Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2e/48ef27-5858-424b-add1-0f6455f05276/1/0vONSutNAojbuFTR6uC9itP4Qfo.mft
File: 0vONSutNAojbuFTR6uC9itP4Qfo.mft (raw, json)
Hash identifier: lI77JLeNu+EM4KQwafFWOUQfJvKfa//JAyAi1Bqxen4=
Subject key identifier: DD:68:AA:5C:43:0D:70:A9:45:F6:79:78:BD:CC:2B:C0:AB:39:CB:C0
Authority key identifier: D2:F3:8D:4A:EB:4D:02:88:DB:B8:54:D1:EA:E0:BD:8A:D3:F8:41:FA
Certificate issuer: /CN=d2f38d4aeb4d0288dbb854d1eae0bd8ad3f841fa
Certificate serial: 01967AC4C501D9B8BBFB4ED1F4DE703C2449
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0vONSutNAojbuFTR6uC9itP4Qfo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2e/48ef27-5858-424b-add1-0f6455f05276/1/0vONSutNAojbuFTR6uC9itP4Qfo.mft
Manifest number: 1511
Signing time: Mon 28 Apr 2025 05:00:37 +0000
Manifest this update: Mon 28 Apr 2025 05:00:37 +0000
Manifest next update: Tue 29 Apr 2025 05:00:37 +0000
Files and hashes: 1: 0vONSutNAojbuFTR6uC9itP4Qfo.crl (hash: Jwf2McTsQrD09EZbYNXFixR6Er3zXJbc4K6Kql1g6y8=)
2: ERnL-2TcZrO4tJF-sDDaVNlMYnY.roa (hash: +H0qLZUs9MIqoA3GO45JQCdAhU27Z3D/QbaTtfRGmIA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2e/48ef27-5858-424b-add1-0f6455f05276/1/0vONSutNAojbuFTR6uC9itP4Qfo.crl
rsync://rpki.ripe.net/repository/DEFAULT/2e/48ef27-5858-424b-add1-0f6455f05276/1/0vONSutNAojbuFTR6uC9itP4Qfo.mft
rsync://rpki.ripe.net/repository/DEFAULT/0vONSutNAojbuFTR6uC9itP4Qfo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 29 Apr 2025 05:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:7a:c4:c5:01:d9:b8:bb:fb:4e:d1:f4:de:70:3c:24:49
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d2f38d4aeb4d0288dbb854d1eae0bd8ad3f841fa
Validity
Not Before: Apr 28 05:00:37 2025 GMT
Not After : Apr 29 05:00:37 2025 GMT
Subject: CN=dd68aa5c430d70a945f67978bdcc2bc0ab39cbc0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:c1:20:0a:9f:f1:13:a6:12:58:22:6f:87:27:
7e:ae:91:df:41:6c:50:23:e2:98:50:37:01:4b:93:
d1:34:a8:59:8d:38:f1:b6:6f:3a:09:e2:88:96:39:
34:9b:92:b5:f1:85:2d:84:22:fc:57:40:0d:35:5d:
04:2d:80:a8:63:95:37:80:b9:85:b2:08:27:98:86:
ec:e0:29:ab:1d:fa:b1:35:bd:5e:c9:26:44:c8:b7:
be:27:71:df:ee:db:b9:b1:a9:f4:69:7d:1c:d8:1b:
71:92:14:fa:41:31:bc:31:56:6e:de:37:42:0f:eb:
17:20:10:2b:e3:21:dd:fa:e0:63:0f:79:6f:91:87:
3e:d9:f1:e7:46:96:24:e5:60:52:fb:a0:b6:ba:1e:
8b:12:de:4d:49:5e:6f:24:7a:c2:d6:c8:33:c4:7e:
03:61:b4:67:b7:15:d8:6e:ec:49:45:ea:59:30:0d:
25:a5:a6:e7:92:d3:40:19:fa:f9:d9:5b:4e:56:4a:
0c:8a:11:ab:9c:79:6e:c3:ae:37:49:7c:a7:7d:f3:
23:9b:3e:c0:3e:04:3e:d4:ea:22:c7:fc:d2:30:4f:
2d:b4:0e:71:ae:bd:45:de:a1:81:38:e5:16:93:40:
40:69:35:bb:b9:d4:f8:1e:d6:62:8f:e3:93:2a:d6:
62:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DD:68:AA:5C:43:0D:70:A9:45:F6:79:78:BD:CC:2B:C0:AB:39:CB:C0
X509v3 Authority Key Identifier:
keyid:D2:F3:8D:4A:EB:4D:02:88:DB:B8:54:D1:EA:E0:BD:8A:D3:F8:41:FA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0vONSutNAojbuFTR6uC9itP4Qfo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2e/48ef27-5858-424b-add1-0f6455f05276/1/0vONSutNAojbuFTR6uC9itP4Qfo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2e/48ef27-5858-424b-add1-0f6455f05276/1/0vONSutNAojbuFTR6uC9itP4Qfo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
26:23:91:01:f1:ea:47:01:cc:73:19:9a:df:67:b6:5c:45:f5:
9b:08:2c:56:e0:1b:45:71:3f:93:56:bf:76:2d:d8:39:2d:eb:
ed:0f:de:cc:3d:54:23:1b:4f:b1:8a:43:94:46:06:39:c1:1b:
93:e8:d1:9a:dd:3f:b9:3f:f1:8a:2c:e9:c4:bb:1b:fa:00:fa:
10:82:2c:37:80:94:16:c0:0b:06:45:c3:c1:09:0e:11:a0:6a:
86:e7:fc:ef:d7:c3:26:e5:15:9e:7e:59:7c:d8:dc:4b:31:b5:
50:b4:ee:a9:26:c7:52:d2:96:6c:0b:0a:54:e4:53:03:1d:5d:
ed:e7:31:d7:57:f9:72:0d:54:46:30:4a:34:2d:ba:ca:22:b8:
95:65:55:bd:95:de:b0:ca:b3:85:22:38:56:9c:d0:56:51:30:
32:5b:5b:4a:2d:2a:22:6b:8c:fc:a1:84:8d:4b:b3:ff:91:0a:
e1:62:8a:82:20:7c:2a:8b:96:e9:ab:ba:f1:b5:76:15:0f:f2:
64:4b:11:6f:fa:ca:44:e4:70:c0:25:f8:2a:91:82:75:6c:c6:
be:ab:c0:4c:a2:f6:9d:44:cf:7c:9b:4a:f3:2b:8f:9b:2d:14:
c4:5b:a8:0d:08:1d:0c:0e:65:45:ce:99:bb:b7:71:cf:54:e2:
29:0b:7c:89
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 11:42:21 2025 by rpki-client