Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a9/54e797-dbe3-4945-a835-648b92276014/1/g0KhQTsMzjTj9_vw5_OOCjcKYmc.mft
File: g0KhQTsMzjTj9_vw5_OOCjcKYmc.mft (raw, json)
Hash identifier: UwKMVa5l/qjmEPNI4TCYxAzaB5/uYqOgCTFLY/KG5p4=
Subject key identifier: C5:B2:96:0F:02:F9:65:C9:54:29:AE:F4:E0:F1:AF:40:EF:0F:A6:A1
Authority key identifier: 83:42:A1:41:3B:0C:CE:34:E3:F7:FB:F0:E7:F3:8E:0A:37:0A:62:67
Certificate issuer: /CN=8342a1413b0cce34e3f7fbf0e7f38e0a370a6267
Certificate serial: 0196594B277C4BA807CD78C5A38C4B7A6E48
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/g0KhQTsMzjTj9_vw5_OOCjcKYmc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a9/54e797-dbe3-4945-a835-648b92276014/1/g0KhQTsMzjTj9_vw5_OOCjcKYmc.mft
Manifest number: 0E99
Signing time: Mon 21 Apr 2025 17:00:19 +0000
Manifest this update: Mon 21 Apr 2025 17:00:19 +0000
Manifest next update: Tue 22 Apr 2025 17:00:19 +0000
Files and hashes: 1: 0L_x5KrJ0yONYZL6OhXnnI9ON0g.roa (hash: pLDQ94A0tCs3zB2hMsSvw81lpJnRZzCDTURKCYOZ0g4=)
2: g0KhQTsMzjTj9_vw5_OOCjcKYmc.crl (hash: hPpJdOYC4YXVHFCgvEyScaqxU0u5034wDuUPbIazq/4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a9/54e797-dbe3-4945-a835-648b92276014/1/g0KhQTsMzjTj9_vw5_OOCjcKYmc.crl
rsync://rpki.ripe.net/repository/DEFAULT/a9/54e797-dbe3-4945-a835-648b92276014/1/g0KhQTsMzjTj9_vw5_OOCjcKYmc.mft
rsync://rpki.ripe.net/repository/DEFAULT/g0KhQTsMzjTj9_vw5_OOCjcKYmc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 22 Apr 2025 10:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:59:4b:27:7c:4b:a8:07:cd:78:c5:a3:8c:4b:7a:6e:48
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8342a1413b0cce34e3f7fbf0e7f38e0a370a6267
Validity
Not Before: Apr 21 17:00:19 2025 GMT
Not After : Apr 22 17:00:19 2025 GMT
Subject: CN=c5b2960f02f965c95429aef4e0f1af40ef0fa6a1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:64:cf:33:82:f3:ae:27:31:83:c1:12:06:9c:
51:dc:2e:82:93:cb:d5:14:38:eb:70:97:39:4c:e5:
f0:83:08:4e:9d:41:4c:1d:05:7d:fa:39:85:27:4a:
98:83:aa:08:e3:fa:8c:db:ef:b1:c3:2b:b6:00:ab:
0b:ff:3a:3e:96:51:97:b6:dc:4a:33:e3:4a:99:97:
53:4d:33:89:fd:62:60:48:00:f5:42:9e:72:09:4e:
b2:ec:3d:81:f6:f2:47:80:8f:41:04:50:5c:b7:62:
80:78:b2:f4:d1:b4:7b:aa:97:29:71:13:e3:d9:f6:
c1:51:1b:43:0b:f9:4a:55:be:49:10:2b:41:c0:e0:
ba:65:bc:d1:ee:31:c1:71:c2:9f:e9:4a:cc:f7:07:
99:3a:84:1c:44:df:79:7b:ff:bf:8c:cf:73:00:9a:
9b:5e:a4:2f:8a:e9:a0:a8:23:c4:93:93:b9:50:08:
5f:e9:2f:6b:32:53:38:9b:bb:3d:55:a3:a3:cb:0f:
17:73:a7:d2:a4:d2:07:98:0c:bf:28:d3:57:0f:02:
24:e2:f5:11:77:79:7a:31:29:21:41:e6:ed:73:b2:
71:dc:ac:a7:cc:bd:a7:24:ac:e8:24:4d:96:27:67:
d4:18:95:1a:6f:2e:ef:57:49:74:a1:c2:b5:4d:c4:
4a:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C5:B2:96:0F:02:F9:65:C9:54:29:AE:F4:E0:F1:AF:40:EF:0F:A6:A1
X509v3 Authority Key Identifier:
keyid:83:42:A1:41:3B:0C:CE:34:E3:F7:FB:F0:E7:F3:8E:0A:37:0A:62:67
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/g0KhQTsMzjTj9_vw5_OOCjcKYmc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/54e797-dbe3-4945-a835-648b92276014/1/g0KhQTsMzjTj9_vw5_OOCjcKYmc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/54e797-dbe3-4945-a835-648b92276014/1/g0KhQTsMzjTj9_vw5_OOCjcKYmc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
88:c0:f2:5f:9e:b8:c2:25:cf:7d:78:2e:a0:49:c0:42:4c:f8:
b5:5d:d6:78:d1:02:08:41:bd:7c:34:63:46:55:c0:f6:78:d4:
f5:32:62:2c:88:74:cc:b3:fd:81:db:ab:a2:51:a0:3a:aa:99:
d9:7c:e6:c3:5e:78:b5:4c:a6:3d:ec:66:da:09:f8:82:aa:f1:
91:77:54:be:6c:4e:8b:f3:0e:71:6d:7a:68:86:9f:f3:21:37:
d7:f8:27:e8:56:38:01:cd:49:f1:5d:bd:58:6f:63:71:92:95:
1a:98:93:08:50:f9:52:7e:63:2f:31:02:ba:50:e8:49:60:76:
a5:3d:8c:79:64:a2:55:b6:37:ec:78:be:bf:a2:cc:47:df:fd:
25:3e:f6:de:0f:8d:41:82:36:0e:59:5d:ef:e0:2a:9f:68:50:
8b:05:77:ca:00:4b:c5:e7:5b:d4:a9:eb:e6:26:17:87:20:7b:
af:a3:48:87:3b:a7:cd:b1:48:1e:88:8c:ed:5b:1c:f8:8b:68:
f9:5a:d1:55:b9:11:da:21:98:37:45:51:fa:6e:59:c2:33:92:
77:98:48:46:11:22:74:db:98:a5:26:51:6f:67:2c:f4:89:98:
31:87:b5:cc:cf:f5:a4:a3:85:42:d1:4d:bc:08:b5:4e:2e:d8:
87:56:40:da
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 21 19:19:58 2025 by rpki-client