Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f2/ebbdda-9571-4ff5-b56e-75220d53a55c/1/0fUZZO3hK0wDZz0jzUTIN1MV9Fo.mft
File: 0fUZZO3hK0wDZz0jzUTIN1MV9Fo.mft (raw, json)
Hash identifier: JGUcWwcUaWlPd//CY4iPK2YAZnN1nnH0C9gpiDHAyXc=
Subject key identifier: F0:09:81:42:08:BB:15:1F:77:3F:C9:B1:82:4B:D6:B1:31:B8:6F:C6
Authority key identifier: D1:F5:19:64:ED:E1:2B:4C:03:67:3D:23:CD:44:C8:37:53:15:F4:5A
Certificate issuer: /CN=d1f51964ede12b4c03673d23cd44c8375315f45a
Certificate serial: 0196CC17FF44CACCCBCB60AB1032FB81E0B8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0fUZZO3hK0wDZz0jzUTIN1MV9Fo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f2/ebbdda-9571-4ff5-b56e-75220d53a55c/1/0fUZZO3hK0wDZz0jzUTIN1MV9Fo.mft
Manifest number: 0427
Signing time: Wed 14 May 2025 00:00:46 +0000
Manifest this update: Wed 14 May 2025 00:00:46 +0000
Manifest next update: Thu 15 May 2025 00:00:46 +0000
Files and hashes: 1: 0fUZZO3hK0wDZz0jzUTIN1MV9Fo.crl (hash: MTzzXq3lZI3mB+2XDBNzpJ1WIzdrV2PVx2IKPIYYHZ8=)
2: cotZl6z9OJ-fauLOJe6XV8WAuTo.roa (hash: pFgMJLMj7SXSgI1OYpF9YOIHVLweh2wDrctvJeRJL4M=)
3: kchelfWvJ5H-ipXayPr2lYfELpU.roa (hash: 9NIJWgo1KUO6egMwGucTZhKbewDIQ9m/pLPQ1oGGlaM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f2/ebbdda-9571-4ff5-b56e-75220d53a55c/1/0fUZZO3hK0wDZz0jzUTIN1MV9Fo.crl
rsync://rpki.ripe.net/repository/DEFAULT/f2/ebbdda-9571-4ff5-b56e-75220d53a55c/1/0fUZZO3hK0wDZz0jzUTIN1MV9Fo.mft
rsync://rpki.ripe.net/repository/DEFAULT/0fUZZO3hK0wDZz0jzUTIN1MV9Fo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 14 May 2025 22:19:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:cc:17:ff:44:ca:cc:cb:cb:60:ab:10:32:fb:81:e0:b8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d1f51964ede12b4c03673d23cd44c8375315f45a
Validity
Not Before: May 14 00:00:46 2025 GMT
Not After : May 15 00:00:46 2025 GMT
Subject: CN=f009814208bb151f773fc9b1824bd6b131b86fc6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:bf:6c:ab:e1:d8:fb:15:a5:87:9a:c6:13:d9:
e8:60:c7:a1:cc:00:24:eb:66:a9:f9:c5:e8:96:86:
6b:14:b3:88:9d:e0:63:55:2f:cd:18:63:32:59:07:
e8:af:c9:49:5d:d8:15:bc:da:a6:d8:d9:5f:5c:5c:
1f:70:e6:fe:ff:c4:9d:3f:c1:4b:3c:97:6e:57:86:
d0:8e:5b:bb:7c:94:17:d0:c5:91:31:5f:32:ee:cc:
0a:2e:0d:c9:db:33:40:6b:1f:08:ae:de:90:72:bf:
f9:fe:28:8a:9c:8e:5b:99:4a:10:39:a4:48:46:db:
5a:bd:35:c9:c6:9b:77:ba:55:44:1e:57:6e:c9:d4:
37:7a:57:a6:0d:aa:83:9b:ea:6c:a5:76:40:17:4d:
8f:58:da:33:20:31:32:8b:45:e9:1e:f0:e0:19:db:
e8:8f:d1:8f:fd:02:38:b6:a2:1b:b8:76:b0:cd:f2:
98:e5:66:4b:d1:07:4c:6c:62:57:80:fc:3e:69:b0:
87:39:ed:3c:10:16:45:00:c5:60:a8:3e:7a:d7:6a:
26:6a:af:4e:75:90:d4:6c:6f:96:9d:1a:1b:53:ac:
ef:a0:4d:06:a9:29:93:17:3a:72:bb:87:80:4c:1e:
19:46:af:ac:de:7e:cb:d5:99:90:f8:b3:c1:fa:b6:
56:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F0:09:81:42:08:BB:15:1F:77:3F:C9:B1:82:4B:D6:B1:31:B8:6F:C6
X509v3 Authority Key Identifier:
keyid:D1:F5:19:64:ED:E1:2B:4C:03:67:3D:23:CD:44:C8:37:53:15:F4:5A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0fUZZO3hK0wDZz0jzUTIN1MV9Fo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/ebbdda-9571-4ff5-b56e-75220d53a55c/1/0fUZZO3hK0wDZz0jzUTIN1MV9Fo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/ebbdda-9571-4ff5-b56e-75220d53a55c/1/0fUZZO3hK0wDZz0jzUTIN1MV9Fo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3e:f0:2f:74:78:ab:81:e2:d1:37:01:bd:55:ff:e1:d6:5a:92:
b5:ef:8a:8f:5c:58:73:be:9b:9f:da:a6:50:f3:5d:c3:bb:04:
9b:df:91:f3:40:76:c9:78:ea:bf:b6:fd:6d:c3:12:7d:ed:49:
3e:50:fa:24:8a:6d:52:18:84:d6:17:64:44:4d:11:84:cd:d2:
16:8f:86:69:66:cf:75:4b:66:63:68:1e:34:68:07:2b:46:08:
49:89:66:76:a1:f1:cd:60:5d:53:4d:cc:cf:a3:7a:56:35:90:
a6:ad:c2:d7:45:f9:fd:f5:2f:e6:9d:43:d4:65:24:47:b2:a8:
5f:45:6f:04:cd:2c:44:05:a7:df:2c:e1:b8:e0:bd:de:06:6e:
86:17:95:7b:81:bf:70:99:80:a6:82:64:f1:62:bc:79:42:8c:
1a:79:c8:6c:74:d2:5d:75:61:85:ad:37:a8:52:3a:5a:72:d4:
8b:a6:7b:3d:49:5e:f0:86:ca:99:b9:6a:04:7a:65:0a:2c:40:
5c:47:ae:f8:dd:16:93:85:22:0f:00:87:fd:84:02:15:b2:c2:
19:b1:a9:2a:7f:2b:76:06:50:4a:d9:a6:9f:bd:a0:75:91:1d:
be:0a:77:e7:e0:b0:34:e1:2d:16:cb:f3:82:86:76:04:24:b0:
b0:a1:2d:0d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 14 02:57:54 2025 by rpki-client