Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/80/e4fa48-3be8-4fa3-a436-8a0d0bf0b577/1/rd0qgVBgqn5iGiCUNJdYsgNolvA.mft
File: rd0qgVBgqn5iGiCUNJdYsgNolvA.mft (raw, json)
Hash identifier: heifnEZTry3gFvZLJ7pWqV31cKy059ixtsmW26JrWLA=
Subject key identifier: 0B:5B:E4:6B:3B:C7:A8:44:A1:7D:AD:4B:91:B9:BE:9F:AF:4E:EB:1E
Authority key identifier: AD:DD:2A:81:50:60:AA:7E:62:1A:20:94:34:97:58:B2:03:68:96:F0
Certificate issuer: /CN=addd2a815060aa7e621a2094349758b2036896f0
Certificate serial: 0196C45DF56FC65BB6894E7568EB3CE8965F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rd0qgVBgqn5iGiCUNJdYsgNolvA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/80/e4fa48-3be8-4fa3-a436-8a0d0bf0b577/1/rd0qgVBgqn5iGiCUNJdYsgNolvA.mft
Manifest number: 0191
Signing time: Mon 12 May 2025 12:00:14 +0000
Manifest this update: Mon 12 May 2025 12:00:14 +0000
Manifest next update: Tue 13 May 2025 12:00:14 +0000
Files and hashes: 1: 1-B4mnYUsJDtWU5_HUQ7FJC6tCSw.roa (hash: sHcyd6IuGZiLkLEHDVFO8zkeKGMSe2epXGrDt7jtZiY=)
2: pUwT5WPNwZ36CRQfdZy_qy0h7Bw.roa (hash: jkKjJfJmkg4E68Fod/wXsJ/Vl/Yl+Hk0+HkH2tCfw7I=)
3: rd0qgVBgqn5iGiCUNJdYsgNolvA.crl (hash: 7Sd2IM3k75Uyf+wQrZzHJvcrXWzx/xL4SfXQoW9mXvI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/80/e4fa48-3be8-4fa3-a436-8a0d0bf0b577/1/rd0qgVBgqn5iGiCUNJdYsgNolvA.crl
rsync://rpki.ripe.net/repository/DEFAULT/80/e4fa48-3be8-4fa3-a436-8a0d0bf0b577/1/rd0qgVBgqn5iGiCUNJdYsgNolvA.mft
rsync://rpki.ripe.net/repository/DEFAULT/rd0qgVBgqn5iGiCUNJdYsgNolvA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 13 May 2025 12:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:c4:5d:f5:6f:c6:5b:b6:89:4e:75:68:eb:3c:e8:96:5f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=addd2a815060aa7e621a2094349758b2036896f0
Validity
Not Before: May 12 12:00:14 2025 GMT
Not After : May 13 12:00:14 2025 GMT
Subject: CN=0b5be46b3bc7a844a17dad4b91b9be9faf4eeb1e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:8a:06:d5:d0:c2:be:c2:a8:12:b7:39:ad:af:
54:97:5c:e2:f7:15:0a:94:d2:53:4c:6f:0c:db:b1:
fe:99:f3:96:6d:4c:bc:ac:94:2a:fd:21:9e:58:4f:
55:15:63:94:d8:f4:11:6e:98:b3:5a:ec:8b:56:18:
db:07:7d:33:3c:96:f7:ec:98:68:47:43:9f:06:a7:
b2:dc:cb:1f:58:84:59:6d:00:ca:ec:74:38:ed:92:
81:c0:db:2a:ac:c5:27:95:1c:2c:72:f2:6c:0f:74:
2e:91:4a:13:c0:6a:ab:30:05:5e:6f:ea:75:d6:2e:
dc:c8:bd:d9:d5:a9:29:2f:da:9a:98:02:d0:a0:ba:
0e:38:65:ad:b1:b9:af:da:9d:c5:a9:9e:e4:6c:6d:
78:3b:78:9a:da:1d:b0:00:fa:22:0d:89:33:32:fc:
1f:96:45:b1:3d:46:85:2d:fd:6b:8a:cb:80:1a:b2:
d6:3f:fc:39:fd:a4:be:de:7d:29:13:97:13:09:2e:
7b:b7:36:60:9a:76:72:eb:d0:8d:47:da:38:9d:b3:
12:c5:80:79:28:81:f0:1a:2b:4d:de:16:c8:d7:b3:
e2:5f:69:0c:f5:a0:10:79:01:43:a2:84:5f:54:93:
23:92:12:31:69:b7:e2:f0:f6:ba:47:3d:ff:46:76:
45:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0B:5B:E4:6B:3B:C7:A8:44:A1:7D:AD:4B:91:B9:BE:9F:AF:4E:EB:1E
X509v3 Authority Key Identifier:
keyid:AD:DD:2A:81:50:60:AA:7E:62:1A:20:94:34:97:58:B2:03:68:96:F0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rd0qgVBgqn5iGiCUNJdYsgNolvA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/80/e4fa48-3be8-4fa3-a436-8a0d0bf0b577/1/rd0qgVBgqn5iGiCUNJdYsgNolvA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/80/e4fa48-3be8-4fa3-a436-8a0d0bf0b577/1/rd0qgVBgqn5iGiCUNJdYsgNolvA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
03:ce:3c:55:7e:92:f9:b2:0e:cf:eb:c3:b0:af:1d:29:7b:6f:
67:89:0b:69:33:60:e8:3f:e8:d1:33:35:5d:17:f3:a8:c9:c2:
21:1e:84:4c:99:e6:df:f9:91:ec:e4:34:83:ad:bc:8f:11:dc:
62:97:f4:e1:c2:5e:36:32:6f:de:dd:11:8d:c4:81:f6:b3:f0:
e0:40:51:6d:89:72:34:09:47:76:b4:b3:28:2a:30:31:e3:3a:
56:b4:c2:5f:29:7d:8e:64:ae:61:7a:64:ca:c1:2e:1b:95:0a:
17:bb:ba:91:d6:64:88:4d:41:54:98:ee:4f:36:3c:34:20:0d:
0c:7a:cb:1f:20:09:48:00:b9:c4:9f:31:bf:64:95:f3:ee:6c:
b6:2d:b8:ea:2c:8d:cb:0c:b9:d3:f4:87:06:70:fc:7e:e1:50:
4b:2f:ae:4b:46:1c:67:93:c0:c5:24:74:05:69:b5:ca:d6:e6:
c3:b6:37:81:c4:18:36:8e:a3:70:56:ca:19:5b:62:df:6a:49:
a0:7f:92:5e:ac:53:d3:47:8e:f6:18:9d:c1:bc:f6:83:da:e7:
be:98:7d:7b:00:83:84:40:78:cd:42:87:ca:9c:74:cd:8b:3a:
a9:7d:cb:1e:13:b8:ae:29:46:47:48:f3:fe:5c:50:fa:15:e0:
fb:4b:57:ea
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 12 20:11:31 2025 by rpki-client