Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3e/5b4185-b080-498e-8cc7-6a6af5b74d38/1/0jIxAbKVlv9ELTdJNzuOmYM1RnA.mft
File: 0jIxAbKVlv9ELTdJNzuOmYM1RnA.mft (raw, json)
Hash identifier: 9Rhn3AZ9mXERgN0GNrlYF9y0en1dGB10XhOkvGec7js=
Subject key identifier: 1C:F9:C6:56:59:80:9E:4F:D0:08:81:2D:8C:02:B9:EA:AE:E3:27:CA
Authority key identifier: D2:32:31:01:B2:95:96:FF:44:2D:37:49:37:3B:8E:99:83:35:46:70
Certificate issuer: /CN=d2323101b29596ff442d3749373b8e9983354670
Certificate serial: 0196DAAEDA30795DD6EB6797E468731C08D3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0jIxAbKVlv9ELTdJNzuOmYM1RnA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3e/5b4185-b080-498e-8cc7-6a6af5b74d38/1/0jIxAbKVlv9ELTdJNzuOmYM1RnA.mft
Manifest number: 124A
Signing time: Fri 16 May 2025 20:00:14 +0000
Manifest this update: Fri 16 May 2025 20:00:14 +0000
Manifest next update: Sat 17 May 2025 20:00:14 +0000
Files and hashes: 1: 0jIxAbKVlv9ELTdJNzuOmYM1RnA.crl (hash: siB5lUHZhZd2yZ32T0cY0017+gm0r7YKRoAl1cRjjag=)
2: 68zFv9YtD3NrAFeU4wp9olsTM-s.roa (hash: pnT0iUdcMHrqvl0nnH7oLBNpzo/eCuulVPG8TY9HMQI=)
3: QaIK-rl-UO6iCpNPezV_L0xU2YU.roa (hash: xhqiUIeuQiCwC9en8JMr8aD8gps5b0AVPyZ6zETgu08=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3e/5b4185-b080-498e-8cc7-6a6af5b74d38/1/0jIxAbKVlv9ELTdJNzuOmYM1RnA.crl
rsync://rpki.ripe.net/repository/DEFAULT/3e/5b4185-b080-498e-8cc7-6a6af5b74d38/1/0jIxAbKVlv9ELTdJNzuOmYM1RnA.mft
rsync://rpki.ripe.net/repository/DEFAULT/0jIxAbKVlv9ELTdJNzuOmYM1RnA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 17 May 2025 17:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:da:ae:da:30:79:5d:d6:eb:67:97:e4:68:73:1c:08:d3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d2323101b29596ff442d3749373b8e9983354670
Validity
Not Before: May 16 20:00:14 2025 GMT
Not After : May 17 20:00:14 2025 GMT
Subject: CN=1cf9c65659809e4fd008812d8c02b9eaaee327ca
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:21:3c:cf:cd:ab:cd:db:a4:3a:77:88:b2:81:
94:58:28:59:b5:51:f6:85:44:26:fd:a8:35:d6:1a:
34:1b:19:8c:ed:70:dc:7d:2c:0b:95:8c:e4:43:8b:
32:2b:be:80:b3:36:19:52:23:e4:21:bb:9f:45:6e:
19:44:09:87:fb:89:d1:2e:54:89:ec:65:e0:fe:b6:
c3:b6:b8:c3:7b:99:c3:7e:a4:9d:3c:a2:c5:9a:0c:
8c:a6:e8:8d:a6:dc:e6:bf:d4:b5:34:4f:f2:3f:43:
98:8a:71:44:d9:de:dc:83:7c:e4:8a:99:73:78:48:
e7:05:4d:fd:b8:b3:1d:15:a6:b6:7c:92:1b:e6:4a:
99:6f:aa:48:65:e4:fa:e3:b3:e6:ce:59:80:60:82:
57:b7:ee:28:38:2a:a4:d7:dd:90:f2:b6:cf:11:de:
5c:ac:c3:37:0d:04:94:2c:e3:87:3e:c9:02:38:a5:
5d:45:0d:36:d2:d7:f4:4e:71:7c:07:6f:05:41:b1:
25:7d:af:82:d0:d3:99:5d:d5:ce:36:ff:c6:08:27:
a4:75:48:23:0e:b5:ce:df:7b:95:c2:46:0f:bf:b5:
5c:01:0a:a1:cc:59:f7:39:cb:3d:8c:18:3f:17:8e:
e4:16:0f:a8:85:a5:89:81:7c:73:c4:69:7b:c0:c7:
02:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1C:F9:C6:56:59:80:9E:4F:D0:08:81:2D:8C:02:B9:EA:AE:E3:27:CA
X509v3 Authority Key Identifier:
keyid:D2:32:31:01:B2:95:96:FF:44:2D:37:49:37:3B:8E:99:83:35:46:70
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0jIxAbKVlv9ELTdJNzuOmYM1RnA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3e/5b4185-b080-498e-8cc7-6a6af5b74d38/1/0jIxAbKVlv9ELTdJNzuOmYM1RnA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3e/5b4185-b080-498e-8cc7-6a6af5b74d38/1/0jIxAbKVlv9ELTdJNzuOmYM1RnA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
47:ac:92:80:ad:db:d7:98:a6:ab:33:7b:b5:a7:cf:f0:f3:17:
b2:2f:a2:79:a9:36:6d:33:8f:a5:2c:83:05:42:fe:bd:23:fa:
05:d3:09:be:b5:2a:0f:2d:95:a2:c7:7e:bf:b9:23:10:66:9c:
52:4f:82:4c:b2:4c:4d:ae:d0:52:2b:bb:e2:53:f7:d3:96:2a:
e1:85:14:05:2f:b1:2f:0d:7b:63:b0:08:4a:9f:51:48:09:55:
3c:94:04:b0:d7:cb:ec:d7:50:e1:e7:07:0c:15:fe:a1:1d:40:
c8:e1:28:df:01:08:23:62:5b:ab:1b:f0:4e:df:7b:f5:65:26:
1e:70:08:94:c3:a0:e2:e1:e2:d1:9f:fd:07:81:a8:ac:56:5c:
bb:07:d2:f0:0a:8d:be:d0:22:ef:43:cb:f9:47:1b:f9:05:70:
44:39:77:94:97:e8:50:83:f8:04:53:f7:a6:b9:d9:51:b9:ef:
be:e9:95:f8:ff:2f:8c:cc:4d:c7:9c:34:0b:3e:2f:fc:e2:8a:
b4:d8:ca:4e:6f:cd:5f:c6:a3:3a:48:cc:ee:49:a2:85:75:55:
33:07:d5:cc:36:5e:55:a7:10:42:69:03:dc:71:ef:4e:33:d0:
04:5e:fd:4a:2c:2f:bf:dc:2b:1a:9a:2a:01:e3:76:e9:ad:74:
23:d3:fa:09
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 16 23:18:21 2025 by rpki-client