Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/38/fa79dd-0fca-4661-8864-955537cb69f2/1/t-0w6W6la5gOa3k9GobGLdXAvB8.mft
File: t-0w6W6la5gOa3k9GobGLdXAvB8.mft (raw, json)
Hash identifier: aJYKcjFSK4rB9N0wJORJ+5vvNWZolQ9pTVBiedZ3gGM=
Subject key identifier: CC:8A:4B:54:E9:A0:AB:6E:E4:CB:AB:A3:4A:17:8F:6C:03:5C:8C:8E
Authority key identifier: B7:ED:30:E9:6E:A5:6B:98:0E:6B:79:3D:1A:86:C6:2D:D5:C0:BC:1F
Certificate issuer: /CN=b7ed30e96ea56b980e6b793d1a86c62dd5c0bc1f
Certificate serial: 01960E31B45853D19081F89665B701866CC8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/t-0w6W6la5gOa3k9GobGLdXAvB8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/38/fa79dd-0fca-4661-8864-955537cb69f2/1/t-0w6W6la5gOa3k9GobGLdXAvB8.mft
Manifest number: 050C
Signing time: Mon 07 Apr 2025 03:01:00 +0000
Manifest this update: Mon 07 Apr 2025 03:01:00 +0000
Manifest next update: Tue 08 Apr 2025 03:01:00 +0000
Files and hashes: 1: 8HKSdNrm9QMyoSA380bXaBqQQ0o.roa (hash: n0TkThrqHtx1QI4h5bmhzme4/EVU3X+pkCgBWj6DraA=)
2: t-0w6W6la5gOa3k9GobGLdXAvB8.crl (hash: SBBB8LWv1jvcHwya2xmg0FOHMoGH5WhNTf69+Pr14pI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/38/fa79dd-0fca-4661-8864-955537cb69f2/1/t-0w6W6la5gOa3k9GobGLdXAvB8.crl
rsync://rpki.ripe.net/repository/DEFAULT/38/fa79dd-0fca-4661-8864-955537cb69f2/1/t-0w6W6la5gOa3k9GobGLdXAvB8.mft
rsync://rpki.ripe.net/repository/DEFAULT/t-0w6W6la5gOa3k9GobGLdXAvB8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 08 Apr 2025 01:00:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:0e:31:b4:58:53:d1:90:81:f8:96:65:b7:01:86:6c:c8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b7ed30e96ea56b980e6b793d1a86c62dd5c0bc1f
Validity
Not Before: Apr 7 03:01:00 2025 GMT
Not After : Apr 8 03:01:00 2025 GMT
Subject: CN=cc8a4b54e9a0ab6ee4cbaba34a178f6c035c8c8e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:35:17:f4:c2:41:06:64:4a:13:35:24:1d:81:
b0:0f:8f:01:bd:c6:9f:f7:05:b0:1b:43:28:47:33:
e8:23:40:1f:84:4c:ee:9d:42:1c:c3:10:9c:71:93:
a6:58:62:3d:13:0f:39:61:b4:a2:c8:ce:ee:4b:1f:
7b:ea:17:03:35:1a:69:d2:6d:79:12:14:bf:13:32:
8f:77:fd:0c:6a:2e:95:f1:e4:93:54:43:a9:61:c0:
56:ba:a0:4c:6d:80:6b:7a:c8:7b:78:18:55:d1:0a:
72:46:f0:8f:a3:43:cd:5e:a8:4d:a8:4b:bd:47:bd:
9b:73:8d:d6:10:68:b7:93:d8:b0:92:80:12:aa:02:
f0:72:95:bc:b5:0f:37:b2:a9:c1:a4:9c:c6:81:23:
ca:7b:74:ea:95:60:94:63:f9:81:2f:f3:19:44:fb:
82:57:e6:ab:fe:1a:ee:a5:b6:c9:ff:af:8c:3a:e8:
70:6e:8b:87:dc:8e:42:c3:f3:58:98:01:8d:79:ab:
45:8b:1b:0b:6f:d3:37:87:d8:79:95:d1:b8:0b:69:
94:54:f0:a2:9d:a2:6a:e4:00:e6:7a:af:fb:ef:9c:
1d:52:95:83:b0:9c:08:d1:8f:77:66:33:a8:96:89:
9f:28:1e:e1:7f:c6:95:23:c1:b2:83:70:e5:37:d4:
37:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CC:8A:4B:54:E9:A0:AB:6E:E4:CB:AB:A3:4A:17:8F:6C:03:5C:8C:8E
X509v3 Authority Key Identifier:
keyid:B7:ED:30:E9:6E:A5:6B:98:0E:6B:79:3D:1A:86:C6:2D:D5:C0:BC:1F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/t-0w6W6la5gOa3k9GobGLdXAvB8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/38/fa79dd-0fca-4661-8864-955537cb69f2/1/t-0w6W6la5gOa3k9GobGLdXAvB8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/38/fa79dd-0fca-4661-8864-955537cb69f2/1/t-0w6W6la5gOa3k9GobGLdXAvB8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9f:60:44:76:38:4b:fc:4c:c9:48:0b:cc:b3:8e:7a:6a:23:21:
bf:c3:97:23:d7:99:43:9d:b4:67:1f:d7:17:86:04:16:90:9c:
92:ac:4d:85:1e:fe:6d:1d:0d:64:bd:6b:f5:ea:73:76:c3:34:
24:df:5c:01:69:5e:42:02:35:44:65:09:c9:61:4c:a4:3d:c6:
07:78:4d:4a:52:e8:c3:4c:d9:83:08:ab:08:8d:f1:09:76:64:
48:26:29:52:23:d5:89:24:a4:14:88:5f:e8:b5:09:d4:93:6a:
3c:38:ad:e9:27:40:12:73:e0:f8:1d:75:27:c7:ff:7d:14:39:
01:4f:a7:2a:b2:23:e0:3a:3f:1f:b7:76:18:15:db:b9:b3:ce:
bf:b8:6c:8f:18:2c:7c:e6:c8:51:f0:4c:c3:ba:57:17:ab:c6:
df:cf:5b:73:61:cb:2e:57:ab:d1:ba:5f:b0:23:75:d9:d9:4c:
66:3d:4e:87:58:db:75:a2:e2:b3:b0:e2:d9:ba:c4:d4:fe:dd:
38:eb:e1:7c:60:99:74:20:14:93:a7:fd:e4:c1:80:a3:b6:7a:
11:de:32:df:27:e6:bc:7b:0c:23:2d:51:4c:4c:8b:cf:96:6c:
e3:66:34:c7:d8:b3:ad:d8:08:19:7a:ca:b2:1a:01:a0:15:03:
e1:f9:d1:37
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 09:41:40 2025 by rpki-client