Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/30/05b3d1-116f-4d60-a176-56bbe38f7407/1/_0cFo2PcHY0OpRybmh7L04B70FQ.mft
File: _0cFo2PcHY0OpRybmh7L04B70FQ.mft (raw, json)
Hash identifier: g98Z7/NYiFJh0Mw+XC9ZaOFqOQomRgoTNbWgANYJbKo=
Subject key identifier: DF:8E:B6:A3:CE:A1:C1:97:71:51:E2:C6:C2:AE:28:EE:2F:37:0B:13
Authority key identifier: FF:47:05:A3:63:DC:1D:8D:0E:A5:1C:9B:9A:1E:CB:D3:80:7B:D0:54
Certificate issuer: /CN=ff4705a363dc1d8d0ea51c9b9a1ecbd3807bd054
Certificate serial: 01964D100B808ECC214A5713192130F43467
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_0cFo2PcHY0OpRybmh7L04B70FQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/30/05b3d1-116f-4d60-a176-56bbe38f7407/1/_0cFo2PcHY0OpRybmh7L04B70FQ.mft
Manifest number: 14FE
Signing time: Sat 19 Apr 2025 08:00:19 +0000
Manifest this update: Sat 19 Apr 2025 08:00:19 +0000
Manifest next update: Sun 20 Apr 2025 08:00:19 +0000
Files and hashes: 1: Sk4x_HD1LPLgRyf7btPjY4ncmxU.roa (hash: +rugmwU9Eq5brIUvEJKCQXzHVBLNVvEt2u6gto3U47Q=)
2: _0cFo2PcHY0OpRybmh7L04B70FQ.crl (hash: vH2LPHrwEPkbSFm4v52plOnuAjeZPpZodtz2S5/O97s=)
3: xNwSYwAbBI1je8GEBcLJwVabZvM.roa (hash: rsROgVJBvuKbZk2mF1z0pX159BnG002ygt7Nhxzcdxc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/30/05b3d1-116f-4d60-a176-56bbe38f7407/1/_0cFo2PcHY0OpRybmh7L04B70FQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/30/05b3d1-116f-4d60-a176-56bbe38f7407/1/_0cFo2PcHY0OpRybmh7L04B70FQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/_0cFo2PcHY0OpRybmh7L04B70FQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 20 Apr 2025 04:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:4d:10:0b:80:8e:cc:21:4a:57:13:19:21:30:f4:34:67
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ff4705a363dc1d8d0ea51c9b9a1ecbd3807bd054
Validity
Not Before: Apr 19 08:00:19 2025 GMT
Not After : Apr 20 08:00:19 2025 GMT
Subject: CN=df8eb6a3cea1c1977151e2c6c2ae28ee2f370b13
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:8b:01:1b:23:25:fd:e9:58:84:2c:05:c4:fe:
f4:49:6c:de:46:94:95:f3:3f:6d:4c:0f:54:b2:02:
b0:f4:04:a2:31:f1:d3:7f:9a:02:1b:31:f1:3b:20:
79:f3:52:22:d0:f7:e6:38:ab:b6:b8:e0:5b:4a:e1:
d2:f3:5f:1a:32:f8:15:d8:5f:92:ae:0d:52:eb:15:
03:0b:bd:3b:8a:ae:3f:b5:68:b2:f8:0c:9c:11:d5:
70:c0:03:7d:f1:db:50:2a:2f:a4:48:47:10:53:bd:
d2:9a:78:94:41:88:a7:05:f6:f3:1f:aa:8f:c9:32:
fe:d6:ac:da:6b:c8:da:63:58:9b:5c:56:9f:23:52:
f9:80:2a:12:59:8e:66:83:ca:5a:b2:92:16:48:a1:
2b:45:5d:96:75:80:17:59:14:6b:8c:5e:d8:f5:27:
aa:17:9f:7d:c0:44:f7:60:3c:a4:2e:8b:f3:15:62:
5a:bd:fe:54:56:ff:b5:5a:81:d7:cd:d7:0f:47:18:
28:82:28:cb:98:c3:d9:76:8e:5e:b4:5f:0a:31:ff:
52:e1:54:46:5a:2d:a1:11:81:b2:d0:64:13:ee:0d:
25:66:e8:98:a4:f9:8a:af:65:02:a8:2f:e8:65:4a:
04:92:88:7f:52:a7:bb:82:df:f0:f5:0e:a6:89:fb:
3f:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DF:8E:B6:A3:CE:A1:C1:97:71:51:E2:C6:C2:AE:28:EE:2F:37:0B:13
X509v3 Authority Key Identifier:
keyid:FF:47:05:A3:63:DC:1D:8D:0E:A5:1C:9B:9A:1E:CB:D3:80:7B:D0:54
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_0cFo2PcHY0OpRybmh7L04B70FQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/30/05b3d1-116f-4d60-a176-56bbe38f7407/1/_0cFo2PcHY0OpRybmh7L04B70FQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/30/05b3d1-116f-4d60-a176-56bbe38f7407/1/_0cFo2PcHY0OpRybmh7L04B70FQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5c:b6:07:6e:2e:30:90:71:53:e7:68:d3:d7:83:de:cd:bd:bb:
19:4a:51:9b:f6:39:fa:b6:53:b8:06:dd:4a:41:21:58:0e:79:
77:55:fc:a2:f7:79:79:18:ed:df:43:54:54:ca:6d:f2:3e:ea:
ff:98:63:27:01:c4:5a:97:50:9c:40:d5:d9:db:cf:8f:a0:53:
45:70:d7:89:32:0d:62:3d:1f:f1:99:c9:79:9a:05:2d:5c:fb:
d3:bd:9b:5b:2d:a5:d8:8a:50:ca:67:da:fd:80:cf:ee:af:c6:
5e:d1:4c:04:0e:1f:b7:d8:35:d4:4d:23:00:86:cb:c6:31:f8:
9d:5e:aa:25:30:fe:2b:e6:82:cd:5a:3c:4e:7f:0a:da:7a:0c:
77:53:54:9f:5e:54:0c:43:40:71:67:84:a1:9c:1e:f9:2d:b4:
aa:6f:0f:d6:cf:f0:bb:31:69:3f:3a:f9:c3:9d:ee:48:dd:50:
34:34:df:20:b0:e2:3c:52:37:9f:9b:ef:e5:26:2b:76:7d:49:
d0:04:8b:4a:2a:af:fd:f1:51:c0:d7:89:ce:d4:36:ce:19:97:
df:f1:b5:1a:fa:eb:7b:94:12:de:e9:98:19:cd:70:23:4e:6b:
93:0d:9e:91:6e:99:2f:57:54:1e:48:b9:5c:e0:aa:44:21:2f:
47:33:9a:d1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 19 12:26:31 2025 by rpki-client