Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3f/cfa9cd-8d7b-4a35-82d0-7bb365f34c6c/1/0L-t8pI57Yzz9saT2L23n0IACrw.mft
File: 0L-t8pI57Yzz9saT2L23n0IACrw.mft (raw, json)
Hash identifier: 4JjEmhJZbK7cziP6id8Rb5jvkXKpaeQQGJEikRfeKdQ=
Subject key identifier: 50:FE:AB:9C:06:6E:39:E3:3A:DC:31:19:B8:D3:39:98:21:75:3E:03
Authority key identifier: D0:BF:AD:F2:92:39:ED:8C:F3:F6:C6:93:D8:BD:B7:9F:42:00:0A:BC
Certificate issuer: /CN=d0bfadf29239ed8cf3f6c693d8bdb79f42000abc
Certificate serial: 01967F0F4D5603DD337A8C0329DF76F1D14C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0L-t8pI57Yzz9saT2L23n0IACrw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3f/cfa9cd-8d7b-4a35-82d0-7bb365f34c6c/1/0L-t8pI57Yzz9saT2L23n0IACrw.mft
Manifest number: 0CC5
Signing time: Tue 29 Apr 2025 01:00:31 +0000
Manifest this update: Tue 29 Apr 2025 01:00:31 +0000
Manifest next update: Wed 30 Apr 2025 01:00:31 +0000
Files and hashes: 1: 0L-t8pI57Yzz9saT2L23n0IACrw.crl (hash: kAAsQVTCfMVigfq+NEAodilaq8B58DccJpPfBwh4HDk=)
2: ED7irA7lmwh5tHPGbkFIIeJv-bg.roa (hash: Ig5tcq1zw9JQCpzSA6FZ4ETNZF6mc/oaQxjv4KTG32g=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3f/cfa9cd-8d7b-4a35-82d0-7bb365f34c6c/1/0L-t8pI57Yzz9saT2L23n0IACrw.crl
rsync://rpki.ripe.net/repository/DEFAULT/3f/cfa9cd-8d7b-4a35-82d0-7bb365f34c6c/1/0L-t8pI57Yzz9saT2L23n0IACrw.mft
rsync://rpki.ripe.net/repository/DEFAULT/0L-t8pI57Yzz9saT2L23n0IACrw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 30 Apr 2025 00:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:7f:0f:4d:56:03:dd:33:7a:8c:03:29:df:76:f1:d1:4c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d0bfadf29239ed8cf3f6c693d8bdb79f42000abc
Validity
Not Before: Apr 29 01:00:31 2025 GMT
Not After : Apr 30 01:00:31 2025 GMT
Subject: CN=50feab9c066e39e33adc3119b8d3399821753e03
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:ab:ea:e0:a4:87:d6:07:28:36:84:7e:e7:31:
be:1a:ce:2d:82:35:69:1f:ba:09:8f:1f:3b:a3:aa:
c8:5c:81:10:40:f2:d5:72:02:25:6e:2d:59:9b:4b:
2e:54:98:30:80:aa:37:31:b7:c7:70:47:f6:3e:3d:
08:69:53:e9:88:e8:24:50:e5:f9:68:f7:f4:fa:23:
02:d3:67:81:ae:83:06:55:12:94:9a:14:51:af:1f:
55:5d:2c:25:82:c9:98:18:d0:e0:27:f5:39:66:fb:
06:ad:eb:22:16:80:5e:bc:66:dd:90:af:68:10:b3:
65:20:65:ac:b4:1b:88:45:9d:19:32:39:35:7e:6c:
67:76:9f:40:7e:2f:bf:da:0e:76:36:ce:b7:1e:45:
a0:c0:86:9d:2f:8d:2a:df:82:73:0a:53:53:2a:7d:
f1:45:06:8b:2b:d6:1b:4f:bc:05:4d:f0:bd:34:88:
35:0f:ef:3b:9f:4e:19:2b:a8:b3:f0:3d:83:f1:25:
ba:74:96:03:49:77:75:8b:57:5a:bb:63:9e:97:ed:
18:05:3b:1d:e8:48:28:0c:74:70:de:00:a3:b0:71:
69:48:a6:f1:f5:f6:ee:2f:6a:da:98:cb:21:2a:e1:
82:6e:2b:17:3d:f0:99:b0:c8:c7:03:29:dc:93:c2:
15:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
50:FE:AB:9C:06:6E:39:E3:3A:DC:31:19:B8:D3:39:98:21:75:3E:03
X509v3 Authority Key Identifier:
keyid:D0:BF:AD:F2:92:39:ED:8C:F3:F6:C6:93:D8:BD:B7:9F:42:00:0A:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0L-t8pI57Yzz9saT2L23n0IACrw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3f/cfa9cd-8d7b-4a35-82d0-7bb365f34c6c/1/0L-t8pI57Yzz9saT2L23n0IACrw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3f/cfa9cd-8d7b-4a35-82d0-7bb365f34c6c/1/0L-t8pI57Yzz9saT2L23n0IACrw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6f:14:0a:c3:a4:36:20:7c:8d:14:ef:aa:5d:e2:3a:04:28:2f:
cc:1b:eb:cd:46:65:34:4e:e1:68:ff:7b:59:7c:82:2e:26:3b:
aa:c5:35:79:0e:0a:cc:d5:3b:e6:ca:8f:ae:b7:20:f3:0b:6e:
7f:6a:2c:cd:c2:7e:ec:c9:fa:63:82:1b:11:d1:88:a2:27:87:
8f:1c:75:f8:1a:1f:d5:43:e7:27:cf:cc:d6:43:f4:db:e3:e5:
c6:42:82:bf:c1:4d:4a:c7:09:b1:0e:f6:92:06:d4:f9:24:3c:
2b:b1:b5:d6:27:69:2b:ca:9f:74:8c:e8:01:ce:c6:17:fc:fe:
d1:43:d6:8a:59:98:4a:4b:40:10:d4:68:91:5c:f9:68:c1:8e:
d7:af:d1:44:9f:5a:9e:e5:80:60:06:9a:25:2e:72:f4:ae:e8:
69:bf:f7:b6:17:9e:9c:b6:54:81:d9:14:d8:1f:e3:7a:f3:76:
de:80:72:7d:88:60:54:b6:a7:8f:81:01:1b:53:ae:ab:20:82:
e1:97:92:ae:48:23:a2:67:03:e0:ec:dd:f8:61:62:be:5c:58:
9f:05:a6:01:c0:40:05:2b:78:e6:95:a4:66:a0:18:2b:c6:10:
e6:4f:8d:4a:a7:b1:9f:13:96:20:17:11:30:65:c5:96:64:4b:
90:45:cd:89
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 29 08:38:36 2025 by rpki-client