Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/61/6453c4-6687-4ef9-9fdc-a88bb7805b09/1/0u9GpBNBlOckI9VyobZtSp0uTBM.mft
File: 0u9GpBNBlOckI9VyobZtSp0uTBM.mft (raw, json)
Hash identifier: ay6RS4IEGmVxf4Iy2OX029ocdkHstEmqLZ8xPRlOtw4=
Subject key identifier: DB:03:2D:C3:FF:C6:B4:02:D2:4D:9E:CE:A8:36:83:18:8C:F2:EF:A3
Authority key identifier: D2:EF:46:A4:13:41:94:E7:24:23:D5:72:A1:B6:6D:4A:9D:2E:4C:13
Certificate issuer: /CN=d2ef46a4134194e72423d572a1b66d4a9d2e4c13
Certificate serial: 01958B16F08FFFA2B0CF0A6D15429B81E3B2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0u9GpBNBlOckI9VyobZtSp0uTBM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/61/6453c4-6687-4ef9-9fdc-a88bb7805b09/1/0u9GpBNBlOckI9VyobZtSp0uTBM.mft
Manifest number: 11D7
Signing time: Wed 12 Mar 2025 16:01:31 +0000
Manifest this update: Wed 12 Mar 2025 16:01:31 +0000
Manifest next update: Thu 13 Mar 2025 16:01:31 +0000
Files and hashes: 1: 0u9GpBNBlOckI9VyobZtSp0uTBM.crl (hash: 2glXYRIQW4bKtC01/pYtuZfk3lxn1q5EsbJT5VFbxWw=)
2: dW_FLnsv0zWikILQzBidDijXgG4.roa (hash: ma0ra8OYlImfY3CwT3NNDf0BfbTV59KzDn/miuP7r78=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/61/6453c4-6687-4ef9-9fdc-a88bb7805b09/1/0u9GpBNBlOckI9VyobZtSp0uTBM.crl
rsync://rpki.ripe.net/repository/DEFAULT/61/6453c4-6687-4ef9-9fdc-a88bb7805b09/1/0u9GpBNBlOckI9VyobZtSp0uTBM.mft
rsync://rpki.ripe.net/repository/DEFAULT/0u9GpBNBlOckI9VyobZtSp0uTBM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 13 Mar 2025 16:01:31 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:8b:16:f0:8f:ff:a2:b0:cf:0a:6d:15:42:9b:81:e3:b2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d2ef46a4134194e72423d572a1b66d4a9d2e4c13
Validity
Not Before: Mar 12 16:01:31 2025 GMT
Not After : Mar 13 16:01:31 2025 GMT
Subject: CN=db032dc3ffc6b402d24d9ecea83683188cf2efa3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:59:dd:0a:b8:2e:a0:2c:9e:1e:f1:96:39:53:
6e:ea:de:44:b2:53:57:8b:01:aa:06:31:51:37:d9:
3f:23:bf:b3:6e:0e:78:ea:91:64:a0:d7:d0:c8:c9:
ee:fd:cc:18:ac:da:85:64:96:9e:f9:85:c5:5f:53:
19:bf:51:6f:a6:72:fb:8a:c3:27:a7:61:7c:0d:50:
2a:d8:b9:b8:89:2c:55:19:f1:63:15:b4:55:e4:7d:
c2:85:5d:13:5b:52:89:b4:7d:c9:cc:0d:3c:16:cc:
b3:1e:6c:34:d7:7d:fd:19:75:ed:0d:90:4a:f7:d7:
f2:b2:dc:67:98:d1:06:f4:69:14:70:b8:b6:c4:52:
21:fd:26:df:ee:cb:c4:42:65:f7:be:e8:6a:8d:9a:
d1:dc:ba:f4:7a:2a:96:0c:c4:19:4d:fb:37:43:8c:
09:fb:8f:f6:6b:5d:32:db:e4:a7:41:e2:a5:9a:4d:
73:55:97:83:24:71:a0:af:6f:49:b9:94:55:cd:6d:
25:f6:e8:b6:86:20:a0:8f:1f:55:81:78:da:dd:7e:
13:a6:38:72:23:69:08:fe:e8:15:81:71:7e:72:fa:
a4:6a:9c:d4:16:85:09:82:4a:c3:89:c2:0c:30:01:
fa:62:b9:65:3d:16:1f:3c:f5:68:a8:a4:c2:19:3e:
97:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DB:03:2D:C3:FF:C6:B4:02:D2:4D:9E:CE:A8:36:83:18:8C:F2:EF:A3
X509v3 Authority Key Identifier:
keyid:D2:EF:46:A4:13:41:94:E7:24:23:D5:72:A1:B6:6D:4A:9D:2E:4C:13
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0u9GpBNBlOckI9VyobZtSp0uTBM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/61/6453c4-6687-4ef9-9fdc-a88bb7805b09/1/0u9GpBNBlOckI9VyobZtSp0uTBM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/61/6453c4-6687-4ef9-9fdc-a88bb7805b09/1/0u9GpBNBlOckI9VyobZtSp0uTBM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
74:c5:aa:18:b3:2a:21:20:70:87:53:a9:fb:ee:10:7c:fc:18:
a0:d3:d2:c5:78:2f:e5:f8:fb:af:d7:64:50:c4:f2:0f:d3:96:
70:a5:b8:e6:d6:a8:a6:81:71:b0:83:6c:31:b3:71:47:88:99:
34:0e:a5:66:45:bf:6e:14:2a:cd:8b:d9:98:ff:d0:87:f6:ea:
82:0c:f7:3c:1a:ba:6e:dc:22:11:54:80:ab:53:61:d8:be:4e:
df:94:56:cf:8d:41:8f:60:b6:88:05:8a:22:a0:7e:ee:7e:58:
65:36:ba:48:47:5b:a5:91:1a:ba:5f:ee:cb:a8:a1:7b:d9:78:
d3:bf:e2:13:ff:f1:6e:8b:2d:e1:2b:44:4d:40:4d:87:82:96:
a3:4f:fd:88:88:6f:4e:66:60:49:1a:5a:79:0d:a0:61:d3:11:
37:db:f8:e8:9a:07:90:05:38:f5:f3:c8:de:28:d5:1c:cd:f3:
78:cf:7c:ec:66:43:ad:a4:64:48:b3:af:f5:7e:99:d8:bf:98:
d3:0f:75:cb:2d:1a:78:c1:fa:b7:81:12:5d:88:f2:3c:06:75:
c6:34:36:63:1c:2d:18:22:87:20:18:3b:44:24:67:91:28:78:
59:00:6d:b5:a7:c8:27:c9:42:01:29:6e:cc:d2:5a:8a:2a:fb:
28:f2:11:fe
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 13 02:55:43 2025 by rpki-client