Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/be/5ea569-f174-45c5-9db7-2af095ffc9bb/1/0fmHr1rbIwTUJvVA3l1lBUUjHlA.mft
File: 0fmHr1rbIwTUJvVA3l1lBUUjHlA.mft (raw, json)
Hash identifier: QzjoajpoRk89KfMivhWDzaFrM8vansc+BXYu0qFx420=
Subject key identifier: 02:C5:C5:18:05:A4:F0:E1:CD:2B:D5:45:03:DA:29:FB:CE:8D:FD:EF
Authority key identifier: D1:F9:87:AF:5A:DB:23:04:D4:26:F5:40:DE:5D:65:05:45:23:1E:50
Certificate issuer: /CN=d1f987af5adb2304d426f540de5d650545231e50
Certificate serial: 01958EBC9FD2F74AD2C8C6B2E0E609A65062
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0fmHr1rbIwTUJvVA3l1lBUUjHlA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/be/5ea569-f174-45c5-9db7-2af095ffc9bb/1/0fmHr1rbIwTUJvVA3l1lBUUjHlA.mft
Manifest number: 097F
Signing time: Thu 13 Mar 2025 09:01:21 +0000
Manifest this update: Thu 13 Mar 2025 09:01:21 +0000
Manifest next update: Fri 14 Mar 2025 09:01:21 +0000
Files and hashes: 1: 0fmHr1rbIwTUJvVA3l1lBUUjHlA.crl (hash: kOe/8lcqXh/HOimmBWtpBK8WG/d/d5NPjmogbMBWFIE=)
2: 5LrP6fsEeipB-xjaCGTQi9KsiHU.roa (hash: IUrzC+/E4lKM4F7rtTCN//MYlbyHBk9E/FLwLHHLeZU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/be/5ea569-f174-45c5-9db7-2af095ffc9bb/1/0fmHr1rbIwTUJvVA3l1lBUUjHlA.crl
rsync://rpki.ripe.net/repository/DEFAULT/be/5ea569-f174-45c5-9db7-2af095ffc9bb/1/0fmHr1rbIwTUJvVA3l1lBUUjHlA.mft
rsync://rpki.ripe.net/repository/DEFAULT/0fmHr1rbIwTUJvVA3l1lBUUjHlA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 14 Mar 2025 09:00:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:8e:bc:9f:d2:f7:4a:d2:c8:c6:b2:e0:e6:09:a6:50:62
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d1f987af5adb2304d426f540de5d650545231e50
Validity
Not Before: Mar 13 09:01:21 2025 GMT
Not After : Mar 14 09:01:21 2025 GMT
Subject: CN=02c5c51805a4f0e1cd2bd54503da29fbce8dfdef
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:14:29:26:28:59:b4:de:4a:2e:6c:a1:c5:71:
0d:fc:7c:9e:2b:fa:2a:2d:be:7e:38:c6:ee:75:33:
79:91:a9:c5:69:40:17:8d:a0:b0:fd:4c:2b:95:86:
6a:94:9f:98:fc:82:3b:07:cc:5d:ce:41:0a:0e:5d:
9d:11:1a:52:95:a2:f2:37:f8:da:eb:02:b2:85:cc:
d5:a5:d8:72:32:0c:02:fe:27:9c:41:0e:36:f5:8b:
a5:3f:b4:0f:e3:44:ea:c4:03:a6:99:6b:09:cb:86:
50:c1:f5:f2:ac:e4:70:23:4a:86:c1:ed:f4:b5:59:
88:e8:a3:43:40:0d:2a:f1:40:e8:c7:34:e0:2f:fc:
2d:28:0f:ee:f8:1a:a7:33:bf:c7:54:da:3d:74:c6:
99:b8:80:50:20:04:cb:40:d0:a2:c5:68:c0:41:26:
c9:1c:4d:1a:39:cf:4b:49:9f:9e:36:c9:4d:26:f1:
ba:eb:2a:0e:eb:0d:c6:9d:71:c2:20:62:a4:76:69:
b4:cb:8a:44:80:68:8b:08:b4:86:3b:5d:98:fb:c5:
22:c3:8b:e7:70:ef:11:f2:28:3d:61:d4:09:e9:35:
cc:7a:0b:5c:bb:22:8c:39:63:07:52:26:ac:cb:f3:
89:ab:29:28:f0:d0:8f:fb:a3:97:b7:61:b2:bf:b4:
ea:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
02:C5:C5:18:05:A4:F0:E1:CD:2B:D5:45:03:DA:29:FB:CE:8D:FD:EF
X509v3 Authority Key Identifier:
keyid:D1:F9:87:AF:5A:DB:23:04:D4:26:F5:40:DE:5D:65:05:45:23:1E:50
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0fmHr1rbIwTUJvVA3l1lBUUjHlA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/be/5ea569-f174-45c5-9db7-2af095ffc9bb/1/0fmHr1rbIwTUJvVA3l1lBUUjHlA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/be/5ea569-f174-45c5-9db7-2af095ffc9bb/1/0fmHr1rbIwTUJvVA3l1lBUUjHlA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
13:45:04:c0:60:ad:8f:32:b6:6b:9f:d3:5b:62:e1:c0:7d:d4:
e9:7b:25:b5:c9:1c:93:f8:a3:ef:8c:1e:46:3d:89:74:98:1a:
48:1a:0d:2f:52:8f:03:35:8d:76:f9:6a:5d:48:f9:1a:4d:e7:
6f:06:d7:33:84:dd:2b:85:f8:f5:c4:23:5f:5b:c4:38:93:ae:
b6:7c:3c:a2:c9:17:40:7a:02:dd:59:cd:8f:f3:e2:12:4c:db:
c1:a6:0a:22:55:be:2f:7f:3c:b0:04:a0:e0:d3:83:7e:c4:73:
04:2e:18:b1:4b:4f:cf:fa:09:9d:0a:c2:cf:ef:a8:cf:94:9c:
42:19:4d:c3:3b:a8:41:83:7f:6d:36:b7:c3:b9:36:4e:8c:41:
5d:b8:d4:b1:0b:cc:15:78:18:d9:40:73:b2:b0:00:86:ea:e4:
68:8e:53:02:98:ff:d3:8b:62:a3:9b:31:35:98:44:7f:19:85:
a9:88:28:b2:9d:76:f7:75:ca:86:3e:f5:43:00:24:25:c8:48:
8f:d3:01:f9:35:31:02:79:bc:de:34:61:4e:5d:9c:26:77:8c:
2b:f7:48:14:50:2f:f6:00:58:ae:3e:ad:0b:db:52:c3:e6:b3:
34:c8:dd:3f:a0:b9:1b:40:62:98:7d:6c:81:5a:3f:9c:22:19:
cc:96:31:21
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 13 20:11:03 2025 by rpki-client