Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e6/0d0300-74ee-4677-ad62-c24b7db20de7/1/0BbMVqmVUHtPqHxkkEQvBrYYZoc.mft
File: 0BbMVqmVUHtPqHxkkEQvBrYYZoc.mft (raw, json)
Hash identifier: p/WeGnXA7AJbagZhnetFLXgeGHIiSOjDa7TS/wBFgKs=
Subject key identifier: 3E:20:5C:FB:92:5C:5D:8D:79:E1:0D:5D:72:80:6F:D6:7E:93:A8:BB
Authority key identifier: D0:16:CC:56:A9:95:50:7B:4F:A8:7C:64:90:44:2F:06:B6:18:66:87
Certificate issuer: /CN=d016cc56a995507b4fa87c6490442f06b6186687
Certificate serial: 01965B710B5DEC7223DE1888290467A39901
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0BbMVqmVUHtPqHxkkEQvBrYYZoc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e6/0d0300-74ee-4677-ad62-c24b7db20de7/1/0BbMVqmVUHtPqHxkkEQvBrYYZoc.mft
Manifest number: 1500
Signing time: Tue 22 Apr 2025 03:00:57 +0000
Manifest this update: Tue 22 Apr 2025 03:00:57 +0000
Manifest next update: Wed 23 Apr 2025 03:00:57 +0000
Files and hashes: 1: 0BbMVqmVUHtPqHxkkEQvBrYYZoc.crl (hash: TpBGQfEzRA4KLINnmshJOQc4mIu6mdF/C1XXIKLzG4A=)
2: f7YxschREuysiSjDT6JDZ1hIzJU.roa (hash: od3isdJHCZlHUjM+HPneCDkTI9VrgHkYJNlcsSC6Dag=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e6/0d0300-74ee-4677-ad62-c24b7db20de7/1/0BbMVqmVUHtPqHxkkEQvBrYYZoc.crl
rsync://rpki.ripe.net/repository/DEFAULT/e6/0d0300-74ee-4677-ad62-c24b7db20de7/1/0BbMVqmVUHtPqHxkkEQvBrYYZoc.mft
rsync://rpki.ripe.net/repository/DEFAULT/0BbMVqmVUHtPqHxkkEQvBrYYZoc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 23 Apr 2025 03:00:57 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:5b:71:0b:5d:ec:72:23:de:18:88:29:04:67:a3:99:01
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d016cc56a995507b4fa87c6490442f06b6186687
Validity
Not Before: Apr 22 03:00:57 2025 GMT
Not After : Apr 23 03:00:57 2025 GMT
Subject: CN=3e205cfb925c5d8d79e10d5d72806fd67e93a8bb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:2c:a0:e9:05:88:b5:41:7b:88:e0:ba:d3:64:
be:cc:a5:d4:ae:49:45:d8:4b:ef:67:23:01:75:58:
33:21:86:a9:e4:60:d4:50:1b:21:e9:24:4d:4d:86:
fd:01:42:ae:59:70:4c:b5:08:11:f1:0c:e7:51:e4:
26:22:a9:1e:e3:d0:55:f5:39:6e:05:71:04:16:85:
e7:d8:cd:25:51:47:ab:fd:f9:d1:76:4d:6a:19:55:
28:e2:e1:32:8c:8b:f9:ce:e4:99:1d:6d:9b:87:fd:
5c:0f:29:56:16:2e:5c:38:22:d1:c8:27:f6:52:7e:
9e:fe:7d:77:c4:e6:99:7c:14:04:31:82:1b:3f:d7:
62:6c:44:b9:be:e8:37:8f:45:bf:fb:4e:cc:f6:a8:
2b:ca:9c:61:13:a2:20:0b:14:5e:0b:8b:c1:68:16:
e9:a1:58:b5:a6:84:50:0e:4c:6c:e4:58:22:9e:3b:
16:0c:5c:df:af:58:59:37:07:4a:4e:45:f6:4e:6c:
90:05:2f:e4:ed:0d:4a:8d:24:ff:15:22:0a:f0:e7:
19:7d:53:c8:8c:a2:ce:57:d1:5a:08:70:72:e2:6c:
ee:af:e4:e2:7f:4a:47:8e:4b:89:8d:c6:36:0f:69:
b6:3d:10:6d:6f:c2:40:76:94:23:ba:f2:14:18:28:
19:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3E:20:5C:FB:92:5C:5D:8D:79:E1:0D:5D:72:80:6F:D6:7E:93:A8:BB
X509v3 Authority Key Identifier:
keyid:D0:16:CC:56:A9:95:50:7B:4F:A8:7C:64:90:44:2F:06:B6:18:66:87
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0BbMVqmVUHtPqHxkkEQvBrYYZoc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/0d0300-74ee-4677-ad62-c24b7db20de7/1/0BbMVqmVUHtPqHxkkEQvBrYYZoc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/0d0300-74ee-4677-ad62-c24b7db20de7/1/0BbMVqmVUHtPqHxkkEQvBrYYZoc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
bb:05:2e:30:b9:dd:fe:d5:b7:83:fa:03:aa:e0:49:0e:3f:81:
4e:8a:8e:51:67:f4:25:87:6e:bc:41:b1:de:8d:3c:62:ed:2a:
b1:14:37:fe:da:14:62:46:21:c6:84:a5:30:ce:f0:4d:71:e8:
05:ca:fe:9b:a4:f1:31:58:c1:34:cc:d0:c9:fa:e4:92:f1:73:
19:8e:19:9b:bb:ec:08:b2:3b:69:4e:86:be:3c:f9:fa:12:d7:
43:13:3f:a4:e0:da:2f:28:28:a0:da:54:67:38:2b:99:f1:73:
2c:8e:df:d6:f2:37:64:ff:b6:e6:55:22:ad:29:67:79:92:5d:
a5:86:17:a0:dc:dd:7c:3e:74:1d:23:ec:38:0a:a0:6f:2c:62:
9c:6c:63:86:13:4c:34:34:ff:aa:eb:32:23:96:ea:a9:0e:49:
ec:ab:30:b4:d2:fc:52:6a:21:70:ee:43:2c:fc:24:a4:b7:10:
12:e6:ba:e2:02:d7:82:cc:7f:2d:c1:25:84:91:14:90:fd:30:
34:23:fb:9b:75:fa:81:6f:78:85:19:1d:6f:cf:93:43:84:83:
97:01:5a:e5:64:0e:23:cf:75:07:49:3f:b3:d5:7a:33:c5:c6:
07:23:59:1d:cd:9d:a5:de:dd:fc:56:2d:87:89:a2:da:d7:20:
6d:98:2a:8a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 22 11:38:13 2025 by rpki-client