Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0a/5835be-69e0-469b-bcba-00d14a203eb1/1/C279o-3LL3RczKu0XiC3nnmp_Jg.mft
File: C279o-3LL3RczKu0XiC3nnmp_Jg.mft (raw, json)
Hash identifier: +mchCK8kCcCVLK63R9rlLh7qoKagKPFn+8uUMI45rwE=
Subject key identifier: 06:C8:7C:7A:84:CE:9C:08:95:CD:EE:0F:6D:04:D4:37:59:84:1C:12
Authority key identifier: 0B:6E:FD:A3:ED:CB:2F:74:5C:CC:AB:B4:5E:20:B7:9E:79:A9:FC:98
Certificate issuer: /CN=0b6efda3edcb2f745cccabb45e20b79e79a9fc98
Certificate serial: 0196B7475F3C20E732E8BD91CB39E1683E70
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/C279o-3LL3RczKu0XiC3nnmp_Jg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0a/5835be-69e0-469b-bcba-00d14a203eb1/1/C279o-3LL3RczKu0XiC3nnmp_Jg.mft
Manifest number: 1533
Signing time: Fri 09 May 2025 23:00:30 +0000
Manifest this update: Fri 09 May 2025 23:00:30 +0000
Manifest next update: Sat 10 May 2025 23:00:30 +0000
Files and hashes: 1: 0w0EpLZYR7z2XsoCgghcY3pUnoU.roa (hash: lVpl8mTP6YZbuLjsob401TFZW5nVn9qmK2OvSpdRlfk=)
2: C279o-3LL3RczKu0XiC3nnmp_Jg.crl (hash: klzJIaXn2fOO+hzGs6vvcSly+k+sMTQN7h8ISF6lwfI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0a/5835be-69e0-469b-bcba-00d14a203eb1/1/C279o-3LL3RczKu0XiC3nnmp_Jg.crl
rsync://rpki.ripe.net/repository/DEFAULT/0a/5835be-69e0-469b-bcba-00d14a203eb1/1/C279o-3LL3RczKu0XiC3nnmp_Jg.mft
rsync://rpki.ripe.net/repository/DEFAULT/C279o-3LL3RczKu0XiC3nnmp_Jg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 10 May 2025 23:00:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:b7:47:5f:3c:20:e7:32:e8:bd:91:cb:39:e1:68:3e:70
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0b6efda3edcb2f745cccabb45e20b79e79a9fc98
Validity
Not Before: May 9 23:00:30 2025 GMT
Not After : May 10 23:00:30 2025 GMT
Subject: CN=06c87c7a84ce9c0895cdee0f6d04d43759841c12
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:89:07:a2:b9:85:35:1d:32:a6:82:5b:5a:e3:36:
ed:f7:2f:4b:c1:94:7c:18:c9:2e:d5:df:66:62:8b:
78:cc:3b:0e:fb:5b:49:42:ca:59:96:b1:fc:df:26:
bf:0e:00:67:49:ff:bd:cd:4a:70:52:1a:5a:d5:f7:
8e:91:53:aa:1c:a7:8d:f6:ce:e9:fb:d4:a1:e5:48:
c5:82:cc:75:45:17:ec:2b:46:27:72:d1:d2:05:a5:
c5:4f:9d:cb:1b:65:f6:20:03:8f:d6:cd:02:85:4b:
fe:5f:87:3f:d5:1f:bc:8e:2a:f2:8d:67:96:6c:62:
20:73:3b:04:70:6d:e9:7e:65:43:8d:ea:ca:ff:31:
ed:9c:9a:a4:66:d7:38:df:00:41:75:b4:05:58:dd:
83:91:c4:1c:fd:3c:1f:73:a2:26:9c:a4:2d:2a:e7:
2f:ce:d7:b1:79:f4:e7:09:0b:47:1e:1c:e5:0b:2b:
76:64:e7:7e:82:3c:6f:55:65:c7:ab:b0:43:20:20:
83:5a:ce:0c:0f:5c:29:10:c6:c4:10:af:5a:61:c3:
fe:84:9b:c7:0d:d0:78:14:59:76:1b:2e:3f:02:c9:
f4:13:1c:37:fa:3c:6d:78:3b:74:df:aa:25:ff:ef:
34:ae:01:9a:c6:96:86:78:01:37:cc:98:fa:2c:42:
bc:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
06:C8:7C:7A:84:CE:9C:08:95:CD:EE:0F:6D:04:D4:37:59:84:1C:12
X509v3 Authority Key Identifier:
keyid:0B:6E:FD:A3:ED:CB:2F:74:5C:CC:AB:B4:5E:20:B7:9E:79:A9:FC:98
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/C279o-3LL3RczKu0XiC3nnmp_Jg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0a/5835be-69e0-469b-bcba-00d14a203eb1/1/C279o-3LL3RczKu0XiC3nnmp_Jg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0a/5835be-69e0-469b-bcba-00d14a203eb1/1/C279o-3LL3RczKu0XiC3nnmp_Jg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6a:cc:fa:1c:56:a0:ba:41:6a:0a:7a:bc:77:66:2c:49:a0:ce:
d2:0c:3b:10:ab:7f:cd:a9:0f:14:07:ab:f9:41:20:c4:68:ba:
70:dd:0b:05:11:e1:48:b9:cc:14:2e:cd:5b:c9:9a:db:2f:3b:
ac:08:05:ce:82:0a:e9:7a:fe:24:1d:ad:bf:7f:1c:4e:28:ae:
60:2e:29:fe:f2:56:64:46:0e:55:f6:47:34:46:10:3c:d2:ac:
a3:1c:15:6a:d8:4f:fd:f9:60:7e:af:96:04:88:f6:63:27:92:
bb:49:9d:dc:f9:5c:8b:40:c0:8d:ee:71:be:42:71:87:e0:ef:
91:62:89:29:17:2e:c1:f3:61:e8:c0:6e:30:c7:ce:db:0f:03:
fc:99:ad:81:ea:2c:f8:d4:84:2b:03:9d:50:f5:2e:13:49:ed:
15:6e:e1:cd:c7:66:e8:51:af:c8:84:69:34:76:80:c5:6c:1d:
24:66:ee:33:f4:ac:81:32:8d:58:ff:72:fa:9a:9e:2d:69:85:
7c:c9:13:d5:01:dd:cb:fd:b4:89:9e:16:8e:0d:bd:5d:32:59:
86:03:18:c4:33:fd:bc:0c:4b:7c:5b:86:ac:9c:7e:d9:21:8e:
11:7c:bd:74:76:fb:9e:ba:08:74:96:fb:cc:66:8f:6b:f8:cc:
8d:b0:76:c1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 10 07:38:03 2025 by rpki-client