
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ce/53c3e2-d335-4a82-a790-0d6bcd0148bf/1/0nbEGiF2JU8jbSPTkf1WCQYZZw0.mft
File: 0nbEGiF2JU8jbSPTkf1WCQYZZw0.mft (raw, json)
Hash identifier: IvArARQPIYAr6kSVjzrmVo8iLOTw4iGLQDgTHV7GmzY=
Subject key identifier: EE:E7:5B:0B:EF:BC:40:26:EA:19:49:4F:BF:3D:60:61:60:19:FD:06
Authority key identifier: D2:76:C4:1A:21:76:25:4F:23:6D:23:D3:91:FD:56:09:06:19:67:0D
Certificate issuer: /CN=d276c41a2176254f236d23d391fd56090619670d
Certificate serial: 0196B6D9B9AAF831725998907D9C6CB17FBC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0nbEGiF2JU8jbSPTkf1WCQYZZw0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ce/53c3e2-d335-4a82-a790-0d6bcd0148bf/1/0nbEGiF2JU8jbSPTkf1WCQYZZw0.mft
Manifest number: 2E
Signing time: Fri 09 May 2025 21:00:44 +0000
Manifest this update: Fri 09 May 2025 21:00:44 +0000
Manifest next update: Sat 10 May 2025 21:00:44 +0000
Files and hashes: 1: 0nbEGiF2JU8jbSPTkf1WCQYZZw0.crl (hash: d2kYe4OAy5OFlN49r1l4h3Y39eWR9H6FmFjg5lCtecE=)
2: zLfUqXqKYrDSmOI3zuAuH7VW9AQ.roa (hash: ooYWSL91Gfinkq+JOzjVpKfIwzWfTooJXNIHzh0/MJc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ce/53c3e2-d335-4a82-a790-0d6bcd0148bf/1/0nbEGiF2JU8jbSPTkf1WCQYZZw0.crl
rsync://rpki.ripe.net/repository/DEFAULT/ce/53c3e2-d335-4a82-a790-0d6bcd0148bf/1/0nbEGiF2JU8jbSPTkf1WCQYZZw0.mft
rsync://rpki.ripe.net/repository/DEFAULT/0nbEGiF2JU8jbSPTkf1WCQYZZw0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 10 May 2025 21:00:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:b6:d9:b9:aa:f8:31:72:59:98:90:7d:9c:6c:b1:7f:bc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d276c41a2176254f236d23d391fd56090619670d
Validity
Not Before: May 9 21:00:44 2025 GMT
Not After : May 10 21:00:44 2025 GMT
Subject: CN=eee75b0befbc4026ea19494fbf3d60616019fd06
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:e6:e2:49:a6:f0:6a:28:c3:2c:cb:5f:b8:e6:
a2:00:38:5a:f4:9a:10:83:62:a3:45:94:c7:ee:5e:
0b:3f:6d:8a:13:c7:f8:e6:26:2d:79:1e:be:03:ba:
1e:d2:58:c7:7b:a3:47:39:65:06:3a:db:9a:54:fa:
11:ff:dd:bd:19:33:43:c2:b3:86:84:a7:32:49:34:
d2:08:e1:58:35:4e:1a:0d:cb:2a:cf:89:58:4c:f1:
a1:45:6e:37:6a:aa:ba:6f:2b:19:bc:b1:c4:a0:b0:
32:58:06:95:e7:51:54:8b:9a:63:5d:d8:e2:60:a0:
f6:84:ce:52:9d:fc:71:44:01:2a:0d:8d:31:29:16:
3e:1d:99:61:56:ac:e3:43:1d:6d:21:42:1f:7f:0d:
49:77:7e:b8:e7:17:11:95:95:8f:c3:5e:53:f6:c5:
03:fa:80:16:e7:ca:b8:73:ff:7c:c9:32:c0:16:96:
3f:c1:2d:cb:c9:37:fd:48:54:65:ef:c8:cc:e8:ee:
85:1e:3d:19:92:bd:04:19:7a:ca:20:84:a0:e4:ca:
e4:40:53:de:fb:f4:50:b1:67:c1:9c:64:0b:72:06:
93:f9:f5:26:e5:d5:ee:52:43:0a:de:0c:ac:d9:5d:
5d:fd:ac:c6:e3:65:9a:ce:67:6a:5a:59:91:d5:97:
84:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EE:E7:5B:0B:EF:BC:40:26:EA:19:49:4F:BF:3D:60:61:60:19:FD:06
X509v3 Authority Key Identifier:
keyid:D2:76:C4:1A:21:76:25:4F:23:6D:23:D3:91:FD:56:09:06:19:67:0D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0nbEGiF2JU8jbSPTkf1WCQYZZw0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ce/53c3e2-d335-4a82-a790-0d6bcd0148bf/1/0nbEGiF2JU8jbSPTkf1WCQYZZw0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ce/53c3e2-d335-4a82-a790-0d6bcd0148bf/1/0nbEGiF2JU8jbSPTkf1WCQYZZw0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
c9:1f:ab:92:46:6c:6f:90:44:eb:82:b2:0d:01:e4:a0:ef:e0:
f5:ac:f1:c2:de:3f:23:ea:52:b4:f6:52:ff:09:e3:ba:c5:8e:
13:93:60:7c:bf:59:d8:a6:93:22:ed:f5:dc:c4:53:a2:64:02:
2f:40:f8:54:e7:48:7a:3f:a4:98:54:1a:25:b6:df:61:f0:ee:
13:17:0a:70:b8:fd:31:69:dc:8b:ad:0d:70:18:0e:84:4a:ad:
49:48:42:e0:54:c6:c6:a8:80:6a:72:4a:f9:28:a8:57:6a:e7:
42:a6:d5:20:f3:f8:0d:cc:c0:ce:56:73:90:4d:12:91:b8:d9:
29:24:16:15:aa:d2:ba:d7:a6:5d:8e:64:0d:63:b5:3b:81:16:
c5:cc:ef:d0:b2:56:f7:77:03:0d:d4:9e:5a:9c:d1:fc:72:f7:
c1:b3:95:ad:1b:7d:a4:69:14:c0:b3:72:f1:08:c5:e6:d6:3c:
7d:e3:c3:b5:7f:84:a9:4d:56:ea:f6:a9:b5:7d:15:a4:db:6a:
dd:45:78:7f:24:35:cb:62:64:fe:52:47:b9:8d:1e:14:8e:b1:
45:8f:e8:3e:db:25:93:f1:9e:f5:1d:72:70:8d:c7:67:0c:f3:
82:75:39:d1:69:00:4b:fc:67:10:cf:d8:4e:1b:aa:d3:80:f9:
74:e4:fb:bd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 10 07:28:24 2025 by rpki-client