Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0f/b0bdbd-801c-4b0b-9fbe-ae15d507590e/1/t72OrhZp3rOj-kGGSR4FyzLOCSo.mft
File: t72OrhZp3rOj-kGGSR4FyzLOCSo.mft (raw, json)
Hash identifier: dypvj6qaQILPIGG3ISkDWbOyxHhD6iiWBDRg7pU+r8U=
Subject key identifier: 12:4A:CD:04:3A:0E:C0:D0:81:20:08:8B:E6:37:25:20:09:D6:4A:38
Authority key identifier: B7:BD:8E:AE:16:69:DE:B3:A3:FA:41:86:49:1E:05:CB:32:CE:09:2A
Certificate issuer: /CN=b7bd8eae1669deb3a3fa4186491e05cb32ce092a
Certificate serial: 019677FAEFB762799758A434C6978F6FEBC0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/t72OrhZp3rOj-kGGSR4FyzLOCSo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0f/b0bdbd-801c-4b0b-9fbe-ae15d507590e/1/t72OrhZp3rOj-kGGSR4FyzLOCSo.mft
Manifest number: 0FCE
Signing time: Sun 27 Apr 2025 16:00:56 +0000
Manifest this update: Sun 27 Apr 2025 16:00:56 +0000
Manifest next update: Mon 28 Apr 2025 16:00:56 +0000
Files and hashes: 1: 0CceuujOUN7fI6SJWiU4I3JvZeo.roa (hash: ReNIag9nA9bjr82rfcj5JjzPGdjpj3RK7GRwiAamY6Q=)
2: t72OrhZp3rOj-kGGSR4FyzLOCSo.crl (hash: DGNrzNuMS/kVbCj+Co23GNiwihY8jYdX0pDfTwPGfjw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0f/b0bdbd-801c-4b0b-9fbe-ae15d507590e/1/t72OrhZp3rOj-kGGSR4FyzLOCSo.crl
rsync://rpki.ripe.net/repository/DEFAULT/0f/b0bdbd-801c-4b0b-9fbe-ae15d507590e/1/t72OrhZp3rOj-kGGSR4FyzLOCSo.mft
rsync://rpki.ripe.net/repository/DEFAULT/t72OrhZp3rOj-kGGSR4FyzLOCSo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Apr 2025 14:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:77:fa:ef:b7:62:79:97:58:a4:34:c6:97:8f:6f:eb:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b7bd8eae1669deb3a3fa4186491e05cb32ce092a
Validity
Not Before: Apr 27 16:00:56 2025 GMT
Not After : Apr 28 16:00:56 2025 GMT
Subject: CN=124acd043a0ec0d08120088be637252009d64a38
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:5a:da:21:75:9a:62:05:13:53:94:64:f7:fc:
fa:5a:24:a6:f7:7a:13:68:eb:19:fc:4e:93:42:2a:
b3:08:79:cd:cf:d3:d6:40:85:5e:18:9f:63:c7:d4:
5b:e8:a2:35:3e:c2:85:01:c1:c7:1f:4b:61:4c:d5:
3a:9d:77:62:b6:98:d0:c8:48:52:b3:9e:66:99:bf:
b6:f0:27:75:98:52:53:e9:6c:08:9c:66:ce:02:be:
4f:10:d9:37:ee:ab:dc:07:f1:76:4c:e6:67:21:1d:
42:6e:82:80:e2:c6:12:3d:cc:62:79:de:45:c4:c1:
ff:38:43:b1:97:11:b7:02:d5:ef:25:b0:6a:8f:4f:
b2:53:63:b4:2d:40:b8:f0:dd:fc:c6:1a:c8:89:5f:
9a:29:aa:cb:9f:e2:a4:c2:54:df:ea:e6:a5:99:c6:
19:52:5e:e6:14:40:ed:c5:33:b5:b8:eb:ef:47:f9:
03:9c:8e:56:c9:ce:c0:2e:e1:36:63:a6:87:db:60:
2f:5c:42:e8:4f:fb:2e:5e:9b:a1:ef:b0:cd:d7:9e:
c8:7c:3d:b5:6c:62:0b:b5:82:f5:c1:8d:27:68:a6:
f4:b0:9f:43:0d:ec:61:f1:f4:5b:eb:ea:c8:84:b7:
2c:44:c3:b8:8b:cd:35:dd:7b:e2:f2:45:ff:1b:af:
b8:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
12:4A:CD:04:3A:0E:C0:D0:81:20:08:8B:E6:37:25:20:09:D6:4A:38
X509v3 Authority Key Identifier:
keyid:B7:BD:8E:AE:16:69:DE:B3:A3:FA:41:86:49:1E:05:CB:32:CE:09:2A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/t72OrhZp3rOj-kGGSR4FyzLOCSo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/b0bdbd-801c-4b0b-9fbe-ae15d507590e/1/t72OrhZp3rOj-kGGSR4FyzLOCSo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/b0bdbd-801c-4b0b-9fbe-ae15d507590e/1/t72OrhZp3rOj-kGGSR4FyzLOCSo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8c:48:0e:47:a1:9e:1f:fd:3a:9f:1e:b4:9e:59:c3:34:79:31:
40:56:c5:43:89:c3:3f:9f:8f:83:52:18:ad:92:24:27:78:9b:
2a:13:16:f4:6b:46:2c:00:22:cc:3e:13:15:c4:9c:45:5a:1f:
3d:ac:1b:36:86:2f:ed:95:65:93:09:53:44:89:83:e9:4f:7f:
dc:04:52:2a:4d:71:2e:d8:ec:dd:29:dc:58:1f:6a:6c:d5:f5:
d2:5c:91:d2:a4:1e:f7:08:6d:02:4b:71:25:c1:99:0e:72:87:
5e:10:a3:53:d5:ff:74:a5:20:90:8d:6e:bc:11:35:7e:b8:32:
2e:2f:bd:59:de:73:b3:5a:26:34:28:5d:19:b1:dd:9b:db:d0:
f2:15:ce:97:f6:7c:93:5b:f1:c8:d1:a2:62:f1:97:02:18:60:
31:4f:6f:b5:df:e0:5b:6a:0d:7a:28:9d:e7:2b:79:58:9c:2b:
c2:eb:f3:57:eb:25:5d:1a:a7:c7:e2:be:0b:a2:da:77:d2:b8:
0f:89:4a:bf:33:a1:6b:76:65:ef:8b:71:dd:a5:0c:c9:58:bd:
40:ed:17:3a:54:6d:b9:6c:e9:93:62:fb:0d:27:af:9b:13:83:
73:83:44:ce:30:1e:bd:f8:d5:07:d0:c4:ad:65:88:04:08:9e:
36:db:b0:8b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 18:31:03 2025 by rpki-client