Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0a/5835be-69e0-469b-bcba-00d14a203eb1/1/C279o-3LL3RczKu0XiC3nnmp_Jg.mft
File: C279o-3LL3RczKu0XiC3nnmp_Jg.mft (raw, json)
Hash identifier: OyPPQ3h3Bpw9ak43mDA3A/acqgSSdGNgs2D7NiQV+4A=
Subject key identifier: 7F:62:96:3E:4F:03:41:1A:48:9B:FB:06:77:BF:57:CE:A2:5C:73:43
Authority key identifier: 0B:6E:FD:A3:ED:CB:2F:74:5C:CC:AB:B4:5E:20:B7:9E:79:A9:FC:98
Certificate issuer: /CN=0b6efda3edcb2f745cccabb45e20b79e79a9fc98
Certificate serial: 0196778CFF370B94C9FF7EDC58D7420706C6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/C279o-3LL3RczKu0XiC3nnmp_Jg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0a/5835be-69e0-469b-bcba-00d14a203eb1/1/C279o-3LL3RczKu0XiC3nnmp_Jg.mft
Manifest number: 1512
Signing time: Sun 27 Apr 2025 14:00:51 +0000
Manifest this update: Sun 27 Apr 2025 14:00:51 +0000
Manifest next update: Mon 28 Apr 2025 14:00:51 +0000
Files and hashes: 1: 0w0EpLZYR7z2XsoCgghcY3pUnoU.roa (hash: lVpl8mTP6YZbuLjsob401TFZW5nVn9qmK2OvSpdRlfk=)
2: C279o-3LL3RczKu0XiC3nnmp_Jg.crl (hash: dDCUolNeQLRm+37so54by+ajNLW7oJWybZbgIPc6Lic=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0a/5835be-69e0-469b-bcba-00d14a203eb1/1/C279o-3LL3RczKu0XiC3nnmp_Jg.crl
rsync://rpki.ripe.net/repository/DEFAULT/0a/5835be-69e0-469b-bcba-00d14a203eb1/1/C279o-3LL3RczKu0XiC3nnmp_Jg.mft
rsync://rpki.ripe.net/repository/DEFAULT/C279o-3LL3RczKu0XiC3nnmp_Jg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Apr 2025 14:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:77:8c:ff:37:0b:94:c9:ff:7e:dc:58:d7:42:07:06:c6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0b6efda3edcb2f745cccabb45e20b79e79a9fc98
Validity
Not Before: Apr 27 14:00:51 2025 GMT
Not After : Apr 28 14:00:51 2025 GMT
Subject: CN=7f62963e4f03411a489bfb0677bf57cea25c7343
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:af:cc:f4:f5:c4:a3:63:d4:32:97:cc:2a:c3:
31:56:34:2b:bc:74:77:2d:82:e0:91:51:f6:45:ab:
61:1e:ce:32:1e:a0:3e:ae:d4:b7:80:d0:c6:c5:59:
4c:ee:a0:21:61:6b:b5:0c:78:e0:ef:5c:b9:92:5e:
11:dc:54:42:b8:3a:a4:72:95:6b:c8:3b:89:c7:8f:
fc:18:96:cf:cd:ba:1d:e3:2d:ce:11:c4:1a:c4:6a:
78:95:ce:0f:a5:cc:37:66:91:56:7a:d7:8f:c6:31:
7f:2d:4c:ff:c9:77:45:e3:5d:d4:f3:e6:9b:81:79:
50:05:e8:5b:34:f1:4e:7e:54:a3:bb:b0:30:b8:76:
31:63:16:6b:c3:3c:7d:e6:ed:bb:67:02:76:ee:15:
f4:27:a1:3c:35:e9:85:d7:d5:0d:4a:57:d2:41:04:
90:c2:cb:66:e9:f8:ec:31:ae:77:d3:40:37:df:d9:
a6:c5:95:ec:75:cd:b6:3a:a8:57:78:71:45:70:9e:
5c:2e:b2:e0:b8:87:39:cc:5d:60:c7:2a:bf:89:14:
4f:85:b1:fe:80:d6:ef:8b:17:de:61:e6:9e:35:57:
5b:dd:ad:9b:94:e8:d3:13:61:9a:4b:dc:71:90:88:
37:96:a9:71:0a:d3:62:9a:7a:b7:5b:34:ee:7e:ee:
d6:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7F:62:96:3E:4F:03:41:1A:48:9B:FB:06:77:BF:57:CE:A2:5C:73:43
X509v3 Authority Key Identifier:
keyid:0B:6E:FD:A3:ED:CB:2F:74:5C:CC:AB:B4:5E:20:B7:9E:79:A9:FC:98
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/C279o-3LL3RczKu0XiC3nnmp_Jg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0a/5835be-69e0-469b-bcba-00d14a203eb1/1/C279o-3LL3RczKu0XiC3nnmp_Jg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0a/5835be-69e0-469b-bcba-00d14a203eb1/1/C279o-3LL3RczKu0XiC3nnmp_Jg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
06:69:6f:d9:01:6c:c8:6e:91:89:07:fb:bf:7f:fa:32:d2:51:
ec:40:3d:82:2e:99:97:5c:ab:6a:5a:b2:c8:e8:15:3b:be:18:
d7:52:dc:8d:6e:62:a1:2d:21:27:a5:31:b2:4c:97:c9:f7:f9:
57:b6:25:e1:5b:1d:0e:ed:e4:a8:ab:0f:24:df:28:b3:31:4d:
b4:9e:cb:4b:ae:58:5c:7a:9c:2e:40:8b:5a:bd:14:50:30:d4:
4a:cf:c7:59:d1:69:5e:81:b3:6d:14:d7:95:3b:29:f4:2c:62:
b7:b1:5a:73:d1:bc:9c:d8:47:21:7d:02:e4:ff:6b:22:2f:e2:
53:2d:1b:46:44:a0:0c:45:8a:c6:a6:cf:07:01:68:0d:6b:22:
b2:d1:e5:46:7a:37:81:3c:e9:d4:4e:b1:21:16:24:36:e6:e9:
01:29:78:6c:19:a4:18:8c:d6:16:86:1d:47:82:1c:0f:72:07:
83:f7:da:c7:80:fc:6a:6c:ef:79:ae:6a:2d:b7:c4:1d:44:d2:
3f:df:56:5a:e0:59:e5:f8:76:72:95:e6:fc:b4:85:87:05:31:
34:38:97:1d:c8:8e:28:b5:e7:5d:59:f1:da:53:19:0d:8e:04:
6e:60:94:67:29:62:77:fe:b0:75:e7:0f:de:0c:6f:cb:78:10:
10:de:0c:0b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 22:15:34 2025 by rpki-client