Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/94/fa73f8-33e0-4032-84ec-a96ef6f6435c/1/0EJl-xHCoiC8NQcYZz4HBNHtrd4.mft
File: 0EJl-xHCoiC8NQcYZz4HBNHtrd4.mft (raw, json)
Hash identifier: HPsHbJUuMIJL0dC1Y5A2Ih1HDueg7mXZONuNy+1iJmg=
Subject key identifier: 09:6F:18:FA:03:B5:46:D1:E1:51:78:58:F4:F6:E6:16:EA:79:BC:0F
Authority key identifier: D0:42:65:FB:11:C2:A2:20:BC:35:07:18:67:3E:07:04:D1:ED:AD:DE
Certificate issuer: /CN=d04265fb11c2a220bc350718673e0704d1edadde
Certificate serial: 01960F443E1AE3260C97D217D4ED4353E6B6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0EJl-xHCoiC8NQcYZz4HBNHtrd4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/94/fa73f8-33e0-4032-84ec-a96ef6f6435c/1/0EJl-xHCoiC8NQcYZz4HBNHtrd4.mft
Manifest number: 1001
Signing time: Mon 07 Apr 2025 08:00:52 +0000
Manifest this update: Mon 07 Apr 2025 08:00:52 +0000
Manifest next update: Tue 08 Apr 2025 08:00:52 +0000
Files and hashes: 1: 0EJl-xHCoiC8NQcYZz4HBNHtrd4.crl (hash: DLtrtyr96Jv9wkliJy2PFhcHunQz6PHSY47DTEQ/kaw=)
2: ickIIpxDa66Zw5SNhJ159yjnJm4.roa (hash: Ip9TbNQZyJFwTGktaixn0vXs7mVP4NezsqJqAycz9sc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/94/fa73f8-33e0-4032-84ec-a96ef6f6435c/1/0EJl-xHCoiC8NQcYZz4HBNHtrd4.crl
rsync://rpki.ripe.net/repository/DEFAULT/94/fa73f8-33e0-4032-84ec-a96ef6f6435c/1/0EJl-xHCoiC8NQcYZz4HBNHtrd4.mft
rsync://rpki.ripe.net/repository/DEFAULT/0EJl-xHCoiC8NQcYZz4HBNHtrd4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 08 Apr 2025 08:00:52 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:0f:44:3e:1a:e3:26:0c:97:d2:17:d4:ed:43:53:e6:b6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d04265fb11c2a220bc350718673e0704d1edadde
Validity
Not Before: Apr 7 08:00:52 2025 GMT
Not After : Apr 8 08:00:52 2025 GMT
Subject: CN=096f18fa03b546d1e1517858f4f6e616ea79bc0f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:d2:1c:32:af:ce:62:be:0e:e3:bd:cb:1b:c8:
3a:10:16:ac:c4:3e:09:1f:0a:0d:51:cc:ef:9d:28:
d4:33:9a:ec:c7:72:48:c9:04:48:48:d2:9b:03:67:
dd:53:a7:aa:45:54:91:fc:ef:7c:7d:44:18:3e:0a:
3f:53:10:dd:19:32:aa:6b:b1:04:16:52:2d:36:c4:
be:02:29:73:84:ec:62:cf:17:db:d2:e9:5a:6b:61:
74:61:c0:e8:33:dc:a8:cb:21:fe:ed:8f:68:a1:a1:
e1:cd:dc:7b:79:77:cb:42:08:97:ac:0c:f4:ac:39:
99:42:f2:78:6f:d9:bf:42:d5:a2:c6:dc:4c:1d:36:
17:9f:d1:0f:85:16:68:63:cd:d9:9a:54:94:a0:22:
5f:38:01:1d:77:fc:61:8b:09:ee:e9:d6:18:e2:8f:
5a:74:7a:cd:4b:b1:e4:0c:49:23:47:52:08:61:41:
72:1f:98:08:bc:6c:8a:74:7b:a1:6d:34:44:8f:5c:
16:4d:d9:07:15:60:b9:aa:5f:09:f3:d1:24:92:e5:
d2:c3:70:96:1c:98:f6:38:54:0c:9b:1e:fb:6b:52:
f0:61:20:4c:8b:21:3b:d2:d4:d7:6d:4a:48:32:3e:
6b:6f:e5:c6:ad:e7:ee:24:4d:dc:f3:52:53:97:d4:
41:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
09:6F:18:FA:03:B5:46:D1:E1:51:78:58:F4:F6:E6:16:EA:79:BC:0F
X509v3 Authority Key Identifier:
keyid:D0:42:65:FB:11:C2:A2:20:BC:35:07:18:67:3E:07:04:D1:ED:AD:DE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0EJl-xHCoiC8NQcYZz4HBNHtrd4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/94/fa73f8-33e0-4032-84ec-a96ef6f6435c/1/0EJl-xHCoiC8NQcYZz4HBNHtrd4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/94/fa73f8-33e0-4032-84ec-a96ef6f6435c/1/0EJl-xHCoiC8NQcYZz4HBNHtrd4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
55:61:ff:ff:16:52:f3:d8:c8:2b:5c:5f:ce:27:c1:b7:1c:85:
84:76:db:43:3f:0c:8f:d8:aa:e7:cc:df:0c:f1:e0:a0:1a:b1:
f1:ba:e4:6e:69:c6:42:25:c1:17:92:f0:6c:75:c3:d8:a0:84:
c2:d2:d8:25:52:32:ce:32:0d:b0:64:b9:fe:ee:2c:9f:86:e0:
dd:ca:f8:68:82:75:16:26:95:16:78:f7:2b:c0:56:ff:fe:e1:
9d:2f:bd:da:e8:b7:f9:e0:ea:2e:9e:cf:3d:f3:81:50:94:c1:
38:07:2c:bd:8e:19:64:fd:1f:57:ec:c5:f4:88:76:26:91:70:
c3:34:ab:90:6f:8b:d4:11:0a:f6:db:56:9c:1a:9b:c9:19:fc:
65:fb:91:07:5c:98:4c:1a:30:75:21:94:54:08:02:51:c3:31:
e4:0e:7a:b3:3a:46:5f:29:2d:44:8e:54:5b:f9:f7:61:98:6a:
9a:f5:5d:b7:87:ac:b9:60:1e:bb:90:74:6a:c1:3f:71:2b:98:
3d:da:3b:0f:f7:78:4d:c7:09:25:43:b7:86:94:95:db:ec:7c:
f1:a7:36:9c:24:e6:16:80:7d:3d:4f:b7:40:b2:fb:c8:46:52:
a0:51:03:82:0b:a7:f9:6c:1c:06:3b:5f:6a:e6:6a:17:02:57:
e0:01:81:e5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 15:40:08 2025 by rpki-client