Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4b/575bef-970a-4b37-b12e-1eecd585db8c/1/0S1NL7dadVmiD3lUjEWFQv0Kmkw.mft
File: 0S1NL7dadVmiD3lUjEWFQv0Kmkw.mft (raw, json)
Hash identifier: mkM7GcQ38iZQc17HhXrFQzoAsda9IZDL1ZiV3A6ZE6Q=
Subject key identifier: 79:8D:E0:0A:AB:42:84:98:F4:AD:BE:B9:6F:7B:AC:5E:0F:4C:88:52
Authority key identifier: D1:2D:4D:2F:B7:5A:75:59:A2:0F:79:54:8C:45:85:42:FD:0A:9A:4C
Certificate issuer: /CN=d12d4d2fb75a7559a20f79548c458542fd0a9a4c
Certificate serial: 019672667A49D702D580A199CBA290E9480C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0S1NL7dadVmiD3lUjEWFQv0Kmkw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4b/575bef-970a-4b37-b12e-1eecd585db8c/1/0S1NL7dadVmiD3lUjEWFQv0Kmkw.mft
Manifest number: 1233
Signing time: Sat 26 Apr 2025 14:00:40 +0000
Manifest this update: Sat 26 Apr 2025 14:00:40 +0000
Manifest next update: Sun 27 Apr 2025 14:00:40 +0000
Files and hashes: 1: 0S1NL7dadVmiD3lUjEWFQv0Kmkw.crl (hash: dScGs1uh8z7Z9eRwIcmJHSdJBbQ3OgA4RweGxpDCDSo=)
2: KqC_P0HJkM92_lcS0Jpa0USOEVs.roa (hash: KV6dI03WkVzxAgFRttiw4LQ06BXsoXy1LKrixgsu660=)
3: qufcdPSdEtDaFtrISHEdLWv3S2M.roa (hash: T2dPM9R1QKb1KXwCc1Gtxp+rTdBsb2KAhbC/WGxf99k=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4b/575bef-970a-4b37-b12e-1eecd585db8c/1/0S1NL7dadVmiD3lUjEWFQv0Kmkw.crl
rsync://rpki.ripe.net/repository/DEFAULT/4b/575bef-970a-4b37-b12e-1eecd585db8c/1/0S1NL7dadVmiD3lUjEWFQv0Kmkw.mft
rsync://rpki.ripe.net/repository/DEFAULT/0S1NL7dadVmiD3lUjEWFQv0Kmkw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Apr 2025 11:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:72:66:7a:49:d7:02:d5:80:a1:99:cb:a2:90:e9:48:0c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d12d4d2fb75a7559a20f79548c458542fd0a9a4c
Validity
Not Before: Apr 26 14:00:40 2025 GMT
Not After : Apr 27 14:00:40 2025 GMT
Subject: CN=798de00aab428498f4adbeb96f7bac5e0f4c8852
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:44:3c:a6:ae:45:e4:75:2b:b3:a9:a7:c1:03:
f2:fe:12:07:21:1d:e3:e0:d8:00:2f:62:21:50:af:
bd:5e:1f:e7:dd:10:f3:b3:d1:40:c2:f4:81:10:bf:
e1:9d:b6:71:cc:a7:a9:3e:b3:e1:c7:d7:fc:cd:41:
ba:aa:c8:3e:49:c6:9f:e5:22:50:76:8f:b7:66:ff:
0b:6f:6c:c3:a6:0e:88:38:05:60:54:23:bd:79:b6:
a0:15:ef:60:f9:d6:24:50:c0:8b:f9:af:df:d4:82:
47:3a:41:26:9e:ee:52:1d:ca:51:44:5e:85:f0:10:
49:83:dd:94:46:da:31:64:21:18:59:48:f3:b2:c0:
f1:80:91:70:43:d5:07:43:2a:b4:71:fb:94:1e:09:
b0:67:37:c5:70:68:da:59:c8:4b:4d:e1:2f:cd:55:
13:96:c2:f9:e5:69:51:f7:e8:b9:69:a9:04:f3:ca:
a8:3d:ac:d2:8e:6e:fd:4e:f6:74:4c:8e:02:4c:48:
17:90:ba:7e:2f:98:75:dd:c3:7b:5f:cd:1b:4a:cf:
97:63:19:5f:53:33:a2:8d:1e:63:02:67:a7:3f:28:
07:e1:3b:48:cd:59:d9:47:db:cf:0d:1f:89:96:98:
a3:31:43:90:f7:27:45:5d:4e:c6:e8:8a:e8:8f:c8:
db:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
79:8D:E0:0A:AB:42:84:98:F4:AD:BE:B9:6F:7B:AC:5E:0F:4C:88:52
X509v3 Authority Key Identifier:
keyid:D1:2D:4D:2F:B7:5A:75:59:A2:0F:79:54:8C:45:85:42:FD:0A:9A:4C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0S1NL7dadVmiD3lUjEWFQv0Kmkw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4b/575bef-970a-4b37-b12e-1eecd585db8c/1/0S1NL7dadVmiD3lUjEWFQv0Kmkw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4b/575bef-970a-4b37-b12e-1eecd585db8c/1/0S1NL7dadVmiD3lUjEWFQv0Kmkw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6a:c8:a4:ee:59:b0:78:f2:e3:a8:48:c8:3e:52:cd:60:92:ae:
9c:f6:fd:8b:af:08:ba:99:0b:a8:43:69:1a:f5:6c:49:e1:85:
0e:1b:40:2e:5c:d3:5e:9d:0c:6e:eb:3c:e9:de:99:be:de:60:
ac:83:1c:d0:0a:ae:ad:1f:11:6c:d8:5c:84:37:2a:19:7a:8c:
0e:69:89:d5:22:69:a3:e8:2d:cd:45:ca:64:5b:9d:9a:b6:02:
f7:84:4d:30:e8:9e:ed:f2:63:dd:79:b9:11:61:11:24:fd:81:
ed:16:af:cc:c7:96:c2:a3:56:ca:dd:3e:c7:12:91:9c:1b:f9:
f3:e2:f3:f8:62:7c:7b:2e:b3:75:07:63:9f:2f:ee:96:d5:5c:
20:79:57:54:0b:96:d8:35:96:cf:de:01:ca:62:a2:fb:0b:75:
65:5c:76:4f:d1:1c:7f:79:24:b2:cd:b9:b0:b9:27:26:bb:02:
77:67:24:a2:dc:ae:23:13:d8:97:2f:07:6b:6b:54:4e:e2:01:
ef:6e:46:8b:e3:a8:f1:10:c6:28:04:41:39:60:67:d5:3f:6e:
c7:1d:a2:a0:cd:34:8c:79:da:b9:2b:78:d2:a4:bf:25:ce:a1:
31:4d:fe:33:73:b1:72:92:da:4f:77:6e:27:d4:97:28:3e:a1:
e2:ea:42:e7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 19:06:03 2025 by rpki-client