Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/48/56433a-0a70-4eae-9f9d-8cfbdb799284/1/0hpZQHIrIHsp2Vpsgb4NK_TUEMw.mft
File: 0hpZQHIrIHsp2Vpsgb4NK_TUEMw.mft (raw, json)
Hash identifier: TOfcqx1dVlUbvWToXARxm2BChrJoloIXyFkZ49QfIUI=
Subject key identifier: CF:F0:0E:F9:F8:44:8A:57:E0:B0:84:77:EB:02:54:F8:B6:D2:0E:07
Authority key identifier: D2:1A:59:40:72:2B:20:7B:29:D9:5A:6C:81:BE:0D:2B:F4:D4:10:CC
Certificate issuer: /CN=d21a5940722b207b29d95a6c81be0d2bf4d410cc
Certificate serial: 0196C1CB159C87BA964CD0B1ADD26B96D3CE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0hpZQHIrIHsp2Vpsgb4NK_TUEMw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/48/56433a-0a70-4eae-9f9d-8cfbdb799284/1/0hpZQHIrIHsp2Vpsgb4NK_TUEMw.mft
Manifest number: 06F1
Signing time: Mon 12 May 2025 00:00:34 +0000
Manifest this update: Mon 12 May 2025 00:00:34 +0000
Manifest next update: Tue 13 May 2025 00:00:34 +0000
Files and hashes: 1: 0hpZQHIrIHsp2Vpsgb4NK_TUEMw.crl (hash: 4QzR4i+aWiETaccVgwLqO0BZBGsU1ybVZSjaVaPROUg=)
2: 50bo-j7HR95aUFz7is7MBLLkMsc.roa (hash: aYgErZR0B+wLx1tDGd7DRHlBnCECIPjEQvva1IOrhbs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/48/56433a-0a70-4eae-9f9d-8cfbdb799284/1/0hpZQHIrIHsp2Vpsgb4NK_TUEMw.crl
rsync://rpki.ripe.net/repository/DEFAULT/48/56433a-0a70-4eae-9f9d-8cfbdb799284/1/0hpZQHIrIHsp2Vpsgb4NK_TUEMw.mft
rsync://rpki.ripe.net/repository/DEFAULT/0hpZQHIrIHsp2Vpsgb4NK_TUEMw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 13 May 2025 00:00:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:c1:cb:15:9c:87:ba:96:4c:d0:b1:ad:d2:6b:96:d3:ce
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d21a5940722b207b29d95a6c81be0d2bf4d410cc
Validity
Not Before: May 12 00:00:34 2025 GMT
Not After : May 13 00:00:34 2025 GMT
Subject: CN=cff00ef9f8448a57e0b08477eb0254f8b6d20e07
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:19:5f:96:30:87:fa:4f:59:43:10:16:b0:64:
a2:6f:95:8b:58:d5:dc:8c:69:7b:de:60:73:63:db:
27:61:a6:22:96:8b:37:2a:02:0e:06:88:a0:92:ce:
15:bf:f2:46:98:9b:35:f3:6f:e2:39:91:8a:ad:13:
c2:87:84:cd:d4:98:cc:30:23:f5:76:75:48:84:eb:
05:0f:0a:27:87:25:2d:54:91:43:a6:53:a6:29:03:
8a:52:84:be:44:4e:5a:39:54:32:8c:4a:98:0d:c5:
69:32:7d:e6:a5:b7:25:8f:ad:d0:e6:46:3c:f7:9f:
79:32:eb:38:a9:07:a5:0f:08:29:60:c7:e6:4f:92:
49:cd:53:f7:a0:82:55:e8:b5:0a:d4:bb:14:6b:c3:
44:da:de:b2:e4:a0:c4:ab:eb:4c:b3:2a:c9:e1:27:
9f:aa:4c:ac:71:27:ee:64:a9:a8:97:f7:35:08:52:
6d:27:2a:bb:66:d3:af:df:21:87:4d:d4:74:fa:f5:
0d:8b:65:1b:e6:4e:59:31:31:6e:15:6a:5a:48:e7:
08:d8:d8:64:8b:22:2a:ef:dd:ae:d3:09:a9:8f:ba:
74:e0:ac:6d:ec:4d:ef:be:b2:6c:b3:d9:af:5d:3a:
82:05:05:ec:64:91:8c:0e:db:d8:c8:30:57:3c:f1:
9f:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CF:F0:0E:F9:F8:44:8A:57:E0:B0:84:77:EB:02:54:F8:B6:D2:0E:07
X509v3 Authority Key Identifier:
keyid:D2:1A:59:40:72:2B:20:7B:29:D9:5A:6C:81:BE:0D:2B:F4:D4:10:CC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0hpZQHIrIHsp2Vpsgb4NK_TUEMw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/48/56433a-0a70-4eae-9f9d-8cfbdb799284/1/0hpZQHIrIHsp2Vpsgb4NK_TUEMw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/48/56433a-0a70-4eae-9f9d-8cfbdb799284/1/0hpZQHIrIHsp2Vpsgb4NK_TUEMw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5a:63:13:83:6c:3f:99:80:01:3e:1d:43:a1:a7:ff:dd:7d:9a:
19:a9:c0:35:09:8b:37:0f:f2:32:5d:6f:60:ad:15:f3:60:60:
c5:d3:c6:e2:71:38:42:ca:cd:5e:45:7d:8d:38:e8:fb:19:96:
18:9e:77:33:b8:7c:d5:a8:8a:7c:9e:54:ae:aa:e5:05:29:92:
6d:a3:a9:be:8c:14:b0:d3:ab:07:1a:51:95:15:b8:26:6f:a9:
38:22:8a:87:24:81:fb:dc:3f:31:d9:d5:92:99:8c:a7:ff:9c:
50:55:6b:4a:84:5b:ca:06:8d:b1:51:ea:e5:6a:c8:d5:cb:0b:
7f:aa:ec:de:44:50:9a:66:9a:6e:57:bc:e0:e5:92:a0:31:c7:
17:d8:73:29:58:32:15:39:8a:2d:5a:f4:58:f0:fc:ad:a1:61:
c2:c2:b9:d7:4d:68:de:e2:05:90:02:58:fe:ff:0b:59:47:20:
41:2b:3e:38:cf:a1:dd:7a:ff:a8:7d:99:c7:ec:f9:a9:e0:02:
d3:f5:7c:dd:2b:f2:f9:f9:5f:24:6f:a4:bc:9f:28:ce:de:4e:
77:18:57:d1:3c:58:9a:65:b4:c1:d1:ae:f5:a9:f4:4b:fb:54:
9e:39:e8:f6:38:1d:fb:86:a5:ca:6d:b1:86:2b:65:0d:4a:86:
ed:63:68:9a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 12 04:15:00 2025 by rpki-client