Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0d/61ea48-3e39-41e8-b22a-6c9a825581cb/1/dGwOGnM62DO8vlCoEkSL9eCZ6V8.mft
File: dGwOGnM62DO8vlCoEkSL9eCZ6V8.mft (raw, json)
Hash identifier: bd+L/LYLpFvzlMtnsxJoipI/DId7yFMj5Y+fOEU4KBU=
Subject key identifier: A0:FD:10:05:49:CA:63:96:33:65:9B:77:E6:9E:40:75:8E:32:AE:98
Authority key identifier: 74:6C:0E:1A:73:3A:D8:33:BC:BE:50:A8:12:44:8B:F5:E0:99:E9:5F
Certificate issuer: /CN=746c0e1a733ad833bcbe50a812448bf5e099e95f
Certificate serial: 0196C53A9FCBD01D0EB6F731CE1F27829401
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dGwOGnM62DO8vlCoEkSL9eCZ6V8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0d/61ea48-3e39-41e8-b22a-6c9a825581cb/1/dGwOGnM62DO8vlCoEkSL9eCZ6V8.mft
Manifest number: 09F3
Signing time: Mon 12 May 2025 16:01:15 +0000
Manifest this update: Mon 12 May 2025 16:01:15 +0000
Manifest next update: Tue 13 May 2025 16:01:15 +0000
Files and hashes: 1: EkI17AhjtH4o6y1KK4g_wzf3KNE.roa (hash: Mqae8JvuYfzZf4ghYC7/qSTNS8cE9NEKQ8xHhpacTOs=)
2: dGwOGnM62DO8vlCoEkSL9eCZ6V8.crl (hash: NtD1Bk1RJRw/ReIFLr2PN8bvSR4JfIzt/jX+MtPASFw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0d/61ea48-3e39-41e8-b22a-6c9a825581cb/1/dGwOGnM62DO8vlCoEkSL9eCZ6V8.crl
rsync://rpki.ripe.net/repository/DEFAULT/0d/61ea48-3e39-41e8-b22a-6c9a825581cb/1/dGwOGnM62DO8vlCoEkSL9eCZ6V8.mft
rsync://rpki.ripe.net/repository/DEFAULT/dGwOGnM62DO8vlCoEkSL9eCZ6V8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 13 May 2025 14:31:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:c5:3a:9f:cb:d0:1d:0e:b6:f7:31:ce:1f:27:82:94:01
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=746c0e1a733ad833bcbe50a812448bf5e099e95f
Validity
Not Before: May 12 16:01:15 2025 GMT
Not After : May 13 16:01:15 2025 GMT
Subject: CN=a0fd100549ca639633659b77e69e40758e32ae98
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:a0:8d:34:62:a1:a0:dd:83:e2:7a:30:e8:1b:
7a:da:d2:0c:c8:e5:6d:d8:c1:51:23:6d:55:4e:6a:
f3:cd:65:41:10:d2:42:76:e8:52:2f:78:a1:dc:24:
ef:f2:1c:54:4b:46:d9:6c:b0:e0:a8:c4:d6:5b:ee:
f3:8c:ba:da:ac:19:7a:3e:01:b0:72:ce:56:e2:60:
bd:76:7e:34:e3:11:c6:b5:85:36:f0:75:ce:4b:6b:
80:df:4b:e2:c6:93:4d:94:00:e4:4a:7e:6c:69:c2:
3a:c6:68:1b:de:29:04:27:9a:e8:98:b9:d0:f4:77:
5f:eb:a9:d9:58:f8:c5:0b:41:7a:a1:57:8c:e3:25:
9e:da:5b:00:04:18:54:a4:40:4c:75:de:53:a2:99:
e7:60:42:f4:59:7d:0b:fc:c7:14:af:74:d1:9c:2c:
36:28:de:24:57:1c:70:4f:c5:f1:38:39:48:b3:ec:
86:6a:32:fe:63:85:30:5c:b1:b9:37:3e:11:94:b0:
a7:1f:64:2b:1f:40:2b:a3:40:8d:6f:4f:5a:29:a4:
06:d7:c1:ad:e6:11:4f:ca:96:08:d5:22:8b:c5:54:
a9:1d:94:57:76:7e:2d:f7:f4:bb:e7:21:f1:2f:4e:
34:7f:90:97:83:d3:46:bf:4a:08:88:5f:d9:4c:6e:
59:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A0:FD:10:05:49:CA:63:96:33:65:9B:77:E6:9E:40:75:8E:32:AE:98
X509v3 Authority Key Identifier:
keyid:74:6C:0E:1A:73:3A:D8:33:BC:BE:50:A8:12:44:8B:F5:E0:99:E9:5F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dGwOGnM62DO8vlCoEkSL9eCZ6V8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/61ea48-3e39-41e8-b22a-6c9a825581cb/1/dGwOGnM62DO8vlCoEkSL9eCZ6V8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/61ea48-3e39-41e8-b22a-6c9a825581cb/1/dGwOGnM62DO8vlCoEkSL9eCZ6V8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
50:a3:b6:d6:e1:1d:aa:cb:05:cf:b9:94:f2:65:b6:82:7c:0c:
5c:0c:f8:73:89:92:51:c9:39:4d:ca:af:24:da:d9:f3:c2:b5:
de:f7:87:8c:3d:9f:2e:a1:dd:f4:c6:59:f3:f1:e5:39:26:4e:
77:37:ff:e6:c0:98:37:51:77:71:1e:a9:93:69:70:13:d6:3b:
22:bb:60:4e:cc:ca:7b:30:aa:21:fd:3c:39:d7:c6:77:ef:bd:
fa:2f:e6:93:34:66:be:66:fc:76:49:64:0e:36:e5:dc:b6:82:
36:c1:77:78:2f:b5:b4:ec:f6:d2:6d:17:22:1e:f5:aa:7d:aa:
b8:7f:d4:9c:b3:46:ac:5d:8d:b1:f8:ec:f3:9a:23:22:1a:88:
6e:1c:07:95:f6:a2:ed:36:93:d6:ad:0d:67:36:90:4c:90:07:
14:2c:71:ab:fd:d8:43:b6:ff:6e:3a:26:18:bc:b8:c3:f7:0d:
2f:8b:57:f1:e7:d6:d2:16:c3:55:ec:25:0d:7b:c5:37:ae:4d:
6a:4c:95:e0:20:d3:0c:1e:06:0f:37:fa:1c:13:5c:7b:f8:38:
e9:55:ba:7a:56:75:c4:2b:3d:59:68:a8:6c:71:af:c2:86:b4:
b0:15:f3:c3:3b:23:bf:34:08:0b:ce:c4:db:94:a3:31:25:86:
6d:8e:23:2f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 12 20:05:27 2025 by rpki-client