Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/53/ec23cc-da5a-4d2b-95d9-7db3ec6fa302/1/0QOvGXZFpJQcbNsIZprwCLeRAr4.mft
File: 0QOvGXZFpJQcbNsIZprwCLeRAr4.mft (raw, json)
Hash identifier: uZ05aYug0mMYWE0Wh6WJlUm8YRdyrHnraXfCJzE7VUI=
Subject key identifier: 57:AF:48:D0:30:29:82:2C:96:2E:F5:A4:3B:D1:0E:20:FB:3E:95:40
Authority key identifier: D1:03:AF:19:76:45:A4:94:1C:6C:DB:08:66:9A:F0:08:B7:91:02:BE
Certificate issuer: /CN=d103af197645a4941c6cdb08669af008b79102be
Certificate serial: 0196BF6F4F0E4CFF6A0A31ADA48768484141
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0QOvGXZFpJQcbNsIZprwCLeRAr4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/53/ec23cc-da5a-4d2b-95d9-7db3ec6fa302/1/0QOvGXZFpJQcbNsIZprwCLeRAr4.mft
Manifest number: 0EA6
Signing time: Sun 11 May 2025 13:01:04 +0000
Manifest this update: Sun 11 May 2025 13:01:04 +0000
Manifest next update: Mon 12 May 2025 13:01:04 +0000
Files and hashes: 1: 0QOvGXZFpJQcbNsIZprwCLeRAr4.crl (hash: niqpKe3oI2kcIGp1gOEaJrOvQ4Si9ZBxsMZ0uRT4pfA=)
2: Ns-TL5URBIXkWjSrsIX0f-jA8r8.roa (hash: rkMxs94A3zqfZql4p2TlDjcRtvwJLskmzewtRu09cI8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/53/ec23cc-da5a-4d2b-95d9-7db3ec6fa302/1/0QOvGXZFpJQcbNsIZprwCLeRAr4.crl
rsync://rpki.ripe.net/repository/DEFAULT/53/ec23cc-da5a-4d2b-95d9-7db3ec6fa302/1/0QOvGXZFpJQcbNsIZprwCLeRAr4.mft
rsync://rpki.ripe.net/repository/DEFAULT/0QOvGXZFpJQcbNsIZprwCLeRAr4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 12 May 2025 13:01:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:bf:6f:4f:0e:4c:ff:6a:0a:31:ad:a4:87:68:48:41:41
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d103af197645a4941c6cdb08669af008b79102be
Validity
Not Before: May 11 13:01:04 2025 GMT
Not After : May 12 13:01:04 2025 GMT
Subject: CN=57af48d03029822c962ef5a43bd10e20fb3e9540
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:1c:65:82:79:23:20:a2:7d:0d:3c:c1:38:f4:
f9:33:41:d8:53:52:8c:7b:5a:d2:b4:43:83:e3:01:
a7:b4:0e:1f:ad:37:24:41:d3:65:6a:6f:3a:88:02:
2e:36:78:23:b4:20:63:81:91:58:45:af:de:00:20:
55:7c:0b:0d:eb:7e:00:be:6f:00:0c:ef:92:a9:85:
58:1d:5b:0e:91:e1:26:6f:a3:5e:44:18:38:59:05:
57:b6:54:63:6f:c8:fb:cf:22:49:c9:d8:80:cc:6a:
86:40:72:a1:3c:6c:30:1d:6b:95:c8:df:a2:ba:88:
93:f4:43:0b:1f:4d:9f:ee:87:ac:11:57:bb:da:03:
4f:b8:66:42:65:90:45:4e:4e:f1:3a:4c:11:9b:9e:
4d:69:d6:ba:9d:87:9d:f8:03:c8:43:e6:69:b9:dc:
d8:cd:54:6a:cb:2c:42:8e:07:e6:68:23:10:13:f3:
8b:ed:53:c6:f3:19:09:f7:3b:ce:68:bc:24:b7:74:
69:c5:da:5c:a0:17:3f:96:20:9c:02:9a:79:d6:de:
44:0e:f9:c6:5b:b2:67:17:4a:69:e0:fa:72:43:fc:
3d:38:a8:72:17:f1:9d:25:a0:ff:55:c9:29:b5:3e:
af:3e:8f:50:80:cb:f2:21:3e:0d:57:41:20:96:f3:
d1:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
57:AF:48:D0:30:29:82:2C:96:2E:F5:A4:3B:D1:0E:20:FB:3E:95:40
X509v3 Authority Key Identifier:
keyid:D1:03:AF:19:76:45:A4:94:1C:6C:DB:08:66:9A:F0:08:B7:91:02:BE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0QOvGXZFpJQcbNsIZprwCLeRAr4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/53/ec23cc-da5a-4d2b-95d9-7db3ec6fa302/1/0QOvGXZFpJQcbNsIZprwCLeRAr4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/53/ec23cc-da5a-4d2b-95d9-7db3ec6fa302/1/0QOvGXZFpJQcbNsIZprwCLeRAr4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0c:69:38:25:57:bb:9d:18:05:7c:6a:a7:14:80:c2:cd:52:a6:
7a:e8:4c:91:d0:f8:b2:b8:19:78:2e:c3:8f:1a:5c:f3:41:b4:
1e:66:ed:a9:12:91:04:ae:ed:c7:d3:40:7b:00:45:88:a4:62:
ff:fe:44:b9:0a:46:0f:e8:68:d6:17:cb:e7:96:e0:06:62:b9:
fb:45:04:1c:c0:84:dd:d4:15:5b:d3:05:db:54:77:2c:2a:e5:
66:0d:f4:4e:93:0b:59:0e:93:3b:21:c0:bb:ca:7c:f0:74:4a:
4a:db:1d:ed:44:4f:10:ce:76:25:22:48:ee:14:f7:9f:9d:62:
9c:20:5f:28:3d:e6:d4:41:a1:5d:3c:c9:d6:55:b6:7d:22:67:
06:92:c2:41:6b:7f:65:d5:3a:d4:66:0e:94:cd:1c:1c:b8:06:
71:01:85:eb:65:1e:12:8f:a4:60:a5:7b:b5:4c:3b:c3:dc:29:
fe:11:d8:de:9d:26:3f:36:83:ef:43:fd:99:66:62:23:67:5a:
a5:7a:01:e0:92:68:54:6d:be:4b:31:6e:62:68:f5:11:d3:b0:
45:f7:19:4a:93:c7:5c:e5:4b:98:9e:5d:63:d7:d1:06:48:b8:
fa:37:9a:0f:74:bf:cc:93:ae:c8:da:b9:24:60:98:c8:77:a9:
23:1a:aa:2f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 11 19:11:39 2025 by rpki-client