Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c9/1abe8a-45a2-4156-98d7-6806e3d4ce4f/1/C0z6vkfpKF9l8fLWhrqvFbi0F3M.mft
File: C0z6vkfpKF9l8fLWhrqvFbi0F3M.mft (raw, json)
Hash identifier: sORa2ha3NatCbyW7ew37dFZNwKFb85uye0k+LFPjOE8=
Subject key identifier: 13:4B:4A:44:4A:35:F3:6C:5A:18:87:98:CF:EA:16:2C:2A:EF:76:D8
Authority key identifier: 0B:4C:FA:BE:47:E9:28:5F:65:F1:F2:D6:86:BA:AF:15:B8:B4:17:73
Certificate issuer: /CN=0b4cfabe47e9285f65f1f2d686baaf15b8b41773
Certificate serial: 01960FB275998427DBEDD1C4E491AE32FFAF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/C0z6vkfpKF9l8fLWhrqvFbi0F3M.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c9/1abe8a-45a2-4156-98d7-6806e3d4ce4f/1/C0z6vkfpKF9l8fLWhrqvFbi0F3M.mft
Manifest number: 14D8
Signing time: Mon 07 Apr 2025 10:01:15 +0000
Manifest this update: Mon 07 Apr 2025 10:01:15 +0000
Manifest next update: Tue 08 Apr 2025 10:01:15 +0000
Files and hashes: 1: C0z6vkfpKF9l8fLWhrqvFbi0F3M.crl (hash: +SJa0wfreZLz36xuKPFKcYtdsm+ZfY6OXuwd3z+vHzc=)
2: XITchRD6fktx1wcD-akQf-lrx7Y.roa (hash: n2NJUWPmQKH808gxYEyCrRDNlUi5MnimQGzfm9J+OVg=)
3: gZLT5wUedCmW-PX2sDiQAVKNuT4.roa (hash: Bsg9vymR2URZ/xLntFSerTzkFFeEBNsWgx7gYqyDMPI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c9/1abe8a-45a2-4156-98d7-6806e3d4ce4f/1/C0z6vkfpKF9l8fLWhrqvFbi0F3M.crl
rsync://rpki.ripe.net/repository/DEFAULT/c9/1abe8a-45a2-4156-98d7-6806e3d4ce4f/1/C0z6vkfpKF9l8fLWhrqvFbi0F3M.mft
rsync://rpki.ripe.net/repository/DEFAULT/C0z6vkfpKF9l8fLWhrqvFbi0F3M.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 08 Apr 2025 10:01:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:0f:b2:75:99:84:27:db:ed:d1:c4:e4:91:ae:32:ff:af
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0b4cfabe47e9285f65f1f2d686baaf15b8b41773
Validity
Not Before: Apr 7 10:01:15 2025 GMT
Not After : Apr 8 10:01:15 2025 GMT
Subject: CN=134b4a444a35f36c5a188798cfea162c2aef76d8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:34:bb:1d:08:e2:f5:19:65:f6:20:4b:5c:86:
02:fe:6c:2f:9f:17:07:81:ae:2b:d3:e2:89:93:b7:
0a:8b:bc:4c:4c:4b:be:ed:de:8f:2d:6d:73:21:b2:
2c:a3:d4:18:06:f5:00:be:53:b0:0d:c2:df:e7:d8:
07:bb:f4:26:5b:e3:7a:05:e4:1e:6f:de:1e:f5:79:
b6:c7:c2:a8:3b:c2:58:3e:f5:0f:58:6a:34:dd:f9:
fd:8a:1f:0e:ec:a8:69:1c:a6:23:55:d1:9e:93:c1:
22:76:bc:39:6d:a6:42:e8:ce:3b:93:36:f9:ca:5b:
2d:af:2d:27:eb:55:4c:5d:50:55:bd:1e:80:c2:01:
df:90:b2:fe:52:09:e3:cb:06:78:06:8d:ce:62:e4:
46:94:10:0c:81:d2:98:b4:bb:a8:4c:58:d3:c9:eb:
a2:25:c0:61:76:72:55:05:fb:14:65:cc:3d:6c:f2:
e5:89:59:53:f4:74:39:94:d1:0a:db:57:25:59:71:
7a:92:18:60:8b:c3:7b:98:d7:46:4b:84:da:6b:a2:
70:83:a2:64:54:f1:97:da:c7:30:99:c8:ea:6e:bd:
17:f3:c3:87:ff:2b:92:c2:b6:2e:72:9e:26:8c:f8:
d6:1b:f8:ba:4e:d4:a1:39:69:d5:d3:d9:ed:4b:77:
96:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
13:4B:4A:44:4A:35:F3:6C:5A:18:87:98:CF:EA:16:2C:2A:EF:76:D8
X509v3 Authority Key Identifier:
keyid:0B:4C:FA:BE:47:E9:28:5F:65:F1:F2:D6:86:BA:AF:15:B8:B4:17:73
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/C0z6vkfpKF9l8fLWhrqvFbi0F3M.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c9/1abe8a-45a2-4156-98d7-6806e3d4ce4f/1/C0z6vkfpKF9l8fLWhrqvFbi0F3M.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c9/1abe8a-45a2-4156-98d7-6806e3d4ce4f/1/C0z6vkfpKF9l8fLWhrqvFbi0F3M.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
07:76:55:55:0d:7d:7b:bc:db:75:7b:b9:3e:2b:df:d0:c1:7d:
20:c6:cf:0f:cb:bd:76:87:37:2c:09:17:ef:e8:fa:a6:7f:b1:
6a:44:f4:7b:4d:4d:2d:fc:d9:fb:4d:76:bc:9d:78:09:42:51:
8c:96:c8:57:64:4f:49:2c:db:72:81:f6:cb:59:d9:2d:14:8a:
b0:ea:56:0f:83:5c:5a:90:04:d9:ab:9a:d5:8d:0a:f6:95:4e:
f6:c4:78:ed:61:6e:10:43:47:a2:53:69:ee:f9:41:aa:a1:ca:
b1:79:6c:2d:57:77:93:6f:31:db:64:cb:33:2d:51:76:06:fe:
a7:71:d9:bb:22:70:bd:bd:09:05:86:a6:50:dc:09:dc:3d:06:
76:76:06:ab:8b:6e:5c:3e:9d:63:51:85:45:61:4c:ec:d2:88:
ec:6e:36:c9:c9:79:43:ee:31:5e:03:10:53:ec:c9:25:2f:ef:
6d:db:73:fa:2c:6c:57:9c:b9:c9:04:99:2a:46:c7:76:73:16:
9c:53:fd:0b:04:00:a0:48:40:8e:bf:d7:a2:ff:b2:d6:a7:c0:
80:03:1d:da:03:36:7e:e4:04:f5:7f:68:83:8d:3e:92:64:60:
49:f8:90:20:02:82:ad:49:91:1d:d7:f7:35:d8:78:1b:c4:e8:
72:fa:d5:f1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 18:41:36 2025 by rpki-client