Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d2/81024f-5171-47c4-b5ca-6b63331eff02/1/0Mo8Cxlv3gunTBSHvcucX6BTZks.mft
File: 0Mo8Cxlv3gunTBSHvcucX6BTZks.mft (raw, json)
Hash identifier: zvR3WviV7Mz2eWiWz4Gfa8JbSUGvWtsth88cplOqGQI=
Subject key identifier: A9:F9:49:2F:40:0B:34:B0:87:78:D8:E5:80:BA:C8:39:73:C2:E0:56
Authority key identifier: D0:CA:3C:0B:19:6F:DE:0B:A7:4C:14:87:BD:CB:9C:5F:A0:53:66:4B
Certificate issuer: /CN=d0ca3c0b196fde0ba74c1487bdcb9c5fa053664b
Certificate serial: 0196BBC9001DB9DBDCF8EAD7FE10C2AB860B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0Mo8Cxlv3gunTBSHvcucX6BTZks.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d2/81024f-5171-47c4-b5ca-6b63331eff02/1/0Mo8Cxlv3gunTBSHvcucX6BTZks.mft
Manifest number: 1534
Signing time: Sat 10 May 2025 20:00:34 +0000
Manifest this update: Sat 10 May 2025 20:00:34 +0000
Manifest next update: Sun 11 May 2025 20:00:34 +0000
Files and hashes: 1: 0Mo8Cxlv3gunTBSHvcucX6BTZks.crl (hash: yHsBj5QpmvdG4Twboq9+pagVRXrjBCcHZAagjvg5BSc=)
2: 5Iq99HGOQym0RGozEyZTnwgi5-c.roa (hash: 81JX76zEEyAwuma2A2j1xpYjvTQiYo/8wBvDbJx61DE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d2/81024f-5171-47c4-b5ca-6b63331eff02/1/0Mo8Cxlv3gunTBSHvcucX6BTZks.crl
rsync://rpki.ripe.net/repository/DEFAULT/d2/81024f-5171-47c4-b5ca-6b63331eff02/1/0Mo8Cxlv3gunTBSHvcucX6BTZks.mft
rsync://rpki.ripe.net/repository/DEFAULT/0Mo8Cxlv3gunTBSHvcucX6BTZks.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 11 May 2025 20:00:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:bb:c9:00:1d:b9:db:dc:f8:ea:d7:fe:10:c2:ab:86:0b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d0ca3c0b196fde0ba74c1487bdcb9c5fa053664b
Validity
Not Before: May 10 20:00:34 2025 GMT
Not After : May 11 20:00:34 2025 GMT
Subject: CN=a9f9492f400b34b08778d8e580bac83973c2e056
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:90:5d:40:71:9b:5b:c3:60:88:91:33:38:7d:5f:
dd:83:cc:a9:1a:db:8d:55:49:4a:b3:9e:e3:f2:80:
78:bd:3d:a3:2e:a6:5f:aa:12:1b:b7:06:67:79:19:
0e:54:be:c7:1a:b4:92:85:dc:9e:44:3a:9a:ec:f9:
c1:c2:ce:18:a1:ba:b0:08:5d:75:07:ac:9e:c3:33:
75:17:14:72:e4:ae:c8:b5:97:b7:fb:4a:99:35:b7:
07:62:d1:e0:b5:f7:c6:cc:4a:22:a1:c7:16:00:cf:
e8:b9:49:1f:d2:23:74:53:49:d0:2d:d9:a5:96:94:
5c:07:f3:25:53:12:f0:ea:6e:e6:11:e1:2f:b7:82:
95:f4:55:51:df:17:db:50:88:c3:4d:b6:d9:98:34:
68:5e:49:bd:e6:81:ee:bb:6e:dd:57:6a:a4:b2:18:
1d:28:24:05:a8:21:2c:2e:4f:5b:91:57:ac:10:2c:
0e:44:ba:9e:1c:4d:cb:3a:e7:47:e4:a7:92:1d:5b:
73:d7:8e:3e:24:fe:b0:c9:2d:e5:af:85:bc:e1:9f:
dc:27:32:de:47:5a:7e:3b:bc:73:ee:dc:66:46:fa:
94:e0:90:33:a2:1a:2a:91:ac:0a:73:d6:f1:00:32:
93:b1:e6:a0:d2:1a:92:58:ed:b6:e6:a9:63:cf:db:
82:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A9:F9:49:2F:40:0B:34:B0:87:78:D8:E5:80:BA:C8:39:73:C2:E0:56
X509v3 Authority Key Identifier:
keyid:D0:CA:3C:0B:19:6F:DE:0B:A7:4C:14:87:BD:CB:9C:5F:A0:53:66:4B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0Mo8Cxlv3gunTBSHvcucX6BTZks.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d2/81024f-5171-47c4-b5ca-6b63331eff02/1/0Mo8Cxlv3gunTBSHvcucX6BTZks.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d2/81024f-5171-47c4-b5ca-6b63331eff02/1/0Mo8Cxlv3gunTBSHvcucX6BTZks.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8c:37:dd:b4:1a:da:ff:ce:eb:ab:73:e9:74:66:a9:55:85:0b:
40:1d:7e:12:f6:47:d6:62:f5:d9:ed:61:d2:cf:3c:85:e3:4b:
64:c3:bf:f3:15:03:d6:80:bb:22:4a:4c:79:02:ac:65:77:df:
f9:87:1d:ef:14:1f:25:97:ba:ac:ef:6d:e7:f7:52:70:b6:27:
99:96:97:2f:84:c9:e2:95:81:55:60:23:c1:6e:bd:87:d7:6f:
7e:44:11:10:0e:e7:19:5b:ee:02:50:35:52:9d:83:a2:b1:49:
eb:51:14:7a:03:1c:e8:57:9d:df:01:95:a3:c1:39:82:5b:52:
bd:b2:cd:c7:d7:d1:fc:90:ae:ec:01:4d:6a:97:24:20:0e:08:
e9:82:f8:eb:79:ae:4f:5e:44:5e:b1:28:19:6e:ff:65:17:1c:
20:93:75:cb:ae:85:09:ed:54:ac:60:71:db:bb:03:f7:4c:cd:
96:6d:7d:ee:1a:c4:11:a1:31:4c:1d:3d:b3:f3:df:53:61:c6:
45:cf:77:d0:4a:c2:fb:c8:88:14:fd:12:91:d3:52:b3:37:8e:
6b:98:72:ec:14:b7:51:15:61:77:af:95:40:0e:9a:ea:33:00:
2d:20:f4:03:5d:f1:9e:7d:73:88:2b:0f:02:17:5f:ec:1d:ea:
fe:ae:bb:26
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 11 02:01:43 2025 by rpki-client