Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bc/4963ec-576f-4167-993c-99f182213d4f/1/0d4HoaH2W9EW4R-fEQhgS26VzP0.mft
File: 0d4HoaH2W9EW4R-fEQhgS26VzP0.mft (raw, json)
Hash identifier: 3DcuNxO6hddT6v9+fqBJ49ZE5jJjr1CmK4PK/gYXJ/o=
Subject key identifier: DA:7C:33:F4:17:A5:54:1C:EF:2E:55:96:24:DF:AC:E2:76:41:7C:57
Authority key identifier: D1:DE:07:A1:A1:F6:5B:D1:16:E1:1F:9F:11:08:60:4B:6E:95:CC:FD
Certificate issuer: /CN=d1de07a1a1f65bd116e11f9f1108604b6e95ccfd
Certificate serial: 0196AC1EA7A01A85A7BA25892C8DB8D44100
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0d4HoaH2W9EW4R-fEQhgS26VzP0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bc/4963ec-576f-4167-993c-99f182213d4f/1/0d4HoaH2W9EW4R-fEQhgS26VzP0.mft
Manifest number: 10C1
Signing time: Wed 07 May 2025 19:00:12 +0000
Manifest this update: Wed 07 May 2025 19:00:12 +0000
Manifest next update: Thu 08 May 2025 19:00:12 +0000
Files and hashes: 1: 0d4HoaH2W9EW4R-fEQhgS26VzP0.crl (hash: fijdc2BynCP4uJfTnscXKnzIidM0RefDZ5/zlqvVFpo=)
2: QEHZF8Tlk9QKI2YxEH34bnx0Z1c.roa (hash: 8+749rwNuEEuELLtmccQKg/as7h9BdIGWfJq5dqwT3A=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bc/4963ec-576f-4167-993c-99f182213d4f/1/0d4HoaH2W9EW4R-fEQhgS26VzP0.crl
rsync://rpki.ripe.net/repository/DEFAULT/bc/4963ec-576f-4167-993c-99f182213d4f/1/0d4HoaH2W9EW4R-fEQhgS26VzP0.mft
rsync://rpki.ripe.net/repository/DEFAULT/0d4HoaH2W9EW4R-fEQhgS26VzP0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 08 May 2025 13:31:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:ac:1e:a7:a0:1a:85:a7:ba:25:89:2c:8d:b8:d4:41:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d1de07a1a1f65bd116e11f9f1108604b6e95ccfd
Validity
Not Before: May 7 19:00:12 2025 GMT
Not After : May 8 19:00:12 2025 GMT
Subject: CN=da7c33f417a5541cef2e559624dface276417c57
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:10:ea:ae:64:e9:c0:4b:a3:dd:e0:81:c4:d9:
b4:dc:f8:78:81:e8:f4:0d:af:ae:47:0d:54:fb:66:
12:f2:58:95:70:54:a1:0b:29:60:13:a7:ac:a3:73:
62:c5:4a:e0:57:81:6d:b3:44:cd:6e:6e:bb:66:57:
f4:23:5f:eb:c9:ca:08:3d:a2:4a:be:86:18:0f:26:
9d:80:9e:37:a2:84:e4:6a:ff:b5:e2:89:c0:2c:85:
06:83:fe:ae:ea:7f:51:bf:72:e2:79:9c:84:6a:27:
4a:6b:f2:8e:93:c6:1f:e6:c8:a6:c4:6d:78:84:41:
a7:cf:a3:0f:d9:ed:20:41:e5:11:01:79:d2:5d:84:
2f:bd:68:79:c8:24:81:f0:00:5d:91:f8:a6:2a:97:
03:7b:94:2f:cb:c7:5b:62:0c:31:6a:8d:a4:9b:ac:
37:4c:1e:d1:5c:ed:b1:53:53:8e:8b:fe:1c:3a:8a:
ad:b2:5c:24:91:95:2b:11:91:21:62:32:bf:31:4e:
cc:38:28:a0:f9:5a:77:49:fc:11:5f:04:3e:96:51:
a5:fd:e8:de:f0:26:e4:5a:07:0e:30:7f:e0:a9:82:
d0:36:c2:8b:47:ec:3a:66:1f:90:94:1a:f3:48:3f:
c0:4b:62:0d:49:50:bc:00:5b:3a:b6:0e:83:98:9f:
b4:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DA:7C:33:F4:17:A5:54:1C:EF:2E:55:96:24:DF:AC:E2:76:41:7C:57
X509v3 Authority Key Identifier:
keyid:D1:DE:07:A1:A1:F6:5B:D1:16:E1:1F:9F:11:08:60:4B:6E:95:CC:FD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0d4HoaH2W9EW4R-fEQhgS26VzP0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/4963ec-576f-4167-993c-99f182213d4f/1/0d4HoaH2W9EW4R-fEQhgS26VzP0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/4963ec-576f-4167-993c-99f182213d4f/1/0d4HoaH2W9EW4R-fEQhgS26VzP0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
af:90:1a:8a:89:a2:6b:7f:10:5c:b5:d5:ea:14:4c:12:34:f1:
a6:89:f7:ef:2a:c8:83:fe:15:5c:88:a0:1a:7b:93:ed:df:ef:
ba:35:56:61:66:e0:89:48:08:18:51:28:8f:2d:52:6a:a1:74:
97:0c:28:94:b8:12:61:ce:f2:a3:dc:90:e7:d4:1c:de:53:eb:
ea:a3:90:91:fe:98:f3:e0:76:4a:90:bf:41:b4:d5:cf:9c:c3:
fa:c8:c9:30:ff:13:ff:c6:15:59:d0:f9:b4:f9:3d:b9:4e:ab:
7d:10:af:76:f7:42:9d:d4:79:05:97:5b:c9:b8:10:0b:c1:86:
aa:f2:ab:7a:b2:2e:33:8d:5f:3e:00:fc:69:c5:cd:ba:83:20:
bc:01:1c:2b:2e:a6:96:3c:93:e1:b3:45:04:b9:3e:aa:5c:85:
f1:8f:61:fb:7e:7d:73:15:96:60:8d:c9:7a:21:a2:63:b1:f5:
73:8c:40:83:8a:89:47:1c:5b:7b:49:9c:97:15:f3:19:4d:60:
9a:9b:99:4a:39:f5:3e:31:ee:48:0f:79:59:76:34:34:4c:b5:
97:c2:79:6d:96:86:3c:33:84:ca:5c:98:31:47:64:fd:28:5a:
e0:0a:7d:a6:9d:3d:e9:29:62:93:07:55:81:e2:44:cd:95:4d:
0d:57:8a:96
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 7 21:21:43 2025 by rpki-client