Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d7/0df28d-924d-4b4e-94b8-824ffc6942f4/1/1onLcYkcbZS9nm8U8W5-N8LHKL8.mft
File: 1onLcYkcbZS9nm8U8W5-N8LHKL8.mft (raw, json)
Hash identifier: FJjaVOGU4XOT2WgALC4nvAimJT1geDO9IfbmNbHGOVA=
Subject key identifier: A9:35:9E:22:DB:EA:A5:29:7C:88:B7:79:56:5B:9F:45:51:20:C3:B8
Authority key identifier: D6:89:CB:71:89:1C:6D:94:BD:9E:6F:14:F1:6E:7E:37:C2:C7:28:BF
Certificate issuer: /CN=d689cb71891c6d94bd9e6f14f16e7e37c2c728bf
Certificate serial: 0196CB3C38E63662CB9D50E51504428F9B8F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1onLcYkcbZS9nm8U8W5-N8LHKL8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d7/0df28d-924d-4b4e-94b8-824ffc6942f4/1/1onLcYkcbZS9nm8U8W5-N8LHKL8.mft
Manifest number: 02F0
Signing time: Tue 13 May 2025 20:00:43 +0000
Manifest this update: Tue 13 May 2025 20:00:43 +0000
Manifest next update: Wed 14 May 2025 20:00:43 +0000
Files and hashes: 1: 1onLcYkcbZS9nm8U8W5-N8LHKL8.crl (hash: FNzB7Jz8jtpmQ4p/lm/ozbeR/Zhk76RuVs5lBoEWA7g=)
2: kSER2798uaT4ZEQ3_Ywav1IgXDo.roa (hash: o89fQ/v3jr3XzrvC5mfE9JQZHOaC2hUzybiixeh55JI=)
3: yZlOT6r0_6wmgpAAvcSq6qfpXoA.roa (hash: CFuI4jvHDVJgJ7TNYXPE3aUuvYsSM/+AObIDbJtCPww=)
4: zl7tT8dRR7O1ZujdC0-GhGjBJAU.roa (hash: dZhp70Fm8wBLybFYAH8VTvH36PqVNE1zgwuzpEitFwQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d7/0df28d-924d-4b4e-94b8-824ffc6942f4/1/1onLcYkcbZS9nm8U8W5-N8LHKL8.crl
rsync://rpki.ripe.net/repository/DEFAULT/d7/0df28d-924d-4b4e-94b8-824ffc6942f4/1/1onLcYkcbZS9nm8U8W5-N8LHKL8.mft
rsync://rpki.ripe.net/repository/DEFAULT/1onLcYkcbZS9nm8U8W5-N8LHKL8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 14 May 2025 20:00:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:cb:3c:38:e6:36:62:cb:9d:50:e5:15:04:42:8f:9b:8f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d689cb71891c6d94bd9e6f14f16e7e37c2c728bf
Validity
Not Before: May 13 20:00:43 2025 GMT
Not After : May 14 20:00:43 2025 GMT
Subject: CN=a9359e22dbeaa5297c88b779565b9f455120c3b8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e6:a5:11:31:c8:a8:10:4b:6c:f2:2c:b1:dd:15:
d6:5f:55:7b:e9:61:6e:b6:e9:d8:09:cf:a3:0b:99:
0f:e6:57:f7:1f:63:9e:22:a0:ce:66:12:ac:b6:68:
88:fa:0f:a9:1f:a5:6c:53:88:76:ad:30:3e:ef:ed:
de:5e:89:0b:c3:88:d5:e6:79:41:24:7c:98:57:95:
7d:17:a1:e7:48:1a:54:a7:aa:f3:64:33:fe:cc:73:
c4:b8:d7:cd:f5:76:2f:2c:23:0e:7e:3a:a3:74:63:
6d:6e:13:fd:0b:18:e7:37:a9:72:96:a3:63:7c:cc:
44:2e:8a:9e:61:fd:f4:fb:33:8c:8b:05:86:b0:1e:
77:16:b2:b5:ef:d8:24:18:a4:a1:9d:f7:2e:a9:1c:
4b:fc:96:a7:17:75:f9:78:52:54:85:04:8e:34:ee:
89:07:96:61:a8:d0:f3:41:b1:27:56:b9:c3:a1:56:
e0:6b:76:ac:00:a7:b1:aa:1a:33:f6:c7:1e:c3:2d:
ab:b3:a4:63:5f:e3:fc:da:f0:d0:5c:cf:34:b9:a9:
e5:e7:20:87:15:8c:8a:5d:50:db:07:4e:aa:90:72:
11:45:03:c0:83:a8:3f:8c:ac:20:7a:41:05:1a:26:
c4:a8:ed:32:e5:20:8f:57:10:bc:1e:ac:70:9f:6c:
ef:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A9:35:9E:22:DB:EA:A5:29:7C:88:B7:79:56:5B:9F:45:51:20:C3:B8
X509v3 Authority Key Identifier:
keyid:D6:89:CB:71:89:1C:6D:94:BD:9E:6F:14:F1:6E:7E:37:C2:C7:28:BF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1onLcYkcbZS9nm8U8W5-N8LHKL8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/0df28d-924d-4b4e-94b8-824ffc6942f4/1/1onLcYkcbZS9nm8U8W5-N8LHKL8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/0df28d-924d-4b4e-94b8-824ffc6942f4/1/1onLcYkcbZS9nm8U8W5-N8LHKL8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2a:32:72:bc:c1:00:9a:db:4d:c1:a5:e4:96:6a:e9:e1:97:a8:
9d:f1:d4:84:57:d7:4f:d3:93:d3:ad:9a:4a:20:6c:eb:41:00:
f7:37:5d:b7:b8:d8:46:6b:5e:26:6f:05:04:19:60:e4:08:c1:
51:58:eb:d1:87:50:3d:f7:37:c1:1b:7b:14:aa:78:65:8e:dd:
7d:82:5c:ff:4b:7d:ac:1a:11:72:db:3c:cb:55:32:f7:b4:6a:
b0:03:8a:81:79:45:cd:55:0c:8d:4d:06:ba:2b:c4:6e:32:d3:
6d:f4:61:f7:b9:02:b5:a6:3b:e1:bb:7e:30:5b:17:5a:24:67:
81:59:5b:68:3b:2e:fb:d9:8e:0c:7d:87:f3:55:45:47:cf:79:
fc:8a:d7:57:ca:4e:cc:71:8d:18:0f:f0:e2:88:4f:09:65:fb:
35:f8:16:d0:3e:5f:7c:07:74:03:ae:27:7b:fc:68:99:54:b0:
c3:22:11:e7:1d:f7:6e:6d:76:a4:dc:07:dd:71:f4:cd:72:b2:
6b:98:24:25:31:ef:4b:c6:2c:a7:52:2e:3a:f0:7d:e2:a4:43:
15:f8:95:33:60:49:a7:34:ec:23:d6:aa:4d:5d:cc:15:fa:97:
5a:09:86:fd:aa:92:d0:26:ea:1d:03:b8:99:8e:c9:ac:e7:95:
fd:88:36:49
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 14 02:44:08 2025 by rpki-client