Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/53/ec23cc-da5a-4d2b-95d9-7db3ec6fa302/1/0QOvGXZFpJQcbNsIZprwCLeRAr4.mft
File: 0QOvGXZFpJQcbNsIZprwCLeRAr4.mft (raw, json)
Hash identifier: q/dlxlmeEbV6tAizu2fNVF9u06UhG7cWUGE93ggwWXM=
Subject key identifier: A3:FC:A6:3E:5C:A3:8A:2F:93:35:B5:B3:47:68:3B:EA:43:71:BD:57
Authority key identifier: D1:03:AF:19:76:45:A4:94:1C:6C:DB:08:66:9A:F0:08:B7:91:02:BE
Certificate issuer: /CN=d103af197645a4941c6cdb08669af008b79102be
Certificate serial: 019681A2CCDBF9443F42D0983B7E72CF0377
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0QOvGXZFpJQcbNsIZprwCLeRAr4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/53/ec23cc-da5a-4d2b-95d9-7db3ec6fa302/1/0QOvGXZFpJQcbNsIZprwCLeRAr4.mft
Manifest number: 0E86
Signing time: Tue 29 Apr 2025 13:00:52 +0000
Manifest this update: Tue 29 Apr 2025 13:00:52 +0000
Manifest next update: Wed 30 Apr 2025 13:00:52 +0000
Files and hashes: 1: 0QOvGXZFpJQcbNsIZprwCLeRAr4.crl (hash: fSXWuJ9ydQNMzPHwCERyP6T8MkIJbPwnBQPs8Ul6pkE=)
2: Ns-TL5URBIXkWjSrsIX0f-jA8r8.roa (hash: rkMxs94A3zqfZql4p2TlDjcRtvwJLskmzewtRu09cI8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/53/ec23cc-da5a-4d2b-95d9-7db3ec6fa302/1/0QOvGXZFpJQcbNsIZprwCLeRAr4.crl
rsync://rpki.ripe.net/repository/DEFAULT/53/ec23cc-da5a-4d2b-95d9-7db3ec6fa302/1/0QOvGXZFpJQcbNsIZprwCLeRAr4.mft
rsync://rpki.ripe.net/repository/DEFAULT/0QOvGXZFpJQcbNsIZprwCLeRAr4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 30 Apr 2025 13:00:52 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:81:a2:cc:db:f9:44:3f:42:d0:98:3b:7e:72:cf:03:77
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d103af197645a4941c6cdb08669af008b79102be
Validity
Not Before: Apr 29 13:00:52 2025 GMT
Not After : Apr 30 13:00:52 2025 GMT
Subject: CN=a3fca63e5ca38a2f9335b5b347683bea4371bd57
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:e3:29:1c:8f:3e:9e:f9:39:96:37:a1:96:6c:
91:ba:96:81:e3:c7:09:c7:b8:9c:1c:ad:28:53:e5:
5f:ad:5c:ab:1b:8e:f8:2a:e2:5a:35:1e:3e:a3:ff:
5b:84:2b:e5:ce:41:56:09:6a:fb:bd:a8:2b:f9:5d:
53:5a:06:24:14:72:cc:51:8b:8c:ea:02:87:f4:3a:
f3:e4:86:ee:64:54:76:5d:ee:eb:19:b6:f4:53:4c:
c0:9f:1f:69:0a:73:5f:cd:80:b6:58:44:61:82:a6:
4a:40:d8:f9:68:50:7c:9d:45:3b:16:51:a6:d8:7f:
8c:6a:ff:c1:fc:79:36:21:fd:7c:3e:36:0c:53:13:
d7:57:8a:88:cb:b0:b7:66:08:12:0e:fe:2f:fe:d1:
0a:22:d0:30:de:35:44:e8:9b:21:6d:5b:26:33:e4:
b9:bb:dc:73:88:cf:ee:31:a7:c3:ec:96:ed:24:be:
b3:88:8d:46:9c:4c:d2:49:10:44:66:bb:bb:55:b1:
c2:1f:72:f8:4b:9f:b0:90:b3:1f:7a:8f:84:42:1b:
fd:24:53:72:2c:db:8e:a2:03:d8:bd:82:72:94:e4:
5f:4a:76:18:6c:5d:ab:f3:bb:a5:b6:6f:76:43:ab:
bc:64:7f:ff:99:a0:20:ea:83:c5:e5:d8:05:1f:cd:
ee:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A3:FC:A6:3E:5C:A3:8A:2F:93:35:B5:B3:47:68:3B:EA:43:71:BD:57
X509v3 Authority Key Identifier:
keyid:D1:03:AF:19:76:45:A4:94:1C:6C:DB:08:66:9A:F0:08:B7:91:02:BE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0QOvGXZFpJQcbNsIZprwCLeRAr4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/53/ec23cc-da5a-4d2b-95d9-7db3ec6fa302/1/0QOvGXZFpJQcbNsIZprwCLeRAr4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/53/ec23cc-da5a-4d2b-95d9-7db3ec6fa302/1/0QOvGXZFpJQcbNsIZprwCLeRAr4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6a:0b:89:18:6a:86:36:41:fe:c4:20:e7:32:7f:70:1c:2e:c9:
11:46:55:a3:7d:29:d0:35:2c:04:15:d6:f1:c3:9d:2b:b6:53:
bd:d2:7b:44:fc:a2:fa:d2:fa:49:67:0a:15:8d:29:f6:af:15:
c8:d9:8c:a3:2d:f8:a0:a6:9b:32:57:03:39:d2:8e:f1:10:e2:
88:db:d0:99:31:8d:24:c7:c3:46:43:59:fc:1a:3d:45:36:c4:
b1:e1:63:34:b4:a1:c8:03:21:95:ca:60:82:f7:ce:e5:5c:2b:
e0:42:f3:0b:4c:ea:51:a6:1a:cd:b6:0b:8d:c7:98:23:24:2f:
2a:19:97:cd:56:08:a8:d0:4a:70:28:3a:b0:7f:01:85:45:8c:
29:ef:c9:92:1f:dc:69:30:5d:36:54:79:61:5a:3b:d2:96:1a:
4a:7b:c2:29:df:74:19:7a:7b:7b:e7:be:2b:5e:0b:20:b2:5d:
9d:23:91:5e:f9:27:56:62:7c:fe:12:46:10:76:79:e8:24:5a:
de:91:3b:47:d5:6f:b0:33:2f:06:c9:fa:6d:e4:29:48:3e:dd:
4f:71:24:7e:03:4c:4c:b3:4e:13:e9:60:eb:a9:99:96:fa:74:
f6:88:a8:68:4d:0e:e6:15:46:78:03:15:b7:4e:86:33:2f:e8:
fb:ba:93:1a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 29 20:17:19 2025 by rpki-client