Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/67/f507cb-7371-4ad1-b7e3-16a7d60d5bea/1/0RaDXQN3hmIKnp96DjYEmLtlQSc.mft
File: 0RaDXQN3hmIKnp96DjYEmLtlQSc.mft (raw, json)
Hash identifier: yMT0xDNs9bQUse5ImADGTsn3rrjWiEH1GtYP/dox6xg=
Subject key identifier: 7B:A1:DE:69:AA:F8:95:51:C9:84:4F:AA:28:AC:8F:6A:0E:EA:F0:B7
Authority key identifier: D1:16:83:5D:03:77:86:62:0A:9E:9F:7A:0E:36:04:98:BB:65:41:27
Certificate issuer: /CN=d116835d037786620a9e9f7a0e360498bb654127
Certificate serial: 0196A051A0F8F5BCF4CCE635704E9940CE16
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0RaDXQN3hmIKnp96DjYEmLtlQSc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/67/f507cb-7371-4ad1-b7e3-16a7d60d5bea/1/0RaDXQN3hmIKnp96DjYEmLtlQSc.mft
Manifest number: 093C
Signing time: Mon 05 May 2025 12:00:26 +0000
Manifest this update: Mon 05 May 2025 12:00:26 +0000
Manifest next update: Tue 06 May 2025 12:00:26 +0000
Files and hashes: 1: 0RaDXQN3hmIKnp96DjYEmLtlQSc.crl (hash: W2T1pEUpx1CVdGTLYtXwj3zjP4clPssh538svO2jzCU=)
2: Ve2RrvNi_87VDfl21Lq8fKe-sYc.roa (hash: Bwg7wRCqbsHk5Pn4Ah5pnRiyg8rpwcrSFyOQ2YGllyY=)
3: nc0QnNEGuF1kLi9w3egLsBhEL6Y.roa (hash: KWBWDWBG7Sj1CyJ1paoXUYeG29P/pnqgE+4DRW4DIYU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/67/f507cb-7371-4ad1-b7e3-16a7d60d5bea/1/0RaDXQN3hmIKnp96DjYEmLtlQSc.crl
rsync://rpki.ripe.net/repository/DEFAULT/67/f507cb-7371-4ad1-b7e3-16a7d60d5bea/1/0RaDXQN3hmIKnp96DjYEmLtlQSc.mft
rsync://rpki.ripe.net/repository/DEFAULT/0RaDXQN3hmIKnp96DjYEmLtlQSc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 06 May 2025 10:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:a0:51:a0:f8:f5:bc:f4:cc:e6:35:70:4e:99:40:ce:16
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d116835d037786620a9e9f7a0e360498bb654127
Validity
Not Before: May 5 12:00:26 2025 GMT
Not After : May 6 12:00:26 2025 GMT
Subject: CN=7ba1de69aaf89551c9844faa28ac8f6a0eeaf0b7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:81:59:4a:ac:8c:3f:78:c6:48:77:b7:e6:e6:
a8:24:75:a7:fa:83:14:fe:df:3e:dd:09:a7:a6:b7:
41:a3:9b:9b:9d:18:fd:c7:88:68:4a:b2:3a:92:3c:
b6:fc:b7:97:ae:25:83:87:f9:59:34:93:50:58:7e:
65:d6:f8:27:46:5c:54:97:3b:72:49:00:d2:c1:90:
c2:72:cb:8b:9e:35:7c:fd:c2:ef:4d:52:a3:f9:37:
bd:5c:04:a0:60:43:1c:77:db:1a:d7:f1:26:7a:84:
02:d7:50:fc:08:9a:24:23:e1:bd:58:53:db:06:ca:
05:bc:b0:0e:78:6a:3a:bd:31:1a:cb:b0:6e:f8:eb:
a7:0f:4d:ec:86:e9:85:ee:89:3e:0a:4a:bf:87:81:
ba:e5:fe:1a:90:3e:d8:de:d0:b9:de:80:1d:86:82:
8f:c6:44:ee:63:5d:1b:c6:74:70:e9:0d:25:0d:9e:
ce:5c:f3:7a:8c:c4:2c:7f:c5:ba:84:26:f7:21:6e:
d8:fe:2f:63:34:a4:7f:a7:52:41:4d:c9:77:2a:b4:
75:f8:35:dc:36:93:8b:46:07:30:40:f5:32:c3:16:
1c:75:1e:2f:6a:8d:7a:15:f5:e8:58:6f:7f:6e:1a:
b4:57:b2:9a:83:e0:db:42:67:9a:ca:46:8f:63:d8:
2b:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7B:A1:DE:69:AA:F8:95:51:C9:84:4F:AA:28:AC:8F:6A:0E:EA:F0:B7
X509v3 Authority Key Identifier:
keyid:D1:16:83:5D:03:77:86:62:0A:9E:9F:7A:0E:36:04:98:BB:65:41:27
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0RaDXQN3hmIKnp96DjYEmLtlQSc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/67/f507cb-7371-4ad1-b7e3-16a7d60d5bea/1/0RaDXQN3hmIKnp96DjYEmLtlQSc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/67/f507cb-7371-4ad1-b7e3-16a7d60d5bea/1/0RaDXQN3hmIKnp96DjYEmLtlQSc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
af:d0:12:6d:8e:68:af:2c:07:64:85:ba:3d:b0:c8:99:64:ee:
f6:04:2b:1b:c7:93:76:2f:00:18:9c:c6:c9:d9:39:b6:bb:50:
16:c5:b2:6d:5a:4b:b9:0f:b4:c7:09:f5:a3:69:80:4f:3c:81:
f3:ac:f7:17:d4:83:02:36:ed:24:1e:9f:52:b3:77:78:7a:75:
86:0d:3d:d1:88:dd:b4:b4:58:68:30:3e:b3:a1:47:ce:3c:73:
ee:f3:fc:db:b9:a0:8b:9f:84:a2:c0:13:66:0d:af:56:fb:50:
a7:c8:11:f0:e9:6f:df:77:66:40:52:39:b2:ca:b3:08:66:5e:
86:be:32:1a:30:2a:a6:70:7a:29:58:3e:f6:71:1e:bc:7f:dd:
df:b5:e8:3b:d0:8b:8c:52:07:30:d7:68:f1:de:8c:34:de:bf:
88:15:13:bf:f2:a8:86:9c:07:b2:5f:b5:b4:32:c2:0a:3c:27:
a1:e5:4f:bb:94:1d:d6:eb:6f:16:27:e7:5a:aa:86:4c:ed:34:
5e:2f:8e:71:76:e6:4b:e7:6c:e4:47:75:c9:56:2e:0f:c8:49:
2a:98:e3:dd:95:94:af:14:bc:56:54:d0:1b:9c:c7:53:ea:db:
ce:f9:46:2e:89:53:3b:68:ef:2e:13:5e:b1:41:21:a3:9a:65:
a7:78:51:7b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 5 19:53:02 2025 by rpki-client