Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f6/d097d3-d4ba-4130-8e96-ad95ebfaaae2/1/0EhQ-Aad9i3FFVwC7R5iv1HO28g.mft
File: 0EhQ-Aad9i3FFVwC7R5iv1HO28g.mft (raw, json)
Hash identifier: zhmm/KkYinH3cCVa6Wr8NGgY9G78EGFrkjk09Dr9S7U=
Subject key identifier: 08:60:33:D6:5C:8E:05:D1:01:E8:BE:50:C2:C2:62:2F:5E:E8:33:7C
Authority key identifier: D0:48:50:F8:06:9D:F6:2D:C5:15:5C:02:ED:1E:62:BF:51:CE:DB:C8
Certificate issuer: /CN=d04850f8069df62dc5155c02ed1e62bf51cedbc8
Certificate serial: 0196C3F0BC1C898767E479C13541F50AF3D3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0EhQ-Aad9i3FFVwC7R5iv1HO28g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f6/d097d3-d4ba-4130-8e96-ad95ebfaaae2/1/0EhQ-Aad9i3FFVwC7R5iv1HO28g.mft
Manifest number: 01BC
Signing time: Mon 12 May 2025 10:00:55 +0000
Manifest this update: Mon 12 May 2025 10:00:55 +0000
Manifest next update: Tue 13 May 2025 10:00:55 +0000
Files and hashes: 1: 0EhQ-Aad9i3FFVwC7R5iv1HO28g.crl (hash: 3DMWkDjZpBJA2fLxqBZSHOrHCRL0MW3Meon9rMbIJ80=)
2: vwZ3qyY8j7AihfGsWYtA6mwINxQ.roa (hash: VBbCuPYUO8ASQ+6MrnY57WOdr+3+R3PhClJszE/T/CI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f6/d097d3-d4ba-4130-8e96-ad95ebfaaae2/1/0EhQ-Aad9i3FFVwC7R5iv1HO28g.crl
rsync://rpki.ripe.net/repository/DEFAULT/f6/d097d3-d4ba-4130-8e96-ad95ebfaaae2/1/0EhQ-Aad9i3FFVwC7R5iv1HO28g.mft
rsync://rpki.ripe.net/repository/DEFAULT/0EhQ-Aad9i3FFVwC7R5iv1HO28g.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 13 May 2025 10:00:55 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:c3:f0:bc:1c:89:87:67:e4:79:c1:35:41:f5:0a:f3:d3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d04850f8069df62dc5155c02ed1e62bf51cedbc8
Validity
Not Before: May 12 10:00:55 2025 GMT
Not After : May 13 10:00:55 2025 GMT
Subject: CN=086033d65c8e05d101e8be50c2c2622f5ee8337c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:cc:41:9b:41:3d:ba:86:b8:01:09:44:63:63:
a5:8a:bc:b7:9b:72:49:53:01:35:16:0c:51:14:e1:
7d:0d:51:48:71:c6:4b:d6:6e:54:b9:08:49:87:73:
b9:05:c7:92:3d:8d:b2:c6:7a:ca:a9:2f:9d:8d:20:
21:64:89:17:de:e6:ef:95:90:2c:fc:e2:57:e0:a7:
d6:e7:e7:e5:c3:97:af:a2:66:36:5f:b3:86:30:73:
c1:74:c1:f9:f9:6c:22:4b:c9:df:bc:ad:56:19:55:
b1:bb:ee:06:c5:8e:06:34:de:7c:e1:87:4d:07:e2:
d7:5b:38:91:b8:ca:85:c2:84:83:4b:ef:ba:1d:ee:
aa:a3:c9:46:44:c8:30:6b:3d:aa:6d:fb:86:0d:f8:
28:b4:d9:df:20:1e:30:68:df:b0:ff:25:7c:47:d0:
a5:5b:af:dd:26:ca:e7:86:5e:7c:21:35:12:3f:d9:
f8:28:8f:5a:a9:ee:6f:79:5f:08:c1:bc:a8:dc:f1:
bf:32:96:ee:1f:e6:82:87:74:bb:64:9f:17:b3:9e:
67:cb:53:62:f7:2e:73:52:2c:6a:9c:a5:54:8b:42:
44:4e:03:c9:6c:7b:f4:da:65:83:8f:57:4b:10:6e:
ba:26:58:85:79:91:c1:f1:1e:b6:9c:70:1c:73:c5:
1b:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
08:60:33:D6:5C:8E:05:D1:01:E8:BE:50:C2:C2:62:2F:5E:E8:33:7C
X509v3 Authority Key Identifier:
keyid:D0:48:50:F8:06:9D:F6:2D:C5:15:5C:02:ED:1E:62:BF:51:CE:DB:C8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0EhQ-Aad9i3FFVwC7R5iv1HO28g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/d097d3-d4ba-4130-8e96-ad95ebfaaae2/1/0EhQ-Aad9i3FFVwC7R5iv1HO28g.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/d097d3-d4ba-4130-8e96-ad95ebfaaae2/1/0EhQ-Aad9i3FFVwC7R5iv1HO28g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
01:ce:05:0f:57:ce:a3:88:00:a2:02:c0:6c:c2:05:bd:d1:0f:
44:3f:0b:57:a7:b1:00:f8:04:2c:e7:22:5f:94:58:be:08:9f:
a6:99:fd:b2:1f:04:19:54:44:10:2e:53:3d:39:2c:8b:78:a8:
9c:9d:42:60:75:c6:7c:16:4e:38:d1:40:1a:82:ce:49:84:27:
d7:5f:bb:7f:8d:3b:8a:2e:f8:89:3e:21:21:b0:97:4f:0a:f8:
2b:31:f0:70:22:53:40:db:24:be:1b:ec:d4:cb:88:53:25:4a:
80:5f:18:e2:f5:00:2d:05:1e:d0:00:c9:8b:39:b0:b4:cf:a3:
42:d3:49:3e:89:66:50:94:68:59:e1:b7:2e:23:e8:d5:ad:eb:
a7:9b:79:d5:d0:b0:2e:02:58:91:a6:8f:12:df:d3:40:da:82:
2c:de:3f:a4:6d:32:07:95:c2:1a:bb:5f:48:57:d4:bb:ec:03:
a3:41:39:51:53:e8:69:b6:77:41:a5:88:09:19:39:3a:cc:ae:
d9:48:bf:be:fa:c4:e8:2d:ae:ac:f1:fe:8c:10:3f:b9:5d:96:
90:29:c5:46:38:55:63:51:27:05:97:02:38:eb:15:01:52:a5:
15:8d:ec:e0:eb:f4:65:3e:39:b1:72:0e:17:54:80:e0:4d:09:
1b:07:77:b7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 12 20:00:42 2025 by rpki-client