Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/be/5ea569-f174-45c5-9db7-2af095ffc9bb/1/0fmHr1rbIwTUJvVA3l1lBUUjHlA.mft
File: 0fmHr1rbIwTUJvVA3l1lBUUjHlA.mft (raw, json)
Hash identifier: ZelZuE6gxGDRJ31uElqFRDVwd/PcPa/EqdSegkmqjpM=
Subject key identifier: D6:4F:57:D0:10:1D:6A:B8:C8:92:61:71:FB:98:2F:B6:5C:4F:CC:46
Authority key identifier: D1:F9:87:AF:5A:DB:23:04:D4:26:F5:40:DE:5D:65:05:45:23:1E:50
Certificate issuer: /CN=d1f987af5adb2304d426f540de5d650545231e50
Certificate serial: 0196598224216B1B9A487C585AA309D4753D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0fmHr1rbIwTUJvVA3l1lBUUjHlA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/be/5ea569-f174-45c5-9db7-2af095ffc9bb/1/0fmHr1rbIwTUJvVA3l1lBUUjHlA.mft
Manifest number: 09E8
Signing time: Mon 21 Apr 2025 18:00:23 +0000
Manifest this update: Mon 21 Apr 2025 18:00:23 +0000
Manifest next update: Tue 22 Apr 2025 18:00:23 +0000
Files and hashes: 1: 0fmHr1rbIwTUJvVA3l1lBUUjHlA.crl (hash: 9c1LS5errxhN4K+KRwMu3YWmMRi6jqJDW45isbXFeGg=)
2: 5LrP6fsEeipB-xjaCGTQi9KsiHU.roa (hash: IUrzC+/E4lKM4F7rtTCN//MYlbyHBk9E/FLwLHHLeZU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/be/5ea569-f174-45c5-9db7-2af095ffc9bb/1/0fmHr1rbIwTUJvVA3l1lBUUjHlA.crl
rsync://rpki.ripe.net/repository/DEFAULT/be/5ea569-f174-45c5-9db7-2af095ffc9bb/1/0fmHr1rbIwTUJvVA3l1lBUUjHlA.mft
rsync://rpki.ripe.net/repository/DEFAULT/0fmHr1rbIwTUJvVA3l1lBUUjHlA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 22 Apr 2025 18:00:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:59:82:24:21:6b:1b:9a:48:7c:58:5a:a3:09:d4:75:3d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d1f987af5adb2304d426f540de5d650545231e50
Validity
Not Before: Apr 21 18:00:23 2025 GMT
Not After : Apr 22 18:00:23 2025 GMT
Subject: CN=d64f57d0101d6ab8c8926171fb982fb65c4fcc46
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:ab:e8:34:a7:c8:c0:32:fe:bd:09:90:1d:7d:
95:67:a6:7a:34:b4:ab:5c:9a:ee:e0:b4:f2:d7:90:
01:5d:f4:a4:fc:6c:33:c5:f6:f9:47:09:28:6e:f2:
d3:49:04:bd:08:03:39:ff:2d:60:61:1f:2c:84:d2:
9c:78:3b:44:4e:c4:1f:18:d3:e2:40:68:1c:be:04:
26:ba:f4:44:54:76:1f:bf:59:47:c1:e2:2b:25:50:
63:d8:43:f8:81:93:25:ee:8a:34:69:6d:b6:44:af:
6e:be:0e:b9:72:3a:e3:bb:3d:bb:bc:71:5a:4e:6a:
be:9c:77:68:ff:49:0f:e5:2a:a6:4a:54:99:d5:3b:
b0:25:c5:e1:ed:1c:55:4c:ec:61:b7:77:dd:a3:5d:
72:2e:d9:d9:c3:bc:2b:17:a3:fa:0e:45:15:9a:31:
8e:e4:56:9a:71:ba:0e:c6:82:3f:10:da:c8:ef:5e:
27:23:5e:6a:f8:0d:af:ed:86:7f:64:93:19:05:ca:
1f:0e:79:10:cf:5d:38:1b:f5:52:03:df:7d:d2:c6:
c5:84:76:ba:b0:ab:14:1f:ce:9b:21:ae:92:dd:e1:
32:5d:55:a9:e1:c6:83:40:a9:30:4a:61:17:2c:e1:
3f:3f:39:38:a7:b0:68:c7:df:1d:cc:ae:33:c1:6c:
25:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D6:4F:57:D0:10:1D:6A:B8:C8:92:61:71:FB:98:2F:B6:5C:4F:CC:46
X509v3 Authority Key Identifier:
keyid:D1:F9:87:AF:5A:DB:23:04:D4:26:F5:40:DE:5D:65:05:45:23:1E:50
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0fmHr1rbIwTUJvVA3l1lBUUjHlA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/be/5ea569-f174-45c5-9db7-2af095ffc9bb/1/0fmHr1rbIwTUJvVA3l1lBUUjHlA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/be/5ea569-f174-45c5-9db7-2af095ffc9bb/1/0fmHr1rbIwTUJvVA3l1lBUUjHlA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
39:01:48:fd:d6:2b:61:f3:0b:cf:a6:e1:17:78:f1:56:3a:67:
e2:5a:73:01:59:07:94:b4:7f:23:5c:05:06:39:b4:57:44:b3:
a5:a7:48:ea:f6:5d:ce:74:f3:5e:c6:f1:e0:ea:d7:23:f4:00:
cc:60:36:53:7b:0a:db:42:b8:47:71:87:49:a0:05:3c:90:ca:
f2:1d:31:5c:4c:97:22:ee:6f:34:2b:a4:fe:48:c2:08:57:c9:
28:28:73:e9:c6:db:39:a6:a7:b0:f7:59:f6:9b:0a:05:11:cd:
3e:4d:d7:da:3b:92:d4:ea:e5:38:85:38:dd:fe:5e:4f:a5:82:
9f:de:22:1f:04:94:ca:9b:2b:59:5e:88:94:e9:d9:06:6b:3e:
4e:ae:fd:c7:1c:88:66:6d:2d:56:9a:b4:ae:98:da:41:3a:2d:
fb:cc:c0:e5:e8:ef:51:0d:69:66:28:77:1a:48:15:f8:e6:10:
ac:c2:3e:47:c3:4b:bb:3a:5b:99:3a:3b:19:78:48:19:bf:d2:
5b:3c:6b:00:2d:7e:3c:19:8c:7f:52:5c:f1:92:74:f5:4e:f8:
89:c6:bd:ee:53:55:33:8a:b6:91:ea:16:b9:7c:8f:65:15:9f:
4b:bb:00:38:43:26:31:4a:22:d4:fc:ac:28:e9:f1:00:be:cc:
c7:93:d8:84
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 21 22:23:04 2025 by rpki-client