Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ca/4eafc9-5473-4602-a149-922a16d117dd/1/0mHPvAfsMGN33LFql6EWDHptgsw.mft
File: 0mHPvAfsMGN33LFql6EWDHptgsw.mft (raw, json)
Hash identifier: iRpCnmCqcZ7oU4OZx87RceJ6GOmBBFhE+yCk6XkbO4g=
Subject key identifier: EF:EE:73:C4:B8:65:E0:5B:86:9F:E9:83:9B:9E:40:C7:36:AC:0B:61
Authority key identifier: D2:61:CF:BC:07:EC:30:63:77:DC:B1:6A:97:A1:16:0C:7A:6D:82:CC
Certificate issuer: /CN=d261cfbc07ec306377dcb16a97a1160c7a6d82cc
Certificate serial: 01965613554B85E09A399C25D0F62E3F2A39
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0mHPvAfsMGN33LFql6EWDHptgsw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ca/4eafc9-5473-4602-a149-922a16d117dd/1/0mHPvAfsMGN33LFql6EWDHptgsw.mft
Manifest number: 013F
Signing time: Mon 21 Apr 2025 02:00:29 +0000
Manifest this update: Mon 21 Apr 2025 02:00:29 +0000
Manifest next update: Tue 22 Apr 2025 02:00:29 +0000
Files and hashes: 1: 0mHPvAfsMGN33LFql6EWDHptgsw.crl (hash: GKj8Dwt3Muym8uz3mwrpVqReHz11iajUfn25MAasRlo=)
2: 1-242YNLxFtHiZKrZjOTCTUI_hX4.roa (hash: Zl/0hNDNG1rQGa8HsGyytZ4/ZO9Krs9kfipHSTu8iZs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ca/4eafc9-5473-4602-a149-922a16d117dd/1/0mHPvAfsMGN33LFql6EWDHptgsw.crl
rsync://rpki.ripe.net/repository/DEFAULT/ca/4eafc9-5473-4602-a149-922a16d117dd/1/0mHPvAfsMGN33LFql6EWDHptgsw.mft
rsync://rpki.ripe.net/repository/DEFAULT/0mHPvAfsMGN33LFql6EWDHptgsw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 22 Apr 2025 01:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:56:13:55:4b:85:e0:9a:39:9c:25:d0:f6:2e:3f:2a:39
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d261cfbc07ec306377dcb16a97a1160c7a6d82cc
Validity
Not Before: Apr 21 02:00:29 2025 GMT
Not After : Apr 22 02:00:29 2025 GMT
Subject: CN=efee73c4b865e05b869fe9839b9e40c736ac0b61
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:e2:4f:65:1b:ff:0a:db:90:a4:8f:04:67:bf:
f0:92:69:e0:1e:2c:b1:d5:2c:5b:44:1e:18:e4:e0:
26:02:d0:c2:c1:48:03:b0:00:fb:00:98:32:2d:7f:
a6:63:7f:d5:d2:18:a1:ef:e9:fe:de:67:1f:77:b3:
2c:24:ad:87:33:85:8e:09:9f:67:93:16:74:ff:52:
90:1e:89:bc:51:cb:04:e0:d3:ee:b3:a1:f8:9d:e0:
44:2e:36:be:0b:52:50:d8:75:5f:59:3e:af:10:ab:
7e:dc:1c:19:3b:68:a6:1f:2b:ff:3d:f0:64:e4:6c:
67:cd:bb:62:d7:be:22:f0:e7:bf:b6:4a:67:24:a8:
a1:1c:78:e2:c7:e8:05:03:96:79:f3:ae:0b:9d:fc:
d1:b2:ad:a1:a6:0c:51:23:88:bc:73:fd:66:1c:5a:
85:db:89:76:58:bf:8f:d8:b5:3d:ad:70:bd:d0:78:
f6:33:a1:6c:0d:d6:0d:78:b9:c8:66:cd:b4:87:3c:
a3:87:8a:7a:f2:55:05:bb:04:be:a6:00:b0:d8:bc:
ae:e8:d4:13:b1:d3:b3:83:2c:af:4e:dd:f0:87:06:
30:41:12:6a:2d:22:c9:90:2d:af:68:f8:a7:58:aa:
e9:bf:e1:67:38:49:9f:17:f9:21:49:83:72:0b:72:
20:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EF:EE:73:C4:B8:65:E0:5B:86:9F:E9:83:9B:9E:40:C7:36:AC:0B:61
X509v3 Authority Key Identifier:
keyid:D2:61:CF:BC:07:EC:30:63:77:DC:B1:6A:97:A1:16:0C:7A:6D:82:CC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0mHPvAfsMGN33LFql6EWDHptgsw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ca/4eafc9-5473-4602-a149-922a16d117dd/1/0mHPvAfsMGN33LFql6EWDHptgsw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ca/4eafc9-5473-4602-a149-922a16d117dd/1/0mHPvAfsMGN33LFql6EWDHptgsw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
62:8f:5a:bf:d4:c1:47:c9:c2:62:66:04:0f:57:a0:fc:b0:29:
45:b5:85:ae:ae:89:db:96:e2:37:38:e3:31:62:71:f7:cf:da:
55:50:1c:ec:81:f5:8e:c9:4e:7c:3b:44:1e:ca:be:9c:c9:4c:
4b:33:a0:b4:19:5a:26:53:e4:2d:2c:42:af:52:80:9f:af:ab:
92:40:7c:b0:c5:47:8a:2b:4e:3a:8b:7f:96:67:42:ad:15:41:
b3:94:53:99:ce:44:7a:fc:be:c1:48:2c:4d:3c:68:7e:29:17:
d3:e2:31:34:fb:c2:59:9e:fc:1d:74:b5:ad:6e:0a:77:11:09:
a1:a3:85:6c:70:55:41:c6:d2:e0:4b:20:9d:7a:05:7d:f8:d1:
8a:44:fb:94:c8:b8:7e:ac:a9:c4:4d:43:76:59:b8:4e:0c:24:
dd:68:5c:f0:cb:84:91:f7:ab:66:a4:fb:0b:64:7b:57:88:ab:
98:b2:9c:1d:53:1d:5c:58:df:61:ce:73:25:d5:80:e1:5d:da:
22:3b:ef:16:99:ba:d7:c8:ca:db:9c:07:64:94:d8:43:e0:91:
ac:28:e3:18:54:42:ca:29:8a:84:3a:50:cc:ba:db:fa:7f:35:
75:22:0b:45:0b:78:58:79:83:c0:db:69:c3:bd:0b:ba:ad:8e:
d5:33:c2:aa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 21 07:53:53 2025 by rpki-client