Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d7/2f69df-6f23-4aa7-88f4-e299e910039e/1/0PbNMLTPoZPiJrupKC42aiKjEQ8.mft
File: 0PbNMLTPoZPiJrupKC42aiKjEQ8.mft (raw, json)
Hash identifier: Hmlxem0SHSfI6dknnSegKh6Cnn5f2gSWAIKFdwPgIgc=
Subject key identifier: F9:3F:65:7A:90:33:C5:6C:5C:B7:43:A1:89:36:C7:CB:F5:01:3F:E3
Authority key identifier: D0:F6:CD:30:B4:CF:A1:93:E2:26:BB:A9:28:2E:36:6A:22:A3:11:0F
Certificate issuer: /CN=d0f6cd30b4cfa193e226bba9282e366a22a3110f
Certificate serial: 01969D5106872378DDF563F56032877ECD6E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0PbNMLTPoZPiJrupKC42aiKjEQ8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d7/2f69df-6f23-4aa7-88f4-e299e910039e/1/0PbNMLTPoZPiJrupKC42aiKjEQ8.mft
Manifest number: 1525
Signing time: Sun 04 May 2025 22:00:54 +0000
Manifest this update: Sun 04 May 2025 22:00:54 +0000
Manifest next update: Mon 05 May 2025 22:00:54 +0000
Files and hashes: 1: 0PbNMLTPoZPiJrupKC42aiKjEQ8.crl (hash: XcJMXh1kl0DZUB+tJ6IK8TVgWk4exAF7JJ/r7l5QiOs=)
2: rcxI4e2J8wRM11pjAJVw2X1CP4Q.roa (hash: dOutEmsom2VI++bJk5JwwVxqjGBRuIpfu9it/0+MYW8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d7/2f69df-6f23-4aa7-88f4-e299e910039e/1/0PbNMLTPoZPiJrupKC42aiKjEQ8.crl
rsync://rpki.ripe.net/repository/DEFAULT/d7/2f69df-6f23-4aa7-88f4-e299e910039e/1/0PbNMLTPoZPiJrupKC42aiKjEQ8.mft
rsync://rpki.ripe.net/repository/DEFAULT/0PbNMLTPoZPiJrupKC42aiKjEQ8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 05 May 2025 22:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:9d:51:06:87:23:78:dd:f5:63:f5:60:32:87:7e:cd:6e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d0f6cd30b4cfa193e226bba9282e366a22a3110f
Validity
Not Before: May 4 22:00:54 2025 GMT
Not After : May 5 22:00:54 2025 GMT
Subject: CN=f93f657a9033c56c5cb743a18936c7cbf5013fe3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:ff:17:49:89:9c:24:34:3f:d4:24:79:76:91:
13:d2:c2:89:6c:53:06:d2:5d:07:65:bd:50:62:d4:
7b:90:54:b5:09:b4:7e:63:1c:54:8b:ef:0e:3d:9c:
63:9c:31:cd:fe:d8:16:53:32:36:73:0e:6d:3b:7c:
22:8a:f2:55:1b:7f:bb:13:93:b4:dd:01:e3:11:8e:
0a:0b:68:19:35:28:9a:47:05:e2:67:6b:e7:a8:35:
0d:cb:b2:f2:0e:dc:1d:90:2f:c3:42:19:b2:21:e6:
21:da:e7:47:3a:57:78:9e:5e:36:9e:45:9b:47:45:
40:07:5d:ee:80:35:c4:f5:1c:3e:87:cc:e0:16:3f:
a4:25:dd:34:0a:fd:69:27:fb:69:30:50:a7:dc:54:
61:ec:28:e7:ed:f4:18:9c:c4:df:8c:77:bb:06:79:
04:ae:ee:14:5e:0f:d6:1b:84:fb:ea:cf:0e:4f:9f:
31:a5:78:32:97:26:dc:6d:1b:f9:2f:65:4d:68:c3:
7f:51:71:23:7a:20:5d:ab:a5:dd:ea:6f:2e:1e:60:
61:01:34:0f:2c:f7:bd:10:b0:6d:0f:06:5a:76:25:
e9:49:1a:7f:17:94:7f:63:44:7b:89:a3:fe:56:1b:
d6:77:c2:78:8e:90:6e:67:db:74:e8:ae:c1:37:48:
86:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F9:3F:65:7A:90:33:C5:6C:5C:B7:43:A1:89:36:C7:CB:F5:01:3F:E3
X509v3 Authority Key Identifier:
keyid:D0:F6:CD:30:B4:CF:A1:93:E2:26:BB:A9:28:2E:36:6A:22:A3:11:0F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0PbNMLTPoZPiJrupKC42aiKjEQ8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/2f69df-6f23-4aa7-88f4-e299e910039e/1/0PbNMLTPoZPiJrupKC42aiKjEQ8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/2f69df-6f23-4aa7-88f4-e299e910039e/1/0PbNMLTPoZPiJrupKC42aiKjEQ8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
13:f2:67:5f:87:42:f2:a9:67:69:8a:28:53:bb:c7:ca:d1:ef:
fa:57:a2:89:d7:96:94:8e:d0:74:7f:45:05:00:5c:05:b4:cb:
af:cb:1e:12:68:e6:1e:c5:2e:9b:2d:65:9e:0b:a7:27:45:2f:
91:29:ed:36:23:4d:e6:5d:d7:5c:cb:c3:6a:41:ca:6e:b8:8e:
77:90:7b:eb:d9:68:d1:c0:ca:cd:cb:e1:71:02:a8:39:e5:37:
9f:bf:1a:75:48:ab:31:d7:f5:db:ca:4a:20:29:86:91:c4:cc:
ca:50:d8:d1:81:e8:ec:75:14:78:57:96:03:76:2f:ad:31:3d:
f9:27:55:a1:f8:5f:f1:4f:c9:ad:9a:9f:fb:04:c1:0f:e2:3f:
6f:12:41:e3:15:71:aa:6c:0a:83:4a:3c:57:15:ef:82:d6:3d:
21:17:fd:85:ae:9f:8f:e6:8b:41:81:5a:e3:24:30:57:72:2d:
78:fa:c7:92:76:41:9d:3a:a1:4c:e4:fa:c8:93:a3:b1:6b:84:
a1:23:48:5f:24:4a:f4:c9:3f:56:3d:2f:74:66:ba:1d:12:f6:
8b:7c:5d:0c:35:7e:94:68:ab:1e:40:da:ab:0b:4d:22:aa:af:
b2:40:13:d6:e1:a5:b8:47:2a:ff:3b:41:5c:c4:ad:03:0a:00:
a7:9c:fc:44
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 5 04:13:18 2025 by rpki-client