Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0d/db75db-25b2-43dc-aa12-ed001a2889ad/1/CtBt0nvZOjgNpMddGovwdoKP1ko.mft
File: CtBt0nvZOjgNpMddGovwdoKP1ko.mft (raw, json)
Hash identifier: 3X0wmcAKaB5Fh8rN7RiKwdYtcB0FM1xGsHhW4PwfyXs=
Subject key identifier: 18:BC:7C:70:E8:21:7E:F9:5E:2A:ED:D4:8C:00:B4:18:71:97:F2:1B
Authority key identifier: 0A:D0:6D:D2:7B:D9:3A:38:0D:A4:C7:5D:1A:8B:F0:76:82:8F:D6:4A
Certificate issuer: /CN=0ad06dd27bd93a380da4c75d1a8bf076828fd64a
Certificate serial: 019682EC37B15BC286742880D9290BF375CE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CtBt0nvZOjgNpMddGovwdoKP1ko.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0d/db75db-25b2-43dc-aa12-ed001a2889ad/1/CtBt0nvZOjgNpMddGovwdoKP1ko.mft
Manifest number: 080E
Signing time: Tue 29 Apr 2025 19:00:40 +0000
Manifest this update: Tue 29 Apr 2025 19:00:40 +0000
Manifest next update: Wed 30 Apr 2025 19:00:40 +0000
Files and hashes: 1: 24PmMpD-bHbUV8mxF_RlzuSRjLU.roa (hash: ohLVMvfqoqKO1xPsU0QfK7dKJZtv+ZBmQ14II/YiXms=)
2: CtBt0nvZOjgNpMddGovwdoKP1ko.crl (hash: tZu/MiTKUHHsD9CHOqCOVO4HMqAzyHOBkJMqu5z5f24=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0d/db75db-25b2-43dc-aa12-ed001a2889ad/1/CtBt0nvZOjgNpMddGovwdoKP1ko.crl
rsync://rpki.ripe.net/repository/DEFAULT/0d/db75db-25b2-43dc-aa12-ed001a2889ad/1/CtBt0nvZOjgNpMddGovwdoKP1ko.mft
rsync://rpki.ripe.net/repository/DEFAULT/CtBt0nvZOjgNpMddGovwdoKP1ko.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 30 Apr 2025 15:02:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:82:ec:37:b1:5b:c2:86:74:28:80:d9:29:0b:f3:75:ce
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0ad06dd27bd93a380da4c75d1a8bf076828fd64a
Validity
Not Before: Apr 29 19:00:40 2025 GMT
Not After : Apr 30 19:00:40 2025 GMT
Subject: CN=18bc7c70e8217ef95e2aedd48c00b4187197f21b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:2b:3e:ab:c4:16:18:f7:67:70:79:5d:4d:63:
e4:58:41:0f:f6:ca:29:e1:fe:0a:54:f5:8e:15:8c:
8a:6b:97:81:20:e7:d0:3e:ea:0b:f6:23:b8:48:50:
9e:90:2a:86:1e:fb:21:64:97:4c:27:cb:94:8f:bf:
b4:ea:3c:b4:60:28:a4:f5:67:db:36:2e:29:f8:83:
9c:6d:d1:b9:5d:cb:bc:e0:d7:38:5b:1b:d3:e9:21:
53:ba:29:48:57:eb:96:38:32:81:b9:d7:b4:25:a8:
29:7c:3c:a2:f8:e4:ca:6b:b5:30:59:71:f6:ac:03:
0f:01:a4:c2:6f:42:73:c0:59:9f:e4:44:e3:44:80:
85:80:8c:ba:dc:23:f5:55:1e:e1:eb:fd:7e:0d:f1:
66:35:3b:a4:49:1e:18:a4:7f:bf:7b:c7:86:cc:04:
b0:2d:0b:77:3e:88:28:60:83:c8:02:8a:7f:34:53:
5c:02:f9:4c:7f:d1:96:ce:1b:93:62:38:24:13:46:
7c:00:c7:b6:84:6b:8b:e1:0b:8d:6e:c4:80:38:d7:
f2:74:3f:99:7f:58:bd:7e:bd:88:ca:08:73:a9:7f:
ea:13:ff:67:77:28:37:c8:93:d3:1f:03:5e:f5:60:
13:2f:49:48:14:91:e5:e4:ba:16:54:57:d5:5f:bb:
93:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
18:BC:7C:70:E8:21:7E:F9:5E:2A:ED:D4:8C:00:B4:18:71:97:F2:1B
X509v3 Authority Key Identifier:
keyid:0A:D0:6D:D2:7B:D9:3A:38:0D:A4:C7:5D:1A:8B:F0:76:82:8F:D6:4A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CtBt0nvZOjgNpMddGovwdoKP1ko.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/db75db-25b2-43dc-aa12-ed001a2889ad/1/CtBt0nvZOjgNpMddGovwdoKP1ko.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/db75db-25b2-43dc-aa12-ed001a2889ad/1/CtBt0nvZOjgNpMddGovwdoKP1ko.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
91:27:cb:49:ae:7e:ee:f3:f2:a2:fe:09:53:7e:4b:73:95:41:
71:48:74:86:1c:cb:5b:30:7c:81:fd:1c:e6:42:2e:e0:9e:16:
ac:44:ca:04:51:c7:4c:90:99:ef:eb:bd:c7:aa:f8:06:0d:c3:
d1:eb:c7:b0:fe:58:2d:70:2a:84:88:96:b7:1a:09:b5:63:ff:
9b:74:b0:78:b5:18:82:9c:36:ec:67:88:d9:8e:4c:e4:80:ce:
13:ea:77:db:6b:05:4d:c9:9d:b2:47:17:19:6c:a7:2e:c8:e9:
4a:46:2f:08:82:33:f3:78:41:88:34:02:b7:4c:be:73:fb:e0:
a0:e2:b2:22:a5:e8:1e:1e:56:d3:3b:d6:74:50:1c:9e:54:0d:
df:48:61:69:eb:7d:00:78:09:3e:99:8f:8b:af:76:2b:33:b8:
9b:2e:8d:dd:a5:45:20:ef:89:4b:7a:4c:2a:6a:f9:8b:d1:48:
26:83:0a:5c:0e:15:13:7d:44:45:06:d4:cc:a1:3c:2a:47:18:
6d:bc:a6:dc:a7:69:65:98:04:4e:6d:d9:76:56:13:53:c0:04:
6c:45:81:5f:9f:a1:89:ae:19:21:21:65:77:94:c2:e2:32:3b:
55:12:c3:1b:67:77:89:d1:b3:53:d6:fd:62:a1:03:f9:a6:cd:
eb:f1:9f:c0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 30 00:10:48 2025 by rpki-client