Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ad/465556-70d1-4152-a65a-6c63e152242d/1/0NbmVQW09OT08x2QuLIaOnz7Dr8.mft
File: 0NbmVQW09OT08x2QuLIaOnz7Dr8.mft (raw, json)
Hash identifier: wfMitRe7cJAiSu1Oy97qdAj9l+i7wmdsb8FgXyp1RsM=
Subject key identifier: 51:AA:73:10:C0:5B:D1:50:83:66:52:C0:AD:85:C4:90:99:8E:CF:BA
Authority key identifier: D0:D6:E6:55:05:B4:F4:E4:F4:F3:1D:90:B8:B2:1A:3A:7C:FB:0E:BF
Certificate issuer: /CN=d0d6e65505b4f4e4f4f31d90b8b21a3a7cfb0ebf
Certificate serial: 0196C314B483B6E2C2EF70E28C1095CA84B7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0NbmVQW09OT08x2QuLIaOnz7Dr8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ad/465556-70d1-4152-a65a-6c63e152242d/1/0NbmVQW09OT08x2QuLIaOnz7Dr8.mft
Manifest number: 0AAB
Signing time: Mon 12 May 2025 06:00:36 +0000
Manifest this update: Mon 12 May 2025 06:00:36 +0000
Manifest next update: Tue 13 May 2025 06:00:36 +0000
Files and hashes: 1: 0NbmVQW09OT08x2QuLIaOnz7Dr8.crl (hash: 7mjpgR7+gg8tzum6qp3bOGAtTDQ0mo3B9xwglabame8=)
2: RLT9vWKmEAqKt6hEtNsyMWI1h0c.roa (hash: xBu31AarPg6SaGrJFYKlAHmm3Mw8LW1iAP2FYDxCvXE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ad/465556-70d1-4152-a65a-6c63e152242d/1/0NbmVQW09OT08x2QuLIaOnz7Dr8.crl
rsync://rpki.ripe.net/repository/DEFAULT/ad/465556-70d1-4152-a65a-6c63e152242d/1/0NbmVQW09OT08x2QuLIaOnz7Dr8.mft
rsync://rpki.ripe.net/repository/DEFAULT/0NbmVQW09OT08x2QuLIaOnz7Dr8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 13 May 2025 01:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:c3:14:b4:83:b6:e2:c2:ef:70:e2:8c:10:95:ca:84:b7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d0d6e65505b4f4e4f4f31d90b8b21a3a7cfb0ebf
Validity
Not Before: May 12 06:00:36 2025 GMT
Not After : May 13 06:00:36 2025 GMT
Subject: CN=51aa7310c05bd150836652c0ad85c490998ecfba
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:f3:cc:e4:a5:67:1e:b4:a9:83:ee:0a:ea:70:
8e:d9:30:d8:50:d8:16:69:53:76:23:29:51:c5:fa:
ad:48:e2:e5:6d:48:12:0f:af:4a:33:a9:6c:9d:09:
ce:76:43:16:3e:78:27:e8:0e:d3:07:88:c5:6d:f0:
f0:4e:1e:41:4e:ec:11:29:45:ff:fe:fc:59:9b:08:
db:e6:03:6b:ca:73:bd:58:28:d6:e9:c3:af:9d:d2:
be:d6:8b:62:47:21:bf:58:d8:25:4c:7e:e5:d6:d1:
a5:e7:64:38:e5:9d:06:8e:1a:a1:6d:46:49:85:23:
e8:31:da:55:f6:96:b3:df:d8:d8:1c:fd:d2:78:db:
7f:cf:4a:6d:f3:a1:e3:73:a3:56:8a:81:ca:ce:ff:
39:dd:42:b9:71:3e:ee:29:a4:d4:da:b4:84:5c:a3:
9b:49:e3:06:f7:77:60:de:14:13:2d:52:2d:a8:1d:
e1:e0:c9:5d:4a:52:a5:35:38:f6:03:e9:85:0e:d6:
6b:f1:ff:54:20:78:a4:07:db:61:d6:20:92:ae:e6:
36:c8:29:93:de:be:21:f7:63:98:9f:7d:fd:cd:4f:
67:00:ca:33:d2:8f:91:7a:a6:e3:12:e2:d0:21:95:
84:6f:2f:38:27:ae:38:3e:2f:f5:db:a3:59:a1:d7:
7f:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
51:AA:73:10:C0:5B:D1:50:83:66:52:C0:AD:85:C4:90:99:8E:CF:BA
X509v3 Authority Key Identifier:
keyid:D0:D6:E6:55:05:B4:F4:E4:F4:F3:1D:90:B8:B2:1A:3A:7C:FB:0E:BF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0NbmVQW09OT08x2QuLIaOnz7Dr8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ad/465556-70d1-4152-a65a-6c63e152242d/1/0NbmVQW09OT08x2QuLIaOnz7Dr8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ad/465556-70d1-4152-a65a-6c63e152242d/1/0NbmVQW09OT08x2QuLIaOnz7Dr8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
37:ed:94:57:59:3f:a5:69:58:b2:06:df:a1:14:15:89:a2:4d:
64:93:ea:bc:cb:f0:49:9e:4d:0c:f2:92:7a:b2:8e:2e:78:10:
84:12:df:a8:14:58:47:17:de:7b:39:59:c4:1b:29:37:30:85:
40:fe:91:b6:f1:79:65:06:7b:40:80:cb:19:59:34:31:3e:43:
ac:fd:e7:8d:35:90:e4:3b:4e:91:fd:d0:37:0e:ff:49:7d:0d:
6b:09:d2:a5:38:01:43:cd:e0:a3:62:a8:f7:4c:dc:f2:62:32:
c8:50:e6:42:f5:df:28:1d:b3:64:26:48:88:92:a4:57:60:32:
1e:d5:44:0a:74:b5:14:4a:24:a0:20:5c:83:fd:29:c3:35:8f:
fe:99:75:af:14:7c:e5:ef:80:9f:6e:a1:c3:b0:0a:9b:94:b6:
15:c2:09:d2:8e:a0:d8:65:83:69:19:11:96:64:83:66:50:d7:
47:13:65:8f:8c:91:97:a4:d5:38:20:2f:6e:62:66:94:9d:8d:
f6:6e:b9:6c:08:9f:7d:70:f7:44:04:aa:e1:18:f3:f2:0b:52:
7d:7a:fd:c7:91:89:2c:5f:7a:9f:c7:f3:dd:69:21:01:d4:6e:
7d:e9:85:0a:84:e2:8d:19:29:25:d8:60:30:af:c1:c1:11:f5:
23:85:e5:cf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 12 11:12:12 2025 by rpki-client