Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/9b0c77-8085-4a5a-bace-143c3d38d17c/1/0vbmtaNP0YtDU4Xbh7s66XR4UQg.mft
File: 0vbmtaNP0YtDU4Xbh7s66XR4UQg.mft (raw, json)
Hash identifier: +WXdz4y1/4o5m1HP/N7U1+BiGYcPn9Jm37l3HhaYjhc=
Subject key identifier: 61:94:09:DB:14:D9:B6:0E:16:0F:70:46:E5:04:3D:F0:5D:BF:B6:28
Authority key identifier: D2:F6:E6:B5:A3:4F:D1:8B:43:53:85:DB:87:BB:3A:E9:74:78:51:08
Certificate issuer: /CN=d2f6e6b5a34fd18b435385db87bb3ae974785108
Certificate serial: 019646D79572D0A0CA9A3C321C8302F16D63
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0vbmtaNP0YtDU4Xbh7s66XR4UQg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/9b0c77-8085-4a5a-bace-143c3d38d17c/1/0vbmtaNP0YtDU4Xbh7s66XR4UQg.mft
Manifest number: 12AA
Signing time: Fri 18 Apr 2025 03:00:55 +0000
Manifest this update: Fri 18 Apr 2025 03:00:55 +0000
Manifest next update: Sat 19 Apr 2025 03:00:55 +0000
Files and hashes: 1: 0vbmtaNP0YtDU4Xbh7s66XR4UQg.crl (hash: Y/f1HC9kSXFkXB9+8zcKL5nkrnRmPmes0vVN3U7DPWs=)
2: vHnKRxUajbywNAqL6nOx-jDQRUM.roa (hash: 9L1D0lkWg2QABU5Zj6IAqZoeAKA6O0lNRb8Xz0hsQns=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5e/9b0c77-8085-4a5a-bace-143c3d38d17c/1/0vbmtaNP0YtDU4Xbh7s66XR4UQg.crl
rsync://rpki.ripe.net/repository/DEFAULT/5e/9b0c77-8085-4a5a-bace-143c3d38d17c/1/0vbmtaNP0YtDU4Xbh7s66XR4UQg.mft
rsync://rpki.ripe.net/repository/DEFAULT/0vbmtaNP0YtDU4Xbh7s66XR4UQg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 19 Apr 2025 01:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:46:d7:95:72:d0:a0:ca:9a:3c:32:1c:83:02:f1:6d:63
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d2f6e6b5a34fd18b435385db87bb3ae974785108
Validity
Not Before: Apr 18 03:00:55 2025 GMT
Not After : Apr 19 03:00:55 2025 GMT
Subject: CN=619409db14d9b60e160f7046e5043df05dbfb628
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e9:a1:df:fa:02:27:db:a1:23:14:1d:7f:69:a1:
94:70:aa:8e:43:84:0e:78:05:e4:41:06:c1:56:fa:
95:2d:3c:be:56:ee:16:38:02:8f:cb:db:6e:ac:da:
14:3f:af:27:ff:a0:fb:f2:fd:63:3c:1f:31:58:07:
b7:e7:e8:34:02:c0:d9:51:e5:d5:14:ca:d2:72:89:
bd:46:58:11:1e:b0:0f:99:01:4f:1f:0d:48:90:80:
75:5b:82:6c:86:1a:21:c3:cd:95:2a:70:aa:d4:0c:
f1:29:ac:d9:e0:dc:1c:50:77:43:df:e9:fb:1b:d5:
67:55:36:95:cc:78:96:82:f9:04:ed:43:f4:69:bf:
41:15:b0:1f:b7:6b:df:b5:9c:94:6b:6c:1d:c6:f7:
3b:88:83:a9:bf:79:6c:dd:5a:1e:3d:7c:23:f4:7a:
02:d2:75:f0:3f:42:66:75:03:90:94:e8:40:6a:06:
69:04:22:24:f2:1c:8d:dc:af:79:d5:e1:a9:a2:70:
42:bf:03:f9:47:d7:6e:a8:ed:fa:03:72:6f:59:40:
7e:e7:12:03:28:04:c2:0a:f4:67:9b:8b:2d:92:21:
4c:95:e3:6e:d0:fe:88:33:f0:ee:e5:2d:60:ac:f8:
ab:be:e2:39:8c:56:99:7d:f1:66:ff:1b:ca:f9:64:
9d:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
61:94:09:DB:14:D9:B6:0E:16:0F:70:46:E5:04:3D:F0:5D:BF:B6:28
X509v3 Authority Key Identifier:
keyid:D2:F6:E6:B5:A3:4F:D1:8B:43:53:85:DB:87:BB:3A:E9:74:78:51:08
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0vbmtaNP0YtDU4Xbh7s66XR4UQg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/9b0c77-8085-4a5a-bace-143c3d38d17c/1/0vbmtaNP0YtDU4Xbh7s66XR4UQg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/9b0c77-8085-4a5a-bace-143c3d38d17c/1/0vbmtaNP0YtDU4Xbh7s66XR4UQg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
45:c8:77:59:ba:d2:38:a7:bc:f3:af:b8:7a:7c:55:23:a0:9a:
3e:d5:e1:1b:f7:72:c5:78:d4:43:7a:04:f9:92:dc:98:46:2d:
fb:cd:0e:eb:2d:90:00:b9:ea:57:ea:66:10:71:8a:78:9b:39:
8e:74:23:d2:47:d7:8a:9d:96:7d:f0:70:a8:ea:b9:45:32:b1:
6c:12:24:ca:4f:cd:3f:24:17:dd:29:01:23:53:ae:b9:0d:97:
07:73:d0:0b:02:c7:83:fe:7f:0f:4d:a2:0c:de:8d:0a:fe:0d:
22:51:b2:c2:ed:e2:62:24:d4:b3:14:14:c0:3e:a1:51:47:39:
22:a5:97:33:71:73:dd:49:ae:55:e8:d1:e2:0c:e3:4a:da:48:
46:8a:65:5d:2e:8e:0e:90:5b:85:b8:86:9d:ef:f6:2d:1e:c4:
ea:3c:98:ab:ca:17:c5:21:47:cb:34:87:b8:e1:51:e3:c7:6a:
dd:f3:c2:ed:72:a3:22:c8:59:62:4c:52:22:62:3b:ed:c7:93:
43:55:86:db:8a:65:42:23:7a:d3:b8:18:c5:47:bb:5d:14:7f:
8e:56:c8:0b:4a:ce:de:62:62:6d:1e:2d:1f:63:4b:73:74:56:
50:60:82:07:70:6b:0a:8f:f9:e7:01:5a:5b:5f:64:d0:92:9e:
40:98:00:52
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 18 05:53:59 2025 by rpki-client