Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/53/ec23cc-da5a-4d2b-95d9-7db3ec6fa302/1/0QOvGXZFpJQcbNsIZprwCLeRAr4.mft
File: 0QOvGXZFpJQcbNsIZprwCLeRAr4.mft (raw, json)
Hash identifier: NJMVLMiCzjof8mlXQ9D+3EFdq3sbckfx9a4GHqavzrw=
Subject key identifier: 0C:D0:D1:6D:3D:BE:F1:F1:54:04:13:CA:F6:9A:83:B1:0E:41:07:19
Authority key identifier: D1:03:AF:19:76:45:A4:94:1C:6C:DB:08:66:9A:F0:08:B7:91:02:BE
Certificate issuer: /CN=d103af197645a4941c6cdb08669af008b79102be
Certificate serial: 01963C1D0BD7CC6CB35A1C39910BD712F313
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0QOvGXZFpJQcbNsIZprwCLeRAr4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/53/ec23cc-da5a-4d2b-95d9-7db3ec6fa302/1/0QOvGXZFpJQcbNsIZprwCLeRAr4.mft
Manifest number: 0E62
Signing time: Wed 16 Apr 2025 01:00:58 +0000
Manifest this update: Wed 16 Apr 2025 01:00:58 +0000
Manifest next update: Thu 17 Apr 2025 01:00:58 +0000
Files and hashes: 1: 0QOvGXZFpJQcbNsIZprwCLeRAr4.crl (hash: z4cB6VWzBVCY77U1diYwPcwUCl/A13wrPqqsLiHxRbo=)
2: Ns-TL5URBIXkWjSrsIX0f-jA8r8.roa (hash: rkMxs94A3zqfZql4p2TlDjcRtvwJLskmzewtRu09cI8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/53/ec23cc-da5a-4d2b-95d9-7db3ec6fa302/1/0QOvGXZFpJQcbNsIZprwCLeRAr4.crl
rsync://rpki.ripe.net/repository/DEFAULT/53/ec23cc-da5a-4d2b-95d9-7db3ec6fa302/1/0QOvGXZFpJQcbNsIZprwCLeRAr4.mft
rsync://rpki.ripe.net/repository/DEFAULT/0QOvGXZFpJQcbNsIZprwCLeRAr4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 17 Apr 2025 01:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:3c:1d:0b:d7:cc:6c:b3:5a:1c:39:91:0b:d7:12:f3:13
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d103af197645a4941c6cdb08669af008b79102be
Validity
Not Before: Apr 16 01:00:58 2025 GMT
Not After : Apr 17 01:00:58 2025 GMT
Subject: CN=0cd0d16d3dbef1f1540413caf69a83b10e410719
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:68:4e:75:a0:17:3a:de:10:28:36:cc:ba:a8:
73:5b:85:b2:ad:22:9e:db:5f:23:32:22:d0:23:54:
ca:67:c8:e3:39:d4:5b:c9:33:48:b7:df:42:99:a6:
f8:1f:88:bf:e4:72:9d:b2:40:b9:fd:3e:c0:d3:8b:
02:1e:3d:d7:0a:36:4b:d6:da:be:be:a8:21:2c:b6:
b0:ab:71:1a:b7:47:e0:04:46:69:0e:85:1e:61:42:
83:bf:37:35:81:f0:f4:6a:af:42:f6:c0:8a:dc:f9:
06:b5:c6:6b:1a:ec:57:fb:2c:41:cf:5d:08:44:f2:
79:e8:e2:ef:7f:36:67:f6:52:c8:32:55:46:8d:c9:
1a:8d:bd:5c:8e:fb:45:2c:0d:82:3d:ff:56:79:51:
c6:7b:b4:74:34:fa:a5:32:2b:79:bc:ef:8f:47:4f:
96:c5:e1:87:5f:75:80:cd:20:dc:cd:4c:df:be:c9:
51:fa:66:33:97:cb:b1:82:80:32:cd:d4:0c:2d:c2:
eb:bf:52:34:83:e3:d7:47:e5:1c:5a:d7:3d:61:ad:
bd:d1:0a:69:3a:71:9f:ae:47:9e:a3:8a:33:e2:4a:
bd:c8:3b:db:a7:c5:c0:69:a8:b3:ae:a1:da:36:9f:
20:4c:d0:92:bb:96:81:b8:d4:03:61:0d:e8:87:08:
15:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0C:D0:D1:6D:3D:BE:F1:F1:54:04:13:CA:F6:9A:83:B1:0E:41:07:19
X509v3 Authority Key Identifier:
keyid:D1:03:AF:19:76:45:A4:94:1C:6C:DB:08:66:9A:F0:08:B7:91:02:BE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0QOvGXZFpJQcbNsIZprwCLeRAr4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/53/ec23cc-da5a-4d2b-95d9-7db3ec6fa302/1/0QOvGXZFpJQcbNsIZprwCLeRAr4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/53/ec23cc-da5a-4d2b-95d9-7db3ec6fa302/1/0QOvGXZFpJQcbNsIZprwCLeRAr4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
88:3f:7f:71:a2:3f:21:e6:af:50:56:a5:82:1f:65:cb:92:84:
a0:ba:d5:b7:d0:ce:27:d3:86:1f:e3:73:83:28:f3:63:d7:92:
f4:6e:0c:c2:0c:10:d5:a6:5f:57:02:44:69:04:81:e8:ea:34:
83:f3:e3:2a:ef:de:c5:38:6f:83:3b:e6:46:e5:91:6d:a9:97:
06:9a:09:a3:d1:63:65:11:f7:0e:38:af:1d:d3:89:bd:a4:f5:
75:b4:5d:33:7a:7d:9f:3c:a9:58:bd:e9:2c:e3:8f:3b:4c:e9:
d8:7f:82:ac:1c:1f:aa:cb:72:d0:38:e4:05:59:22:fd:50:de:
56:38:e6:20:5a:6d:9d:9b:96:42:a5:e5:56:05:93:ee:39:3d:
83:a2:1b:ba:fd:81:29:6d:a8:53:bd:64:d4:65:95:48:ae:e4:
97:69:4e:f7:a8:79:e7:97:0f:43:9d:a9:eb:59:61:ba:d0:0a:
ca:26:c3:7f:a0:2a:77:c0:b8:85:a5:6a:e9:5c:9f:80:fc:77:
3e:37:3d:b2:41:21:6c:c4:bb:4d:32:c2:15:db:ab:e2:69:e2:
de:bf:15:53:f9:58:71:b9:73:8d:80:c7:e6:fb:93:29:cc:b4:
9f:6b:a0:34:e1:53:fb:3a:c0:ee:29:5d:66:96:2d:15:af:5e:
eb:46:8b:ea
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 16 09:28:17 2025 by rpki-client