Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a9/54e797-dbe3-4945-a835-648b92276014/1/g0KhQTsMzjTj9_vw5_OOCjcKYmc.mft
File: g0KhQTsMzjTj9_vw5_OOCjcKYmc.mft (raw, json)
Hash identifier: yfScHR0g+mLz1whhL9W1ig7RbPjLBP4CfLF2uefM1K8=
Subject key identifier: 53:05:29:8D:CD:A9:FD:CF:69:44:51:78:05:C7:95:AF:1E:36:AD:20
Authority key identifier: 83:42:A1:41:3B:0C:CE:34:E3:F7:FB:F0:E7:F3:8E:0A:37:0A:62:67
Certificate issuer: /CN=8342a1413b0cce34e3f7fbf0e7f38e0a370a6267
Certificate serial: 0196C193EC1A215D2696C155D52A6AB167F5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/g0KhQTsMzjTj9_vw5_OOCjcKYmc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a9/54e797-dbe3-4945-a835-648b92276014/1/g0KhQTsMzjTj9_vw5_OOCjcKYmc.mft
Manifest number: 0ECF
Signing time: Sun 11 May 2025 23:00:18 +0000
Manifest this update: Sun 11 May 2025 23:00:18 +0000
Manifest next update: Mon 12 May 2025 23:00:18 +0000
Files and hashes: 1: 0L_x5KrJ0yONYZL6OhXnnI9ON0g.roa (hash: pLDQ94A0tCs3zB2hMsSvw81lpJnRZzCDTURKCYOZ0g4=)
2: g0KhQTsMzjTj9_vw5_OOCjcKYmc.crl (hash: oT2wk9MfWsaiSx4eWWdruCe5UhwEbETgDO2oEXbmrX0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a9/54e797-dbe3-4945-a835-648b92276014/1/g0KhQTsMzjTj9_vw5_OOCjcKYmc.crl
rsync://rpki.ripe.net/repository/DEFAULT/a9/54e797-dbe3-4945-a835-648b92276014/1/g0KhQTsMzjTj9_vw5_OOCjcKYmc.mft
rsync://rpki.ripe.net/repository/DEFAULT/g0KhQTsMzjTj9_vw5_OOCjcKYmc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 12 May 2025 23:00:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:c1:93:ec:1a:21:5d:26:96:c1:55:d5:2a:6a:b1:67:f5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8342a1413b0cce34e3f7fbf0e7f38e0a370a6267
Validity
Not Before: May 11 23:00:18 2025 GMT
Not After : May 12 23:00:18 2025 GMT
Subject: CN=5305298dcda9fdcf6944517805c795af1e36ad20
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:da:c2:fb:bd:d6:8e:a2:f5:c0:06:a0:72:28:f0:
3b:1f:f7:e6:1d:d7:7e:47:55:1e:b0:48:7f:b2:0e:
2c:02:68:76:95:8b:46:5b:41:8e:2e:e4:82:65:45:
63:7e:2f:12:72:1c:d9:04:ec:fb:5d:50:3f:05:cb:
d7:70:e1:0b:39:af:7e:6a:23:43:3d:7b:7d:91:99:
01:a3:39:32:ab:e1:f3:32:f2:a6:39:61:03:4a:ef:
77:e0:5a:b0:06:71:4b:24:de:9d:98:11:db:e7:3e:
bf:78:52:02:65:aa:96:f8:b4:ab:68:fd:c2:41:8e:
c7:ec:60:6f:f6:ef:21:d1:00:a8:5d:b0:3b:9c:14:
a5:8c:06:0b:e1:c1:83:3d:b7:16:e2:27:1b:cf:0b:
37:fc:de:51:62:1e:9f:0a:6b:47:51:87:76:f4:47:
ee:4e:5a:78:f3:62:65:17:c7:db:f2:a5:a4:f0:80:
e4:73:b0:35:94:85:49:ba:22:94:0c:7f:35:0b:7b:
c2:71:7f:55:1a:7d:4e:3e:90:cc:a9:a5:89:b0:d7:
a3:b4:6f:74:85:e9:ce:d0:e1:8d:b7:71:21:10:97:
44:89:24:e8:15:c9:d3:8f:b5:59:b5:c2:cc:40:96:
5e:bb:ce:0e:27:e6:ff:b7:74:5e:fe:56:15:8d:f4:
e8:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
53:05:29:8D:CD:A9:FD:CF:69:44:51:78:05:C7:95:AF:1E:36:AD:20
X509v3 Authority Key Identifier:
keyid:83:42:A1:41:3B:0C:CE:34:E3:F7:FB:F0:E7:F3:8E:0A:37:0A:62:67
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/g0KhQTsMzjTj9_vw5_OOCjcKYmc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/54e797-dbe3-4945-a835-648b92276014/1/g0KhQTsMzjTj9_vw5_OOCjcKYmc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/54e797-dbe3-4945-a835-648b92276014/1/g0KhQTsMzjTj9_vw5_OOCjcKYmc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4f:08:a3:a1:d5:b6:3e:24:e4:f6:d9:43:f2:80:f0:e4:db:61:
c6:91:00:fa:8b:a2:c2:a6:ad:5f:95:9b:19:19:30:6e:7e:60:
59:fe:a5:f9:1d:89:41:a6:85:a2:d8:91:bd:13:c5:d4:58:63:
a4:e3:a9:f1:87:0c:33:07:b1:dd:54:50:6b:92:60:7b:47:27:
00:61:e4:ec:f0:33:62:68:fa:e9:57:5b:99:e8:5e:88:d1:53:
60:71:94:50:7a:a5:bf:11:74:c3:ea:8d:e0:6d:3c:ba:b1:e3:
1b:92:b5:8b:bf:6a:d3:d1:df:d1:4a:52:78:62:c8:06:4d:a8:
a8:b5:71:d9:af:cd:05:b6:64:45:f9:d2:47:fc:82:b3:f0:a3:
29:85:0a:7c:aa:d4:d1:ff:66:22:f9:23:b6:9e:7a:c4:7a:59:
a4:62:b3:04:8b:78:62:e0:38:8a:24:74:bd:1f:31:5f:a5:fc:
ee:52:82:7e:cb:84:7f:5c:75:be:48:69:31:76:96:5b:ee:3e:
6c:0b:09:6a:20:c4:c8:da:17:4c:b0:84:a6:76:e3:56:21:c8:
a1:92:10:03:64:21:da:39:34:62:f8:8e:c3:d7:40:b0:16:be:
32:65:92:08:d6:02:dd:b4:32:5d:03:75:62:34:2d:32:5f:2a:
47:61:98:c3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 12 06:00:54 2025 by rpki-client