Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/31/7beb04-317b-448a-82ed-565b1447037b/1/0nXXqLrAR39VCd_xG5GVymDfh9o.mft
File: 0nXXqLrAR39VCd_xG5GVymDfh9o.mft (raw, json)
Hash identifier: CMMzDTWJNVqDKQqs6U3jEA5RBIiYrRRMfoOJwc+ww1I=
Subject key identifier: C0:12:79:F2:F1:00:9B:AA:59:91:01:1C:4E:0E:96:D2:49:E3:16:5F
Authority key identifier: D2:75:D7:A8:BA:C0:47:7F:55:09:DF:F1:1B:91:95:CA:60:DF:87:DA
Certificate issuer: /CN=d275d7a8bac0477f5509dff11b9195ca60df87da
Certificate serial: 0196C0B89F3DF7D63ECA65FFE124555385D9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0nXXqLrAR39VCd_xG5GVymDfh9o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/31/7beb04-317b-448a-82ed-565b1447037b/1/0nXXqLrAR39VCd_xG5GVymDfh9o.mft
Manifest number: 1538
Signing time: Sun 11 May 2025 19:00:46 +0000
Manifest this update: Sun 11 May 2025 19:00:46 +0000
Manifest next update: Mon 12 May 2025 19:00:46 +0000
Files and hashes: 1: 0nXXqLrAR39VCd_xG5GVymDfh9o.crl (hash: fHylX+UckkKdob1Aon+bXFPGSy3l9mvIME91V/qQtkA=)
2: HMJLEkPGlr7x44aeMyDl-iD3-H0.roa (hash: L+qMMZpme30javZoQJKYZdKfiPeTzWKpuVRpIrhWgDs=)
3: Ti73dcIrlh5auWtScVzVwqOqQSk.roa (hash: bD54N27Ykt/wu2s+Dy6sKxGGg/cuSXB3DUKzM/XaSZM=)
4: YMTxPOuM97EplT8sh2WGlcFfkOw.roa (hash: D8L0sd2jitS16w93ripM0wnGDM02PZl2ly5UPGD5e0U=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/31/7beb04-317b-448a-82ed-565b1447037b/1/0nXXqLrAR39VCd_xG5GVymDfh9o.crl
rsync://rpki.ripe.net/repository/DEFAULT/31/7beb04-317b-448a-82ed-565b1447037b/1/0nXXqLrAR39VCd_xG5GVymDfh9o.mft
rsync://rpki.ripe.net/repository/DEFAULT/0nXXqLrAR39VCd_xG5GVymDfh9o.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 12 May 2025 16:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:c0:b8:9f:3d:f7:d6:3e:ca:65:ff:e1:24:55:53:85:d9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d275d7a8bac0477f5509dff11b9195ca60df87da
Validity
Not Before: May 11 19:00:46 2025 GMT
Not After : May 12 19:00:46 2025 GMT
Subject: CN=c01279f2f1009baa5991011c4e0e96d249e3165f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:8d:eb:07:b9:63:2a:3c:9a:a5:77:2f:ea:20:
08:78:f8:5e:47:cb:b6:ff:dd:33:67:37:14:3e:16:
56:1a:d5:44:f1:af:e5:e2:99:93:d9:bd:43:0a:3f:
cb:08:e9:d8:9d:59:d4:16:fe:b0:dd:b0:cf:27:6a:
34:ae:fe:7d:a7:53:12:f6:e1:88:d5:c0:48:91:0d:
f1:24:2e:ed:4a:ad:0e:ba:8b:a2:e5:7c:76:a1:71:
a6:0f:6d:4a:01:68:fe:70:7d:22:a5:51:12:49:13:
e3:57:95:8e:5c:bf:de:d6:9c:f5:2f:51:2d:4b:d3:
8d:a7:74:d9:20:4f:ca:ba:3b:41:6a:6b:8f:07:0e:
4e:48:08:4b:b2:50:bc:1a:d0:17:ac:48:be:df:08:
6a:9e:e6:be:85:8e:4a:83:20:2e:b2:8c:f6:54:fc:
d7:c8:78:17:94:f2:49:93:8d:c7:83:e8:ea:d8:f3:
11:a8:ce:cf:94:ff:e4:9d:26:de:b4:52:32:9b:4e:
32:91:af:b0:e2:fd:ba:4c:7e:55:6f:b0:38:ac:f5:
d5:99:e6:e7:25:df:e1:5b:63:64:53:94:ea:5b:af:
f9:3b:69:78:ec:62:d0:83:a0:33:04:9f:d8:76:00:
e5:cd:89:9a:f1:c7:4e:6a:ad:38:c3:73:05:43:1a:
be:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C0:12:79:F2:F1:00:9B:AA:59:91:01:1C:4E:0E:96:D2:49:E3:16:5F
X509v3 Authority Key Identifier:
keyid:D2:75:D7:A8:BA:C0:47:7F:55:09:DF:F1:1B:91:95:CA:60:DF:87:DA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0nXXqLrAR39VCd_xG5GVymDfh9o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/31/7beb04-317b-448a-82ed-565b1447037b/1/0nXXqLrAR39VCd_xG5GVymDfh9o.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/31/7beb04-317b-448a-82ed-565b1447037b/1/0nXXqLrAR39VCd_xG5GVymDfh9o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
bc:b7:73:b7:71:ff:48:72:98:39:c7:99:11:28:54:7a:bc:0a:
1a:96:8f:61:c4:2d:a3:1e:c7:14:de:82:4e:4a:76:95:6f:61:
10:14:8c:39:cf:2d:34:96:fc:d9:6f:3a:04:e1:cb:36:70:20:
98:59:77:7a:b2:d4:24:1f:26:f3:c6:80:15:e2:01:66:e8:81:
c7:30:b6:ed:bf:b8:26:d8:c9:51:c8:7b:29:bf:31:72:84:25:
0e:7b:1a:cd:91:4f:94:83:8c:10:1f:5a:a4:cb:fd:c3:29:af:
9a:a5:7c:21:ea:62:7b:1f:1d:81:99:96:30:2e:99:e0:0b:e5:
9d:f7:b0:e6:54:c3:18:c6:48:fd:1a:81:91:3c:ab:1a:6b:36:
3e:46:90:84:40:4e:f4:95:3e:d6:80:20:95:6c:79:9e:0e:bd:
c3:aa:0c:c5:20:63:cd:8c:8c:99:fe:e9:cc:32:84:4f:09:b7:
0f:7e:72:69:3c:b6:9f:3a:9a:cc:a7:83:b3:d5:2d:a3:33:22:
06:30:01:ae:c4:80:b8:59:97:a6:ec:bf:fe:7a:12:d2:05:f8:
e8:c9:23:cb:75:94:c8:f2:49:8c:90:df:52:20:c9:d4:79:58:
98:37:c1:fa:d0:2b:ff:57:2c:93:14:49:60:67:e3:61:6e:6e:
e3:e3:7c:f4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 11 22:26:02 2025 by rpki-client