Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2e/48ef27-5858-424b-add1-0f6455f05276/1/0vONSutNAojbuFTR6uC9itP4Qfo.mft
File: 0vONSutNAojbuFTR6uC9itP4Qfo.mft (raw, json)
Hash identifier: w4uPISv5K0oL7+rdSa3K70y6GE3AL4vi7Moq1xna0SY=
Subject key identifier: 0E:ED:9B:AD:EF:32:DF:38:CB:48:1C:89:A4:17:7A:A5:AA:40:DA:D8
Authority key identifier: D2:F3:8D:4A:EB:4D:02:88:DB:B8:54:D1:EA:E0:BD:8A:D3:F8:41:FA
Certificate issuer: /CN=d2f38d4aeb4d0288dbb854d1eae0bd8ad3f841fa
Certificate serial: 0196BC6E13B6D53FA50BD22C5ED732437016
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0vONSutNAojbuFTR6uC9itP4Qfo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2e/48ef27-5858-424b-add1-0f6455f05276/1/0vONSutNAojbuFTR6uC9itP4Qfo.mft
Manifest number: 1533
Signing time: Sat 10 May 2025 23:00:52 +0000
Manifest this update: Sat 10 May 2025 23:00:52 +0000
Manifest next update: Sun 11 May 2025 23:00:52 +0000
Files and hashes: 1: 0vONSutNAojbuFTR6uC9itP4Qfo.crl (hash: TxCZVTUQZ8z6bIKAhYQTf1er2FUWKqKGWtbVk6Bj79w=)
2: ERnL-2TcZrO4tJF-sDDaVNlMYnY.roa (hash: +H0qLZUs9MIqoA3GO45JQCdAhU27Z3D/QbaTtfRGmIA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2e/48ef27-5858-424b-add1-0f6455f05276/1/0vONSutNAojbuFTR6uC9itP4Qfo.crl
rsync://rpki.ripe.net/repository/DEFAULT/2e/48ef27-5858-424b-add1-0f6455f05276/1/0vONSutNAojbuFTR6uC9itP4Qfo.mft
rsync://rpki.ripe.net/repository/DEFAULT/0vONSutNAojbuFTR6uC9itP4Qfo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 11 May 2025 22:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:bc:6e:13:b6:d5:3f:a5:0b:d2:2c:5e:d7:32:43:70:16
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d2f38d4aeb4d0288dbb854d1eae0bd8ad3f841fa
Validity
Not Before: May 10 23:00:52 2025 GMT
Not After : May 11 23:00:52 2025 GMT
Subject: CN=0eed9badef32df38cb481c89a4177aa5aa40dad8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:92:fa:dc:5b:d7:5c:d6:06:8d:3d:b6:0f:35:
f8:c4:81:00:8a:1e:15:07:dd:92:08:d5:17:97:fd:
0e:f1:d7:f1:9f:20:45:69:97:cd:e2:64:9e:29:fa:
36:4f:1e:3c:eb:3e:c4:85:ac:bf:04:2f:2a:af:9f:
2a:1e:3e:d8:8a:c9:e4:79:27:4e:72:f3:06:e0:ab:
9f:96:66:75:c6:00:07:74:9a:ad:9a:f7:97:69:d0:
0d:69:5e:1d:b1:67:45:80:7f:cd:0c:da:fc:c2:56:
18:ef:06:ae:b4:d1:c8:81:c6:28:59:98:ea:d9:92:
c3:36:7e:d4:b8:f7:4a:4f:0b:39:d2:c9:fc:04:d4:
be:92:a0:d3:40:95:9c:63:d8:b0:d8:2e:3e:92:b9:
5f:3b:46:be:3f:4e:9e:04:ba:55:af:43:b7:c8:93:
d4:32:ad:29:fb:df:cb:bf:d7:61:2a:45:88:e1:55:
77:03:d0:d0:ac:6b:72:86:ed:fe:2e:fa:b9:00:b2:
23:d9:25:b4:e1:1c:ce:fb:d9:70:de:e5:46:39:d7:
c9:c7:c4:ec:4b:94:81:f2:08:4a:ae:3b:79:64:65:
43:b4:70:e0:48:02:25:a3:4e:63:70:0b:66:0e:54:
72:be:a7:c6:76:22:26:7a:fa:9e:57:e2:f7:e1:96:
12:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0E:ED:9B:AD:EF:32:DF:38:CB:48:1C:89:A4:17:7A:A5:AA:40:DA:D8
X509v3 Authority Key Identifier:
keyid:D2:F3:8D:4A:EB:4D:02:88:DB:B8:54:D1:EA:E0:BD:8A:D3:F8:41:FA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0vONSutNAojbuFTR6uC9itP4Qfo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2e/48ef27-5858-424b-add1-0f6455f05276/1/0vONSutNAojbuFTR6uC9itP4Qfo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2e/48ef27-5858-424b-add1-0f6455f05276/1/0vONSutNAojbuFTR6uC9itP4Qfo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3d:46:1f:74:a7:a6:1e:c1:69:ca:82:73:78:66:3e:b3:7e:5a:
c1:49:93:8b:61:51:d8:27:13:be:95:38:38:a4:d6:b4:c5:52:
83:9f:5a:2f:ae:8d:6a:3f:04:7a:ef:26:79:c6:dc:fb:85:d7:
5f:67:f8:45:dc:d9:9e:5a:13:e4:8e:d4:90:01:a2:68:ce:9c:
f0:1b:b0:9a:d3:81:70:a8:79:a7:31:87:3d:64:e2:c5:62:14:
ff:85:df:6d:d8:82:15:b8:0a:e8:6a:d4:94:ba:ae:bf:a6:04:
54:3d:2e:0c:c0:14:ef:23:9e:af:e2:b5:00:74:cc:09:ed:ac:
77:e7:5e:bd:34:2d:12:30:70:13:4d:e4:ef:34:35:8c:63:e7:
20:9d:3e:99:72:cd:b6:87:6e:49:93:48:f2:55:3d:5e:f4:a3:
c7:80:49:14:b3:f3:73:cc:8e:cc:30:2b:6a:18:62:c9:f1:4e:
4d:d1:6d:82:ca:01:53:c2:43:ca:91:12:b4:e4:00:40:29:49:
b7:c2:e1:d0:78:df:82:3c:45:40:8a:9e:8c:df:a9:db:47:4e:
cd:67:b4:3f:fa:69:57:68:fe:0f:55:4b:9b:df:1f:27:26:24:
cd:8f:ab:94:8a:75:ef:96:cb:9f:46:26:ab:9a:93:55:cc:cb:
64:03:a6:11
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 11 06:18:23 2025 by rpki-client