Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b1/e0e829-1284-4db1-ba48-785ac191b31a/1/0H3_VH6svoHcNGVZhEbTsCfct20.mft
File: 0H3_VH6svoHcNGVZhEbTsCfct20.mft (raw, json)
Hash identifier: xyfzmDqHUHyjHjjl3M6gVXuNF0LdPgBWW0IjnEuHsCE=
Subject key identifier: 94:30:6E:8B:5F:B1:41:CB:A5:8B:8C:A6:07:8F:2D:09:5C:67:B5:6C
Authority key identifier: D0:7D:FF:54:7E:AC:BE:81:DC:34:65:59:84:46:D3:B0:27:DC:B7:6D
Certificate issuer: /CN=d07dff547eacbe81dc3465598446d3b027dcb76d
Certificate serial: 01962D8636A79C24947A8DE6652E383AC4FA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0H3_VH6svoHcNGVZhEbTsCfct20.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b1/e0e829-1284-4db1-ba48-785ac191b31a/1/0H3_VH6svoHcNGVZhEbTsCfct20.mft
Manifest number: 14E9
Signing time: Sun 13 Apr 2025 05:01:32 +0000
Manifest this update: Sun 13 Apr 2025 05:01:32 +0000
Manifest next update: Mon 14 Apr 2025 05:01:32 +0000
Files and hashes: 1: 0H3_VH6svoHcNGVZhEbTsCfct20.crl (hash: 9PWi9y9FZQiPdc/Ti7Ak2zSMmUmFW6JsrV8I30yV9Q4=)
2: 7ZfxbTG5XE7d3U698g7DhphadTg.roa (hash: Pr0+WF0lvDtFnCz/0c70Eot8c7E9jRvKLuNSr3PuDSs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b1/e0e829-1284-4db1-ba48-785ac191b31a/1/0H3_VH6svoHcNGVZhEbTsCfct20.crl
rsync://rpki.ripe.net/repository/DEFAULT/b1/e0e829-1284-4db1-ba48-785ac191b31a/1/0H3_VH6svoHcNGVZhEbTsCfct20.mft
rsync://rpki.ripe.net/repository/DEFAULT/0H3_VH6svoHcNGVZhEbTsCfct20.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 14 Apr 2025 03:00:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:2d:86:36:a7:9c:24:94:7a:8d:e6:65:2e:38:3a:c4:fa
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d07dff547eacbe81dc3465598446d3b027dcb76d
Validity
Not Before: Apr 13 05:01:32 2025 GMT
Not After : Apr 14 05:01:32 2025 GMT
Subject: CN=94306e8b5fb141cba58b8ca6078f2d095c67b56c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:ee:09:29:d0:a4:a7:bd:c2:00:b3:70:c0:f1:
8f:b4:d9:40:83:ae:5f:59:e6:2f:e1:a8:69:57:a4:
c6:94:b9:c8:9f:80:c1:98:33:87:f3:e9:72:cc:84:
12:56:b5:1b:a9:40:6d:68:b2:a8:2b:86:e1:f7:af:
67:ed:ff:c4:ba:0e:3a:80:c5:cd:91:8a:9f:3f:f1:
db:0b:62:b1:6c:c0:d3:17:26:a7:0c:55:5a:87:24:
d1:68:76:fd:ff:58:3e:0e:1b:75:1b:b2:13:fe:fc:
64:d0:f9:3e:36:1a:2a:82:1e:40:54:7c:80:52:30:
8a:95:ae:e5:df:56:2c:49:fd:93:e1:e1:3a:51:ac:
2f:96:19:93:ea:31:c5:33:a3:9c:b4:a6:41:45:a8:
a9:5b:5e:5d:1b:00:7a:d0:1b:64:7e:25:62:d2:c1:
7b:d2:a4:1c:fb:d2:d1:fa:08:22:3b:a6:e4:64:5a:
98:41:cf:af:06:8d:24:8e:06:23:30:8f:e0:54:7c:
c4:9d:47:36:c2:40:6a:c0:e0:47:f3:e4:b5:51:ae:
7f:13:68:17:dd:7b:1e:37:fa:1c:22:08:88:d9:0f:
37:40:3b:c9:5b:f3:e9:bc:f9:97:a6:96:c6:0a:71:
eb:d7:02:1b:16:83:bd:dc:32:21:8a:5c:cc:d9:44:
4e:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
94:30:6E:8B:5F:B1:41:CB:A5:8B:8C:A6:07:8F:2D:09:5C:67:B5:6C
X509v3 Authority Key Identifier:
keyid:D0:7D:FF:54:7E:AC:BE:81:DC:34:65:59:84:46:D3:B0:27:DC:B7:6D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0H3_VH6svoHcNGVZhEbTsCfct20.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/e0e829-1284-4db1-ba48-785ac191b31a/1/0H3_VH6svoHcNGVZhEbTsCfct20.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/e0e829-1284-4db1-ba48-785ac191b31a/1/0H3_VH6svoHcNGVZhEbTsCfct20.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2e:cc:59:f6:ba:c5:54:b3:f8:3d:49:b9:a4:02:71:4d:33:b3:
0d:de:c9:7c:43:ef:62:ac:f3:9f:6f:72:3b:66:0f:fa:4e:b8:
5c:aa:20:3d:21:6e:11:06:df:52:e1:3a:88:a0:cd:93:87:6d:
f9:2b:b2:8e:e8:95:07:4c:a1:91:a2:4c:07:ed:16:61:17:c8:
52:83:dc:a7:49:19:87:ef:5c:9c:da:a0:28:2e:a9:23:27:55:
84:ae:94:2a:e6:11:c1:4c:81:a3:ff:98:74:95:a5:bb:f0:3b:
cd:10:32:29:9a:17:38:53:f3:33:74:e0:af:eb:b6:96:40:09:
b7:87:46:51:35:e7:55:7d:44:dc:f5:8f:ac:09:ae:68:73:fa:
af:c6:64:a6:3e:72:23:a5:ac:b4:31:10:7e:25:c3:51:50:20:
19:6c:ef:7f:94:06:cf:6a:04:27:a6:f8:01:54:2f:cf:16:a1:
e9:06:21:f8:5c:18:1f:7a:4c:74:8b:8a:bd:25:9f:b3:b0:db:
f5:32:b4:ce:a9:47:1d:e4:0a:6b:8c:a5:9c:88:01:d3:e6:fa:
81:98:a9:44:56:ac:44:f1:d7:2f:d7:c0:ab:1c:60:92:fb:b3:
5f:11:0d:6d:8f:80:87:31:b5:98:0a:fc:32:74:e6:7e:b6:cb:
da:16:5c:cf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 13 10:22:58 2025 by rpki-client