Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d8/e9cbf3-3a5d-4b74-86d3-cb0f2455cbd6/1/0rtm-96q__Q7llCx9svk8p7a9Yw.mft
File: 0rtm-96q__Q7llCx9svk8p7a9Yw.mft (raw, json)
Hash identifier: 6AbNNwblBM18XfvzxE5Z2jab8AnBucBnED1km7qFM/s=
Subject key identifier: 03:3E:2F:16:D0:44:96:8C:A3:A4:05:C8:54:00:1F:8D:55:AE:1F:8A
Authority key identifier: D2:BB:66:FB:DE:AA:FF:F4:3B:96:50:B1:F6:CB:E4:F2:9E:DA:F5:8C
Certificate issuer: /CN=d2bb66fbdeaafff43b9650b1f6cbe4f29edaf58c
Certificate serial: 0196579455303356722414810E8A66A18941
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0rtm-96q__Q7llCx9svk8p7a9Yw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d8/e9cbf3-3a5d-4b74-86d3-cb0f2455cbd6/1/0rtm-96q__Q7llCx9svk8p7a9Yw.mft
Manifest number: 1500
Signing time: Mon 21 Apr 2025 09:01:00 +0000
Manifest this update: Mon 21 Apr 2025 09:01:00 +0000
Manifest next update: Tue 22 Apr 2025 09:01:00 +0000
Files and hashes: 1: 0rtm-96q__Q7llCx9svk8p7a9Yw.crl (hash: IANL730IaX/vkI4tyuHxwacyC0MQQmA55dTDsBinB+c=)
2: irNcQLmJh11TGBELw5uQP7kOVJE.roa (hash: R7pIQc58X7S0CJk6seUtKX1n/5bjuhfl7ShC4vfuTCg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d8/e9cbf3-3a5d-4b74-86d3-cb0f2455cbd6/1/0rtm-96q__Q7llCx9svk8p7a9Yw.crl
rsync://rpki.ripe.net/repository/DEFAULT/d8/e9cbf3-3a5d-4b74-86d3-cb0f2455cbd6/1/0rtm-96q__Q7llCx9svk8p7a9Yw.mft
rsync://rpki.ripe.net/repository/DEFAULT/0rtm-96q__Q7llCx9svk8p7a9Yw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 22 Apr 2025 01:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:57:94:55:30:33:56:72:24:14:81:0e:8a:66:a1:89:41
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d2bb66fbdeaafff43b9650b1f6cbe4f29edaf58c
Validity
Not Before: Apr 21 09:01:00 2025 GMT
Not After : Apr 22 09:01:00 2025 GMT
Subject: CN=033e2f16d044968ca3a405c854001f8d55ae1f8a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e1:a4:99:ae:78:22:9e:16:ad:d5:16:ea:d1:7c:
bd:a8:41:c7:33:da:85:50:4c:32:73:40:ca:3e:df:
84:57:46:c0:07:14:b7:91:96:3a:f3:1b:04:5e:d3:
da:a4:0d:9e:d6:96:f3:4e:ce:11:7d:bd:e4:47:05:
c5:85:93:a0:80:52:a3:d7:25:e7:92:b1:d2:f9:f0:
cb:5b:68:da:32:73:24:41:36:b7:a0:8d:ed:e0:4b:
90:fb:ef:9d:80:bc:11:21:ea:73:d4:0c:33:29:57:
78:70:30:16:b6:d1:24:82:1b:f7:12:96:42:68:37:
8a:ed:70:8e:53:93:a4:77:45:46:5c:f4:c4:f0:97:
10:1b:98:58:b3:15:fb:01:cf:a3:f9:f3:95:52:5a:
1a:7b:71:54:d9:b2:42:68:6d:2d:1e:a1:eb:34:ee:
61:e1:1c:45:99:ac:68:20:0b:95:cb:ed:97:bf:b1:
25:7c:a4:5e:a1:51:ba:9a:6c:65:aa:64:5f:7e:c0:
c3:1b:a1:7f:1f:c2:87:ee:b2:f2:e2:e2:87:14:13:
a1:a9:f2:e0:84:4d:28:50:94:c4:9b:95:8d:a2:aa:
85:bb:cc:05:c4:eb:ee:06:78:ff:e8:76:15:cd:ae:
5a:e6:59:65:5c:a1:76:72:0b:02:1d:5f:4b:1b:5f:
00:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
03:3E:2F:16:D0:44:96:8C:A3:A4:05:C8:54:00:1F:8D:55:AE:1F:8A
X509v3 Authority Key Identifier:
keyid:D2:BB:66:FB:DE:AA:FF:F4:3B:96:50:B1:F6:CB:E4:F2:9E:DA:F5:8C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0rtm-96q__Q7llCx9svk8p7a9Yw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/e9cbf3-3a5d-4b74-86d3-cb0f2455cbd6/1/0rtm-96q__Q7llCx9svk8p7a9Yw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/e9cbf3-3a5d-4b74-86d3-cb0f2455cbd6/1/0rtm-96q__Q7llCx9svk8p7a9Yw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
30:b0:7b:08:7d:8a:a1:e8:34:0c:dd:83:8e:52:b3:8c:fa:28:
a8:a6:23:70:fc:9d:d7:67:06:8c:a9:a4:bd:ff:69:8f:c9:d2:
25:41:51:b8:85:29:95:1b:0c:d0:c9:ad:9f:9f:46:99:69:6c:
f2:e7:69:9f:9a:34:9c:ea:3b:05:03:09:58:32:5b:d9:ca:54:
18:95:fa:27:3a:e3:4f:5c:5d:14:8a:a6:0b:9d:c5:17:45:50:
8f:ca:59:33:97:96:0d:59:bb:cc:1d:6c:14:31:02:2c:b4:e0:
b2:bb:e5:e2:16:3c:11:00:53:4e:b5:11:83:b5:9b:42:78:53:
c9:de:55:08:c5:e6:e4:af:9f:b4:d8:59:4a:2d:05:f2:ea:09:
d7:42:8a:75:19:09:0e:0d:8d:4c:2c:79:b0:a0:98:73:4b:6e:
93:7d:60:5f:26:23:45:9d:c3:14:ec:7c:ac:a4:ea:26:c3:53:
bb:63:d4:92:f3:ea:8c:96:78:a6:3f:0f:bd:8a:85:54:c4:9b:
a2:49:a6:98:9f:ef:ce:b5:f4:d1:84:21:14:fe:31:8a:bd:61:
70:f7:b6:9c:a2:00:27:b1:0d:e7:85:69:3a:f6:de:fb:c4:90:
e1:3f:3a:92:b5:a2:06:5d:81:b5:f8:29:73:f8:5a:47:61:9e:
f1:42:38:f9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 21 10:37:46 2025 by rpki-client