Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1d/379e32-02e0-4339-882b-2f75195216b9/1/0VK0wfXUhO78KxWX9FUAOrZUsFU.mft
File: 0VK0wfXUhO78KxWX9FUAOrZUsFU.mft (raw, json)
Hash identifier: i+TUJjJGAo/KxGW9/uQChJ5eLmY1I9J9NNqwd3mKNPc=
Subject key identifier: EE:AE:B0:8E:57:14:75:F5:53:A6:84:7B:F1:18:5F:8C:22:7E:F4:11
Authority key identifier: D1:52:B4:C1:F5:D4:84:EE:FC:2B:15:97:F4:55:00:3A:B6:54:B0:55
Certificate issuer: /CN=d152b4c1f5d484eefc2b1597f455003ab654b055
Certificate serial: 0196C2A70848AB211D03DA55CF48A8556C97
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0VK0wfXUhO78KxWX9FUAOrZUsFU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1d/379e32-02e0-4339-882b-2f75195216b9/1/0VK0wfXUhO78KxWX9FUAOrZUsFU.mft
Manifest number: 1537
Signing time: Mon 12 May 2025 04:00:48 +0000
Manifest this update: Mon 12 May 2025 04:00:48 +0000
Manifest next update: Tue 13 May 2025 04:00:48 +0000
Files and hashes: 1: 0VK0wfXUhO78KxWX9FUAOrZUsFU.crl (hash: lgq3gGBVnG3YBrwdVjkRAFmN5Kzt/dc8eMwgxc5leoU=)
2: IjvsoBUG9ktBfZ3shBFq4X7nJnE.roa (hash: ZOvBCy3Gp00mtEZBuX+IHu80U1fpsi2/qrYNX8CCasY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1d/379e32-02e0-4339-882b-2f75195216b9/1/0VK0wfXUhO78KxWX9FUAOrZUsFU.crl
rsync://rpki.ripe.net/repository/DEFAULT/1d/379e32-02e0-4339-882b-2f75195216b9/1/0VK0wfXUhO78KxWX9FUAOrZUsFU.mft
rsync://rpki.ripe.net/repository/DEFAULT/0VK0wfXUhO78KxWX9FUAOrZUsFU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 13 May 2025 04:00:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:c2:a7:08:48:ab:21:1d:03:da:55:cf:48:a8:55:6c:97
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d152b4c1f5d484eefc2b1597f455003ab654b055
Validity
Not Before: May 12 04:00:48 2025 GMT
Not After : May 13 04:00:48 2025 GMT
Subject: CN=eeaeb08e571475f553a6847bf1185f8c227ef411
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:9f:c7:b6:bf:04:89:2f:88:c3:09:f3:18:3b:
da:91:d0:06:b1:c4:65:84:ad:49:04:bd:90:42:9b:
e5:59:3d:66:e1:db:eb:7f:45:1f:4c:fc:75:a1:bd:
3e:57:de:00:86:35:71:38:a4:c2:33:f3:08:96:eb:
e1:8f:83:a0:e3:56:e3:7f:d1:46:cb:1b:a0:33:4a:
65:45:4c:48:be:4e:6e:20:a8:7a:15:30:01:c4:6c:
9a:54:4e:b5:99:0b:7c:95:7d:5d:0c:cc:bc:33:57:
0e:ae:6d:b6:c4:1b:84:62:ce:22:82:db:1b:cc:28:
10:21:4f:6e:ab:bd:87:b1:68:d9:55:18:cd:9d:05:
42:dd:7f:be:3b:ec:da:5d:66:e8:d3:1d:07:29:7e:
9b:09:2a:bf:8a:4d:78:88:60:5a:77:d0:02:69:c4:
3d:1e:60:3f:82:2e:74:3e:7a:ac:a9:c1:cd:01:78:
dd:42:d6:ce:28:fb:ea:4d:69:1f:2e:e3:63:e1:9e:
8e:ad:1f:3f:6f:3a:36:3c:d8:81:be:e8:b0:85:75:
95:08:97:43:3a:76:c1:ff:ee:a3:bd:cb:53:96:18:
d5:46:ac:52:93:1c:34:23:42:62:37:c5:3d:bc:9f:
13:16:e2:26:e8:dd:fa:3f:d2:25:7e:e3:fd:b9:4f:
63:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EE:AE:B0:8E:57:14:75:F5:53:A6:84:7B:F1:18:5F:8C:22:7E:F4:11
X509v3 Authority Key Identifier:
keyid:D1:52:B4:C1:F5:D4:84:EE:FC:2B:15:97:F4:55:00:3A:B6:54:B0:55
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0VK0wfXUhO78KxWX9FUAOrZUsFU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1d/379e32-02e0-4339-882b-2f75195216b9/1/0VK0wfXUhO78KxWX9FUAOrZUsFU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1d/379e32-02e0-4339-882b-2f75195216b9/1/0VK0wfXUhO78KxWX9FUAOrZUsFU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
88:3d:ef:c9:70:74:9b:aa:78:55:14:75:c7:43:07:06:d8:52:
81:19:95:e2:19:ce:e2:7c:5d:82:79:01:c7:50:0e:14:3b:ea:
ef:e8:9c:e3:59:d2:c5:fc:a3:16:88:94:3c:b1:3a:ed:e7:0d:
a4:7f:6b:7a:bb:ca:f3:39:97:6b:18:f5:b0:d3:08:ae:5d:5e:
d0:19:ad:41:7e:dd:9a:7c:f0:0b:a4:7d:5b:1d:2b:1c:fa:eb:
e7:2a:30:b8:9f:d9:62:40:f8:0b:10:4f:aa:54:2d:5b:2f:02:
e9:04:48:de:37:28:f3:04:cb:85:52:5e:7b:ff:c7:de:f0:89:
54:f6:55:a2:01:25:c8:27:75:bc:e4:97:a2:59:43:5a:ed:d7:
f2:d3:c1:23:dc:16:67:05:76:08:f0:23:74:54:b4:fa:35:30:
b7:c3:d8:93:ec:66:9f:be:a7:d1:3a:5c:99:c8:af:bd:b0:36:
0e:e1:32:84:0c:a1:2c:a3:37:e6:5c:0e:e0:27:88:0b:33:f5:
46:52:12:63:85:63:74:2e:be:7c:10:5c:4a:1d:ae:a4:11:14:
48:0f:7d:86:3c:9d:74:c4:25:dc:ce:07:a0:60:9b:60:8c:62:
c8:53:84:5e:ab:b7:66:2d:8d:7c:ab:02:87:e2:60:8e:69:3c:
06:c0:4d:f3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 12 12:53:37 2025 by rpki-client