Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6a/b069f9-f146-4247-bacc-be6304c252c7/1/0dMLd0soDDfhxe1dimnLmvZIsGU.mft
File: 0dMLd0soDDfhxe1dimnLmvZIsGU.mft (raw, json)
Hash identifier: 4A8J6dWCiOhCkghlsUKTO/25dp+EcIEbLeEZ5+4B2L8=
Subject key identifier: 46:BB:B1:14:00:19:16:7D:FA:60:EA:E5:FA:0F:95:09:AF:BC:39:6B
Authority key identifier: D1:D3:0B:77:4B:28:0C:37:E1:C5:ED:5D:8A:69:CB:9A:F6:48:B0:65
Certificate issuer: /CN=d1d30b774b280c37e1c5ed5d8a69cb9af648b065
Certificate serial: 0196AFFC8B9DEA717DBA028FA7D8ACF6A09A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0dMLd0soDDfhxe1dimnLmvZIsGU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6a/b069f9-f146-4247-bacc-be6304c252c7/1/0dMLd0soDDfhxe1dimnLmvZIsGU.mft
Manifest number: 099A
Signing time: Thu 08 May 2025 13:01:25 +0000
Manifest this update: Thu 08 May 2025 13:01:25 +0000
Manifest next update: Fri 09 May 2025 13:01:25 +0000
Files and hashes: 1: 0dMLd0soDDfhxe1dimnLmvZIsGU.crl (hash: jUqQRaWAfagMvQq9/Nnm0PYDYjbAsHSD8NJeNZLzuBE=)
2: Z6jijp-NqGecwIu65j-qEMAm0nw.roa (hash: 19TQbomnm0YTugnf3c9Z0fKykpuT1EtKWHuZ0GsZG+A=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6a/b069f9-f146-4247-bacc-be6304c252c7/1/0dMLd0soDDfhxe1dimnLmvZIsGU.crl
rsync://rpki.ripe.net/repository/DEFAULT/6a/b069f9-f146-4247-bacc-be6304c252c7/1/0dMLd0soDDfhxe1dimnLmvZIsGU.mft
rsync://rpki.ripe.net/repository/DEFAULT/0dMLd0soDDfhxe1dimnLmvZIsGU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 09 May 2025 13:01:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:af:fc:8b:9d:ea:71:7d:ba:02:8f:a7:d8:ac:f6:a0:9a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d1d30b774b280c37e1c5ed5d8a69cb9af648b065
Validity
Not Before: May 8 13:01:25 2025 GMT
Not After : May 9 13:01:25 2025 GMT
Subject: CN=46bbb1140019167dfa60eae5fa0f9509afbc396b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:40:62:89:d7:74:39:43:e2:ab:6f:5a:9e:65:
c0:43:22:24:b3:f5:8a:49:3e:c3:46:d0:77:f1:97:
ff:1f:ed:ad:42:31:ee:b2:a3:06:e9:ce:d2:63:78:
4e:95:a0:99:dc:97:59:46:9d:a1:e0:e9:8a:7e:f8:
43:50:37:ba:1d:02:85:b0:70:78:fe:8e:c8:1e:17:
0b:05:00:06:3d:e4:11:cd:7a:a0:c9:6b:65:73:57:
ac:1e:e5:b1:48:18:82:56:02:ef:e3:8c:61:36:e3:
c9:ff:91:9a:9a:70:13:e3:6c:96:16:c6:a8:12:bb:
17:45:93:8b:f8:d4:95:00:b9:e1:ac:52:e2:40:7d:
45:89:40:71:7d:7d:61:1e:fe:e1:14:78:06:84:9e:
36:9c:ff:1d:9c:42:73:58:c5:34:d8:6a:3d:c8:ab:
d8:fb:40:87:4c:4b:5a:f0:13:a6:2c:f5:de:f8:d6:
e3:84:b7:ee:b8:3a:9f:30:40:de:7d:71:8e:d9:d7:
bb:1a:3b:cc:08:01:13:ad:ba:71:6c:e4:dd:c7:51:
0b:bf:4a:15:31:8b:07:8b:0e:80:87:cc:a6:06:a2:
18:f8:87:de:89:f3:9e:05:f0:68:e5:54:90:81:5b:
76:1d:23:bf:8d:d3:2a:44:c8:33:69:80:a7:59:b0:
4d:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
46:BB:B1:14:00:19:16:7D:FA:60:EA:E5:FA:0F:95:09:AF:BC:39:6B
X509v3 Authority Key Identifier:
keyid:D1:D3:0B:77:4B:28:0C:37:E1:C5:ED:5D:8A:69:CB:9A:F6:48:B0:65
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0dMLd0soDDfhxe1dimnLmvZIsGU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/b069f9-f146-4247-bacc-be6304c252c7/1/0dMLd0soDDfhxe1dimnLmvZIsGU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/b069f9-f146-4247-bacc-be6304c252c7/1/0dMLd0soDDfhxe1dimnLmvZIsGU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3c:e9:96:db:b7:5b:7b:ef:fd:48:cd:26:74:22:b5:20:2d:68:
49:41:af:94:fb:7e:5f:a5:25:c8:44:f2:08:ae:30:f3:a8:f5:
e5:92:94:52:2d:a3:98:14:c4:fb:8d:33:32:8c:cc:23:a8:76:
d5:29:26:b3:d5:71:58:3a:4b:a7:80:90:24:81:e6:0b:93:34:
63:bb:3a:f8:fb:5e:0c:9b:3e:f5:a4:a1:db:eb:ba:24:80:8f:
d7:6e:a5:75:16:57:68:07:64:14:63:6d:f0:da:8a:49:25:05:
43:9f:80:f8:db:61:ab:10:fe:57:95:86:c3:a3:2d:c7:34:df:
85:79:b5:56:5f:32:28:ba:8a:a6:a1:2a:53:44:1e:6e:ed:ef:
9c:41:93:99:cd:84:0b:ef:d4:b4:5e:5e:79:68:5e:e8:e1:01:
d2:96:05:43:04:af:28:53:54:e4:15:7f:be:20:cf:bb:32:5b:
48:ee:a1:66:d5:3f:73:d5:c3:f3:e8:93:68:9f:02:fe:44:86:
91:30:db:49:90:d8:b4:5d:35:23:61:2b:a5:6f:c7:9e:55:84:
d2:43:4e:c9:24:61:36:80:6e:79:99:e7:39:9a:ad:b6:2f:ac:
7c:99:b8:f4:ae:41:c9:21:ea:7c:0e:19:ad:28:3e:f1:2d:19:
c6:3a:45:df
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 8 18:56:41 2025 by rpki-client