Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bd/aeeea4-651f-4d1a-ab52-23fcc524ea88/1/C-oOzdY0o8B141253KV2jk92zYU.mft
File: C-oOzdY0o8B141253KV2jk92zYU.mft (raw, json)
Hash identifier: 4PokUswkPdL7/7aq4VGTV+b6FesXcGx1WLffcGdLzFw=
Subject key identifier: 2E:28:39:B2:2E:AE:79:3B:A4:03:D0:3D:64:86:8B:6F:E0:51:CF:D5
Authority key identifier: 0B:EA:0E:CD:D6:34:A3:C0:75:E3:5D:B9:DC:A5:76:8E:4F:76:CD:85
Certificate issuer: /CN=0bea0ecdd634a3c075e35db9dca5768e4f76cd85
Certificate serial: 0196B822D95C4FF5B62A627E5810E9DF1CDC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/C-oOzdY0o8B141253KV2jk92zYU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bd/aeeea4-651f-4d1a-ab52-23fcc524ea88/1/C-oOzdY0o8B141253KV2jk92zYU.mft
Manifest number: 09F1
Signing time: Sat 10 May 2025 03:00:13 +0000
Manifest this update: Sat 10 May 2025 03:00:13 +0000
Manifest next update: Sun 11 May 2025 03:00:13 +0000
Files and hashes: 1: C-oOzdY0o8B141253KV2jk92zYU.crl (hash: 4u6M7RB388aeOy8qi29zmO+47YTMM5/YUN+JAQypKHk=)
2: ThulFZ8R9xpzNZdDBqkxoRYsRek.roa (hash: j39ExXLrnr3e7L1fGlK9W3BRFHLWAFmsEEaBZfVOBbo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bd/aeeea4-651f-4d1a-ab52-23fcc524ea88/1/C-oOzdY0o8B141253KV2jk92zYU.crl
rsync://rpki.ripe.net/repository/DEFAULT/bd/aeeea4-651f-4d1a-ab52-23fcc524ea88/1/C-oOzdY0o8B141253KV2jk92zYU.mft
rsync://rpki.ripe.net/repository/DEFAULT/C-oOzdY0o8B141253KV2jk92zYU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 11 May 2025 03:00:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:b8:22:d9:5c:4f:f5:b6:2a:62:7e:58:10:e9:df:1c:dc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0bea0ecdd634a3c075e35db9dca5768e4f76cd85
Validity
Not Before: May 10 03:00:13 2025 GMT
Not After : May 11 03:00:13 2025 GMT
Subject: CN=2e2839b22eae793ba403d03d64868b6fe051cfd5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:9f:2b:5e:82:64:2d:48:05:78:ba:f8:b1:d6:
d3:84:2a:be:27:75:76:de:36:10:26:f1:71:2c:15:
d2:68:42:ca:85:55:c1:da:ca:d7:bd:4e:ab:a0:0a:
f4:dd:c3:a6:e0:ca:89:3a:3a:eb:73:12:c2:f1:a2:
b8:19:8b:39:94:c2:05:99:cd:c9:b3:ec:7d:30:d2:
67:70:f9:9b:ba:01:20:ee:4d:d3:f2:ff:53:60:5d:
dc:56:0e:e4:11:89:04:78:dc:2e:aa:1b:0e:b8:00:
53:db:3e:8e:00:bb:70:44:fc:71:a6:93:93:a7:7f:
2f:66:52:74:4d:b3:04:7a:4d:27:70:d0:f2:db:f4:
3e:03:88:f0:8c:b0:21:2d:97:da:92:d9:e0:5e:3f:
85:49:b4:a9:89:60:8c:b9:31:24:b1:e3:9f:75:54:
1f:65:a2:0e:29:9c:90:7a:45:f8:97:48:d4:88:11:
95:55:c5:5a:a6:9f:2c:2b:7e:05:b8:a5:fc:78:28:
dc:59:29:dd:a2:7b:6c:ae:f9:44:04:fa:a1:b5:cd:
9e:9c:06:76:fe:50:0b:8c:50:c4:4c:02:84:21:7a:
7d:51:3d:0f:39:95:fb:47:e4:eb:02:52:3d:2f:58:
c3:28:f1:66:40:55:3c:56:9b:0b:ae:bf:59:ad:12:
0f:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2E:28:39:B2:2E:AE:79:3B:A4:03:D0:3D:64:86:8B:6F:E0:51:CF:D5
X509v3 Authority Key Identifier:
keyid:0B:EA:0E:CD:D6:34:A3:C0:75:E3:5D:B9:DC:A5:76:8E:4F:76:CD:85
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/C-oOzdY0o8B141253KV2jk92zYU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bd/aeeea4-651f-4d1a-ab52-23fcc524ea88/1/C-oOzdY0o8B141253KV2jk92zYU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bd/aeeea4-651f-4d1a-ab52-23fcc524ea88/1/C-oOzdY0o8B141253KV2jk92zYU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
66:94:82:3c:9e:c4:ac:88:d4:d1:2c:01:68:dd:a6:75:65:7c:
20:37:58:40:47:3d:b7:0b:19:1f:94:7a:c7:02:dc:a4:ec:7b:
06:c9:91:f2:51:2d:aa:da:c0:be:ce:92:d1:58:73:eb:b2:26:
fc:8f:57:6b:75:ee:51:5a:9b:96:12:00:dc:64:08:d3:c1:08:
ee:55:ec:12:ae:be:49:ac:40:4b:bf:1c:63:b9:23:1b:05:8a:
26:b0:2c:b2:33:93:ad:78:a6:eb:6e:30:23:0d:9a:ff:9f:bb:
1e:34:c5:23:bc:bc:53:40:86:15:75:27:1f:d8:6f:75:69:a7:
96:6c:b2:5a:19:f8:99:ca:0c:31:2f:3d:28:d0:3a:7b:07:82:
0e:8a:d7:bf:0b:ad:c4:1b:58:1f:2d:e8:07:10:8a:ba:af:ab:
c0:6b:40:a0:c1:76:59:11:bd:95:f2:13:98:21:f3:42:42:5b:
09:7e:b8:7b:57:3c:41:5a:69:64:ce:aa:5a:38:22:fb:c3:93:
0b:ad:ee:d1:d0:bf:cd:6c:dd:3f:3a:37:4d:9a:26:d8:9c:b8:
7e:9f:ac:8f:cc:24:29:2f:01:68:38:18:f5:31:80:fb:2f:2f:
fc:66:6f:31:12:99:33:e8:0c:89:25:0d:c3:88:7b:4d:46:73:
df:fd:90:37
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 10 07:27:19 2025 by rpki-client