Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9c/32d49c-fbb9-4664-9ab8-f2bdc2275b6e/1/D01Q85DPlFxvpbkAkFtNUX67CRo.mft
File: D01Q85DPlFxvpbkAkFtNUX67CRo.mft (raw, json)
Hash identifier: 7Y7Pl6f7KBw26NoQLLks4YZFzUuvGiNsRGMLs/b/W+U=
Subject key identifier: AF:66:8A:CB:85:B2:7C:49:A6:8B:4C:71:BB:1E:14:0C:24:BF:11:7E
Authority key identifier: 0F:4D:50:F3:90:CF:94:5C:6F:A5:B9:00:90:5B:4D:51:7E:BB:09:1A
Certificate issuer: /CN=0f4d50f390cf945c6fa5b900905b4d517ebb091a
Certificate serial: 0196BF00FBE7BC08D331EF717884F118DECF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/D01Q85DPlFxvpbkAkFtNUX67CRo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9c/32d49c-fbb9-4664-9ab8-f2bdc2275b6e/1/D01Q85DPlFxvpbkAkFtNUX67CRo.mft
Manifest number: 0283
Signing time: Sun 11 May 2025 11:00:34 +0000
Manifest this update: Sun 11 May 2025 11:00:34 +0000
Manifest next update: Mon 12 May 2025 11:00:34 +0000
Files and hashes: 1: 6t_nnlmTXWp3OzIKRqSj0hcN4no.roa (hash: W90ueV41Ar0nzHXhwJLVE6WKCjLM7hges3g+HZc2lOE=)
2: D01Q85DPlFxvpbkAkFtNUX67CRo.crl (hash: MwRhrBVKfOeYN0ONvA6Xv0KQknLDB9SKollqa1aGP9c=)
3: vkoeIYHKBiHw3JW2EwGeByZF2OI.roa (hash: 0gHlaMAsvnnPjNWVDTFa0UhQf6R/7xyb1Ul2Br7gTg0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9c/32d49c-fbb9-4664-9ab8-f2bdc2275b6e/1/D01Q85DPlFxvpbkAkFtNUX67CRo.crl
rsync://rpki.ripe.net/repository/DEFAULT/9c/32d49c-fbb9-4664-9ab8-f2bdc2275b6e/1/D01Q85DPlFxvpbkAkFtNUX67CRo.mft
rsync://rpki.ripe.net/repository/DEFAULT/D01Q85DPlFxvpbkAkFtNUX67CRo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 12 May 2025 07:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:bf:00:fb:e7:bc:08:d3:31:ef:71:78:84:f1:18:de:cf
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0f4d50f390cf945c6fa5b900905b4d517ebb091a
Validity
Not Before: May 11 11:00:34 2025 GMT
Not After : May 12 11:00:34 2025 GMT
Subject: CN=af668acb85b27c49a68b4c71bb1e140c24bf117e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:df:b6:a4:83:99:14:f2:63:7a:a7:0c:77:c7:1c:
1a:25:6a:94:cc:03:1a:56:36:b6:aa:ee:b0:94:d7:
ee:a4:68:54:71:0e:b9:b4:67:a7:86:a0:ab:cf:4f:
ad:b0:a2:a6:82:1a:c2:b5:54:0d:6a:cb:ec:10:57:
62:8d:9d:e7:a5:59:b8:1c:a2:62:8f:22:ca:18:6b:
74:d3:b3:2a:fb:17:37:50:c8:39:e3:0d:ac:ca:c7:
52:ee:b5:1c:a5:09:d9:f6:e0:d9:49:4d:3a:27:48:
0f:66:d3:bf:6e:f0:1c:b0:df:ba:76:9b:e8:25:d2:
89:e4:07:29:79:dc:97:a3:4b:7b:4b:3b:37:30:ed:
b6:0f:16:85:02:19:28:d2:56:82:7f:df:55:e1:9d:
42:56:64:ae:b9:a3:a3:7c:e1:3f:1d:bd:3e:cd:68:
f4:bc:ae:1d:7f:b1:f9:4d:41:6d:a3:11:fb:7d:51:
c8:2d:d1:47:6c:63:a8:12:f0:1a:88:9d:89:b8:48:
85:20:e6:27:c0:f8:98:09:86:f3:94:95:0b:79:a3:
db:3b:15:25:a6:eb:7b:2e:5f:1a:cd:f5:1b:7a:9c:
6d:37:2c:55:8f:14:5c:90:48:2e:0b:fd:17:0d:6d:
c2:16:f9:12:a2:91:d8:34:1d:5a:3f:33:a8:98:86:
c8:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AF:66:8A:CB:85:B2:7C:49:A6:8B:4C:71:BB:1E:14:0C:24:BF:11:7E
X509v3 Authority Key Identifier:
keyid:0F:4D:50:F3:90:CF:94:5C:6F:A5:B9:00:90:5B:4D:51:7E:BB:09:1A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/D01Q85DPlFxvpbkAkFtNUX67CRo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9c/32d49c-fbb9-4664-9ab8-f2bdc2275b6e/1/D01Q85DPlFxvpbkAkFtNUX67CRo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9c/32d49c-fbb9-4664-9ab8-f2bdc2275b6e/1/D01Q85DPlFxvpbkAkFtNUX67CRo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0d:af:2d:35:20:0f:cf:40:5f:1c:ad:b1:b0:2e:67:dc:01:7c:
0a:6c:43:84:12:35:4e:54:58:06:0c:7d:61:63:d8:c2:f2:cc:
c6:dc:2d:2e:71:17:66:21:45:8b:44:66:5e:b3:3d:5c:ca:eb:
36:d1:6a:68:03:a4:66:ea:dd:20:2b:ee:80:fc:f9:99:47:ed:
3c:69:19:63:8d:c9:17:7a:c6:46:bf:d5:ca:f7:53:1c:b5:47:
36:5f:0e:f4:b2:f2:81:4e:78:6e:9a:26:f4:e6:4b:1d:fb:ef:
45:07:0e:34:03:81:fb:80:b7:b9:14:fe:03:2a:2f:86:96:c3:
9c:fc:f0:76:08:44:ab:14:f7:75:17:e6:b6:f9:b0:31:7a:35:
67:16:df:1f:eb:c7:be:40:47:d9:91:b1:f2:6a:4c:84:c4:0f:
8b:8a:1f:7f:34:87:b7:d8:45:b9:46:1c:ee:e5:2d:2f:0b:01:
ff:ae:f9:fb:bf:0e:0c:1b:a2:64:9a:a7:30:d0:48:ea:e9:36:
ac:ef:86:be:df:6e:f4:5c:39:65:fa:49:31:f3:6d:b1:48:82:
eb:22:ce:4c:00:25:c2:72:43:67:b5:c2:6a:e4:28:88:a5:12:
b5:67:a4:9c:c0:07:bf:83:18:5e:0d:49:ae:63:67:d9:3b:5c:
49:ee:d1:6c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 11 14:11:14 2025 by rpki-client