Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b9/c1b3c8-0693-49c4-8132-905407eb0f53/1/_0j7nPF97Oat2wju_ZvuhCweK2A.mft
File: _0j7nPF97Oat2wju_ZvuhCweK2A.mft (raw, json)
Hash identifier: 5tpnmkswCHPqfKUli/Zx9ql28UHPAvB+lB8QTLioHdk=
Subject key identifier: 93:74:E6:90:BC:8A:FC:BE:68:CA:59:7E:25:48:A7:8A:C5:2D:5D:C7
Authority key identifier: FF:48:FB:9C:F1:7D:EC:E6:AD:DB:08:EE:FD:9B:EE:84:2C:1E:2B:60
Certificate issuer: /CN=ff48fb9cf17dece6addb08eefd9bee842c1e2b60
Certificate serial: 0196120E9B6A49268DBDF4FBD28CE408E4D1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_0j7nPF97Oat2wju_ZvuhCweK2A.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b9/c1b3c8-0693-49c4-8132-905407eb0f53/1/_0j7nPF97Oat2wju_ZvuhCweK2A.mft
Manifest number: 14DD
Signing time: Mon 07 Apr 2025 21:01:09 +0000
Manifest this update: Mon 07 Apr 2025 21:01:09 +0000
Manifest next update: Tue 08 Apr 2025 21:01:09 +0000
Files and hashes: 1: 0CzKrrdUvnNWtnCdr4geJQUloCY.roa (hash: JOOcnO9fPU3J8wcDUIkF0BM15ZCXJdWIZSdrxwMIcgk=)
2: _0j7nPF97Oat2wju_ZvuhCweK2A.crl (hash: GhIodEkbkAvwacvNN0gb87YDdzSy1GHwqWN0/KCmRaM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b9/c1b3c8-0693-49c4-8132-905407eb0f53/1/_0j7nPF97Oat2wju_ZvuhCweK2A.crl
rsync://rpki.ripe.net/repository/DEFAULT/b9/c1b3c8-0693-49c4-8132-905407eb0f53/1/_0j7nPF97Oat2wju_ZvuhCweK2A.mft
rsync://rpki.ripe.net/repository/DEFAULT/_0j7nPF97Oat2wju_ZvuhCweK2A.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 08 Apr 2025 14:28:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:12:0e:9b:6a:49:26:8d:bd:f4:fb:d2:8c:e4:08:e4:d1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ff48fb9cf17dece6addb08eefd9bee842c1e2b60
Validity
Not Before: Apr 7 21:01:09 2025 GMT
Not After : Apr 8 21:01:09 2025 GMT
Subject: CN=9374e690bc8afcbe68ca597e2548a78ac52d5dc7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:b4:c2:22:77:d6:01:fe:bc:84:06:4c:65:70:
62:a2:88:4a:2c:f2:f9:78:31:80:ce:dc:d9:94:50:
5b:38:a1:eb:39:63:0c:88:76:07:76:c5:d0:c9:f1:
e3:9c:a8:52:f3:c7:e9:a4:56:93:b0:0d:e3:77:fb:
d5:b7:24:fd:64:ea:3c:1f:99:04:cc:cc:94:f3:e5:
ca:c6:ac:60:15:37:36:ae:43:0d:f5:17:d1:a2:e3:
ad:b9:a1:89:eb:79:44:18:37:4d:bf:05:ee:f3:f3:
28:5d:03:f8:79:b7:3e:61:fd:b7:00:a0:42:59:2d:
a9:b6:59:43:8d:1e:09:1d:c6:15:8f:59:a8:68:ac:
07:62:6c:74:47:d2:1a:2f:3a:97:1b:36:19:0d:5f:
d7:38:f6:d6:2e:e2:86:fe:9e:f8:a4:13:bf:ad:b0:
06:fb:d1:c7:25:0f:f8:0e:48:a3:28:d0:66:d4:89:
2e:16:a4:4f:c0:d4:ab:ed:8f:08:5c:d8:90:e1:6c:
16:b4:46:94:69:1e:ba:96:8e:5c:82:23:22:a3:36:
5c:9d:07:02:ba:7f:23:be:c0:fc:3f:08:03:ce:7d:
d0:8f:c3:02:55:5d:d7:48:4b:cf:c2:c8:8a:ff:74:
87:5e:23:83:d7:ab:46:f1:39:33:79:2d:91:ed:d6:
eb:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
93:74:E6:90:BC:8A:FC:BE:68:CA:59:7E:25:48:A7:8A:C5:2D:5D:C7
X509v3 Authority Key Identifier:
keyid:FF:48:FB:9C:F1:7D:EC:E6:AD:DB:08:EE:FD:9B:EE:84:2C:1E:2B:60
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_0j7nPF97Oat2wju_ZvuhCweK2A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b9/c1b3c8-0693-49c4-8132-905407eb0f53/1/_0j7nPF97Oat2wju_ZvuhCweK2A.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b9/c1b3c8-0693-49c4-8132-905407eb0f53/1/_0j7nPF97Oat2wju_ZvuhCweK2A.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
23:28:23:25:b2:24:b8:c2:fd:6d:3d:24:66:5b:3d:a8:16:9e:
8c:14:3c:9f:32:4d:b6:8d:c3:28:18:e7:45:3c:62:61:75:9b:
17:d9:0a:37:20:13:95:c4:5a:92:71:50:cb:c0:6f:3f:7f:1a:
0a:11:4a:15:fe:88:65:00:3e:18:53:68:b1:3e:16:ca:f0:fa:
d4:9a:df:f2:b8:c0:fd:5c:de:25:0b:7a:d6:b0:33:4f:20:cf:
9c:52:ef:b2:9c:43:f9:0f:55:49:ad:e4:a2:58:f6:e8:7b:a3:
70:84:08:77:08:4f:60:d2:9e:dc:25:51:6d:56:8e:46:e2:a5:
c5:65:41:7f:d8:ac:66:2b:2e:db:81:e8:59:e0:d7:79:31:12:
ae:bc:9f:4e:7f:17:0d:d0:a5:1b:82:93:fa:2b:87:e1:6b:79:
b2:c7:63:c4:93:00:0c:b9:06:91:0b:ef:c1:a2:1c:d5:60:ee:
11:34:2d:72:d1:c0:b2:78:c2:45:c7:0d:c4:60:71:64:c5:b3:
d6:ec:32:bf:df:1a:2c:6f:e6:b7:84:e0:36:11:2d:c0:c8:ff:
42:18:0e:c4:59:3d:6b:63:cf:a2:62:6c:07:ce:0d:dd:aa:20:
d4:d1:d4:ad:dc:28:66:e1:8c:62:50:8b:e9:34:fa:d2:b5:39:
14:fa:76:98
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 8 00:27:18 2025 by rpki-client