Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/09/c99ae7-b671-40b9-bb1e-a19444f7a337/1/0vHIhC58-JGyNNOh4OLg73PoQqo.mft
File: 0vHIhC58-JGyNNOh4OLg73PoQqo.mft (raw, json)
Hash identifier: 5RZImQYvpj2W/yTLsCmAMg1vE5P8KVftz9kv9qRu6rY=
Subject key identifier: 38:BB:8E:D9:D4:76:80:79:83:F9:F2:40:11:8D:60:BD:75:31:B8:FA
Authority key identifier: D2:F1:C8:84:2E:7C:F8:91:B2:34:D3:A1:E0:E2:E0:EF:73:E8:42:AA
Certificate issuer: /CN=d2f1c8842e7cf891b234d3a1e0e2e0ef73e842aa
Certificate serial: 0196B7B53098F0CA0A53EC3D235DE3462BC7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0vHIhC58-JGyNNOh4OLg73PoQqo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/09/c99ae7-b671-40b9-bb1e-a19444f7a337/1/0vHIhC58-JGyNNOh4OLg73PoQqo.mft
Manifest number: 1530
Signing time: Sat 10 May 2025 01:00:27 +0000
Manifest this update: Sat 10 May 2025 01:00:27 +0000
Manifest next update: Sun 11 May 2025 01:00:27 +0000
Files and hashes: 1: 0vHIhC58-JGyNNOh4OLg73PoQqo.crl (hash: 1/fMmEgYPH4+sCFEx2vfX4zEZbR5ZQ7hWFfFKZlei6U=)
2: l7vPco-uERFJMqFRkAMdbQ7Lr5E.roa (hash: TO5lGNkolgRHajeHI2wA6DsrdU/+GUsTcjWvGuJo2do=)
3: mizpW-CedPrysq20puaRplVzBas.roa (hash: ZhIE+FWiXGSht5bpIKov+Ga9kyrb4wRzjNebEuN3tlM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/09/c99ae7-b671-40b9-bb1e-a19444f7a337/1/0vHIhC58-JGyNNOh4OLg73PoQqo.crl
rsync://rpki.ripe.net/repository/DEFAULT/09/c99ae7-b671-40b9-bb1e-a19444f7a337/1/0vHIhC58-JGyNNOh4OLg73PoQqo.mft
rsync://rpki.ripe.net/repository/DEFAULT/0vHIhC58-JGyNNOh4OLg73PoQqo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 11 May 2025 01:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:b7:b5:30:98:f0:ca:0a:53:ec:3d:23:5d:e3:46:2b:c7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d2f1c8842e7cf891b234d3a1e0e2e0ef73e842aa
Validity
Not Before: May 10 01:00:27 2025 GMT
Not After : May 11 01:00:27 2025 GMT
Subject: CN=38bb8ed9d476807983f9f240118d60bd7531b8fa
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:d8:3d:90:21:ee:b5:14:db:0d:55:1a:d4:60:
e6:34:9a:2d:0d:b2:2e:d6:26:6b:ab:f4:a2:85:51:
74:c2:3d:34:4d:52:0c:a8:59:31:2b:99:bb:1a:96:
79:e4:32:9e:f5:e8:79:a4:78:73:b9:bb:6c:5e:a2:
e1:2e:64:21:fe:f9:1c:40:d1:5d:4e:8b:f0:05:e3:
0b:36:a4:ff:3e:ca:c2:72:c9:5c:78:7a:58:ff:4b:
10:3e:15:d5:06:8f:bd:2f:31:c0:5c:5e:15:73:c3:
ee:26:0c:83:04:0b:19:bb:d4:6f:93:96:b5:dd:7c:
74:44:26:c7:ae:5d:f3:bf:59:16:21:bf:59:d7:a6:
75:df:d0:d3:17:cb:57:30:02:53:26:5d:85:38:19:
cc:52:c9:98:14:be:98:97:f9:9c:ef:86:0d:2c:16:
22:34:af:d7:12:7e:c2:89:ad:b3:07:cc:95:64:ae:
41:5c:d5:5e:6b:0d:73:0b:84:f0:f7:77:47:a0:d3:
9a:c3:da:2f:4d:c2:4e:03:64:4e:91:fd:4d:31:cd:
ff:19:27:e9:4e:64:e6:a3:98:45:4f:a9:bb:bb:2c:
3c:c2:67:12:b1:d2:ca:ec:d8:b7:5e:46:70:85:93:
bd:e7:db:0f:93:97:31:39:cf:0d:c5:99:71:fd:63:
cf:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
38:BB:8E:D9:D4:76:80:79:83:F9:F2:40:11:8D:60:BD:75:31:B8:FA
X509v3 Authority Key Identifier:
keyid:D2:F1:C8:84:2E:7C:F8:91:B2:34:D3:A1:E0:E2:E0:EF:73:E8:42:AA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0vHIhC58-JGyNNOh4OLg73PoQqo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/09/c99ae7-b671-40b9-bb1e-a19444f7a337/1/0vHIhC58-JGyNNOh4OLg73PoQqo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/09/c99ae7-b671-40b9-bb1e-a19444f7a337/1/0vHIhC58-JGyNNOh4OLg73PoQqo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2e:5f:c6:d3:1a:3d:a2:87:3a:14:36:64:ed:43:2f:87:71:f4:
f5:99:93:f1:a4:41:97:1e:7b:b7:48:a0:6c:09:30:2b:e9:25:
03:48:d5:c5:51:52:dc:74:82:32:ba:b9:06:ec:e4:67:4a:a6:
31:a3:f8:91:7d:0f:4c:9b:92:b9:3d:4d:02:74:24:21:68:26:
d9:6a:c2:69:b0:e5:c4:8f:e5:15:ca:01:f6:31:e4:d9:63:1d:
9b:ab:bf:39:5c:44:fd:79:d3:fb:37:36:c2:6f:86:aa:d7:10:
5f:53:c6:fb:b0:93:16:5a:80:e8:79:06:3b:32:f4:a1:12:cd:
7a:60:b7:17:80:ad:2d:10:81:93:1a:3d:d5:ec:8d:12:f4:58:
df:02:9c:aa:f7:d9:98:4e:80:25:a6:26:e1:2f:c4:a1:3e:c5:
84:45:98:cd:61:41:1d:df:67:d2:cf:6b:dc:dd:37:c7:80:63:
e2:ab:d1:8e:d3:ef:a6:67:fe:3c:fe:3a:5b:03:87:55:bf:23:
ec:b3:b2:98:e0:90:7a:70:f6:3e:f7:26:06:e1:9b:1b:fa:9a:
94:99:af:a2:5a:ae:3d:96:ac:9b:0d:f6:d7:c9:b5:ac:d7:36:
e8:72:3e:52:3d:c3:5b:31:2e:70:6f:0f:2b:ba:55:8d:b4:07:
64:c3:b5:1b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 10 08:30:35 2025 by rpki-client