Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5b/0fe8ef-5911-44c4-afa3-79dfd14c3960/1/0WvfVDgfYwdK35ob2Xd4d6cgBGw.mft
File: 0WvfVDgfYwdK35ob2Xd4d6cgBGw.mft (raw, json)
Hash identifier: RJcBeun0MDFrfNWD8D70Oi1LbfaL67+SgsZSV0gFiUg=
Subject key identifier: 36:53:82:91:30:2B:25:92:AB:50:AB:53:00:E1:FB:49:1D:81:C4:6A
Authority key identifier: D1:6B:DF:54:38:1F:63:07:4A:DF:9A:1B:D9:77:78:77:A7:20:04:6C
Certificate issuer: /CN=d16bdf54381f63074adf9a1bd9777877a720046c
Certificate serial: 0196C3F07088A200C2A56775266C9C7E7180
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0WvfVDgfYwdK35ob2Xd4d6cgBGw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5b/0fe8ef-5911-44c4-afa3-79dfd14c3960/1/0WvfVDgfYwdK35ob2Xd4d6cgBGw.mft
Manifest number: 022C
Signing time: Mon 12 May 2025 10:00:36 +0000
Manifest this update: Mon 12 May 2025 10:00:36 +0000
Manifest next update: Tue 13 May 2025 10:00:36 +0000
Files and hashes: 1: 0WvfVDgfYwdK35ob2Xd4d6cgBGw.crl (hash: HSrixWdRw66oumd46gFIkdDAueBc7QWb7YIMI2hdeFA=)
2: fMqs9FskGDIW9ZbaQwk0qUEC3ks.roa (hash: CtgaQ4J8AgrMFT4kVvGV6ADv6GPEnX8MMv9l/y32iWU=)
3: idiMTHuxguw5KJd3P5FoGJbinyo.roa (hash: n+9BnqU/yI6WzHcfhLc6mXo8IOBS4JMkN/uhkjIXEGM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5b/0fe8ef-5911-44c4-afa3-79dfd14c3960/1/0WvfVDgfYwdK35ob2Xd4d6cgBGw.crl
rsync://rpki.ripe.net/repository/DEFAULT/5b/0fe8ef-5911-44c4-afa3-79dfd14c3960/1/0WvfVDgfYwdK35ob2Xd4d6cgBGw.mft
rsync://rpki.ripe.net/repository/DEFAULT/0WvfVDgfYwdK35ob2Xd4d6cgBGw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 13 May 2025 10:00:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:c3:f0:70:88:a2:00:c2:a5:67:75:26:6c:9c:7e:71:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d16bdf54381f63074adf9a1bd9777877a720046c
Validity
Not Before: May 12 10:00:36 2025 GMT
Not After : May 13 10:00:36 2025 GMT
Subject: CN=36538291302b2592ab50ab5300e1fb491d81c46a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:84:26:06:a8:53:5e:ea:63:ec:9c:5d:c1:83:e0:
16:6b:1f:6d:cd:77:32:ea:ab:07:f3:65:8e:8e:a0:
2b:fe:fa:4d:02:eb:a9:38:0b:30:ad:77:04:9a:7c:
ca:d9:f0:93:3a:95:a7:1c:b5:7c:94:7b:d0:6e:b0:
df:f4:db:b2:0b:e1:76:99:dd:85:78:75:0a:90:c8:
db:7f:48:d9:3e:90:9a:a2:e3:40:b2:02:aa:26:17:
fa:e2:31:32:0b:ec:b3:3a:47:4c:f9:ec:1a:3a:aa:
9d:8c:a6:df:78:4f:93:4b:87:4a:1d:5b:a2:f4:f7:
4d:9d:6b:b9:c4:72:43:2b:99:d9:5a:1f:4d:2c:78:
a2:95:16:ce:72:22:1f:44:27:d3:48:9b:7e:9d:fd:
bc:0d:d7:06:e7:7a:f7:de:56:59:d9:a0:27:1e:b2:
82:72:a5:8f:d7:37:01:1a:cc:1e:60:58:49:bd:56:
19:dd:0b:69:dd:0d:c5:90:75:03:87:48:f5:18:39:
bf:ba:49:8f:70:75:06:2b:fc:9e:c9:ea:d4:4e:71:
2a:3e:0d:21:25:0e:bd:62:84:23:48:d9:a3:01:2d:
e0:02:69:ff:5a:81:c2:fa:c8:9c:bd:35:4b:e7:c6:
55:b8:71:dd:f1:fd:30:e1:27:02:05:cf:66:cb:bc:
cb:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
36:53:82:91:30:2B:25:92:AB:50:AB:53:00:E1:FB:49:1D:81:C4:6A
X509v3 Authority Key Identifier:
keyid:D1:6B:DF:54:38:1F:63:07:4A:DF:9A:1B:D9:77:78:77:A7:20:04:6C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0WvfVDgfYwdK35ob2Xd4d6cgBGw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/0fe8ef-5911-44c4-afa3-79dfd14c3960/1/0WvfVDgfYwdK35ob2Xd4d6cgBGw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/0fe8ef-5911-44c4-afa3-79dfd14c3960/1/0WvfVDgfYwdK35ob2Xd4d6cgBGw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
21:91:1f:05:9e:68:22:e5:f1:aa:c1:9b:a1:d5:6f:b7:fb:aa:
35:d1:b3:bd:91:07:41:0d:70:18:71:93:ee:9f:9b:9d:96:b9:
32:e2:7f:1f:28:da:83:3a:77:aa:0d:ca:7f:54:9b:90:77:39:
35:dc:e8:c4:37:2a:a9:b3:d4:70:c8:7f:d8:b5:41:3f:f9:c9:
2e:e4:55:f0:3d:a8:39:e0:90:39:df:aa:11:05:05:c9:a5:e4:
75:fc:cf:20:a7:b7:e2:37:ec:a4:07:ce:21:54:f8:f2:35:9b:
cf:4b:55:7d:d4:42:15:75:6e:2d:14:20:0c:4a:57:62:91:ec:
34:1d:f1:50:03:1e:55:b2:50:23:a8:10:ae:7f:cd:94:a6:22:
0b:71:a3:cb:96:89:10:a8:bf:a3:3b:42:a3:3b:b3:52:32:ca:
5f:b1:b1:9b:98:df:59:32:c8:13:74:10:74:da:a5:27:30:42:
25:16:d2:d6:cc:35:ae:e1:9a:a9:9a:86:85:60:be:fe:2d:b3:
e0:6e:c3:31:63:19:bb:33:b4:d8:b9:33:ca:80:c9:0f:92:de:
d3:da:b4:03:72:dd:cb:8e:d7:6a:0e:6f:7d:59:f6:4c:2b:5e:
2c:65:8e:22:39:ad:77:a0:36:da:20:4a:5c:41:db:99:94:71:
fd:f3:d1:a1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 12 19:48:45 2025 by rpki-client