Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/62/25f4f4-a547-4238-a1da-f18d7818f84a/1/rOzwm4XZHNaCsGdDy2xZMOH8VRw.mft
File: rOzwm4XZHNaCsGdDy2xZMOH8VRw.mft (raw, json)
Hash identifier: tdxqiwcdLdx/1cUV5gGLQhnhCBcIj1P244wVsJHCcbk=
Subject key identifier: 44:E0:D2:67:48:31:FB:C6:7A:8F:84:EF:F1:55:E7:B4:D5:DA:8F:17
Authority key identifier: AC:EC:F0:9B:85:D9:1C:D6:82:B0:67:43:CB:6C:59:30:E1:FC:55:1C
Certificate issuer: /CN=acecf09b85d91cd682b06743cb6c5930e1fc551c
Certificate serial: 01964C6B9E8439729DCC599E9A71B7336A6C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rOzwm4XZHNaCsGdDy2xZMOH8VRw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/62/25f4f4-a547-4238-a1da-f18d7818f84a/1/rOzwm4XZHNaCsGdDy2xZMOH8VRw.mft
Manifest number: 011C
Signing time: Sat 19 Apr 2025 05:00:43 +0000
Manifest this update: Sat 19 Apr 2025 05:00:43 +0000
Manifest next update: Sun 20 Apr 2025 05:00:43 +0000
Files and hashes: 1: 2-l-7yT7_u7_OYzRYJFyaa75TPk.roa (hash: bYwJQxGV83lRBUqEUc8QOqElQ+XjkvUc1MyoxR+0EMk=)
2: rOzwm4XZHNaCsGdDy2xZMOH8VRw.crl (hash: 2y+PS3JqhZeYeIAzyCfw5QFHgYu/gP5ohgy9zl8GWlk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/62/25f4f4-a547-4238-a1da-f18d7818f84a/1/rOzwm4XZHNaCsGdDy2xZMOH8VRw.crl
rsync://rpki.ripe.net/repository/DEFAULT/62/25f4f4-a547-4238-a1da-f18d7818f84a/1/rOzwm4XZHNaCsGdDy2xZMOH8VRw.mft
rsync://rpki.ripe.net/repository/DEFAULT/rOzwm4XZHNaCsGdDy2xZMOH8VRw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 20 Apr 2025 04:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:4c:6b:9e:84:39:72:9d:cc:59:9e:9a:71:b7:33:6a:6c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=acecf09b85d91cd682b06743cb6c5930e1fc551c
Validity
Not Before: Apr 19 05:00:43 2025 GMT
Not After : Apr 20 05:00:43 2025 GMT
Subject: CN=44e0d2674831fbc67a8f84eff155e7b4d5da8f17
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:7a:b5:fa:b1:db:1f:3e:02:9e:5a:96:3b:a1:
f8:3f:6a:89:70:23:02:a0:cf:8e:ff:92:3c:1d:0f:
95:6b:1d:95:ad:77:07:42:01:5b:a7:0d:2f:29:17:
82:3f:32:60:da:cc:2f:83:e2:72:b7:b6:e8:4c:97:
7e:95:42:63:71:a2:a3:c3:82:08:6d:0a:af:67:6d:
8f:99:21:b7:61:7c:af:a9:80:85:91:3e:cc:55:77:
73:f9:3a:a4:76:e9:92:a0:58:32:79:48:78:f6:88:
97:18:60:40:df:e9:3a:f9:04:64:70:cc:7c:dd:e6:
12:6b:43:ec:35:d9:24:a8:ca:b2:c9:4b:7f:e7:ba:
31:94:39:20:cc:cc:da:f7:0a:1b:62:09:59:8f:ff:
a6:d2:48:87:e4:a6:8c:fe:95:c3:20:51:f6:0e:2d:
ce:14:ac:5c:79:e1:4d:10:f2:d0:cf:8f:bb:a2:34:
6f:c0:5d:7b:76:3e:7b:ed:28:d5:44:57:3d:04:bd:
76:16:e4:20:ae:7e:cc:1b:6b:db:aa:5c:cf:37:2b:
27:6b:65:c2:aa:f0:b7:b2:90:fa:10:90:34:07:8e:
2b:7d:82:39:f4:4b:fa:4d:b2:ed:d0:56:ee:77:27:
69:9e:2c:1c:48:a9:7a:0e:35:b5:30:40:fa:0f:16:
43:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
44:E0:D2:67:48:31:FB:C6:7A:8F:84:EF:F1:55:E7:B4:D5:DA:8F:17
X509v3 Authority Key Identifier:
keyid:AC:EC:F0:9B:85:D9:1C:D6:82:B0:67:43:CB:6C:59:30:E1:FC:55:1C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rOzwm4XZHNaCsGdDy2xZMOH8VRw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/62/25f4f4-a547-4238-a1da-f18d7818f84a/1/rOzwm4XZHNaCsGdDy2xZMOH8VRw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/62/25f4f4-a547-4238-a1da-f18d7818f84a/1/rOzwm4XZHNaCsGdDy2xZMOH8VRw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
99:95:7a:60:6e:95:53:00:7d:39:05:04:97:f5:cb:17:a9:22:
d4:6b:3e:23:5a:00:53:f7:cf:51:fd:1b:ca:0b:0f:e8:ea:27:
c7:cd:e3:f8:2e:23:b2:66:46:79:3d:e4:af:72:83:de:68:63:
0f:ac:91:f4:93:e9:ba:ee:8c:1c:78:7e:9b:f2:8f:b4:ba:2c:
78:d8:da:42:e0:eb:50:26:01:6e:5f:7c:e1:4e:24:3f:db:3c:
e0:e6:86:e4:4c:95:f7:66:cf:64:38:ec:99:52:67:aa:02:83:
44:1d:a9:db:8b:da:97:9e:78:cf:34:0e:15:cb:ff:21:49:3b:
a5:08:9c:aa:f9:1c:cb:d3:56:ea:08:ed:09:b8:e9:66:c6:e5:
82:1f:3e:88:74:3e:56:47:bc:02:e0:d3:66:82:37:21:9b:51:
bb:b8:23:6c:5e:cf:f1:85:92:73:05:8a:cd:e9:e3:95:b0:6e:
7b:76:28:88:a2:4f:07:49:0a:c2:56:45:09:2c:2f:6b:d6:70:
5b:af:69:e8:c8:96:93:7e:5c:d4:e4:02:aa:62:53:30:09:ec:
9c:f0:82:55:42:eb:49:c6:96:e6:f7:c0:9b:11:bc:ca:1a:43:
51:48:2b:61:ab:ee:b1:cf:39:ab:60:e5:c8:e0:09:5b:99:66:
72:52:eb:92
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 19 12:22:59 2025 by rpki-client