Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e0/6c59cb-84ef-4218-8d7b-ff41d817b443/1/0cdYFDmjqhL-oc1YfshLdQmj_Ho.mft
File: 0cdYFDmjqhL-oc1YfshLdQmj_Ho.mft (raw, json)
Hash identifier: ah8zumh3z5XrLIT429PQkfDrD/z55Pmq9P79ZH5v8Jc=
Subject key identifier: FE:84:EC:AF:55:BD:67:41:B3:F6:8F:0B:52:40:B6:37:C2:A8:73:EB
Authority key identifier: D1:C7:58:14:39:A3:AA:12:FE:A1:CD:58:7E:C8:4B:75:09:A3:FC:7A
Certificate issuer: /CN=d1c7581439a3aa12fea1cd587ec84b7509a3fc7a
Certificate serial: 019638E4E3DD5AA97252101484B54BE21FD5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0cdYFDmjqhL-oc1YfshLdQmj_Ho.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e0/6c59cb-84ef-4218-8d7b-ff41d817b443/1/0cdYFDmjqhL-oc1YfshLdQmj_Ho.mft
Manifest number: 146F
Signing time: Tue 15 Apr 2025 10:00:46 +0000
Manifest this update: Tue 15 Apr 2025 10:00:46 +0000
Manifest next update: Wed 16 Apr 2025 10:00:46 +0000
Files and hashes: 1: 0cdYFDmjqhL-oc1YfshLdQmj_Ho.crl (hash: m54G4A+pgxPeulbkmnyW9kqFx1K5+xYHr+U2/pFahgM=)
2: 8YEIarEZx-dYy-m-KWzFFJwMPgc.roa (hash: /Oh4KoguX/e5aBAHRSFC+nV1NgF/Rk6lBFfGk9GKTMI=)
3: aSUDb8sQcFUdmzbKm4gdVmu_3-w.roa (hash: 8GJtsZCv+fojGQVCn6tX0KvBg6L31AUzVNGq91VjeYY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e0/6c59cb-84ef-4218-8d7b-ff41d817b443/1/0cdYFDmjqhL-oc1YfshLdQmj_Ho.crl
rsync://rpki.ripe.net/repository/DEFAULT/e0/6c59cb-84ef-4218-8d7b-ff41d817b443/1/0cdYFDmjqhL-oc1YfshLdQmj_Ho.mft
rsync://rpki.ripe.net/repository/DEFAULT/0cdYFDmjqhL-oc1YfshLdQmj_Ho.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 16 Apr 2025 08:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:38:e4:e3:dd:5a:a9:72:52:10:14:84:b5:4b:e2:1f:d5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d1c7581439a3aa12fea1cd587ec84b7509a3fc7a
Validity
Not Before: Apr 15 10:00:46 2025 GMT
Not After : Apr 16 10:00:46 2025 GMT
Subject: CN=fe84ecaf55bd6741b3f68f0b5240b637c2a873eb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:2e:ee:59:0b:12:c4:7b:b4:54:d3:8c:d9:66:
09:23:c6:d9:04:f3:e4:31:c4:21:90:2b:15:ed:f9:
87:ce:56:67:5e:75:bb:4d:f7:0b:cb:c3:bc:68:85:
b4:3a:a4:ef:26:81:b4:90:26:44:d1:58:35:33:1e:
5b:72:ad:8d:a3:b7:b0:84:4e:ea:9f:02:01:b6:a0:
29:b9:8e:b7:82:e0:1d:8c:a2:8a:b9:f4:4d:02:6b:
6a:04:0b:fd:74:99:aa:44:ee:47:52:39:0e:7a:99:
f0:ff:f1:42:a2:63:3e:12:39:ee:01:f6:08:63:26:
4c:87:06:af:c8:6e:65:0a:d8:35:76:0e:af:5a:5a:
c6:70:b8:f6:0c:0f:4a:b3:91:e7:b2:8a:f9:b5:c1:
35:3f:77:3e:75:02:2e:7a:c5:81:d8:51:4d:0c:4a:
55:56:b2:5b:77:68:ed:ba:3f:a6:9b:52:51:50:c0:
2e:4f:c8:49:7c:77:9b:2f:f1:67:ef:f9:5f:17:ff:
a6:e8:ff:f5:4a:3f:d1:f7:eb:58:dc:09:6c:0d:ce:
f5:ec:a0:a3:64:b7:a5:f7:55:42:d2:36:5d:5c:a4:
34:24:00:fc:89:cf:3d:e4:85:79:54:81:fc:40:e9:
2b:d4:0c:33:fe:ae:5a:68:89:fe:1d:12:37:ff:b8:
52:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FE:84:EC:AF:55:BD:67:41:B3:F6:8F:0B:52:40:B6:37:C2:A8:73:EB
X509v3 Authority Key Identifier:
keyid:D1:C7:58:14:39:A3:AA:12:FE:A1:CD:58:7E:C8:4B:75:09:A3:FC:7A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0cdYFDmjqhL-oc1YfshLdQmj_Ho.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/6c59cb-84ef-4218-8d7b-ff41d817b443/1/0cdYFDmjqhL-oc1YfshLdQmj_Ho.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/6c59cb-84ef-4218-8d7b-ff41d817b443/1/0cdYFDmjqhL-oc1YfshLdQmj_Ho.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1a:bf:25:7a:2c:e4:e8:0a:df:81:59:25:11:56:3f:28:3d:de:
84:d5:e8:a1:f2:1c:91:92:95:4d:02:84:1d:c9:ec:c4:84:f4:
54:57:c9:04:83:79:4e:d2:91:56:36:56:89:0a:d5:bb:4d:e8:
00:75:19:26:44:2b:7c:85:8d:89:fa:b7:1d:86:8b:89:c1:c0:
9c:aa:9d:24:7d:de:16:5d:bd:99:ac:d3:63:be:a0:05:f5:3b:
7f:53:89:e5:a9:02:3d:c2:76:13:8e:49:9e:3c:67:bb:db:a7:
89:23:cb:68:3d:74:3e:6e:47:91:9e:fa:8b:ca:d0:10:a2:4c:
fa:62:df:8a:10:3b:74:47:52:cb:ef:d5:a5:f8:3b:75:30:8a:
90:08:6a:5c:35:7c:96:a7:40:b8:6a:d6:6e:ac:9f:4b:94:2b:
99:bc:84:3d:2c:48:4d:1a:84:c2:51:a4:18:73:52:bd:6c:77:
d1:fe:42:81:67:b0:4c:1a:41:b5:43:78:8d:4f:7a:c8:c9:77:
3c:28:d4:8a:c9:67:1d:9e:9b:0a:ab:ad:33:03:99:d3:46:fa:
00:59:0c:f4:b7:37:5f:9e:5d:e6:b6:34:72:90:fb:d4:31:57:
f3:b3:f0:02:5e:39:64:4a:b6:97:5e:90:6f:06:d0:f0:02:ff:
05:f1:e6:4c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 15 13:38:43 2025 by rpki-client