Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e6/0d0300-74ee-4677-ad62-c24b7db20de7/1/0BbMVqmVUHtPqHxkkEQvBrYYZoc.mft
File: 0BbMVqmVUHtPqHxkkEQvBrYYZoc.mft (raw, json)
Hash identifier: aveVtdmgW0H0nWHiAUTtDzHDqfnjlW369At5SL/WsL0=
Subject key identifier: 24:EA:D9:7C:87:E3:5E:41:D8:03:36:D1:66:4A:FF:03:1E:B9:9A:97
Authority key identifier: D0:16:CC:56:A9:95:50:7B:4F:A8:7C:64:90:44:2F:06:B6:18:66:87
Certificate issuer: /CN=d016cc56a995507b4fa87c6490442f06b6186687
Certificate serial: 0196D13DE0EA714D9FA44586E61421E85DF1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0BbMVqmVUHtPqHxkkEQvBrYYZoc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e6/0d0300-74ee-4677-ad62-c24b7db20de7/1/0BbMVqmVUHtPqHxkkEQvBrYYZoc.mft
Manifest number: 153D
Signing time: Thu 15 May 2025 00:00:15 +0000
Manifest this update: Thu 15 May 2025 00:00:15 +0000
Manifest next update: Fri 16 May 2025 00:00:15 +0000
Files and hashes: 1: 0BbMVqmVUHtPqHxkkEQvBrYYZoc.crl (hash: +ZXnqWA0TWivyr7WZflaqrbPmgeBuP+Wjo8MXllPv3k=)
2: f7YxschREuysiSjDT6JDZ1hIzJU.roa (hash: od3isdJHCZlHUjM+HPneCDkTI9VrgHkYJNlcsSC6Dag=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e6/0d0300-74ee-4677-ad62-c24b7db20de7/1/0BbMVqmVUHtPqHxkkEQvBrYYZoc.crl
rsync://rpki.ripe.net/repository/DEFAULT/e6/0d0300-74ee-4677-ad62-c24b7db20de7/1/0BbMVqmVUHtPqHxkkEQvBrYYZoc.mft
rsync://rpki.ripe.net/repository/DEFAULT/0BbMVqmVUHtPqHxkkEQvBrYYZoc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 15 May 2025 17:32:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:d1:3d:e0:ea:71:4d:9f:a4:45:86:e6:14:21:e8:5d:f1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d016cc56a995507b4fa87c6490442f06b6186687
Validity
Not Before: May 15 00:00:15 2025 GMT
Not After : May 16 00:00:15 2025 GMT
Subject: CN=24ead97c87e35e41d80336d1664aff031eb99a97
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e5:86:3b:3b:3c:97:ce:ea:77:f8:fd:6a:11:75:
e5:68:01:cb:aa:7d:99:18:f2:7e:0f:81:bd:3b:e8:
c3:70:dc:77:f5:59:bd:7e:75:76:f9:8b:6a:9a:46:
49:1e:0b:22:26:42:7e:7e:14:c7:76:b8:74:21:64:
c8:46:70:33:0a:d0:f1:cb:67:70:a5:fe:f1:37:25:
70:82:66:6e:03:b6:91:67:05:ac:87:89:c9:e2:ac:
cf:1e:08:c0:78:79:73:98:8c:01:dd:2f:8e:18:96:
3d:1e:7e:90:33:9d:69:12:70:b7:47:90:f4:37:5c:
0b:f3:08:04:17:24:6c:53:0a:85:a7:2a:36:4a:0c:
55:2e:73:14:df:84:fc:8a:fb:a2:99:83:35:e8:ee:
b0:a8:68:43:50:7d:52:c4:1f:b4:8f:20:d8:a2:27:
8b:8a:4b:6b:bf:03:13:80:28:2a:7b:47:c3:67:53:
62:d4:9a:73:b0:a9:a8:5e:da:f0:e4:68:0b:c8:0c:
0f:3f:d7:61:ec:c5:ed:48:aa:52:d1:d9:9f:c7:39:
d2:c5:a7:55:6a:b3:b1:2b:18:df:e0:3a:06:8e:4d:
2b:5d:a4:63:04:e7:39:3b:f1:20:82:19:89:e6:6a:
26:89:f3:44:97:68:dd:bc:a1:be:29:94:ce:4a:b6:
2e:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
24:EA:D9:7C:87:E3:5E:41:D8:03:36:D1:66:4A:FF:03:1E:B9:9A:97
X509v3 Authority Key Identifier:
keyid:D0:16:CC:56:A9:95:50:7B:4F:A8:7C:64:90:44:2F:06:B6:18:66:87
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0BbMVqmVUHtPqHxkkEQvBrYYZoc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/0d0300-74ee-4677-ad62-c24b7db20de7/1/0BbMVqmVUHtPqHxkkEQvBrYYZoc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/0d0300-74ee-4677-ad62-c24b7db20de7/1/0BbMVqmVUHtPqHxkkEQvBrYYZoc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
68:69:00:23:cd:f3:69:36:f5:8b:cb:89:fa:b5:12:4e:9d:07:
8c:76:bd:15:ac:45:6a:25:9a:b8:f1:8b:f3:ad:eb:10:5e:8e:
07:8e:2a:e2:48:83:1f:a8:76:f8:3e:77:6d:ad:06:65:1e:27:
88:90:a3:c2:6a:2f:67:c6:e7:ef:9b:fc:3f:ba:08:49:82:d3:
c7:32:e6:b7:e7:97:84:8e:e5:5f:6c:a0:73:e9:f6:ed:ca:d6:
4e:f5:59:ff:bd:b5:f8:de:aa:52:98:9c:94:a2:ae:21:bd:1c:
58:e7:cc:f4:a6:b1:dc:a8:55:a2:14:14:e1:05:37:fa:b9:2a:
5f:5e:a8:98:26:37:ee:f3:40:99:8e:22:a9:f7:18:05:de:49:
06:9d:22:57:bc:42:b0:8c:52:86:9e:7d:19:8f:80:5d:b4:28:
66:47:6b:85:95:4c:2f:d7:7d:47:d4:50:48:72:df:d6:a4:22:
97:97:47:26:6b:0e:95:0f:dd:aa:7a:4e:a1:5a:30:43:45:0a:
06:ab:e4:e6:0a:ac:ae:de:5d:b8:3f:78:d0:60:44:0c:3a:7c:
c7:48:cf:7d:85:1f:5a:42:ff:c3:e5:f0:55:6e:3b:13:a4:6c:
37:6b:c8:eb:7c:c9:96:42:5e:10:3d:5c:33:ad:a6:d6:a0:cf:
3a:a1:c2:c0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 15 02:42:39 2025 by rpki-client