Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f3/f80dd4-f184-45a8-b58d-66517a3ac19d/1/0zDcrR41MkVJwcmhlBerak0JreA.mft
File: 0zDcrR41MkVJwcmhlBerak0JreA.mft (raw, json)
Hash identifier: m/9QMv+Efh+pB1LFY/oqEyo1fthgS+2Za5H9TLxZz1Y=
Subject key identifier: AC:7E:8F:9D:A9:0F:EE:6B:58:31:7B:B3:CB:0F:14:A3:EA:9A:3A:4B
Authority key identifier: D3:30:DC:AD:1E:35:32:45:49:C1:C9:A1:94:17:AB:6A:4D:09:AD:E0
Certificate issuer: /CN=d330dcad1e35324549c1c9a19417ab6a4d09ade0
Certificate serial: 0196C728B990ED83038452837481D75860A9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0zDcrR41MkVJwcmhlBerak0JreA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f3/f80dd4-f184-45a8-b58d-66517a3ac19d/1/0zDcrR41MkVJwcmhlBerak0JreA.mft
Manifest number: 0C0E
Signing time: Tue 13 May 2025 01:00:56 +0000
Manifest this update: Tue 13 May 2025 01:00:56 +0000
Manifest next update: Wed 14 May 2025 01:00:56 +0000
Files and hashes: 1: 0zDcrR41MkVJwcmhlBerak0JreA.crl (hash: Z8sWV2Ry7IJseilXU0iuVRIUPjKwScrk5fFkFmySuPk=)
2: LPCDu87vvEM5O8HyjWDakdHtl2E.roa (hash: Wurynnxc4HmLUHSiIQ2miFmjlyoy/berebBUDyFaz/I=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f3/f80dd4-f184-45a8-b58d-66517a3ac19d/1/0zDcrR41MkVJwcmhlBerak0JreA.crl
rsync://rpki.ripe.net/repository/DEFAULT/f3/f80dd4-f184-45a8-b58d-66517a3ac19d/1/0zDcrR41MkVJwcmhlBerak0JreA.mft
rsync://rpki.ripe.net/repository/DEFAULT/0zDcrR41MkVJwcmhlBerak0JreA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 13 May 2025 20:47:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:c7:28:b9:90:ed:83:03:84:52:83:74:81:d7:58:60:a9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d330dcad1e35324549c1c9a19417ab6a4d09ade0
Validity
Not Before: May 13 01:00:56 2025 GMT
Not After : May 14 01:00:56 2025 GMT
Subject: CN=ac7e8f9da90fee6b58317bb3cb0f14a3ea9a3a4b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:5f:ea:52:c2:52:8d:8f:b8:21:79:70:e9:92:
d8:89:d9:bb:ef:25:f8:a4:08:31:92:23:98:b0:b6:
99:75:10:0a:59:71:d9:04:58:23:00:56:b5:ae:7e:
e1:9b:68:1f:83:be:1f:11:e2:6a:c1:df:3c:60:bd:
af:e1:1c:51:7b:31:f5:14:fd:a9:06:b3:44:f2:68:
49:ba:a0:ad:1f:52:7b:5c:79:2c:48:50:ee:c1:dc:
2c:f0:b2:f5:b5:43:36:92:7d:65:00:78:1f:21:d6:
f2:02:cd:01:bb:97:a0:bd:2b:8b:05:fe:f2:04:0c:
f2:a0:e3:2f:6c:9d:04:44:2d:8e:f7:55:5d:31:f9:
d6:a0:25:91:96:7c:b3:80:b0:c7:a6:ce:b3:ab:40:
75:d7:20:37:11:13:60:d5:ef:cd:92:c1:c3:4f:51:
12:8e:33:c1:31:66:b0:97:17:9c:36:cc:1e:18:34:
93:13:a9:69:6e:11:e8:cc:41:cf:71:bd:35:0e:40:
5b:f1:87:5b:b7:62:ad:1b:2c:8f:b8:9d:f0:24:c7:
ff:b6:ba:55:3d:a1:26:d4:34:05:23:8f:ef:d0:b8:
da:56:62:ce:d5:c6:5e:cc:fc:0d:9a:e0:59:ed:19:
29:35:e4:23:18:99:8a:eb:0f:c1:1a:9f:ed:38:c2:
96:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AC:7E:8F:9D:A9:0F:EE:6B:58:31:7B:B3:CB:0F:14:A3:EA:9A:3A:4B
X509v3 Authority Key Identifier:
keyid:D3:30:DC:AD:1E:35:32:45:49:C1:C9:A1:94:17:AB:6A:4D:09:AD:E0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0zDcrR41MkVJwcmhlBerak0JreA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/f80dd4-f184-45a8-b58d-66517a3ac19d/1/0zDcrR41MkVJwcmhlBerak0JreA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/f80dd4-f184-45a8-b58d-66517a3ac19d/1/0zDcrR41MkVJwcmhlBerak0JreA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b6:8a:78:6d:c1:a7:c3:c2:41:0a:1a:06:d3:5c:ff:ad:c7:7c:
54:a7:35:bc:30:20:b4:e0:1c:44:f8:c6:a6:63:c5:49:3a:c6:
23:9e:5c:0c:67:bb:5b:ed:ea:c3:fd:69:95:68:03:5d:0a:c9:
57:e5:29:e8:55:da:4e:c3:38:bf:3a:04:02:a7:81:6e:c0:ff:
96:df:9e:2d:e3:0e:cb:3f:23:65:fc:8b:f7:80:c7:f1:60:60:
e5:b0:88:00:01:fd:6b:70:ea:22:a7:09:cd:01:82:9a:bc:6b:
86:bd:78:4e:b2:22:78:24:cc:e7:0d:83:8d:db:c3:d6:9b:29:
c0:72:b7:8d:e0:bc:77:8d:8a:fc:87:51:40:4c:ef:a2:57:b2:
95:5e:31:f4:60:77:31:82:fd:e8:81:51:25:8e:60:16:88:6b:
3c:78:24:e9:2e:20:92:7d:ea:d8:5b:8e:8b:8f:bd:d4:fd:0d:
ff:61:e5:93:87:c2:78:63:d6:63:13:6f:b8:65:7e:0b:28:f5:
91:19:59:19:2e:b4:99:8c:75:d1:7b:7b:23:20:53:fe:6c:f7:
3d:24:a8:71:31:f6:2f:e7:4b:c8:12:fc:0b:ad:c1:4f:7b:74:
89:5b:76:20:ee:15:b2:e9:a2:36:e3:bb:bf:6d:a5:28:90:44:
d4:03:47:9d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 13 06:14:52 2025 by rpki-client