Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f8/0d903f-1831-4d03-aab4-81af7c657e05/1/0SO41GITRmfsap0eFU5cfwWWZiw.mft
File: 0SO41GITRmfsap0eFU5cfwWWZiw.mft (raw, json)
Hash identifier: o3xpKZW/XLrL3cBFKbP+Nc/fwrwZrPpPMs9i12cIFlQ=
Subject key identifier: DE:BE:8B:93:41:7B:01:86:0C:F2:BF:FD:28:99:B0:01:F9:A3:86:41
Authority key identifier: D1:23:B8:D4:62:13:46:67:EC:6A:9D:1E:15:4E:5C:7F:05:96:66:2C
Certificate issuer: /CN=d123b8d462134667ec6a9d1e154e5c7f0596662c
Certificate serial: 0196A0F648B3B3434F1F6F7E7743B081AAA5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0SO41GITRmfsap0eFU5cfwWWZiw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f8/0d903f-1831-4d03-aab4-81af7c657e05/1/0SO41GITRmfsap0eFU5cfwWWZiw.mft
Manifest number: 1526
Signing time: Mon 05 May 2025 15:00:17 +0000
Manifest this update: Mon 05 May 2025 15:00:17 +0000
Manifest next update: Tue 06 May 2025 15:00:17 +0000
Files and hashes: 1: 0SO41GITRmfsap0eFU5cfwWWZiw.crl (hash: RvqXCzbIWovheq+lIcYdqLqlO1Tx2i19uSZo5B5xmUc=)
2: ydYjDF75mH7bfqoCwNzPOqna2dk.roa (hash: sywFQUytXwSuvYG2++Bqw/RDZKafPOlycszuwNNtgdE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f8/0d903f-1831-4d03-aab4-81af7c657e05/1/0SO41GITRmfsap0eFU5cfwWWZiw.crl
rsync://rpki.ripe.net/repository/DEFAULT/f8/0d903f-1831-4d03-aab4-81af7c657e05/1/0SO41GITRmfsap0eFU5cfwWWZiw.mft
rsync://rpki.ripe.net/repository/DEFAULT/0SO41GITRmfsap0eFU5cfwWWZiw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 06 May 2025 10:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:a0:f6:48:b3:b3:43:4f:1f:6f:7e:77:43:b0:81:aa:a5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d123b8d462134667ec6a9d1e154e5c7f0596662c
Validity
Not Before: May 5 15:00:17 2025 GMT
Not After : May 6 15:00:17 2025 GMT
Subject: CN=debe8b93417b01860cf2bffd2899b001f9a38641
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f0:a2:6b:68:e6:7e:a2:f9:7d:e6:09:ec:d0:c0:
8c:60:9a:35:3d:0a:60:23:5f:7e:17:60:8a:dd:44:
71:ca:2d:91:9e:65:8d:cb:c8:6b:62:20:ae:5d:ff:
b5:e7:95:53:ce:74:4b:d7:2e:25:8a:8a:c9:31:87:
3d:ee:b6:b0:5b:b8:e1:9e:f3:59:60:23:cc:4f:e8:
e6:a9:79:9d:15:fe:86:6d:3d:30:cd:ba:10:59:87:
cf:6d:9a:85:1c:7d:31:89:cf:dc:8d:03:23:3d:b9:
5b:d4:c6:72:d5:6b:ec:f7:68:4b:0b:7c:c0:38:3e:
bd:81:27:97:8a:ee:c7:73:5f:f5:84:e6:78:40:da:
5d:94:0e:bf:e6:f1:bc:f9:25:a7:6a:44:2c:01:d0:
da:f2:e9:ad:a2:fe:ca:a0:ea:c1:cc:01:16:cb:aa:
00:34:67:79:ef:50:7e:2d:7c:91:1b:7d:24:5e:57:
7f:ff:ac:48:07:10:45:8a:e7:61:96:ea:85:d8:fd:
f0:34:b5:47:43:e0:ea:6f:2c:f6:a7:b5:81:8e:49:
ef:29:42:e5:be:73:03:dd:f2:be:cf:0b:75:33:fb:
91:5a:c0:e6:a6:05:fd:7d:c3:6f:54:65:7e:b5:6c:
4e:f0:f5:7d:c9:63:cf:ea:02:0b:67:f3:4c:0e:d3:
fd:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DE:BE:8B:93:41:7B:01:86:0C:F2:BF:FD:28:99:B0:01:F9:A3:86:41
X509v3 Authority Key Identifier:
keyid:D1:23:B8:D4:62:13:46:67:EC:6A:9D:1E:15:4E:5C:7F:05:96:66:2C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0SO41GITRmfsap0eFU5cfwWWZiw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/0d903f-1831-4d03-aab4-81af7c657e05/1/0SO41GITRmfsap0eFU5cfwWWZiw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/0d903f-1831-4d03-aab4-81af7c657e05/1/0SO41GITRmfsap0eFU5cfwWWZiw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
94:04:a4:62:46:7f:4f:f0:92:f6:77:67:5d:31:a1:f3:f0:16:
df:21:df:bb:11:ba:69:f2:22:3a:74:66:20:81:bf:c0:0e:10:
20:90:84:48:0c:21:91:bd:40:4c:02:d9:80:9d:3d:07:36:47:
d0:d0:ac:9f:d7:ab:66:e0:98:c8:d0:28:8c:78:44:56:cf:f3:
b5:df:c3:ab:d1:22:39:93:cc:e9:59:41:0c:0a:14:60:01:70:
44:c3:e5:d6:4b:25:43:f8:96:0d:a5:a3:51:aa:41:09:7b:a3:
13:d7:a1:ca:2c:ec:3f:02:5a:94:f3:72:87:1b:de:3f:7a:fe:
8f:e5:50:35:6d:b2:4a:ff:bd:93:5f:4f:bf:98:e0:ea:b7:00:
16:b6:3a:4d:b6:57:de:6b:93:e4:81:ef:09:5c:31:4a:c1:5c:
3b:4a:6e:82:1e:6b:89:a1:ea:3c:b2:08:aa:67:b3:e2:6b:ff:
b1:ce:d5:0b:c8:53:a3:1e:0b:21:56:19:ea:20:7c:09:86:23:
69:1e:2c:9d:e0:e2:7c:41:ba:3e:33:72:cf:06:fc:23:cf:0a:
a8:db:2f:28:71:30:70:ba:aa:69:ee:11:54:df:aa:e1:5b:c5:
5b:a3:b4:77:c1:c5:44:be:0d:c7:c1:9e:ca:8f:c0:dd:fa:9e:
d6:55:cf:04
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 5 19:35:06 2025 by rpki-client