Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/48/56433a-0a70-4eae-9f9d-8cfbdb799284/1/0hpZQHIrIHsp2Vpsgb4NK_TUEMw.mft
File: 0hpZQHIrIHsp2Vpsgb4NK_TUEMw.mft (raw, json)
Hash identifier: fY0SOXNBM1/w2rC9ImuuzenRcfQBct6oQeKvD3nLBeU=
Subject key identifier: 19:55:FC:49:26:B1:8C:91:67:67:30:19:F0:4B:CD:15:32:D3:95:F9
Authority key identifier: D2:1A:59:40:72:2B:20:7B:29:D9:5A:6C:81:BE:0D:2B:F4:D4:10:CC
Certificate issuer: /CN=d21a5940722b207b29d95a6c81be0d2bf4d410cc
Certificate serial: 01967E3360C172563033A4FB9BD1552A3665
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0hpZQHIrIHsp2Vpsgb4NK_TUEMw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/48/56433a-0a70-4eae-9f9d-8cfbdb799284/1/0hpZQHIrIHsp2Vpsgb4NK_TUEMw.mft
Manifest number: 06CE
Signing time: Mon 28 Apr 2025 21:00:18 +0000
Manifest this update: Mon 28 Apr 2025 21:00:18 +0000
Manifest next update: Tue 29 Apr 2025 21:00:18 +0000
Files and hashes: 1: 0hpZQHIrIHsp2Vpsgb4NK_TUEMw.crl (hash: ztQk63m7r4Sov5xUr5iZkg/5gpqI1geEKaVk8ihLYbQ=)
2: 50bo-j7HR95aUFz7is7MBLLkMsc.roa (hash: aYgErZR0B+wLx1tDGd7DRHlBnCECIPjEQvva1IOrhbs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/48/56433a-0a70-4eae-9f9d-8cfbdb799284/1/0hpZQHIrIHsp2Vpsgb4NK_TUEMw.crl
rsync://rpki.ripe.net/repository/DEFAULT/48/56433a-0a70-4eae-9f9d-8cfbdb799284/1/0hpZQHIrIHsp2Vpsgb4NK_TUEMw.mft
rsync://rpki.ripe.net/repository/DEFAULT/0hpZQHIrIHsp2Vpsgb4NK_TUEMw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 29 Apr 2025 21:00:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:7e:33:60:c1:72:56:30:33:a4:fb:9b:d1:55:2a:36:65
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d21a5940722b207b29d95a6c81be0d2bf4d410cc
Validity
Not Before: Apr 28 21:00:18 2025 GMT
Not After : Apr 29 21:00:18 2025 GMT
Subject: CN=1955fc4926b18c9167673019f04bcd1532d395f9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:3e:6b:e6:da:76:9f:9a:b0:13:38:d8:e9:55:
1a:31:0e:1d:3a:72:f4:3c:4b:82:5d:2d:78:35:d8:
b8:37:61:89:a8:1a:dc:22:c0:69:35:c6:bb:95:c9:
f4:ae:2a:9f:3b:e6:49:a8:61:17:ed:8c:54:8e:82:
ed:17:4e:4b:ab:26:15:c9:22:8c:03:b2:9d:b2:69:
41:04:b2:e9:62:15:bd:c9:8e:d8:b3:5c:e4:11:a8:
7b:7e:59:ef:72:da:28:1b:e4:80:33:24:91:99:66:
78:c0:6e:40:83:aa:d5:25:02:c1:dc:00:cc:c5:3c:
da:d0:04:36:bc:80:6b:58:87:fb:13:ad:8b:1b:6a:
42:da:8e:a2:d1:f0:18:e5:31:5a:e4:92:6b:e2:f6:
9c:3b:45:54:89:e5:28:4f:ab:50:90:00:79:f3:09:
e7:12:4b:6b:26:ea:04:7b:7c:15:2c:ed:ce:82:02:
31:92:31:12:f0:a6:7c:19:3b:19:ed:56:63:d2:9b:
ae:cb:d1:20:99:ae:35:76:33:2a:ec:fb:64:67:38:
3e:fa:66:f2:ef:54:bf:ba:54:45:ea:7e:84:e8:39:
9d:1f:01:05:57:3b:52:36:f7:9e:7f:41:5b:d5:fb:
e2:26:33:48:a0:77:c1:93:51:b0:5f:e5:e4:f1:8a:
81:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
19:55:FC:49:26:B1:8C:91:67:67:30:19:F0:4B:CD:15:32:D3:95:F9
X509v3 Authority Key Identifier:
keyid:D2:1A:59:40:72:2B:20:7B:29:D9:5A:6C:81:BE:0D:2B:F4:D4:10:CC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0hpZQHIrIHsp2Vpsgb4NK_TUEMw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/48/56433a-0a70-4eae-9f9d-8cfbdb799284/1/0hpZQHIrIHsp2Vpsgb4NK_TUEMw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/48/56433a-0a70-4eae-9f9d-8cfbdb799284/1/0hpZQHIrIHsp2Vpsgb4NK_TUEMw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
70:c6:01:08:6d:58:8c:fc:f2:a7:15:8d:4d:01:6e:fd:51:07:
bd:75:4c:d0:3a:b9:0a:ed:9c:f4:91:b8:7e:72:f1:24:fe:26:
0d:4e:36:cb:39:7b:ab:20:f4:6a:e5:66:e2:d0:95:8e:53:2a:
a4:5b:4b:93:ed:ec:66:f3:92:0d:81:26:63:77:d4:3c:1a:9b:
66:c4:07:8e:61:4f:77:7b:b5:38:e8:0a:82:75:15:13:57:70:
79:ec:1d:ec:48:a1:64:0a:c4:29:4b:d4:fb:35:9f:8b:23:79:
5b:26:14:b3:56:a9:7e:99:ff:20:14:9d:2d:56:fe:7a:53:3c:
fd:f7:4b:ca:ff:b6:0b:7a:72:b3:22:cf:4f:dd:69:2d:b7:a8:
7a:ab:12:b5:71:9e:76:16:0e:97:95:0a:99:0e:d7:43:9a:da:
11:6d:f1:f9:f1:5f:dc:d7:74:51:8d:48:d1:51:3f:ce:00:36:
b0:27:39:6a:9e:55:1f:bc:a3:86:f3:3c:d6:91:ba:ae:1a:e0:
93:41:4a:f1:d3:da:be:bc:d3:e1:3a:36:7f:f1:a4:db:ce:9c:
6e:88:37:1a:f2:cc:cb:f5:4a:37:34:8e:7a:44:86:c4:08:a1:
3c:fc:a2:b2:be:28:54:31:49:57:c7:a8:e5:61:c8:b5:31:fb:
85:c9:82:37
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 29 04:44:39 2025 by rpki-client