Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b0/546dd9-aa48-445e-be60-0907ad34cb9f/1/0z4TEAje9wWkF_DUDRSKNvJaGjk.mft
File: 0z4TEAje9wWkF_DUDRSKNvJaGjk.mft (raw, json)
Hash identifier: CuIkr16zlWf9MmPYzD/95ZdhD57EDCxVtjtCMB21Fto=
Subject key identifier: 37:EA:EF:A2:46:92:A7:CC:2E:5E:A7:EB:BF:92:82:55:C8:95:28:90
Authority key identifier: D3:3E:13:10:08:DE:F7:05:A4:17:F0:D4:0D:14:8A:36:F2:5A:1A:39
Certificate issuer: /CN=d33e131008def705a417f0d40d148a36f25a1a39
Certificate serial: 019653B6EE7A91948502D44F7B372B704713
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0z4TEAje9wWkF_DUDRSKNvJaGjk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b0/546dd9-aa48-445e-be60-0907ad34cb9f/1/0z4TEAje9wWkF_DUDRSKNvJaGjk.mft
Manifest number: 0EF8
Signing time: Sun 20 Apr 2025 15:00:19 +0000
Manifest this update: Sun 20 Apr 2025 15:00:19 +0000
Manifest next update: Mon 21 Apr 2025 15:00:19 +0000
Files and hashes: 1: 0z4TEAje9wWkF_DUDRSKNvJaGjk.crl (hash: U5JtB3X53oW1CZz/t5XVHz+8bcwoZu5GUyLaDxLeNs0=)
2: A2oqQd54ayoxJnfGY2DGuTLyEzs.roa (hash: cZ73AwWXPJWCopyDomwFy40Gv6sNmCFfCzUBeTVXsq0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b0/546dd9-aa48-445e-be60-0907ad34cb9f/1/0z4TEAje9wWkF_DUDRSKNvJaGjk.crl
rsync://rpki.ripe.net/repository/DEFAULT/b0/546dd9-aa48-445e-be60-0907ad34cb9f/1/0z4TEAje9wWkF_DUDRSKNvJaGjk.mft
rsync://rpki.ripe.net/repository/DEFAULT/0z4TEAje9wWkF_DUDRSKNvJaGjk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 21 Apr 2025 15:00:19 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:53:b6:ee:7a:91:94:85:02:d4:4f:7b:37:2b:70:47:13
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d33e131008def705a417f0d40d148a36f25a1a39
Validity
Not Before: Apr 20 15:00:19 2025 GMT
Not After : Apr 21 15:00:19 2025 GMT
Subject: CN=37eaefa24692a7cc2e5ea7ebbf928255c8952890
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:73:20:2a:4c:31:fd:49:09:69:51:2e:4a:6b:
a5:0d:a9:be:c6:2b:d9:2e:91:af:84:ab:41:cd:c3:
08:4f:ff:3d:b4:81:58:ea:08:e7:66:a0:b2:6d:62:
19:35:68:2b:90:04:17:41:0d:da:c7:66:a4:9a:5e:
e4:92:bb:1f:78:48:ae:99:a0:23:ad:ff:be:19:df:
47:65:2d:c4:fd:7f:b6:1f:30:3c:b5:55:fe:fd:72:
87:85:9c:d0:db:f8:23:34:f3:f1:07:e7:21:1e:7b:
af:64:2d:3c:36:d3:cb:19:88:82:80:99:ac:41:6a:
05:b9:0b:c3:10:01:23:73:37:79:26:71:7c:d0:9d:
0b:3a:43:ba:e7:1d:15:e3:c9:23:c0:6b:70:1f:ec:
2a:a1:40:f2:54:f7:2b:0f:92:d5:48:01:a2:82:ac:
1e:07:dc:28:10:1d:8e:8e:1b:c8:34:01:5a:ce:49:
9b:7c:00:7c:9b:49:bd:de:5d:7f:18:0d:57:15:f4:
51:00:ba:60:00:d7:e0:91:57:88:b1:26:47:8f:be:
5b:a8:83:99:3d:ff:d1:32:17:fa:55:5e:f5:64:b1:
69:c8:3c:50:3f:84:cb:17:5e:61:05:73:1e:d2:91:
19:46:74:bc:e8:23:61:26:f4:a8:92:d6:2d:d6:e6:
7f:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
37:EA:EF:A2:46:92:A7:CC:2E:5E:A7:EB:BF:92:82:55:C8:95:28:90
X509v3 Authority Key Identifier:
keyid:D3:3E:13:10:08:DE:F7:05:A4:17:F0:D4:0D:14:8A:36:F2:5A:1A:39
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0z4TEAje9wWkF_DUDRSKNvJaGjk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/546dd9-aa48-445e-be60-0907ad34cb9f/1/0z4TEAje9wWkF_DUDRSKNvJaGjk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/546dd9-aa48-445e-be60-0907ad34cb9f/1/0z4TEAje9wWkF_DUDRSKNvJaGjk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5f:9c:d0:40:5f:36:f6:2d:94:f7:3d:4e:1f:ed:31:ae:b5:6d:
fb:69:2c:8d:89:cb:c4:bc:3f:92:31:41:90:a1:01:2b:33:ce:
e5:33:f7:53:bc:2e:3c:54:64:6f:47:91:01:9d:a0:0b:6b:4b:
32:f7:59:52:ac:fd:60:6e:76:5d:4f:5d:d7:4a:21:44:f1:31:
a3:88:4c:3f:de:bb:4b:a2:75:47:a0:02:df:57:37:97:a2:ed:
ac:d3:ab:16:2c:d6:3a:a0:f9:c0:8e:d7:0a:bf:be:e8:59:3b:
06:5a:32:63:fb:97:ba:cf:88:e0:c8:66:5c:97:e8:46:a1:8f:
c4:0e:e2:2f:b1:fd:ac:bb:c8:2e:54:f6:c3:fb:67:9d:42:aa:
9d:ee:85:10:ce:4f:5a:05:7e:35:86:13:7b:fb:79:59:2d:dc:
78:a7:94:c4:8e:3b:d8:2a:7c:15:27:20:9e:94:0f:43:a8:d0:
9e:74:19:2d:1c:d8:a0:e7:a6:c0:3b:8d:41:36:ec:1c:65:e6:
60:60:58:00:4a:83:f9:14:a0:42:d9:4d:e7:f2:0a:bf:a5:9c:
c7:3c:bd:9c:62:7c:76:9b:f6:7e:f1:17:2f:91:dc:dd:c5:72:
93:0b:17:4e:8d:b6:10:ec:d7:ec:bf:a0:a9:8f:d7:0c:50:af:
44:19:24:a1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 20 20:10:25 2025 by rpki-client