Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a6/113f5f-be58-478c-9030-32d80d8d1615/1/0tzocORzw1QnPonF5OLtPgwGk1Y.mft
File: 0tzocORzw1QnPonF5OLtPgwGk1Y.mft (raw, json)
Hash identifier: MtltBsLNBUIY+5Kk+xrKvXuda5iAvfpptXsugmri0fU=
Subject key identifier: A1:77:A7:23:F1:68:96:06:B6:F9:12:26:E5:48:6B:07:34:D3:3E:C9
Authority key identifier: D2:DC:E8:70:E4:73:C3:54:27:3E:89:C5:E4:E2:ED:3E:0C:06:93:56
Certificate issuer: /CN=d2dce870e473c354273e89c5e4e2ed3e0c069356
Certificate serial: 0196BDEE27284AB48C687F70D4CDF83C6298
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0tzocORzw1QnPonF5OLtPgwGk1Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a6/113f5f-be58-478c-9030-32d80d8d1615/1/0tzocORzw1QnPonF5OLtPgwGk1Y.mft
Manifest number: 098C
Signing time: Sun 11 May 2025 06:00:23 +0000
Manifest this update: Sun 11 May 2025 06:00:23 +0000
Manifest next update: Mon 12 May 2025 06:00:23 +0000
Files and hashes: 1: 0tzocORzw1QnPonF5OLtPgwGk1Y.crl (hash: XJYDVVkn3MZbfAXgCA481SEKYo9/SbOoKqru4UvZfSc=)
2: tTZ8ChHVIsV9vssdJRRwpvt77Ic.roa (hash: vUfunefLZb2Jpmp53yxYY0pVxR49oq3Pwb2HHqDzrlg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a6/113f5f-be58-478c-9030-32d80d8d1615/1/0tzocORzw1QnPonF5OLtPgwGk1Y.crl
rsync://rpki.ripe.net/repository/DEFAULT/a6/113f5f-be58-478c-9030-32d80d8d1615/1/0tzocORzw1QnPonF5OLtPgwGk1Y.mft
rsync://rpki.ripe.net/repository/DEFAULT/0tzocORzw1QnPonF5OLtPgwGk1Y.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 12 May 2025 06:00:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:bd:ee:27:28:4a:b4:8c:68:7f:70:d4:cd:f8:3c:62:98
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d2dce870e473c354273e89c5e4e2ed3e0c069356
Validity
Not Before: May 11 06:00:23 2025 GMT
Not After : May 12 06:00:23 2025 GMT
Subject: CN=a177a723f1689606b6f91226e5486b0734d33ec9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:93:71:9e:48:fa:0a:41:c3:4e:26:ce:45:48:
a2:21:bd:85:ff:95:90:46:c4:53:fd:6f:84:fd:a9:
bb:81:7f:3a:bd:af:3b:12:1f:78:64:f8:74:ac:92:
aa:d8:73:df:fa:b6:f1:18:e6:e8:7b:24:c8:52:52:
eb:42:87:ab:a3:4a:55:2b:b0:3e:a9:49:d5:ac:96:
62:66:82:f7:ed:c0:85:f8:40:e6:e5:87:4d:02:80:
c3:ca:ba:f7:e1:d6:a9:7a:04:8c:6c:e0:1e:de:ff:
c2:8f:af:23:b2:8c:71:ab:27:1b:35:11:69:4f:89:
32:eb:fc:1e:ae:c6:0b:4f:a1:47:0a:93:66:cc:56:
7b:97:13:a8:f7:74:d1:94:10:e9:92:d5:9f:c4:e8:
85:37:a6:e4:c5:79:43:6e:a3:75:fc:b1:56:9b:39:
c3:73:49:36:e5:a7:1a:17:70:0e:4e:d3:4e:80:39:
8d:f8:01:9d:cc:09:d4:08:8b:09:3d:9e:ce:5b:90:
a8:c8:3e:a4:20:54:8f:68:2a:75:4f:62:89:70:fc:
61:86:8e:3e:3f:b9:d5:5c:cc:bf:47:d2:f9:ea:9d:
f7:f0:04:aa:76:7f:fa:1f:79:01:c8:94:26:22:61:
e7:6f:2a:7d:f5:2c:5b:2b:6b:bb:b5:7a:6f:cf:89:
fb:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A1:77:A7:23:F1:68:96:06:B6:F9:12:26:E5:48:6B:07:34:D3:3E:C9
X509v3 Authority Key Identifier:
keyid:D2:DC:E8:70:E4:73:C3:54:27:3E:89:C5:E4:E2:ED:3E:0C:06:93:56
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0tzocORzw1QnPonF5OLtPgwGk1Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a6/113f5f-be58-478c-9030-32d80d8d1615/1/0tzocORzw1QnPonF5OLtPgwGk1Y.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a6/113f5f-be58-478c-9030-32d80d8d1615/1/0tzocORzw1QnPonF5OLtPgwGk1Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
34:df:80:5b:c3:2c:4d:27:cf:0c:70:a1:2f:81:8e:7d:90:73:
23:53:28:e6:6b:70:13:ba:7f:a5:24:55:d7:15:0c:66:bf:d0:
e0:83:82:7a:7c:bb:d0:ee:05:a3:77:c1:16:90:9b:dc:6e:39:
e6:dc:f5:93:4a:08:39:3c:a2:1b:5c:53:f8:c4:45:c1:ee:5e:
eb:dd:a3:2c:4c:f7:96:82:33:f7:bc:6c:54:28:bc:a7:e9:95:
73:e9:ca:cc:3d:ab:6b:95:0d:0a:3c:aa:c2:1c:ed:c0:c8:e8:
e5:5b:0a:09:9d:12:b6:2b:46:0a:f8:20:b9:4c:26:65:45:00:
11:d9:78:0b:62:3e:a3:fa:4b:28:08:c3:05:98:1e:2e:84:4d:
2b:c7:fa:9a:21:ce:60:56:cf:fd:45:2e:db:ff:1a:17:c6:5b:
59:53:10:94:03:e6:5b:d8:47:ab:f9:99:90:5d:e5:66:90:9b:
a8:e7:e2:47:ca:bc:f9:c3:90:11:9f:22:c5:fe:49:47:1e:e0:
25:63:04:9c:ce:84:75:5d:67:34:94:28:b9:3f:ae:14:04:4a:
c9:a7:43:1b:bb:64:e3:6f:11:9c:e5:d7:b7:48:ee:ad:88:21:
96:be:36:be:d1:14:7c:f1:ce:8d:2e:31:de:9a:af:2c:81:74:
c9:8b:33:99
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 11 11:38:12 2025 by rpki-client