Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b2/87f973-ea6e-47df-b1b0-df3138b434c8/1/0cgcYtOUIDPQp0BEsMWk8RPkPfM.mft
File: 0cgcYtOUIDPQp0BEsMWk8RPkPfM.mft (raw, json)
Hash identifier: 070wYQfP6L6vMDbw52QLSH2YrsYFgvqnpEiIv67Ezv0=
Subject key identifier: 3A:23:06:34:E9:89:27:86:71:1D:D2:07:D4:A4:92:A5:B8:75:EC:33
Authority key identifier: D1:C8:1C:62:D3:94:20:33:D0:A7:40:44:B0:C5:A4:F1:13:E4:3D:F3
Certificate issuer: /CN=d1c81c62d3942033d0a74044b0c5a4f113e43df3
Certificate serial: 01964F6CE3861AD7210D462E3A5B4A978F7F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0cgcYtOUIDPQp0BEsMWk8RPkPfM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b2/87f973-ea6e-47df-b1b0-df3138b434c8/1/0cgcYtOUIDPQp0BEsMWk8RPkPfM.mft
Manifest number: 08D2
Signing time: Sat 19 Apr 2025 19:00:58 +0000
Manifest this update: Sat 19 Apr 2025 19:00:58 +0000
Manifest next update: Sun 20 Apr 2025 19:00:58 +0000
Files and hashes: 1: 0cgcYtOUIDPQp0BEsMWk8RPkPfM.crl (hash: eH13ivMfGZIyzWdwD3fywioNNvnwnLCLAyRkboOlyIc=)
2: p_TDMyzlQ5zmtlyOFxztvJEw2HQ.roa (hash: fmxxB5F2kwLUu456RKJpssuFKFMbicdIEkOy2yPaKKo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b2/87f973-ea6e-47df-b1b0-df3138b434c8/1/0cgcYtOUIDPQp0BEsMWk8RPkPfM.crl
rsync://rpki.ripe.net/repository/DEFAULT/b2/87f973-ea6e-47df-b1b0-df3138b434c8/1/0cgcYtOUIDPQp0BEsMWk8RPkPfM.mft
rsync://rpki.ripe.net/repository/DEFAULT/0cgcYtOUIDPQp0BEsMWk8RPkPfM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 20 Apr 2025 19:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:4f:6c:e3:86:1a:d7:21:0d:46:2e:3a:5b:4a:97:8f:7f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d1c81c62d3942033d0a74044b0c5a4f113e43df3
Validity
Not Before: Apr 19 19:00:58 2025 GMT
Not After : Apr 20 19:00:58 2025 GMT
Subject: CN=3a230634e9892786711dd207d4a492a5b875ec33
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:92:8d:36:7e:f5:7e:d5:1e:fb:77:d1:36:7b:4b:
c8:46:54:9c:f2:82:83:09:06:70:02:d2:81:9a:de:
1d:f3:1f:a9:cd:9f:64:bc:37:57:66:96:7b:96:5d:
4b:5f:36:35:00:c2:d8:38:aa:97:3e:a7:0f:66:ca:
bf:15:2e:14:b5:ad:b7:5a:bd:d3:43:f8:73:b1:d8:
63:34:46:95:07:5f:73:77:23:74:6d:45:ad:55:e9:
48:f0:2e:30:af:c1:4b:91:29:78:ef:a0:32:74:51:
14:2e:45:6d:b0:13:66:72:c7:d4:83:a6:39:0f:0d:
9d:a9:74:20:09:6e:99:aa:61:d7:cc:7b:a5:2e:64:
b6:df:75:74:60:d0:c6:55:38:4e:3c:72:e8:39:01:
e3:5e:60:8d:68:c2:9c:fd:2e:37:85:c9:68:60:b5:
35:3f:6d:19:d4:c9:1e:fc:df:4e:f1:d5:c5:76:24:
e3:9b:1b:95:65:92:1d:d8:ec:5c:c7:c3:2c:fa:6b:
20:92:46:70:1b:bc:49:c7:9e:8f:90:23:01:6a:a6:
f2:99:01:c9:9d:e3:4d:4d:27:aa:61:43:06:30:ae:
34:7e:87:66:e2:1a:c7:21:3f:59:de:6e:ca:f8:b9:
de:7b:fc:99:ea:65:fa:44:ed:94:a5:90:e7:f2:95:
34:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3A:23:06:34:E9:89:27:86:71:1D:D2:07:D4:A4:92:A5:B8:75:EC:33
X509v3 Authority Key Identifier:
keyid:D1:C8:1C:62:D3:94:20:33:D0:A7:40:44:B0:C5:A4:F1:13:E4:3D:F3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0cgcYtOUIDPQp0BEsMWk8RPkPfM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/87f973-ea6e-47df-b1b0-df3138b434c8/1/0cgcYtOUIDPQp0BEsMWk8RPkPfM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/87f973-ea6e-47df-b1b0-df3138b434c8/1/0cgcYtOUIDPQp0BEsMWk8RPkPfM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1c:95:3e:b7:40:ce:d5:02:32:84:f4:07:61:4a:78:0a:2b:a4:
32:d2:9b:f5:cb:73:d4:c3:91:ab:7c:a7:3d:b3:3e:53:9f:ad:
76:85:95:27:18:cb:7d:82:20:46:69:12:27:72:21:6f:8d:e7:
a0:d5:ac:8b:78:ba:90:38:68:1f:e2:b9:6f:a3:14:b7:51:c9:
94:d5:56:a7:cd:94:e8:44:30:af:7f:47:30:a7:a0:13:81:26:
db:a2:ab:b2:f4:ee:95:5c:3d:c8:64:73:17:c1:e5:ab:d3:c1:
37:c6:20:ca:45:d2:a8:16:de:14:45:64:3a:11:e0:3e:8b:43:
1c:bc:e2:4a:73:bf:1e:a6:74:38:f9:3a:c1:9c:78:d3:6a:4f:
a5:e9:b0:1a:44:c9:cf:f9:b5:07:81:d3:5c:e1:b7:5c:a9:f0:
58:50:dd:33:c3:5f:6c:9b:cb:29:26:08:97:ec:6c:64:f4:b1:
68:59:b6:07:7e:81:19:43:e6:e1:fb:2f:b0:2a:d8:c0:ee:0e:
52:66:81:35:b8:54:47:bb:85:9f:03:b6:9d:1c:b6:78:38:b7:
4b:c2:09:2f:9a:bf:ae:b7:9b:92:77:a6:66:62:4d:3d:dc:23:
b3:15:88:d0:82:eb:74:8d:a7:fc:47:73:bd:eb:cd:e1:8f:1d:
9a:11:f5:d1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 20 04:46:38 2025 by rpki-client