Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/63/2fbccc-64b6-4f66-8969-a6d27c431818/1/0oNhbxNiwl2C7CpwxLl1BWWxGX8.mft
File: 0oNhbxNiwl2C7CpwxLl1BWWxGX8.mft (raw, json)
Hash identifier: PWhnSjN1qMEV/kqBH3BMriaFYCkg+cLBSuuQfjeLLkQ=
Subject key identifier: 7B:6F:08:CC:04:C4:A0:0B:75:71:71:5E:DA:D8:E7:8E:61:FD:CA:32
Authority key identifier: D2:83:61:6F:13:62:C2:5D:82:EC:2A:70:C4:B9:75:05:65:B1:19:7F
Certificate issuer: /CN=d283616f1362c25d82ec2a70c4b9750565b1197f
Certificate serial: 0196C014023A4B2DB14A47E36DB5383C2161
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0oNhbxNiwl2C7CpwxLl1BWWxGX8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/63/2fbccc-64b6-4f66-8969-a6d27c431818/1/0oNhbxNiwl2C7CpwxLl1BWWxGX8.mft
Manifest number: 126C
Signing time: Sun 11 May 2025 16:00:58 +0000
Manifest this update: Sun 11 May 2025 16:00:58 +0000
Manifest next update: Mon 12 May 2025 16:00:58 +0000
Files and hashes: 1: 0oNhbxNiwl2C7CpwxLl1BWWxGX8.crl (hash: AADHvlq4iZKQEBLWB8eOazpH1OkklbdmRCoJdgg0l3I=)
2: mVZaVH1Pcezupl88BB4A9aDh2ik.roa (hash: x9LGsO42G/kG8E6OK/kSND1fo/r1Rn2Jod3oqumsnE8=)
3: pXbNNPwN94jiY7_-VrGgRRgnbvM.roa (hash: iGkJvRDhgHWubYW0daL/Fj7V8HneaI44eRUKNiVEAEM=)
4: rVK1f_dmH8IkDbuaYgLPIHaLhTw.roa (hash: ZQMoKPh7bf4f+FY2EcEyUK7kit9BSmoiMPRby8M1WLE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/63/2fbccc-64b6-4f66-8969-a6d27c431818/1/0oNhbxNiwl2C7CpwxLl1BWWxGX8.crl
rsync://rpki.ripe.net/repository/DEFAULT/63/2fbccc-64b6-4f66-8969-a6d27c431818/1/0oNhbxNiwl2C7CpwxLl1BWWxGX8.mft
rsync://rpki.ripe.net/repository/DEFAULT/0oNhbxNiwl2C7CpwxLl1BWWxGX8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 12 May 2025 16:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:c0:14:02:3a:4b:2d:b1:4a:47:e3:6d:b5:38:3c:21:61
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d283616f1362c25d82ec2a70c4b9750565b1197f
Validity
Not Before: May 11 16:00:58 2025 GMT
Not After : May 12 16:00:58 2025 GMT
Subject: CN=7b6f08cc04c4a00b7571715edad8e78e61fdca32
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:5a:65:6c:4b:6b:c8:cf:f6:f5:ec:40:be:52:
cb:85:d2:06:c4:0b:eb:47:96:ee:4a:10:fe:5f:25:
9f:5b:4b:a3:7d:df:71:38:93:4d:bd:65:f7:aa:ac:
c5:70:a7:3c:51:17:f4:db:5f:dc:db:23:2d:9c:d0:
a2:24:75:f9:78:7c:d5:a1:48:82:5d:ef:6c:ff:4e:
43:9b:11:dc:2a:69:7b:0a:17:5b:87:cf:7e:ea:1d:
76:98:74:61:a0:30:13:a8:3b:67:aa:63:8f:69:bd:
25:b0:58:92:c8:e3:a0:2f:5f:93:51:d5:6b:4a:6e:
cd:e8:62:59:fc:fc:dc:7f:dd:41:fb:d2:9b:bb:0a:
cb:42:13:d7:59:5e:3c:fe:49:fe:0e:4c:a7:c9:89:
33:1c:a5:02:57:f6:42:be:42:45:35:9a:09:53:38:
09:e1:a2:6e:d6:c6:21:b3:c8:9e:9c:dc:67:34:ce:
c6:cb:32:33:20:91:b0:dd:50:45:a4:01:d5:33:41:
4f:aa:3c:bd:ad:0d:6f:7a:ac:61:d2:a2:a0:3d:88:
96:eb:94:85:24:b4:c4:56:07:63:4e:ce:97:03:55:
95:d4:65:71:bb:63:f4:60:7b:9e:f6:1e:12:02:78:
e6:d0:14:2e:0a:fe:ae:96:49:80:82:62:b6:48:9f:
75:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7B:6F:08:CC:04:C4:A0:0B:75:71:71:5E:DA:D8:E7:8E:61:FD:CA:32
X509v3 Authority Key Identifier:
keyid:D2:83:61:6F:13:62:C2:5D:82:EC:2A:70:C4:B9:75:05:65:B1:19:7F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0oNhbxNiwl2C7CpwxLl1BWWxGX8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/63/2fbccc-64b6-4f66-8969-a6d27c431818/1/0oNhbxNiwl2C7CpwxLl1BWWxGX8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/63/2fbccc-64b6-4f66-8969-a6d27c431818/1/0oNhbxNiwl2C7CpwxLl1BWWxGX8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4b:21:e4:e4:55:89:33:3a:44:60:23:29:d8:4b:8b:94:40:cd:
b9:aa:6b:25:ab:ef:d5:67:be:29:a4:10:a6:83:b4:df:8f:3c:
ba:3f:eb:e9:89:3e:39:0b:f9:3b:07:6b:9f:c2:96:19:6b:ae:
99:e2:c1:56:34:8f:f7:61:9b:9b:2b:d7:e6:b0:ff:aa:a3:f3:
15:84:0b:8a:39:9e:8d:56:6a:12:6d:3a:cb:64:4c:fe:e4:b9:
b4:19:45:26:56:38:af:2a:eb:4e:42:6e:70:9d:a6:69:6a:b3:
a2:ef:f3:fd:6f:18:20:7e:7a:95:3f:fb:94:36:12:77:51:7e:
25:2f:8a:2f:e2:a5:9a:a6:57:47:90:56:bc:4a:45:39:8d:e1:
a3:df:17:90:a9:0d:40:43:05:4e:df:d2:c3:69:ad:29:0b:f2:
79:b1:40:e7:34:c1:42:5c:4e:4d:67:55:aa:9e:7a:8e:39:17:
89:4e:83:8b:63:69:54:17:bf:1e:af:59:8a:52:53:b1:6d:b8:
60:18:72:da:93:9e:15:cf:89:cb:f2:c2:96:d3:c8:e5:f2:4a:
c1:b1:51:f3:94:8f:29:cb:29:d1:e8:6e:db:c0:af:92:ad:4a:
29:a2:67:1a:24:06:a1:ca:8f:29:d0:fb:c9:03:98:e6:8a:d1:
07:e0:7e:9f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 11 22:54:24 2025 by rpki-client