Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f2/ebbdda-9571-4ff5-b56e-75220d53a55c/1/0fUZZO3hK0wDZz0jzUTIN1MV9Fo.mft
File: 0fUZZO3hK0wDZz0jzUTIN1MV9Fo.mft (raw, json)
Hash identifier: KXlrvOnDTKN2igVkgYMlgAUV6Pd+P+2ONtzAHqw4vBg=
Subject key identifier: 3D:16:05:E9:69:7A:83:D1:0F:E5:2E:F4:50:9F:C9:7D:61:42:4C:4E
Authority key identifier: D1:F5:19:64:ED:E1:2B:4C:03:67:3D:23:CD:44:C8:37:53:15:F4:5A
Certificate issuer: /CN=d1f51964ede12b4c03673d23cd44c8375315f45a
Certificate serial: 01964AB3C268ED89A6226A1928733D759DE2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0fUZZO3hK0wDZz0jzUTIN1MV9Fo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f2/ebbdda-9571-4ff5-b56e-75220d53a55c/1/0fUZZO3hK0wDZz0jzUTIN1MV9Fo.mft
Manifest number: 03E4
Signing time: Fri 18 Apr 2025 21:00:16 +0000
Manifest this update: Fri 18 Apr 2025 21:00:16 +0000
Manifest next update: Sat 19 Apr 2025 21:00:16 +0000
Files and hashes: 1: 0fUZZO3hK0wDZz0jzUTIN1MV9Fo.crl (hash: vfILEjw67YRN0eDmVpnjuGCI79MuUQU5WJgnPuBDwJY=)
2: cotZl6z9OJ-fauLOJe6XV8WAuTo.roa (hash: pFgMJLMj7SXSgI1OYpF9YOIHVLweh2wDrctvJeRJL4M=)
3: kchelfWvJ5H-ipXayPr2lYfELpU.roa (hash: 9NIJWgo1KUO6egMwGucTZhKbewDIQ9m/pLPQ1oGGlaM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f2/ebbdda-9571-4ff5-b56e-75220d53a55c/1/0fUZZO3hK0wDZz0jzUTIN1MV9Fo.crl
rsync://rpki.ripe.net/repository/DEFAULT/f2/ebbdda-9571-4ff5-b56e-75220d53a55c/1/0fUZZO3hK0wDZz0jzUTIN1MV9Fo.mft
rsync://rpki.ripe.net/repository/DEFAULT/0fUZZO3hK0wDZz0jzUTIN1MV9Fo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 19 Apr 2025 19:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:4a:b3:c2:68:ed:89:a6:22:6a:19:28:73:3d:75:9d:e2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d1f51964ede12b4c03673d23cd44c8375315f45a
Validity
Not Before: Apr 18 21:00:16 2025 GMT
Not After : Apr 19 21:00:16 2025 GMT
Subject: CN=3d1605e9697a83d10fe52ef4509fc97d61424c4e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:76:28:cc:6d:98:c6:a9:5f:fd:13:24:98:ef:
f5:9f:4a:36:09:0c:d7:d7:2a:a9:36:17:f3:bb:2e:
d1:f0:51:1c:ef:ac:e8:26:10:8d:a8:ba:29:9a:0c:
07:84:d4:32:69:c9:8e:a2:5a:95:46:ad:a4:eb:58:
87:1d:ce:9b:2c:82:a7:30:73:49:a9:25:62:d4:4d:
94:d9:86:d3:7d:fd:72:6e:c1:b5:5e:e1:1c:e5:13:
b3:b2:1b:40:d9:46:05:08:3a:fd:37:23:21:bb:8b:
1d:7c:0b:cb:ff:41:dc:5b:d7:3a:7e:dd:75:e6:bd:
5d:92:f5:95:0b:ad:b3:0e:07:4e:26:44:2a:8c:ec:
a3:74:f8:5f:f3:6f:c4:23:0d:07:14:f9:bc:a6:36:
de:09:c7:58:47:f9:84:de:d8:f6:57:0a:89:82:90:
56:75:02:10:0a:55:86:fd:eb:ce:bc:6a:54:56:ff:
bf:1e:d9:3b:84:8d:07:95:1f:ff:1a:b8:77:1b:e4:
cb:90:97:87:60:56:75:8a:4d:12:de:9e:84:ed:f6:
5c:47:40:55:ed:a5:45:4e:86:cb:53:df:37:7a:1d:
62:b9:d2:45:02:b8:4c:78:7a:60:ae:22:a0:35:c5:
9b:3d:35:b5:da:c6:b2:b2:8e:49:78:2e:57:09:1f:
4f:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3D:16:05:E9:69:7A:83:D1:0F:E5:2E:F4:50:9F:C9:7D:61:42:4C:4E
X509v3 Authority Key Identifier:
keyid:D1:F5:19:64:ED:E1:2B:4C:03:67:3D:23:CD:44:C8:37:53:15:F4:5A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0fUZZO3hK0wDZz0jzUTIN1MV9Fo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/ebbdda-9571-4ff5-b56e-75220d53a55c/1/0fUZZO3hK0wDZz0jzUTIN1MV9Fo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/ebbdda-9571-4ff5-b56e-75220d53a55c/1/0fUZZO3hK0wDZz0jzUTIN1MV9Fo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7d:0e:82:5a:9c:2b:b8:0f:68:47:ee:22:db:1e:95:0d:ed:f3:
25:48:3e:bb:8c:a2:46:19:3a:71:d5:8d:3e:77:01:4c:d4:d9:
e7:6c:9a:66:da:a2:0d:55:bd:27:a8:67:77:0f:6f:f4:0c:43:
2a:4c:05:9f:4b:11:9c:9a:b9:96:5a:bc:83:4e:4a:61:8a:6d:
51:21:8d:e5:ae:6b:61:fc:30:94:b3:60:c4:02:b7:0b:70:6b:
72:e4:75:9b:f5:9e:b4:70:da:4f:94:92:2b:e9:86:09:2a:d6:
8c:a5:77:c9:70:fb:71:05:75:70:ee:74:51:36:09:66:99:cf:
ab:b6:e9:ab:42:ce:39:f5:68:3c:f9:57:ab:4a:3d:9b:74:8c:
de:4c:fa:6a:c4:f0:29:35:25:b9:38:b5:fb:af:57:8d:96:fd:
30:fa:50:8e:bc:a1:34:29:8c:27:d7:1b:1c:16:c1:71:5e:d5:
19:9c:6d:c3:7f:e0:42:16:d3:16:ab:40:66:68:1f:da:31:f5:
67:ea:29:50:f5:4b:32:bb:c9:e9:9a:c1:24:8d:21:df:fe:ec:
20:10:97:31:4d:32:54:e1:5f:b4:1f:28:aa:de:0d:28:17:82:
a8:1d:d3:dc:1b:69:3c:4e:5c:98:85:39:ed:fa:d7:64:21:43:
a1:e6:4b:07
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 19 03:05:12 2025 by rpki-client