Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7a/64666e-af1b-4118-823d-5de99a52aa39/1/0m5FOPHd6nf1c5a7k7kH8VLfaXw.mft
File: 0m5FOPHd6nf1c5a7k7kH8VLfaXw.mft (raw, json)
Hash identifier: 42+QcnKWYXbTocW0qAHjKi3iAkBms1DKGJk1eUriEF0=
Subject key identifier: 3A:29:97:76:0C:6A:4C:7F:CA:BC:87:41:E9:90:6F:C9:71:6B:84:5C
Authority key identifier: D2:6E:45:38:F1:DD:EA:77:F5:73:96:BB:93:B9:07:F1:52:DF:69:7C
Certificate issuer: /CN=d26e4538f1ddea77f57396bb93b907f152df697c
Certificate serial: 01963B40CF17B04B956E46EAE634FE4E1BBE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0m5FOPHd6nf1c5a7k7kH8VLfaXw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7a/64666e-af1b-4118-823d-5de99a52aa39/1/0m5FOPHd6nf1c5a7k7kH8VLfaXw.mft
Manifest number: 02D9
Signing time: Tue 15 Apr 2025 21:00:25 +0000
Manifest this update: Tue 15 Apr 2025 21:00:25 +0000
Manifest next update: Wed 16 Apr 2025 21:00:25 +0000
Files and hashes: 1: 0m5FOPHd6nf1c5a7k7kH8VLfaXw.crl (hash: ZLKXnGVZEHCj+z5tI/sL+Fw95NV9pzdROqiyywWEE8Y=)
2: NJkr6UX1dyZbz9hAAHSEva9N1dU.roa (hash: dH1+iQ8jrIWNeK4bcaaw6PWPrPpzci2xfb2T6H4KeWY=)
3: nh7sfAMY2Tccb18ce2fpxnrtx8Q.roa (hash: b96JAOO8n31SIeeTv1ll8vmQplePANc0Xbj3yOfw8j0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7a/64666e-af1b-4118-823d-5de99a52aa39/1/0m5FOPHd6nf1c5a7k7kH8VLfaXw.crl
rsync://rpki.ripe.net/repository/DEFAULT/7a/64666e-af1b-4118-823d-5de99a52aa39/1/0m5FOPHd6nf1c5a7k7kH8VLfaXw.mft
rsync://rpki.ripe.net/repository/DEFAULT/0m5FOPHd6nf1c5a7k7kH8VLfaXw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 16 Apr 2025 21:00:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:3b:40:cf:17:b0:4b:95:6e:46:ea:e6:34:fe:4e:1b:be
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d26e4538f1ddea77f57396bb93b907f152df697c
Validity
Not Before: Apr 15 21:00:25 2025 GMT
Not After : Apr 16 21:00:25 2025 GMT
Subject: CN=3a2997760c6a4c7fcabc8741e9906fc9716b845c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f3:88:a6:f2:13:15:e6:db:78:4a:7e:ca:7e:49:
fb:d8:81:fb:d6:47:f2:11:05:8d:90:a5:ea:ff:10:
f4:ab:ce:09:76:6c:7c:1e:ae:ca:44:aa:3e:a2:f9:
70:8e:32:7e:fa:a0:b3:b3:b9:b4:e8:1d:c2:16:e9:
ce:8d:0e:be:72:a8:0c:51:e1:96:79:ab:87:b6:b3:
ee:02:db:9d:e4:ae:ea:86:75:8b:47:3e:29:1e:4e:
de:f0:d3:1c:03:42:a0:22:e8:be:e3:10:b7:95:a5:
4d:cf:17:5d:67:e2:26:ed:ac:c1:87:3e:19:aa:bd:
81:2d:8b:8a:fd:b0:a5:cb:e5:6e:81:88:be:d7:4e:
b9:ad:78:00:82:76:6e:77:bf:78:f9:35:c2:04:80:
42:c9:90:f6:92:4c:69:3d:81:36:5a:c2:22:b2:1c:
e6:5d:93:8e:05:7e:3f:5b:b9:aa:82:23:44:a5:e7:
02:1a:22:98:0f:04:dd:50:5c:32:a9:50:3b:07:f0:
ff:6b:02:e7:b9:b0:74:87:88:14:90:ed:60:27:7e:
89:e7:b6:f7:41:5e:ba:ec:c7:a2:ab:3c:9f:1c:a3:
89:a8:da:c5:aa:e5:fa:ef:89:31:2a:04:97:0a:db:
4e:48:f2:bf:83:88:99:15:e8:6a:81:d7:21:99:97:
d5:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3A:29:97:76:0C:6A:4C:7F:CA:BC:87:41:E9:90:6F:C9:71:6B:84:5C
X509v3 Authority Key Identifier:
keyid:D2:6E:45:38:F1:DD:EA:77:F5:73:96:BB:93:B9:07:F1:52:DF:69:7C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0m5FOPHd6nf1c5a7k7kH8VLfaXw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7a/64666e-af1b-4118-823d-5de99a52aa39/1/0m5FOPHd6nf1c5a7k7kH8VLfaXw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7a/64666e-af1b-4118-823d-5de99a52aa39/1/0m5FOPHd6nf1c5a7k7kH8VLfaXw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4e:00:02:f8:2a:d4:d8:41:7d:a2:f4:83:c6:6c:63:49:d4:9c:
0b:7f:fb:77:98:ee:8a:81:8d:e9:61:8b:91:3d:2a:9c:0a:b4:
7b:b6:25:07:b7:7e:92:2d:c4:93:4f:be:b2:6e:71:33:ea:3b:
16:7d:9b:83:b4:9a:a7:1d:0a:6f:c4:2b:1f:2e:88:67:25:09:
9f:f4:45:ce:e0:ca:60:ed:c4:2b:3f:91:69:3c:68:c3:98:ec:
4a:d3:75:81:6e:bb:fc:d9:d8:c9:6b:76:2a:e6:ab:2a:70:95:
3b:6b:8e:ef:95:03:b0:2c:3a:ea:57:0c:e5:0e:5e:db:0c:56:
29:ad:f2:ee:48:35:e4:47:cd:13:23:3e:17:fb:ed:54:15:8e:
e0:44:e7:fc:c4:c1:b2:67:80:1f:96:5a:fe:fc:47:0c:18:e6:
5a:c9:ff:b9:38:e0:82:c5:d9:72:10:04:ad:a9:f1:21:9d:14:
21:da:b2:f5:8a:f5:3c:3f:3b:cf:19:8a:29:d5:14:06:3f:ad:
b9:0e:3f:ec:c4:27:37:c7:89:1c:a3:e3:81:38:1a:cd:4e:95:
ff:34:4c:7a:d5:82:d9:98:cb:76:3c:f3:4d:16:e2:f0:f4:3c:
18:26:a6:42:8e:7d:58:8a:f2:b9:72:ad:17:85:ff:19:b5:94:
5b:51:07:51
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 16 04:58:58 2025 by rpki-client