
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6f/d96189-eee1-4e9f-9d60-95e8d8293098/1/moBTvNLE2KeioyXit0ZBZqXkjd0.mft
File: moBTvNLE2KeioyXit0ZBZqXkjd0.mft (raw, json)
Hash identifier: TREJ1C7r1wrajN25PDHFmC1putHSFUxDQJMPjwpY7Ik=
Subject key identifier: B0:A8:3E:9B:AD:A5:BA:19:29:04:41:F3:5D:C8:E3:C3:F4:10:76:A7
Authority key identifier: 9A:80:53:BC:D2:C4:D8:A7:A2:A3:25:E2:B7:46:41:66:A5:E4:8D:DD
Certificate issuer: /CN=9a8053bcd2c4d8a7a2a325e2b7464166a5e48ddd
Certificate serial: 0196550065D1268D74C5E5CA4B842835D818
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/moBTvNLE2KeioyXit0ZBZqXkjd0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6f/d96189-eee1-4e9f-9d60-95e8d8293098/1/moBTvNLE2KeioyXit0ZBZqXkjd0.mft
Manifest number: 0F89
Signing time: Sun 20 Apr 2025 21:00:11 +0000
Manifest this update: Sun 20 Apr 2025 21:00:11 +0000
Manifest next update: Mon 21 Apr 2025 21:00:11 +0000
Files and hashes: 1: cxA-RyOMLkq935v_LceKQwYPwHs.roa (hash: HnGDMBYysRSj3AGQ0kR7dSJMblTeuNonvUsGSEcjwQ4=)
2: moBTvNLE2KeioyXit0ZBZqXkjd0.crl (hash: jTGpRnTP6YNF1w1PYaE9wZpg6wuS+6SrHM3nJ8qs9c0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6f/d96189-eee1-4e9f-9d60-95e8d8293098/1/moBTvNLE2KeioyXit0ZBZqXkjd0.crl
rsync://rpki.ripe.net/repository/DEFAULT/6f/d96189-eee1-4e9f-9d60-95e8d8293098/1/moBTvNLE2KeioyXit0ZBZqXkjd0.mft
rsync://rpki.ripe.net/repository/DEFAULT/moBTvNLE2KeioyXit0ZBZqXkjd0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 21 Apr 2025 16:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:55:00:65:d1:26:8d:74:c5:e5:ca:4b:84:28:35:d8:18
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9a8053bcd2c4d8a7a2a325e2b7464166a5e48ddd
Validity
Not Before: Apr 20 21:00:11 2025 GMT
Not After : Apr 21 21:00:11 2025 GMT
Subject: CN=b0a83e9bada5ba19290441f35dc8e3c3f41076a7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:96:29:5d:9b:f6:84:b9:92:85:4c:7d:ab:76:
74:c9:5e:9f:d7:6c:97:84:f1:c7:13:a0:c4:15:8c:
45:ff:a0:42:ac:a2:b9:a5:1c:8c:20:c7:95:11:7c:
9d:44:65:df:8a:ea:87:42:ac:be:0a:1b:19:01:23:
c8:4d:2c:b7:2d:04:0f:9b:7c:c0:56:4d:eb:25:4d:
67:fb:f0:35:40:ba:43:76:8d:66:87:8b:2b:be:f5:
8b:c9:41:ab:86:7d:02:72:b2:b5:19:d1:45:ab:fb:
03:e8:8f:b6:52:e4:25:36:97:0f:67:86:ae:16:81:
6d:1b:9c:74:dc:07:63:13:23:06:71:36:ac:2f:4f:
e5:a3:5e:a3:81:8a:77:a1:dd:48:a4:05:be:e4:54:
dc:18:00:98:68:f3:85:e5:dc:ab:fb:b1:ff:23:93:
16:1c:01:7f:01:5e:93:44:b8:2b:1e:24:8a:d0:c9:
8e:12:84:03:9b:94:bd:2d:62:04:c1:7a:e2:e0:5c:
74:ac:bd:cc:d3:b8:62:55:30:7b:3c:80:cb:c1:0f:
22:33:a7:c3:bf:8b:76:29:44:cb:61:51:c9:de:6b:
67:8e:4d:5b:e1:a1:82:52:e4:7f:4e:cc:fe:18:b6:
74:d0:3e:89:62:64:54:cf:b6:1a:df:08:a9:dd:c9:
17:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B0:A8:3E:9B:AD:A5:BA:19:29:04:41:F3:5D:C8:E3:C3:F4:10:76:A7
X509v3 Authority Key Identifier:
keyid:9A:80:53:BC:D2:C4:D8:A7:A2:A3:25:E2:B7:46:41:66:A5:E4:8D:DD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/moBTvNLE2KeioyXit0ZBZqXkjd0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6f/d96189-eee1-4e9f-9d60-95e8d8293098/1/moBTvNLE2KeioyXit0ZBZqXkjd0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6f/d96189-eee1-4e9f-9d60-95e8d8293098/1/moBTvNLE2KeioyXit0ZBZqXkjd0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
52:32:49:b6:66:b0:c7:eb:1b:e7:7a:9d:f1:f8:cb:b0:66:e0:
81:0a:29:0b:20:4f:9c:6d:f7:86:b5:44:28:e2:30:78:d4:e8:
5e:97:a5:d6:9b:f5:d4:7d:f9:00:29:2f:b6:cf:00:ee:68:b0:
fc:50:67:15:74:c7:73:fa:29:d4:ef:f6:97:6d:94:cb:43:5c:
62:8e:35:d6:d5:ac:94:47:dc:fb:79:fe:58:42:91:4f:e0:6d:
31:4d:f4:e9:74:66:17:5e:a1:2b:19:b6:eb:99:56:ab:d1:f1:
99:e8:49:ba:79:82:0d:68:86:77:90:84:82:65:65:69:f8:67:
89:2a:30:57:de:e6:95:56:94:ae:14:38:7b:09:c2:95:c6:a1:
eb:3d:8b:a3:6a:16:97:ae:ec:ec:c4:3b:22:30:3b:f0:c5:54:
03:39:2a:7c:9c:87:ea:d4:b3:eb:7b:d9:e8:9a:3b:3f:e5:55:
49:23:db:86:f1:3c:15:05:50:a9:53:f5:1b:40:2a:1c:49:e2:
ab:b6:e3:23:c0:73:b9:29:24:2c:b5:e4:96:68:c8:4d:60:a2:
71:52:67:e2:0c:3d:ac:ab:ea:39:d9:49:3d:02:a2:5b:da:09:
f2:46:8c:20:e4:07:ee:b6:2e:44:56:ce:a4:61:4a:f4:c2:f5:
a5:15:b0:74
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 21 01:19:11 2025 by rpki-client