Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0f/011132-eae3-4e9d-b6f0-46f004a19591/1/0Dxztg8hA-47Kiw8vpIOISqS7mU.mft
File: 0Dxztg8hA-47Kiw8vpIOISqS7mU.mft (raw, json)
Hash identifier: rO4lV1cmogoJz2jl1f8yl14rKQ1DwZNnqNyqVNtnWT8=
Subject key identifier: A4:BF:34:1E:F9:96:C8:99:1F:24:73:B8:CF:81:53:C3:B1:7E:10:B5
Authority key identifier: D0:3C:73:B6:0F:21:03:EE:3B:2A:2C:3C:BE:92:0E:21:2A:92:EE:65
Certificate issuer: /CN=d03c73b60f2103ee3b2a2c3cbe920e212a92ee65
Certificate serial: 01964D107F2EE38B879A1401D59CBB34E4DE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0Dxztg8hA-47Kiw8vpIOISqS7mU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0f/011132-eae3-4e9d-b6f0-46f004a19591/1/0Dxztg8hA-47Kiw8vpIOISqS7mU.mft
Manifest number: 0462
Signing time: Sat 19 Apr 2025 08:00:48 +0000
Manifest this update: Sat 19 Apr 2025 08:00:48 +0000
Manifest next update: Sun 20 Apr 2025 08:00:48 +0000
Files and hashes: 1: 0Dxztg8hA-47Kiw8vpIOISqS7mU.crl (hash: MfUhD384jycHKwqo+LvV452qrNBtXZNwAA/Ghht9+W8=)
2: 1pDN_cqLTEaLa3FpHJ0nDprfyGU.roa (hash: SGGICeKS+UCFERj3bY2e8n18D/0WE7ihQBfVbxRvt70=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0f/011132-eae3-4e9d-b6f0-46f004a19591/1/0Dxztg8hA-47Kiw8vpIOISqS7mU.crl
rsync://rpki.ripe.net/repository/DEFAULT/0f/011132-eae3-4e9d-b6f0-46f004a19591/1/0Dxztg8hA-47Kiw8vpIOISqS7mU.mft
rsync://rpki.ripe.net/repository/DEFAULT/0Dxztg8hA-47Kiw8vpIOISqS7mU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 20 Apr 2025 08:00:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:4d:10:7f:2e:e3:8b:87:9a:14:01:d5:9c:bb:34:e4:de
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d03c73b60f2103ee3b2a2c3cbe920e212a92ee65
Validity
Not Before: Apr 19 08:00:48 2025 GMT
Not After : Apr 20 08:00:48 2025 GMT
Subject: CN=a4bf341ef996c8991f2473b8cf8153c3b17e10b5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:cf:07:3a:0d:18:2b:81:f6:c2:9a:ac:1a:4e:
d4:85:48:e7:e6:31:e1:a9:87:69:de:78:6b:71:ea:
bd:b1:29:5a:84:3f:1b:d7:1c:3e:22:e4:a8:f7:b2:
c3:21:7b:c3:47:81:5f:01:bb:64:99:1e:de:2a:c0:
10:97:0a:67:a6:cc:58:53:58:df:9a:77:d4:13:33:
f3:13:a1:d8:d5:f0:bf:71:ee:17:d1:ce:c3:45:3d:
1b:1a:22:ac:36:7d:74:4b:59:7f:76:c9:17:b0:81:
c0:ed:23:ba:92:96:ab:bd:39:5a:0b:ac:d9:11:e7:
a5:d8:15:53:1b:28:0b:98:7d:68:d3:a8:fb:69:2d:
bb:a1:f2:00:8e:32:db:d4:14:d8:3e:ce:23:5f:48:
3d:96:04:46:c8:dc:9f:77:75:aa:e8:86:08:b7:45:
55:f8:6e:c0:2d:c5:18:41:81:af:41:d5:72:ec:b9:
4c:83:fd:ca:bb:f1:6a:31:5a:06:9a:85:c2:5e:dc:
fc:61:61:11:48:94:49:64:3a:07:e1:1f:89:d7:f4:
d6:bf:68:48:08:36:f5:8d:3e:b9:65:20:f5:c7:08:
dc:ef:5a:96:cb:c6:4f:a2:e0:8e:d3:58:f2:ba:27:
d0:95:63:e1:80:6f:fb:de:44:ba:23:ba:de:ac:cf:
6a:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A4:BF:34:1E:F9:96:C8:99:1F:24:73:B8:CF:81:53:C3:B1:7E:10:B5
X509v3 Authority Key Identifier:
keyid:D0:3C:73:B6:0F:21:03:EE:3B:2A:2C:3C:BE:92:0E:21:2A:92:EE:65
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0Dxztg8hA-47Kiw8vpIOISqS7mU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/011132-eae3-4e9d-b6f0-46f004a19591/1/0Dxztg8hA-47Kiw8vpIOISqS7mU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/011132-eae3-4e9d-b6f0-46f004a19591/1/0Dxztg8hA-47Kiw8vpIOISqS7mU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
17:29:44:08:d3:04:50:36:3c:65:b2:50:c1:41:f1:39:77:55:
c1:80:38:c7:1b:ea:c2:20:e6:ab:55:41:9f:0c:c6:77:93:61:
b8:78:ea:44:50:44:18:88:a5:5a:0c:18:28:51:74:70:59:08:
eb:f3:de:3e:bc:2d:b0:11:5a:fb:77:d8:54:35:af:e4:e9:8d:
7b:df:fb:ed:28:5f:cf:4b:5a:73:89:4c:7b:80:ae:d4:b0:24:
2f:a1:d9:96:e1:4f:ad:28:3f:c8:f5:68:7f:bc:06:db:c2:53:
bf:a1:60:75:b6:78:8a:ba:bc:20:f7:ed:dd:fc:30:ec:36:3c:
7e:be:b0:c4:77:5a:d7:bf:50:d0:d1:ba:03:a0:70:29:7c:94:
95:6b:94:46:2b:5f:c5:28:88:f9:d9:7c:3a:3a:34:46:fc:0f:
d6:2d:f8:2f:91:5a:b0:82:38:91:19:42:d2:ac:6d:c6:ea:55:
63:2f:b9:22:24:95:40:c7:a7:62:4b:f8:96:57:3a:fa:ab:4b:
1b:b3:d7:b2:ca:db:eb:80:51:ec:48:ef:c1:55:e5:a1:45:3b:
c5:70:c7:af:a9:9a:43:ec:9e:3e:0e:ca:9a:d9:58:b9:8a:ab:
03:62:22:ed:bf:e0:fe:c5:66:14:7d:ba:7a:9b:52:30:cb:22:
56:21:9e:f8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 19 16:49:56 2025 by rpki-client