Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/37/65fa3c-0175-4cee-9930-59cfd453dd17/1/0eXrdTZiC1hX0b9ZAYPWUMojIn8.mft
File: 0eXrdTZiC1hX0b9ZAYPWUMojIn8.mft (raw, json)
Hash identifier: C0KE17mQ63xgwMn1CzRZ8tcStKL8I58SIhP+k6O3s0c=
Subject key identifier: FF:E8:39:E9:20:E6:2E:C9:AD:83:8E:06:7F:51:E8:8D:2F:2E:C4:D3
Authority key identifier: D1:E5:EB:75:36:62:0B:58:57:D1:BF:59:01:83:D6:50:CA:23:22:7F
Certificate issuer: /CN=d1e5eb7536620b5857d1bf590183d650ca23227f
Certificate serial: 0196C2A717E758974DC31A36477B4B86F1B5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0eXrdTZiC1hX0b9ZAYPWUMojIn8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/37/65fa3c-0175-4cee-9930-59cfd453dd17/1/0eXrdTZiC1hX0b9ZAYPWUMojIn8.mft
Manifest number: 01F1
Signing time: Mon 12 May 2025 04:00:52 +0000
Manifest this update: Mon 12 May 2025 04:00:52 +0000
Manifest next update: Tue 13 May 2025 04:00:52 +0000
Files and hashes: 1: 0eXrdTZiC1hX0b9ZAYPWUMojIn8.crl (hash: GlSO99Zde51nrBi5NDbydAu4cc7K0hzyFRDo+FBSQ4o=)
2: GqXg2NC5IUxRI1mWcJNsyZxesng.roa (hash: wIFPJcYLl1DLySOyYumJerZ6TcbUU8g29XL5Yzwhz2g=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/37/65fa3c-0175-4cee-9930-59cfd453dd17/1/0eXrdTZiC1hX0b9ZAYPWUMojIn8.crl
rsync://rpki.ripe.net/repository/DEFAULT/37/65fa3c-0175-4cee-9930-59cfd453dd17/1/0eXrdTZiC1hX0b9ZAYPWUMojIn8.mft
rsync://rpki.ripe.net/repository/DEFAULT/0eXrdTZiC1hX0b9ZAYPWUMojIn8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 13 May 2025 04:00:52 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:c2:a7:17:e7:58:97:4d:c3:1a:36:47:7b:4b:86:f1:b5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d1e5eb7536620b5857d1bf590183d650ca23227f
Validity
Not Before: May 12 04:00:52 2025 GMT
Not After : May 13 04:00:52 2025 GMT
Subject: CN=ffe839e920e62ec9ad838e067f51e88d2f2ec4d3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:ca:96:89:3c:8f:ed:bd:b9:02:41:ce:cd:7a:
bf:12:2c:31:f8:6a:17:22:b7:84:0c:36:55:bd:e9:
6f:7d:82:0f:63:65:9f:a9:0f:ea:8c:e0:32:7a:ee:
77:c0:49:9c:4b:b7:85:63:b6:07:39:96:55:00:f0:
b2:57:54:f2:48:ff:c3:67:07:de:fa:03:c2:69:24:
41:8f:19:e9:d9:4f:7b:d6:fe:01:38:15:91:82:98:
14:90:6f:c8:4b:c3:9d:c4:2a:31:98:8c:90:cd:3f:
8d:e2:26:35:12:c4:5f:c1:b7:43:72:db:b5:de:75:
48:2d:9b:34:63:fc:c0:44:68:e3:53:9a:fa:ef:b1:
3c:43:01:e6:40:b2:04:4a:7c:c7:c4:7a:05:cf:a5:
3c:24:95:ee:77:e6:6a:6e:c3:9b:47:84:17:ec:7b:
ea:75:96:3d:1f:bf:a4:d6:7c:a7:fb:5c:31:65:3d:
2f:70:c0:b5:ca:0c:97:54:55:6e:e2:b3:0d:64:a6:
bf:66:b8:a5:98:93:98:e5:a6:3b:b1:94:af:59:42:
f6:89:c7:40:fc:f6:5f:32:11:27:f2:83:a0:45:6d:
f2:d2:50:54:44:45:82:10:10:c3:80:b2:02:22:ee:
8a:22:e2:c2:7f:e6:78:b9:8e:56:b0:76:38:ff:03:
41:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FF:E8:39:E9:20:E6:2E:C9:AD:83:8E:06:7F:51:E8:8D:2F:2E:C4:D3
X509v3 Authority Key Identifier:
keyid:D1:E5:EB:75:36:62:0B:58:57:D1:BF:59:01:83:D6:50:CA:23:22:7F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0eXrdTZiC1hX0b9ZAYPWUMojIn8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/37/65fa3c-0175-4cee-9930-59cfd453dd17/1/0eXrdTZiC1hX0b9ZAYPWUMojIn8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/37/65fa3c-0175-4cee-9930-59cfd453dd17/1/0eXrdTZiC1hX0b9ZAYPWUMojIn8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a8:3e:fc:f6:2e:a6:55:41:3f:6b:28:08:12:e9:a1:64:be:7a:
a0:20:a0:8f:fc:9b:a1:02:e6:c0:48:96:05:d1:e4:c3:a4:56:
ed:47:b5:23:4a:45:b7:0c:71:f7:aa:08:75:2c:78:9d:eb:dc:
96:fb:1d:f5:d9:bc:b2:79:d0:d6:1d:d7:0a:0a:6f:0f:39:f0:
fb:61:fd:01:0a:3e:4c:f5:5d:7e:5e:b4:46:e1:2c:62:54:4f:
8c:aa:89:37:7e:51:9e:dd:a9:84:09:02:92:f2:0f:14:6b:3b:
ce:19:04:6f:c7:93:95:16:99:74:c0:26:a8:0c:c7:98:82:dd:
27:bc:20:a8:a8:22:a5:1c:39:f3:48:16:76:5d:eb:16:fe:e8:
fa:1d:88:9e:31:31:41:bf:39:c1:e6:db:bd:0a:bb:33:df:82:
1d:4f:db:48:9d:6a:a4:1a:95:ff:95:f7:b0:b3:69:34:f0:55:
f7:88:b7:08:57:cc:34:25:ef:2d:1a:a2:20:ca:68:c3:45:9d:
ea:b9:b8:90:7f:db:a9:14:97:bc:77:c8:85:37:57:5d:6a:91:
26:fa:3e:16:46:0a:f8:2c:28:49:50:3f:c9:1c:b5:70:a6:91:
4a:9b:d1:61:f8:9e:35:18:7b:58:20:d3:b9:db:ac:08:89:9b:
80:b4:22:a1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 12 11:53:02 2025 by rpki-client