Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e3/c61fa2-bb3e-4955-ab5f-5e3b6ea5a7ee/1/0z1rVZ02xBMHaSp7D7Pvd6pgF84.mft
File: 0z1rVZ02xBMHaSp7D7Pvd6pgF84.mft (raw, json)
Hash identifier: WDGL+vrp7ppuKE4XKzkZyNo+JH5XmCWV5K9IghgLlOw=
Subject key identifier: E2:40:1A:0E:B0:33:A3:CD:31:04:F1:32:F3:45:5B:08:04:1C:CA:96
Authority key identifier: D3:3D:6B:55:9D:36:C4:13:07:69:2A:7B:0F:B3:EF:77:AA:60:17:CE
Certificate issuer: /CN=d33d6b559d36c41307692a7b0fb3ef77aa6017ce
Certificate serial: 01964E22E7CD86B66519820A615F6A7841CB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0z1rVZ02xBMHaSp7D7Pvd6pgF84.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e3/c61fa2-bb3e-4955-ab5f-5e3b6ea5a7ee/1/0z1rVZ02xBMHaSp7D7Pvd6pgF84.mft
Manifest number: 0A6F
Signing time: Sat 19 Apr 2025 13:00:32 +0000
Manifest this update: Sat 19 Apr 2025 13:00:32 +0000
Manifest next update: Sun 20 Apr 2025 13:00:32 +0000
Files and hashes: 1: 0z1rVZ02xBMHaSp7D7Pvd6pgF84.crl (hash: 6jGr2PoezElqB7PtbNI3gP5ES87ecjH74Xoy2h4HT6Y=)
2: It_RR5RDy-OVRDGDczZ_wIsJmfg.roa (hash: Xudxun2iPicL1+7TPznqWQiuqD3U5fvxLgSLN+SZ2rM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e3/c61fa2-bb3e-4955-ab5f-5e3b6ea5a7ee/1/0z1rVZ02xBMHaSp7D7Pvd6pgF84.crl
rsync://rpki.ripe.net/repository/DEFAULT/e3/c61fa2-bb3e-4955-ab5f-5e3b6ea5a7ee/1/0z1rVZ02xBMHaSp7D7Pvd6pgF84.mft
rsync://rpki.ripe.net/repository/DEFAULT/0z1rVZ02xBMHaSp7D7Pvd6pgF84.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 20 Apr 2025 13:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:4e:22:e7:cd:86:b6:65:19:82:0a:61:5f:6a:78:41:cb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d33d6b559d36c41307692a7b0fb3ef77aa6017ce
Validity
Not Before: Apr 19 13:00:32 2025 GMT
Not After : Apr 20 13:00:32 2025 GMT
Subject: CN=e2401a0eb033a3cd3104f132f3455b08041cca96
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e2:c6:cb:f4:14:f1:17:cd:9c:fe:54:31:e7:73:
3b:f0:66:5d:0b:bb:0e:85:3a:87:0c:10:37:2e:4f:
94:06:42:ff:b8:8a:1c:3b:15:8e:3e:19:ac:11:3e:
b0:21:03:ef:9a:2a:5c:14:df:a8:cb:6b:bc:a2:fa:
35:e1:9b:f9:99:91:d6:33:52:70:cc:23:a9:65:67:
4e:14:87:b8:c8:be:29:09:7e:f6:5e:36:b4:b4:7e:
c9:78:c7:25:3f:aa:b5:64:56:e8:e6:cd:0f:9e:8c:
72:eb:5f:7c:46:e3:44:50:2e:12:3d:9a:aa:11:90:
57:0d:d2:05:aa:50:11:ef:44:94:89:2e:c7:4d:a9:
98:a0:12:4a:a4:c4:23:41:99:5b:70:28:87:4e:c5:
77:cf:a4:40:a4:98:38:8f:65:9d:8e:c0:6f:2d:2a:
46:14:b3:59:01:fd:1a:b3:dd:be:1c:0b:e8:7d:30:
81:e3:86:51:66:ef:f6:77:85:d8:48:2a:e7:cb:b8:
18:e1:a5:9c:6c:a6:3d:c0:d2:f9:28:a9:10:68:4a:
77:b5:f0:52:96:ba:55:be:ec:2c:1c:36:b2:bb:39:
7b:c0:db:1a:05:de:b6:18:c0:6b:4a:2f:7e:2d:89:
23:84:82:a0:30:d7:23:0f:65:52:96:90:c0:55:32:
a8:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E2:40:1A:0E:B0:33:A3:CD:31:04:F1:32:F3:45:5B:08:04:1C:CA:96
X509v3 Authority Key Identifier:
keyid:D3:3D:6B:55:9D:36:C4:13:07:69:2A:7B:0F:B3:EF:77:AA:60:17:CE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0z1rVZ02xBMHaSp7D7Pvd6pgF84.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e3/c61fa2-bb3e-4955-ab5f-5e3b6ea5a7ee/1/0z1rVZ02xBMHaSp7D7Pvd6pgF84.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e3/c61fa2-bb3e-4955-ab5f-5e3b6ea5a7ee/1/0z1rVZ02xBMHaSp7D7Pvd6pgF84.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
48:79:bf:1f:2c:58:1f:c5:6e:68:07:ad:89:cf:88:79:bf:6e:
82:d1:2a:9c:fa:e6:31:b4:d2:32:83:d4:05:2d:1a:05:01:d1:
2f:f6:6c:88:85:9b:d5:ce:9f:bb:3c:10:52:60:70:05:85:9c:
69:b8:e3:69:af:05:a5:fd:c4:d9:cc:4e:8f:e2:a2:21:7d:b2:
21:6d:ce:f3:e9:3d:94:b4:3f:6d:92:f5:7c:b8:09:c6:19:04:
fb:3c:d6:1f:b9:7c:73:be:02:89:46:6a:4e:74:c8:ec:5d:0d:
f8:4a:f6:7a:16:c6:4f:79:4e:21:f5:c4:28:d5:95:df:3b:39:
8e:47:4d:b0:ac:b8:b2:34:c6:df:73:21:2a:9d:e9:75:3f:ce:
8a:50:24:aa:4f:7d:f0:74:59:8f:60:33:8a:8b:6d:9c:f5:64:
22:65:59:a2:4c:ab:b0:f6:c8:67:b5:81:c8:01:6b:38:1c:5e:
3f:ac:d3:74:c6:2b:55:d2:c0:dd:fe:1a:60:15:40:6c:24:84:
27:53:c5:04:2c:70:3d:5b:fc:fd:b9:a4:73:b3:7a:5b:93:e4:
b5:db:f4:fe:43:e8:0e:c4:a8:f0:5c:06:e3:3d:64:0c:3e:ad:
17:b7:47:1b:bb:af:2e:3f:e3:bd:ac:cc:98:d2:7a:d6:d3:7b:
cd:c4:35:d6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 19 18:37:23 2025 by rpki-client