Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ef/ceaffb-ac25-491d-b3cc-4ef03c1081f8/1/0KFr9-DjuTMLVEg-GfYTsCtie-8.mft
File: 0KFr9-DjuTMLVEg-GfYTsCtie-8.mft (raw, json)
Hash identifier: tKWyZLgMUXOzWpBoKan7YeDIlC8kbUUhycVRxqVMKq4=
Subject key identifier: 63:B0:9A:81:B2:77:82:D1:89:C6:D7:6B:8F:36:FC:F5:23:44:19:EA
Authority key identifier: D0:A1:6B:F7:E0:E3:B9:33:0B:54:48:3E:19:F6:13:B0:2B:62:7B:EF
Certificate issuer: /CN=d0a16bf7e0e3b9330b54483e19f613b02b627bef
Certificate serial: 01964A0F317C6A3326950FD1512DDB256211
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0KFr9-DjuTMLVEg-GfYTsCtie-8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ef/ceaffb-ac25-491d-b3cc-4ef03c1081f8/1/0KFr9-DjuTMLVEg-GfYTsCtie-8.mft
Manifest number: 0F33
Signing time: Fri 18 Apr 2025 18:00:31 +0000
Manifest this update: Fri 18 Apr 2025 18:00:31 +0000
Manifest next update: Sat 19 Apr 2025 18:00:31 +0000
Files and hashes: 1: 0KFr9-DjuTMLVEg-GfYTsCtie-8.crl (hash: YDft0+WCxV2zH4+aheRIF6F1pscG0SSLwN/IqD/xToA=)
2: s0kyiXR6V1bkt2ciUZ2EpXqYq0U.roa (hash: BMvoEX7a6X6vFfIWsQqEPuUPXNmqfef7qS8aBYQEmho=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ef/ceaffb-ac25-491d-b3cc-4ef03c1081f8/1/0KFr9-DjuTMLVEg-GfYTsCtie-8.crl
rsync://rpki.ripe.net/repository/DEFAULT/ef/ceaffb-ac25-491d-b3cc-4ef03c1081f8/1/0KFr9-DjuTMLVEg-GfYTsCtie-8.mft
rsync://rpki.ripe.net/repository/DEFAULT/0KFr9-DjuTMLVEg-GfYTsCtie-8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 19 Apr 2025 14:20:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:4a:0f:31:7c:6a:33:26:95:0f:d1:51:2d:db:25:62:11
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d0a16bf7e0e3b9330b54483e19f613b02b627bef
Validity
Not Before: Apr 18 18:00:31 2025 GMT
Not After : Apr 19 18:00:31 2025 GMT
Subject: CN=63b09a81b27782d189c6d76b8f36fcf5234419ea
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:41:f3:1e:f4:cf:57:99:33:b4:b1:58:3b:c5:
29:d8:61:48:37:c4:d1:3f:4f:0f:3a:e8:d7:b0:93:
cd:b7:a7:e9:68:e4:84:60:32:ad:fc:48:2c:1c:2e:
d0:e7:b9:48:80:71:a4:59:45:67:21:29:2d:6d:66:
8b:17:3a:ab:8a:db:c9:44:6a:2a:00:56:0a:8a:32:
1c:ac:f5:8d:68:98:f9:ad:b8:fb:dc:6e:5a:dc:80:
20:9f:a2:74:19:97:64:b4:89:43:9e:f6:a9:f0:bd:
cd:49:e8:e3:75:2a:3c:9f:3a:20:46:dc:e7:c7:b3:
6f:35:a9:5b:94:3d:d2:70:ae:44:c4:a9:ed:b1:77:
27:76:71:b6:b2:bf:e1:0e:2d:ca:07:4b:a0:37:89:
da:9f:fc:f3:b8:01:9d:d5:d6:a7:0f:6e:ea:77:51:
96:e0:89:66:19:8e:5b:7c:f5:f1:f4:41:35:59:0f:
62:82:65:33:f2:3a:6e:d7:57:14:06:c5:41:97:b0:
32:6f:bf:c3:a3:d6:dc:01:8a:e3:22:eb:ee:ab:42:
76:0a:8c:49:1b:a0:cb:82:6e:5e:43:02:6d:9b:d3:
6c:21:00:d4:a4:ef:45:58:3b:4d:c3:e7:02:a7:ba:
a5:26:74:9f:81:61:fa:c9:44:53:32:4a:20:dd:de:
5c:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
63:B0:9A:81:B2:77:82:D1:89:C6:D7:6B:8F:36:FC:F5:23:44:19:EA
X509v3 Authority Key Identifier:
keyid:D0:A1:6B:F7:E0:E3:B9:33:0B:54:48:3E:19:F6:13:B0:2B:62:7B:EF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0KFr9-DjuTMLVEg-GfYTsCtie-8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ef/ceaffb-ac25-491d-b3cc-4ef03c1081f8/1/0KFr9-DjuTMLVEg-GfYTsCtie-8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ef/ceaffb-ac25-491d-b3cc-4ef03c1081f8/1/0KFr9-DjuTMLVEg-GfYTsCtie-8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a0:1a:09:f0:b6:7c:82:94:fd:d7:2c:33:67:f7:09:0f:87:8a:
e7:13:35:5c:33:8e:a5:39:0a:be:7d:c9:32:64:33:26:c0:42:
2a:b5:de:30:b3:61:cc:36:65:5c:66:9e:0c:e6:92:3d:d2:3c:
29:4f:40:ea:e4:f3:73:d2:fb:81:8d:77:0b:14:ae:79:fc:fd:
6a:bf:af:0d:7d:a8:31:0f:48:9c:f4:46:70:0d:02:ae:64:b3:
a8:33:e6:d1:3b:06:28:3d:2d:98:d9:bf:94:3f:0e:83:e9:d6:
10:e8:fe:88:ae:36:9e:9f:89:c4:f3:8d:d0:93:ff:e0:c1:b9:
6b:d6:2c:9d:3e:50:fc:33:dc:5e:96:50:9e:11:2c:c4:f8:2e:
57:f8:a1:7a:63:38:78:54:9d:44:89:e3:d7:82:1f:b0:ee:d3:
8d:b1:29:f3:ee:53:0d:d0:e7:ea:3c:80:f1:36:9c:16:60:59:
eb:87:ad:80:14:64:d9:20:27:1a:e3:4d:69:6a:15:1e:65:a4:
ed:5a:30:11:2e:ec:a2:a7:32:19:28:83:7a:8b:67:42:43:40:
e7:53:c6:75:a7:37:56:93:d9:2d:a9:15:cb:9d:5d:61:c2:ba:
37:94:e5:1f:06:bd:26:89:39:de:8e:69:01:ab:ff:0a:7d:ff:
c4:c4:f9:16
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 18 23:35:35 2025 by rpki-client