Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f6/bd431a-9706-4f38-800b-2a685f78b29d/1/0CAT81SL49yz3KGNT8k3ifRPA78.mft
File: 0CAT81SL49yz3KGNT8k3ifRPA78.mft (raw, json)
Hash identifier: 3RVNZOb9I4ZhGZumzYExe5pU014MUOxaL/99uiUJ/Gg=
Subject key identifier: F7:AD:7C:58:5B:73:50:86:77:E2:CB:9C:48:40:B3:17:9D:C6:16:53
Authority key identifier: D0:20:13:F3:54:8B:E3:DC:B3:DC:A1:8D:4F:C9:37:89:F4:4F:03:BF
Certificate issuer: /CN=d02013f3548be3dcb3dca18d4fc93789f44f03bf
Certificate serial: 0196BD1256DA92F8B6BECC899FFAE668B645
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0CAT81SL49yz3KGNT8k3ifRPA78.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f6/bd431a-9706-4f38-800b-2a685f78b29d/1/0CAT81SL49yz3KGNT8k3ifRPA78.mft
Manifest number: 1536
Signing time: Sun 11 May 2025 02:00:17 +0000
Manifest this update: Sun 11 May 2025 02:00:17 +0000
Manifest next update: Mon 12 May 2025 02:00:17 +0000
Files and hashes: 1: 0CAT81SL49yz3KGNT8k3ifRPA78.crl (hash: FfLdLTieDmQxV6tuVwvwocheuHPvaO9IbcZHPJVBVRI=)
2: ye296n7TFw2U7qCSerBkbo7SsH0.roa (hash: m5pP+tHttyj1Oj+JBIbSiGDkTJLLn21rUnR9Ptw/3e0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f6/bd431a-9706-4f38-800b-2a685f78b29d/1/0CAT81SL49yz3KGNT8k3ifRPA78.crl
rsync://rpki.ripe.net/repository/DEFAULT/f6/bd431a-9706-4f38-800b-2a685f78b29d/1/0CAT81SL49yz3KGNT8k3ifRPA78.mft
rsync://rpki.ripe.net/repository/DEFAULT/0CAT81SL49yz3KGNT8k3ifRPA78.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 12 May 2025 02:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:bd:12:56:da:92:f8:b6:be:cc:89:9f:fa:e6:68:b6:45
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d02013f3548be3dcb3dca18d4fc93789f44f03bf
Validity
Not Before: May 11 02:00:17 2025 GMT
Not After : May 12 02:00:17 2025 GMT
Subject: CN=f7ad7c585b73508677e2cb9c4840b3179dc61653
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e8:a2:09:21:04:19:a2:d8:9e:b5:d4:29:b8:f6:
43:05:28:a9:c7:85:4a:6e:a5:29:3f:1d:dc:3e:60:
64:55:06:0a:31:db:d6:45:74:77:d8:d5:b4:8b:b4:
8d:ab:d3:42:cc:86:3a:5c:e8:bc:af:62:57:1a:3d:
71:57:8a:44:c1:3d:63:86:83:db:2c:0d:8c:26:da:
02:f8:9a:c5:33:67:95:72:8a:fd:db:a8:89:84:f2:
df:76:86:73:00:ac:d6:1c:85:d5:b2:28:c6:f9:81:
55:dd:a4:2f:f7:b3:69:82:8c:24:17:4a:e6:fc:69:
2a:0c:11:c5:be:43:bf:60:d9:08:db:95:5c:e8:96:
06:d0:ff:40:d1:cb:96:2d:84:ee:50:ee:db:17:81:
5e:d9:9a:f5:ab:b1:84:62:a4:5b:bc:20:93:0a:88:
3b:a2:9c:f3:e6:06:df:e9:de:da:cf:26:3b:b3:03:
6a:16:7d:5a:2b:ba:76:5a:9e:18:92:b7:2a:7b:66:
5c:7d:67:6f:86:e2:5a:87:87:90:55:de:32:72:26:
a3:c2:c8:5f:a9:59:2e:81:d3:06:45:a7:40:bb:f9:
41:ce:2f:63:ce:d2:ca:20:91:7a:5c:21:4d:f9:3e:
11:bf:70:ab:f9:51:14:1a:2e:f4:fb:6c:af:f3:19:
e8:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F7:AD:7C:58:5B:73:50:86:77:E2:CB:9C:48:40:B3:17:9D:C6:16:53
X509v3 Authority Key Identifier:
keyid:D0:20:13:F3:54:8B:E3:DC:B3:DC:A1:8D:4F:C9:37:89:F4:4F:03:BF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0CAT81SL49yz3KGNT8k3ifRPA78.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/bd431a-9706-4f38-800b-2a685f78b29d/1/0CAT81SL49yz3KGNT8k3ifRPA78.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/bd431a-9706-4f38-800b-2a685f78b29d/1/0CAT81SL49yz3KGNT8k3ifRPA78.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
72:41:9e:77:85:dd:08:5b:dc:ac:f8:7d:e3:0d:5e:77:81:4a:
50:41:79:b2:f5:9b:e7:39:2a:52:73:83:75:e5:7a:df:18:72:
48:95:e6:e4:72:2c:0e:a8:33:2a:00:5b:f4:d2:0e:c1:6d:2c:
f5:4d:0e:c5:2f:c2:4a:54:c0:e6:87:47:37:45:55:f9:51:0d:
08:a5:90:b8:9c:b8:20:81:a8:cf:6a:85:ee:48:9c:86:49:59:
27:c9:8a:7f:cb:00:06:f5:09:35:c5:6a:0a:6e:a2:5d:98:54:
38:a2:f0:86:44:1d:6a:8a:5f:5d:c4:28:8a:98:84:dc:0d:cd:
fe:4b:66:8f:cd:85:fc:2b:bd:a2:a6:4e:79:a2:25:fd:a2:53:
8f:81:d6:ae:3c:8e:ab:12:85:d8:0b:14:59:3e:67:ce:1e:94:
67:f0:ae:01:a0:ef:5a:e4:b3:e1:25:17:35:75:50:53:f9:88:
9d:3f:4f:f3:49:bd:42:37:51:ba:4e:29:ec:99:52:bb:ee:7a:
c4:5e:3c:58:e3:f3:b2:16:95:fc:a2:97:e8:a9:ff:72:20:86:
30:d3:c9:b7:50:cd:0d:4d:f3:38:65:fd:ab:97:0d:39:4b:43:
69:a3:61:1f:d1:f8:bf:14:c6:90:87:96:52:db:09:12:b2:a9:
5b:6c:30:83
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 11 12:28:04 2025 by rpki-client