Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/85/de34b5-0320-4cd9-9ee3-c4ce3e8073db/1/0u2k-NnkgpUqESsu9aTyObf2JVE.mft
File: 0u2k-NnkgpUqESsu9aTyObf2JVE.mft (raw, json)
Hash identifier: T6o+J+gineGxyy5lTAhnkpqFH28ge+Rrcf07+0Tg1Go=
Subject key identifier: F3:51:FC:A6:BB:43:EE:FA:B9:DC:7B:AF:D9:E3:D0:05:CF:C5:35:F3
Authority key identifier: D2:ED:A4:F8:D9:E4:82:95:2A:11:2B:2E:F5:A4:F2:39:B7:F6:25:51
Certificate issuer: /CN=d2eda4f8d9e482952a112b2ef5a4f239b7f62551
Certificate serial: 019611D779AB7A765DDA0AA2BB6E173D4183
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0u2k-NnkgpUqESsu9aTyObf2JVE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/85/de34b5-0320-4cd9-9ee3-c4ce3e8073db/1/0u2k-NnkgpUqESsu9aTyObf2JVE.mft
Manifest number: 096E
Signing time: Mon 07 Apr 2025 20:00:55 +0000
Manifest this update: Mon 07 Apr 2025 20:00:55 +0000
Manifest next update: Tue 08 Apr 2025 20:00:55 +0000
Files and hashes: 1: 0u2k-NnkgpUqESsu9aTyObf2JVE.crl (hash: S2io7NXT7Jei6H0s0g3TujbIW/rByy5YWT6tyZ9GGZc=)
2: akVfoe2NMwgKKix-I6Nd4k5ngMM.roa (hash: Na2cRAe6jotzXC7LjsbqIgTy4+1+OZSmFcHXYaFK5lY=)
3: uCvfPXkpFAEnX7rWGxoF9RqHD9E.roa (hash: 0pV5mcTfxFzm13bkl5Ni2QZOplGIOcdfnivcOrYLhtA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/85/de34b5-0320-4cd9-9ee3-c4ce3e8073db/1/0u2k-NnkgpUqESsu9aTyObf2JVE.crl
rsync://rpki.ripe.net/repository/DEFAULT/85/de34b5-0320-4cd9-9ee3-c4ce3e8073db/1/0u2k-NnkgpUqESsu9aTyObf2JVE.mft
rsync://rpki.ripe.net/repository/DEFAULT/0u2k-NnkgpUqESsu9aTyObf2JVE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 08 Apr 2025 14:28:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:11:d7:79:ab:7a:76:5d:da:0a:a2:bb:6e:17:3d:41:83
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d2eda4f8d9e482952a112b2ef5a4f239b7f62551
Validity
Not Before: Apr 7 20:00:55 2025 GMT
Not After : Apr 8 20:00:55 2025 GMT
Subject: CN=f351fca6bb43eefab9dc7bafd9e3d005cfc535f3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:de:2d:e5:de:6a:23:36:53:d2:1e:9b:ca:f3:ae:
56:cf:8c:b8:e0:bf:dd:e6:90:ed:b8:d2:de:92:de:
b0:b7:75:78:68:b7:32:d2:48:a4:89:d2:c3:8a:bb:
28:c7:bc:61:73:ec:72:c5:ce:83:d4:ad:fd:30:6a:
e6:9f:de:28:39:e8:fb:49:ae:ba:b0:c8:9d:0b:08:
6d:be:40:35:dc:84:d8:4b:c7:ec:14:77:15:50:6d:
21:90:f7:d1:5c:b2:96:bd:de:20:c9:64:21:64:2a:
85:66:6d:dc:7f:df:27:31:f5:79:3f:89:28:6a:ae:
ea:1b:f8:28:ed:11:9e:75:70:22:13:5a:81:c4:0d:
fa:d0:f2:ce:1c:e9:45:00:07:a3:3f:8f:02:75:dd:
ec:d8:2d:4d:1b:5a:ed:a8:81:4b:26:a8:46:52:73:
7f:80:e9:a5:e6:9c:3d:fd:6d:ec:9a:40:9e:72:f8:
d6:07:dc:4a:b6:b4:53:c2:fb:15:a1:b4:80:d2:10:
c6:d7:c8:b6:68:a7:87:17:4b:01:f9:8f:30:01:e1:
2a:4f:93:5a:16:96:50:f0:46:3b:a1:b5:33:ce:89:
34:76:41:92:77:a9:da:f0:6a:87:e9:da:15:9b:d1:
3c:88:e7:63:c5:18:a7:32:ab:fa:fe:bf:ad:37:f9:
e9:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F3:51:FC:A6:BB:43:EE:FA:B9:DC:7B:AF:D9:E3:D0:05:CF:C5:35:F3
X509v3 Authority Key Identifier:
keyid:D2:ED:A4:F8:D9:E4:82:95:2A:11:2B:2E:F5:A4:F2:39:B7:F6:25:51
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0u2k-NnkgpUqESsu9aTyObf2JVE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/85/de34b5-0320-4cd9-9ee3-c4ce3e8073db/1/0u2k-NnkgpUqESsu9aTyObf2JVE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/85/de34b5-0320-4cd9-9ee3-c4ce3e8073db/1/0u2k-NnkgpUqESsu9aTyObf2JVE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
13:64:84:ff:b6:58:30:d0:b8:81:77:ed:0f:e3:f0:87:53:1b:
6f:d2:36:7a:55:d7:f4:74:e6:4d:58:cc:91:4d:4f:ff:d8:77:
24:b6:90:a5:3c:16:8d:b4:1e:44:26:39:c3:43:63:63:10:7d:
33:a9:4b:cc:c0:9f:2a:94:2e:92:2a:24:89:d5:07:9a:1f:4d:
c2:ab:d8:c0:1f:36:d9:ba:7d:31:f0:be:8c:0e:86:8e:fe:ab:
b5:ee:b1:69:9d:2a:f1:e9:e5:e1:23:ae:2f:e9:18:39:bf:75:
61:4c:37:3c:9d:75:9b:87:5b:07:65:48:be:0c:32:cf:ba:84:
84:8e:70:52:2f:0f:0a:0b:be:4a:68:4e:59:29:aa:64:7f:f9:
14:8e:1e:95:80:aa:0f:92:60:67:81:b3:0c:33:18:cf:ef:f6:
e4:87:8f:de:49:eb:19:e0:ad:72:05:cb:03:89:27:f0:25:a2:
58:68:d9:43:5e:d1:6a:63:81:a4:3c:2e:a2:ec:10:cc:f5:fa:
7c:e1:a7:59:e8:25:14:39:be:7d:8c:1f:f9:52:4c:7c:9e:4b:
de:55:83:ef:23:c2:be:fc:ac:7b:1e:dd:86:1a:70:de:0c:3e:
d5:95:65:e0:4a:1a:ed:1a:3c:cd:8a:a4:0b:8e:13:5e:6c:cf:
13:ee:86:ba
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 8 00:00:51 2025 by rpki-client