Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/36/de875a-0576-4a15-be23-aea054cf43bb/1/0kgYWVbkQ7VbBiIA-WRTe8ELwTA.mft
File: 0kgYWVbkQ7VbBiIA-WRTe8ELwTA.mft (raw, json)
Hash identifier: CXCQBcAiEW2gbMb/zQZJ+AcE2cOAqIVgOCl7zhNpMFo=
Subject key identifier: A8:88:C4:06:88:15:53:98:03:AE:AE:67:36:C3:70:8C:8F:5B:41:35
Authority key identifier: D2:48:18:59:56:E4:43:B5:5B:06:22:00:F9:64:53:7B:C1:0B:C1:30
Certificate issuer: /CN=d248185956e443b55b062200f964537bc10bc130
Certificate serial: 0196556E9C3C497355D4E0F59FBE759EC034
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0kgYWVbkQ7VbBiIA-WRTe8ELwTA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/36/de875a-0576-4a15-be23-aea054cf43bb/1/0kgYWVbkQ7VbBiIA-WRTe8ELwTA.mft
Manifest number: 016D
Signing time: Sun 20 Apr 2025 23:00:34 +0000
Manifest this update: Sun 20 Apr 2025 23:00:34 +0000
Manifest next update: Mon 21 Apr 2025 23:00:34 +0000
Files and hashes: 1: 0kgYWVbkQ7VbBiIA-WRTe8ELwTA.crl (hash: MwFXBEegh/p/OLwm8/VmsE/BoNPoAB6FpVmoL8ZuBd0=)
2: _O0LKSVD2FWQH20B8h-W2BSyf7E.roa (hash: /osVaD1xwsZSvzrjM1Npx7gTyOHOWobbSsuEq9U9lZY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/36/de875a-0576-4a15-be23-aea054cf43bb/1/0kgYWVbkQ7VbBiIA-WRTe8ELwTA.crl
rsync://rpki.ripe.net/repository/DEFAULT/36/de875a-0576-4a15-be23-aea054cf43bb/1/0kgYWVbkQ7VbBiIA-WRTe8ELwTA.mft
rsync://rpki.ripe.net/repository/DEFAULT/0kgYWVbkQ7VbBiIA-WRTe8ELwTA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 21 Apr 2025 16:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:55:6e:9c:3c:49:73:55:d4:e0:f5:9f:be:75:9e:c0:34
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d248185956e443b55b062200f964537bc10bc130
Validity
Not Before: Apr 20 23:00:34 2025 GMT
Not After : Apr 21 23:00:34 2025 GMT
Subject: CN=a888c4068815539803aeae6736c3708c8f5b4135
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8e:2f:ca:ca:e2:0a:dc:c0:63:e7:14:09:11:cf:
03:56:23:3c:15:0b:90:c2:cf:a7:0f:14:b5:27:5c:
a6:06:99:5f:83:38:9b:f5:36:f8:97:e4:05:0e:8f:
21:e8:2d:6e:d3:54:e9:28:10:1e:97:0b:81:54:45:
26:8f:26:5b:ee:05:2d:cb:b0:fa:78:81:b5:28:4c:
4c:e1:58:f9:42:70:86:df:fd:53:e0:39:cb:69:86:
e7:23:d2:79:93:48:1d:68:27:b0:5e:3b:78:2f:97:
e1:3e:f7:26:25:a1:2d:3d:e4:22:75:a5:bb:c6:2f:
c9:80:66:c7:89:36:d0:c6:8c:f9:89:6e:9b:39:14:
df:dd:5f:33:d7:0b:3e:b3:82:09:22:2c:a2:fa:88:
04:84:18:8d:4e:8e:70:f5:fc:54:a8:5c:bb:12:5b:
c0:6d:e3:d2:a3:a8:4d:3c:4f:b2:cb:b2:f3:3b:fe:
7d:09:da:9c:24:d3:78:c7:7e:a8:4a:68:48:89:fc:
e8:92:b5:f1:80:1a:d5:78:ba:87:6d:4b:26:94:0e:
2e:b3:13:84:dc:45:75:71:8d:ad:ca:3f:b3:14:e0:
20:fc:38:8e:ef:6e:74:06:5a:78:16:ca:90:6f:be:
8c:7d:82:48:a6:4f:d5:f4:e3:e0:23:b9:31:fa:e1:
4a:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A8:88:C4:06:88:15:53:98:03:AE:AE:67:36:C3:70:8C:8F:5B:41:35
X509v3 Authority Key Identifier:
keyid:D2:48:18:59:56:E4:43:B5:5B:06:22:00:F9:64:53:7B:C1:0B:C1:30
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0kgYWVbkQ7VbBiIA-WRTe8ELwTA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/36/de875a-0576-4a15-be23-aea054cf43bb/1/0kgYWVbkQ7VbBiIA-WRTe8ELwTA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/36/de875a-0576-4a15-be23-aea054cf43bb/1/0kgYWVbkQ7VbBiIA-WRTe8ELwTA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7c:05:73:88:49:76:f3:a1:4b:90:62:95:92:f3:b8:49:19:12:
55:22:7c:18:64:02:c2:31:ff:ed:ca:de:ee:6e:6f:90:3a:a2:
23:74:cf:f2:8c:47:3a:2c:08:de:6f:d7:b4:d2:a8:44:d9:d9:
e0:73:1f:42:bc:67:b0:df:f6:91:d3:f5:b9:5f:fd:ca:53:8f:
85:76:c1:5e:fd:01:b6:b6:31:31:e9:bf:a0:24:0d:b6:b3:49:
34:b0:c9:4f:25:7f:6a:42:cc:64:6d:ac:16:af:6e:8e:75:60:
21:be:6a:e0:0b:b1:4f:88:0c:42:c6:8b:33:54:d6:de:e0:ab:
37:01:8e:5b:3c:e6:30:65:ac:e0:c8:bf:e7:8c:2a:13:db:a4:
f8:7f:3d:a6:01:68:85:f9:8b:6b:0e:eb:e6:59:21:9b:42:a2:
17:96:2c:00:64:94:32:3d:9e:35:22:9a:e0:9d:cd:fa:d5:c5:
d8:15:4e:93:e7:0f:ad:4e:d8:5d:0b:09:56:39:9f:d1:11:7f:
b1:50:81:62:6a:ee:a0:06:62:8f:77:d2:60:69:16:e8:8f:bc:
88:aa:15:04:6b:7c:4e:96:66:dc:70:74:a5:37:20:9c:c0:b6:
73:82:75:af:bc:5e:f5:3f:6d:94:32:be:0c:71:ee:18:44:7d:
ca:4e:d9:d8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 21 01:46:51 2025 by rpki-client