Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/96/2c11c1-4250-4387-a4db-2701d591deae/1/0CDxCDLEm61vFalgWMW6GFcqxSo.mft
File: 0CDxCDLEm61vFalgWMW6GFcqxSo.mft (raw, json)
Hash identifier: 9IpMXZthjiiAoHfSuiOf90n7s2DvUINlXQiKmMpWvGA=
Subject key identifier: 55:A8:4B:8B:C4:F1:72:8A:95:15:69:23:0F:82:77:3F:B9:E1:CB:2E
Authority key identifier: D0:20:F1:08:32:C4:9B:AD:6F:15:A9:60:58:C5:BA:18:57:2A:C5:2A
Certificate issuer: /CN=d020f10832c49bad6f15a96058c5ba18572ac52a
Certificate serial: 0196B2C5C3548C14A652D38B079851BEC3B5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0CDxCDLEm61vFalgWMW6GFcqxSo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/96/2c11c1-4250-4387-a4db-2701d591deae/1/0CDxCDLEm61vFalgWMW6GFcqxSo.mft
Manifest number: 0887
Signing time: Fri 09 May 2025 02:00:26 +0000
Manifest this update: Fri 09 May 2025 02:00:26 +0000
Manifest next update: Sat 10 May 2025 02:00:26 +0000
Files and hashes: 1: 0CDxCDLEm61vFalgWMW6GFcqxSo.crl (hash: JoCiM87Oq/hhSZ8juDC4uqCJgwzmamLRrqXfa7XeZXE=)
2: 8LyQu6M29k1339l_CEp2NXxrXCM.roa (hash: sefzNsDqr2VAFaOlXDNefpIYjAbww43X8pxj4t3RtgQ=)
3: TNuoVQLMoCvPw9pqbv1lB1R6WTo.roa (hash: lpAiG+1V0l8l8KBHMEE2mx4+9kmKvUMXZxyrbPf7z7g=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/96/2c11c1-4250-4387-a4db-2701d591deae/1/0CDxCDLEm61vFalgWMW6GFcqxSo.crl
rsync://rpki.ripe.net/repository/DEFAULT/96/2c11c1-4250-4387-a4db-2701d591deae/1/0CDxCDLEm61vFalgWMW6GFcqxSo.mft
rsync://rpki.ripe.net/repository/DEFAULT/0CDxCDLEm61vFalgWMW6GFcqxSo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 10 May 2025 02:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:b2:c5:c3:54:8c:14:a6:52:d3:8b:07:98:51:be:c3:b5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d020f10832c49bad6f15a96058c5ba18572ac52a
Validity
Not Before: May 9 02:00:26 2025 GMT
Not After : May 10 02:00:26 2025 GMT
Subject: CN=55a84b8bc4f1728a951569230f82773fb9e1cb2e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:2b:e0:f0:67:c4:6d:6e:8b:7b:6a:d4:5e:cf:
ad:be:44:d9:a5:9e:fa:2b:24:35:06:51:6b:90:27:
07:e6:ea:f9:f7:b8:21:e8:8e:3a:c0:f7:81:ba:ad:
6f:5b:c4:38:34:dc:65:60:c8:b9:c1:39:2a:28:1b:
e0:c1:46:86:bf:7b:5d:45:b4:ab:6b:e0:62:95:a8:
8d:bf:6a:90:7c:22:0e:20:b6:0f:16:0d:40:ac:04:
9d:e2:32:98:42:bb:88:fe:78:7b:15:48:2e:dc:53:
a6:6e:ff:96:03:90:5f:7f:36:f7:e1:47:45:00:5f:
33:90:17:d9:7a:c2:b6:82:6d:1e:dc:81:f0:f8:ab:
29:dc:c8:19:8f:e8:cb:d5:8c:da:bc:c7:04:8a:cd:
12:90:52:f5:ea:6e:92:3b:36:e8:3b:40:db:da:4e:
d2:7e:b3:d2:29:bb:b7:70:bf:73:13:58:38:87:f4:
c2:b6:37:8e:97:29:c4:89:c6:02:e7:58:5e:fb:c3:
19:5d:ed:ac:1b:e8:dd:71:d1:a2:53:3c:e2:56:03:
b3:e2:e5:23:00:95:2e:cc:bc:ee:3f:56:8f:56:6c:
ae:fc:2b:22:e6:c4:a8:03:ed:67:0f:b7:0b:47:49:
3a:62:14:d5:6f:b3:ad:9c:cc:67:19:77:43:f6:35:
e6:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
55:A8:4B:8B:C4:F1:72:8A:95:15:69:23:0F:82:77:3F:B9:E1:CB:2E
X509v3 Authority Key Identifier:
keyid:D0:20:F1:08:32:C4:9B:AD:6F:15:A9:60:58:C5:BA:18:57:2A:C5:2A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0CDxCDLEm61vFalgWMW6GFcqxSo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/96/2c11c1-4250-4387-a4db-2701d591deae/1/0CDxCDLEm61vFalgWMW6GFcqxSo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/96/2c11c1-4250-4387-a4db-2701d591deae/1/0CDxCDLEm61vFalgWMW6GFcqxSo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
60:fa:10:93:b6:1d:8e:bc:7b:29:7a:c2:b7:98:9b:9a:de:a6:
2b:c7:d4:89:18:15:1c:1f:95:38:59:15:b4:5d:76:e9:49:ca:
86:d7:d5:7f:98:70:d2:6b:47:a3:b6:31:7d:b7:e1:29:77:69:
0a:36:2a:e8:08:24:a8:f9:0b:d8:82:d4:11:8c:a5:63:3f:e5:
8f:3f:e6:54:24:65:06:6b:da:94:d3:59:04:19:1b:6c:c9:93:
de:10:10:8c:f2:72:43:73:6d:65:7f:28:7f:94:f3:00:53:3b:
0c:09:da:57:b8:63:16:fa:9c:78:89:63:ce:3a:37:7e:4a:52:
c3:77:e1:28:57:50:f3:ee:04:b9:ca:65:e9:db:d6:1d:67:a4:
1c:45:6c:13:a8:2c:f7:16:de:16:64:6f:53:dd:11:51:76:e8:
69:8b:09:c9:d0:36:c4:6b:90:b0:34:d3:1a:84:42:96:83:bc:
41:67:1c:ad:f4:6b:21:71:34:ea:1c:93:67:61:c5:74:4d:ab:
05:3a:c1:69:c9:04:f2:f9:a5:a4:52:2b:ba:d7:ec:54:fc:3a:
02:92:8f:ee:c1:e5:8b:de:90:f3:f0:4d:f9:fa:61:91:2a:0e:
9e:d2:81:ca:a8:71:04:2e:60:fe:b7:d5:d0:61:18:72:e2:90:
b2:a1:c1:8d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 9 11:21:20 2025 by rpki-client