:be:af:92:3d:a6:f7:e6:25:cc:fd:58:f0:94:da:
6f:8d:e2:0a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 21 01:18:54 2025 by rpki-client