
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1c/98b35b-945e-40c5-bb95-9eadd351fc79/1/rY3RenaOO2-_p6cAmnAH6-ZbRcg.mft
File: rY3RenaOO2-_p6cAmnAH6-ZbRcg.mft (raw, json)
Hash identifier: v9E3kzPUktgPqzvH8cAD/Dvqf3fwCvD4IGNbPXBE81Y=
Subject key identifier: 0A:6C:02:B6:B9:F5:89:28:7F:F2:11:A8:C8:2B:2B:65:1E:9A:91:D3
Authority key identifier: AD:8D:D1:7A:76:8E:3B:6F:BF:A7:A7:00:9A:70:07:EB:E6:5B:45:C8
Certificate issuer: /CN=ad8dd17a768e3b6fbfa7a7009a7007ebe65b45c8
Certificate serial: 01958CCE729388B0150C6E567238B978DC23
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rY3RenaOO2-_p6cAmnAH6-ZbRcg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1c/98b35b-945e-40c5-bb95-9eadd351fc79/1/rY3RenaOO2-_p6cAmnAH6-ZbRcg.mft
Manifest number: 1110
Signing time: Thu 13 Mar 2025 00:01:34 +0000
Manifest this update: Thu 13 Mar 2025 00:01:34 +0000
Manifest next update: Fri 14 Mar 2025 00:01:34 +0000
Files and hashes: 1: r6C99vK2TllFCTWcqpJRSg5MRPM.roa (hash: 3+br3Wh/zPJPiW24ubp7XOxLj4qW7AeahE4kU9GEl1U=)
2: rY3RenaOO2-_p6cAmnAH6-ZbRcg.crl (hash: d6FQFK2st9rtUuHDerXMPB0w4rQMOuf9oLPTZWZabwI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1c/98b35b-945e-40c5-bb95-9eadd351fc79/1/rY3RenaOO2-_p6cAmnAH6-ZbRcg.crl
rsync://rpki.ripe.net/repository/DEFAULT/1c/98b35b-945e-40c5-bb95-9eadd351fc79/1/rY3RenaOO2-_p6cAmnAH6-ZbRcg.mft
rsync://rpki.ripe.net/repository/DEFAULT/rY3RenaOO2-_p6cAmnAH6-ZbRcg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 13 Mar 2025 19:14:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:8c:ce:72:93:88:b0:15:0c:6e:56:72:38:b9:78:dc:23
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ad8dd17a768e3b6fbfa7a7009a7007ebe65b45c8
Validity
Not Before: Mar 13 00:01:34 2025 GMT
Not After : Mar 14 00:01:34 2025 GMT
Subject: CN=0a6c02b6b9f589287ff211a8c82b2b651e9a91d3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:84:61:5e:80:39:b4:e6:fa:ec:56:19:56:19:
8b:14:64:10:b7:db:9d:be:a4:00:2e:96:ed:40:a7:
1d:b8:5f:3a:c3:7c:ae:5d:3b:b6:3b:12:ca:ee:e8:
b8:e2:5f:d9:1f:7d:82:7a:63:84:34:9b:c1:d6:51:
d4:be:00:25:db:c7:36:b4:8a:b6:b4:58:87:75:16:
38:fa:ff:77:9f:ff:13:62:9c:89:86:00:f6:06:bb:
c7:f4:e7:4f:40:dd:df:b2:bf:81:71:45:0a:08:61:
fc:5e:19:9d:f3:03:a6:3c:f4:8e:6a:46:8a:ed:5a:
ee:c6:22:81:91:69:a4:7f:cc:e4:14:5b:06:1a:19:
c5:f5:0a:db:a0:df:72:94:dc:25:e6:e1:9f:fa:12:
41:83:b6:46:a4:48:63:9f:f0:10:9d:52:8c:ba:a3:
f6:ec:0f:30:50:d8:fd:c7:0d:dc:66:8b:09:b7:f5:
c4:b0:b2:05:31:1c:7e:7f:f8:9e:fb:cc:aa:09:d4:
62:1d:ac:55:44:9c:86:a5:66:cd:bb:4b:aa:de:0f:
9d:da:df:e4:57:e1:bd:e7:4d:f0:cc:56:9a:2c:32:
e4:5f:bb:70:05:e5:e4:06:f1:b6:a8:ad:93:4f:7c:
2f:b1:09:e3:28:cd:77:1a:4d:57:02:e7:c0:f7:6c:
a0:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0A:6C:02:B6:B9:F5:89:28:7F:F2:11:A8:C8:2B:2B:65:1E:9A:91:D3
X509v3 Authority Key Identifier:
keyid:AD:8D:D1:7A:76:8E:3B:6F:BF:A7:A7:00:9A:70:07:EB:E6:5B:45:C8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rY3RenaOO2-_p6cAmnAH6-ZbRcg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/98b35b-945e-40c5-bb95-9eadd351fc79/1/rY3RenaOO2-_p6cAmnAH6-ZbRcg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/98b35b-945e-40c5-bb95-9eadd351fc79/1/rY3RenaOO2-_p6cAmnAH6-ZbRcg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
38:96:ba:7d:d1:53:07:50:c4:2c:3e:d8:4a:01:ae:75:a0:16:
45:b7:9d:75:69:9d:9b:53:1f:ae:7e:c9:6a:41:fc:d7:cf:8b:
10:16:1d:0f:1e:2c:94:84:db:89:47:8f:42:da:b4:f0:bc:02:
95:59:68:c3:a1:04:03:4d:51:2f:ff:91:59:36:65:9a:ff:45:
1f:5b:39:21:4a:ec:59:ce:9f:c4:28:97:fe:50:d3:f1:a5:d5:
4c:8a:a6:ec:b1:f6:13:10:dc:32:80:54:4d:12:2c:4b:e9:3f:
0a:38:89:54:e8:c1:b2:e1:00:bb:5b:09:10:7c:62:9c:44:b8:
99:b2:b0:ec:39:06:46:e3:ec:88:37:cc:f9:23:8d:09:1d:c7:
5c:48:3c:51:8b:49:2f:60:ed:75:56:d2:10:a5:91:76:7d:b8:
d9:2c:ca:a4:22:61:78:d0:e2:32:47:2e:14:8e:f0:f7:c7:8f:
b3:c4:8f:be:2d:f9:a3:72:03:ac:14:7a:47:e6:aa:a3:7a:2f:
2e:23:e4:03:14:24:b9:51:3d:a1:e2:cd:bb:d2:c4:39:9c:68:
27:f9:04:57:1c:99:35:87:b7:d3:b5:99:7f:fc:dd:1b:d9:03:
7a:26:27:03:61:97:97:2b:5f:54:7b:f3:74:2f:1e:6e:4b:a9:
33:8a:be:f2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 13 02:45:36 2025 by rpki-client