Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e7/1d4cfc-8e5c-457c-9620-135c91ec199e/1/oNvV0fht2d1mYGoU0x1kyw6qyDs.mft
File: oNvV0fht2d1mYGoU0x1kyw6qyDs.mft (raw, json)
Hash identifier: YTL3jL1yxZ/dxIZU+4wJH46gzmvIRyNTFnI7wT6Qgik=
Subject key identifier: 49:4B:04:A0:48:62:F3:08:A4:2C:A4:22:E5:D0:B6:E4:3B:BC:A9:A5
Authority key identifier: A0:DB:D5:D1:F8:6D:D9:DD:66:60:6A:14:D3:1D:64:CB:0E:AA:C8:3B
Certificate issuer: /CN=a0dbd5d1f86dd9dd66606a14d31d64cb0eaac83b
Certificate serial: 019613FCCAEB62CD83F7A6053CB4FC29BDAE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/oNvV0fht2d1mYGoU0x1kyw6qyDs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e7/1d4cfc-8e5c-457c-9620-135c91ec199e/1/oNvV0fht2d1mYGoU0x1kyw6qyDs.mft
Manifest number: 0F83
Signing time: Tue 08 Apr 2025 06:00:56 +0000
Manifest this update: Tue 08 Apr 2025 06:00:56 +0000
Manifest next update: Wed 09 Apr 2025 06:00:56 +0000
Files and hashes: 1: AItoBBXTr3JSVEunHoKYVScHBBA.roa (hash: bQ8pPRnSjhK+OHhk4/Jjzl0/46sUTmdeipylWtU4pOg=)
2: oNvV0fht2d1mYGoU0x1kyw6qyDs.crl (hash: eBN+6Znen9W6UJttzUZnWXzB4zPWvQ6RLu+AQQ4dHxU=)
3: ublcR1AG8bTtIDegIl4XF5yKZ2U.roa (hash: EReps1m4UdW66UXSYxPeRRxVic46xc68n57xt40fmWk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e7/1d4cfc-8e5c-457c-9620-135c91ec199e/1/oNvV0fht2d1mYGoU0x1kyw6qyDs.crl
rsync://rpki.ripe.net/repository/DEFAULT/e7/1d4cfc-8e5c-457c-9620-135c91ec199e/1/oNvV0fht2d1mYGoU0x1kyw6qyDs.mft
rsync://rpki.ripe.net/repository/DEFAULT/oNvV0fht2d1mYGoU0x1kyw6qyDs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 09 Apr 2025 06:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:13:fc:ca:eb:62:cd:83:f7:a6:05:3c:b4:fc:29:bd:ae
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a0dbd5d1f86dd9dd66606a14d31d64cb0eaac83b
Validity
Not Before: Apr 8 06:00:56 2025 GMT
Not After : Apr 9 06:00:56 2025 GMT
Subject: CN=494b04a04862f308a42ca422e5d0b6e43bbca9a5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:cd:7d:0d:ec:d1:5a:2d:13:29:87:0b:1a:0b:
97:59:bc:a7:c1:ba:36:ec:0c:8f:c3:ba:82:94:a0:
20:3f:72:f1:e4:6e:00:b1:df:75:ae:0d:79:a1:aa:
83:c2:52:11:3a:06:5e:02:0d:d0:72:00:74:6f:c3:
3c:5f:96:85:61:e9:aa:ec:99:07:31:60:01:de:a7:
3a:96:10:ad:c7:d0:50:f4:a8:56:f0:7b:c2:72:ec:
dc:84:bb:94:89:a7:ce:b0:2d:e2:0d:07:a4:61:e5:
e1:d7:99:78:9a:dd:c1:75:fa:5d:79:5f:8a:53:2f:
4e:b6:83:9a:d6:32:c2:aa:9b:27:cc:79:7c:e6:fe:
62:89:22:0f:0d:97:2e:80:66:db:e1:fd:36:90:c7:
7b:67:60:0f:e9:c7:32:da:7d:76:be:ed:c6:c0:df:
0e:1a:35:f4:25:c4:84:c5:84:7a:55:0f:e5:ef:f7:
46:0a:1c:b4:f5:2e:3c:86:3b:ee:2e:72:32:c4:14:
15:fe:80:4e:46:45:a9:81:84:62:66:60:ad:79:f2:
10:2f:ed:86:7b:30:5b:ef:e4:cc:ba:30:6d:c5:aa:
e5:ed:c8:c5:30:0a:0f:13:b8:55:b2:65:18:04:ab:
0c:3e:95:e4:df:38:06:b2:d0:91:f3:a4:93:66:8d:
e7:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
49:4B:04:A0:48:62:F3:08:A4:2C:A4:22:E5:D0:B6:E4:3B:BC:A9:A5
X509v3 Authority Key Identifier:
keyid:A0:DB:D5:D1:F8:6D:D9:DD:66:60:6A:14:D3:1D:64:CB:0E:AA:C8:3B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/oNvV0fht2d1mYGoU0x1kyw6qyDs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/1d4cfc-8e5c-457c-9620-135c91ec199e/1/oNvV0fht2d1mYGoU0x1kyw6qyDs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/1d4cfc-8e5c-457c-9620-135c91ec199e/1/oNvV0fht2d1mYGoU0x1kyw6qyDs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
67:2c:5e:11:cf:e7:42:63:c3:1e:a9:38:bf:db:65:b2:9d:a3:
57:25:33:a0:0b:b4:3c:d9:a4:df:00:32:8d:0f:01:62:d7:e1:
d4:2a:45:bf:bc:ad:b5:2c:ab:f1:5f:15:56:1c:41:36:0b:0b:
0a:60:54:80:30:73:47:52:9d:73:1e:7e:02:57:d9:29:c9:66:
2c:64:73:9f:01:32:1c:48:b9:be:ba:fc:9d:bc:bb:5a:00:16:
06:ea:d4:bb:41:b3:4a:af:50:11:2a:26:5b:74:72:06:a5:31:
10:73:e7:89:a7:b3:00:9f:c5:a9:79:10:60:8f:df:1f:13:10:
a5:83:df:4d:81:ce:8c:6c:23:34:f3:a3:3e:6c:ef:7f:2d:e4:
6f:10:c9:f0:5b:f3:50:fd:e9:a3:5b:57:88:22:31:4a:ac:a6:
7b:13:f1:51:99:b9:3c:7b:6a:3d:6f:72:21:d4:fb:7f:48:b6:
6f:56:4c:29:df:f8:28:b6:05:b9:74:0c:e6:73:62:04:15:87:
22:ff:f6:1f:28:77:ec:dd:b0:2b:41:a6:ed:fc:bb:78:76:07:
91:15:8a:9e:1a:3f:96:6c:26:18:f2:82:f6:0a:60:9e:f8:58:
c2:53:51:ec:e5:5b:40:7b:6c:be:30:31:cb:b7:3a:72:71:28:
b8:d5:59:88
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 8 15:54:53 2025 by rpki-client