
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0c/cfeb07-66f7-4b51-bea6-dadbee1e2c2c/1/0jCN0RIG-lLbAE5FWsjZla9MOwg.mft
File: 0jCN0RIG-lLbAE5FWsjZla9MOwg.mft (raw, json)
Hash identifier: 5acIeQ+5jZxML6mufo33aCX+jDYn8mXNVVVRZnz1xPo=
Subject key identifier: 17:11:27:74:7D:BC:04:5F:BE:17:53:71:81:BE:A5:4C:90:D4:E2:AF
Authority key identifier: D2:30:8D:D1:12:06:FA:52:DB:00:4E:45:5A:C8:D9:95:AF:4C:3B:08
Certificate issuer: /CN=d2308dd11206fa52db004e455ac8d995af4c3b08
Certificate serial: 01964C6BE9CAF37B46E3C44FAE3DF1FAACCC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0jCN0RIG-lLbAE5FWsjZla9MOwg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0c/cfeb07-66f7-4b51-bea6-dadbee1e2c2c/1/0jCN0RIG-lLbAE5FWsjZla9MOwg.mft
Manifest number: 047C
Signing time: Sat 19 Apr 2025 05:01:02 +0000
Manifest this update: Sat 19 Apr 2025 05:01:02 +0000
Manifest next update: Sun 20 Apr 2025 05:01:02 +0000
Files and hashes: 1: 0jCN0RIG-lLbAE5FWsjZla9MOwg.crl (hash: QZe3FRVJkAVC/sFytKlpTkecAtb/PyEUeZ50VEstR7Y=)
2: MODcJVbQ7tIyULkAi32tBDPkIQ0.roa (hash: b4XxIhCxRBgha/DwCew59vKJiKvbCmMkhqVHdTGJTgY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0c/cfeb07-66f7-4b51-bea6-dadbee1e2c2c/1/0jCN0RIG-lLbAE5FWsjZla9MOwg.crl
rsync://rpki.ripe.net/repository/DEFAULT/0c/cfeb07-66f7-4b51-bea6-dadbee1e2c2c/1/0jCN0RIG-lLbAE5FWsjZla9MOwg.mft
rsync://rpki.ripe.net/repository/DEFAULT/0jCN0RIG-lLbAE5FWsjZla9MOwg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 20 Apr 2025 04:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:4c:6b:e9:ca:f3:7b:46:e3:c4:4f:ae:3d:f1:fa:ac:cc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d2308dd11206fa52db004e455ac8d995af4c3b08
Validity
Not Before: Apr 19 05:01:02 2025 GMT
Not After : Apr 20 05:01:02 2025 GMT
Subject: CN=171127747dbc045fbe17537181bea54c90d4e2af
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:78:44:ac:a0:7c:bc:a1:e1:ce:4c:ca:2b:31:
1a:9c:f4:ad:88:10:ec:4c:88:6d:c1:73:98:f8:17:
12:56:ba:6a:17:4c:79:99:75:44:a7:c3:52:89:90:
a8:a6:e0:8d:9d:d0:ca:bb:af:52:1c:19:bf:5b:ee:
ec:99:f0:5e:58:b2:27:40:e9:16:5a:76:74:ad:a4:
3a:65:1d:c3:1d:68:06:e0:e3:9a:45:ee:9f:f7:90:
3d:4c:34:5c:71:37:ee:6e:b8:a4:a5:62:cf:17:ee:
f7:17:8c:42:f7:d5:1a:dd:3f:62:08:66:87:f5:35:
ff:88:db:6a:f3:23:46:ed:b9:04:8b:45:75:cd:6d:
8b:25:8c:68:cc:3e:d0:0d:e4:20:8e:a1:0c:da:83:
5f:ff:ff:f2:69:8c:8c:b7:4a:72:12:e8:08:eb:c1:
5d:65:ba:58:2c:0d:27:f3:16:0f:03:29:f1:d1:aa:
09:b0:6a:3f:ae:b5:a6:96:78:d0:e6:d5:86:34:eb:
eb:da:f1:c1:92:05:f0:64:99:e6:5d:c8:f2:fd:35:
0e:7e:4e:ed:ae:93:d9:74:f4:5c:eb:86:6f:61:29:
da:d0:df:bb:50:a3:09:a3:7a:61:ab:3b:c3:9f:45:
b5:46:a0:da:c3:27:7c:5c:3f:51:d7:2c:d0:4c:31:
5f:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
17:11:27:74:7D:BC:04:5F:BE:17:53:71:81:BE:A5:4C:90:D4:E2:AF
X509v3 Authority Key Identifier:
keyid:D2:30:8D:D1:12:06:FA:52:DB:00:4E:45:5A:C8:D9:95:AF:4C:3B:08
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0jCN0RIG-lLbAE5FWsjZla9MOwg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/cfeb07-66f7-4b51-bea6-dadbee1e2c2c/1/0jCN0RIG-lLbAE5FWsjZla9MOwg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/cfeb07-66f7-4b51-bea6-dadbee1e2c2c/1/0jCN0RIG-lLbAE5FWsjZla9MOwg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
40:0d:b2:de:4e:ba:dd:29:04:f9:82:3a:f8:30:c8:f8:c2:b8:
9c:7a:70:cd:bf:a1:83:9e:e3:27:75:62:d0:4e:5f:4c:a9:07:
29:e2:f5:da:c3:66:a5:27:ac:d1:53:5f:7a:7e:41:da:9f:e9:
46:2c:57:1f:42:a8:99:fe:ce:16:8d:4b:fd:9e:4c:34:ed:11:
b1:20:38:78:23:55:ca:43:1a:22:23:fa:4b:14:b8:d6:5b:19:
d3:e2:ed:12:8d:a1:55:bc:2c:83:e1:95:ef:ff:e4:d3:f6:5c:
82:3d:78:4b:28:ff:53:ae:cd:cd:bc:2f:8b:d9:45:a0:9a:e1:
1e:23:d7:8c:1b:63:49:27:87:0f:7c:d2:81:80:30:3b:1b:bc:
46:be:32:43:82:e6:58:e5:c7:a8:1a:85:c2:96:75:39:7e:cb:
e3:f3:c7:54:7f:e7:a7:98:5a:30:81:af:e5:08:58:9e:3e:64:
28:f8:28:12:b0:da:45:66:99:20:a7:5e:ed:ff:87:9f:5b:af:
c1:c4:73:94:dd:1a:ca:11:e8:66:12:14:88:0a:ec:51:34:50:
c2:33:61:6d:b6:d3:85:17:42:d8:5b:ff:5a:5d:f0:c1:73:7f:
cd:06:ff:0d:e7:54:0d:1d:10:37:8c:e6:93:b2:51:0b:26:ca:
9c:c5:fd:a9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 19 12:04:04 2025 by rpki-client