Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/60/8e3f7b-c78f-4663-bf1d-f5dbdf722f5d/1/r-o5b03jVdqNwHmh6IXgwzdezjI.mft
File: r-o5b03jVdqNwHmh6IXgwzdezjI.mft (raw, json)
Hash identifier: E7P1om4d8NIHVNbS4lRerBV2THoKaiEPMRCuqJp/RFw=
Subject key identifier: 0B:19:9E:36:B0:EE:25:5C:3E:5F:62:BB:93:84:C4:F7:6B:3C:9B:E6
Authority key identifier: AF:EA:39:6F:4D:E3:55:DA:8D:C0:79:A1:E8:85:E0:C3:37:5E:CE:32
Certificate issuer: /CN=afea396f4de355da8dc079a1e885e0c3375ece32
Certificate serial: 01967A8DFF26D20A97EC4D2276832A962F3D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/r-o5b03jVdqNwHmh6IXgwzdezjI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/60/8e3f7b-c78f-4663-bf1d-f5dbdf722f5d/1/r-o5b03jVdqNwHmh6IXgwzdezjI.mft
Manifest number: 1511
Signing time: Mon 28 Apr 2025 04:00:48 +0000
Manifest this update: Mon 28 Apr 2025 04:00:48 +0000
Manifest next update: Tue 29 Apr 2025 04:00:48 +0000
Files and hashes: 1: acvvT5q-PVeUjsCLlPVuoTE00po.roa (hash: MQoBLU//Irn0dEBmlINyAJ8ehIRD+2s0D9hVDHRZB5A=)
2: r-o5b03jVdqNwHmh6IXgwzdezjI.crl (hash: /YJAvUzDfGSAp6+k4MG5U6PD4tPzwVb7sg1r4lSmbAQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/60/8e3f7b-c78f-4663-bf1d-f5dbdf722f5d/1/r-o5b03jVdqNwHmh6IXgwzdezjI.crl
rsync://rpki.ripe.net/repository/DEFAULT/60/8e3f7b-c78f-4663-bf1d-f5dbdf722f5d/1/r-o5b03jVdqNwHmh6IXgwzdezjI.mft
rsync://rpki.ripe.net/repository/DEFAULT/r-o5b03jVdqNwHmh6IXgwzdezjI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Apr 2025 23:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:7a:8d:ff:26:d2:0a:97:ec:4d:22:76:83:2a:96:2f:3d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=afea396f4de355da8dc079a1e885e0c3375ece32
Validity
Not Before: Apr 28 04:00:48 2025 GMT
Not After : Apr 29 04:00:48 2025 GMT
Subject: CN=0b199e36b0ee255c3e5f62bb9384c4f76b3c9be6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:e7:11:91:5b:02:df:9f:71:4d:c4:bf:b0:e7:
ca:06:95:a3:23:73:53:2f:20:d4:44:d1:45:9d:50:
89:33:6d:78:7b:d9:2c:b5:6b:6f:a1:47:78:b6:88:
0e:6a:f0:91:2d:a7:40:7b:27:b2:72:1a:9b:53:1c:
b0:dc:f2:f5:83:06:1e:6d:8d:24:d4:ec:3f:bb:9a:
fb:f0:ac:c3:78:1f:b2:0e:cb:55:ba:d4:ab:0b:56:
4b:11:71:17:ad:d4:20:cb:e8:3c:96:6d:77:2f:d9:
bd:6a:86:66:93:6f:46:ec:60:2b:17:b5:00:c2:d9:
f9:b4:c3:6f:d4:62:3d:5d:8d:75:cb:80:60:73:1b:
8d:81:f8:33:67:4c:c5:8f:94:22:b2:6c:79:43:44:
4b:b2:23:4c:a0:23:41:f1:3c:4d:c8:ef:f9:20:e3:
f2:e8:b0:52:84:aa:0f:ee:f1:a4:d0:fa:3d:08:36:
3b:65:03:79:72:3e:99:62:18:dd:79:88:f7:60:d9:
f5:a4:e2:eb:8d:1f:4f:f8:22:11:3a:28:3c:f9:5d:
d8:a8:7d:41:f3:11:49:dd:67:7c:ac:69:c3:a4:ba:
25:61:e9:59:d3:58:9f:fc:ad:6a:74:e8:73:1d:4d:
42:20:06:d1:3d:32:0d:32:34:21:bc:8b:db:33:a0:
95:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0B:19:9E:36:B0:EE:25:5C:3E:5F:62:BB:93:84:C4:F7:6B:3C:9B:E6
X509v3 Authority Key Identifier:
keyid:AF:EA:39:6F:4D:E3:55:DA:8D:C0:79:A1:E8:85:E0:C3:37:5E:CE:32
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/r-o5b03jVdqNwHmh6IXgwzdezjI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/60/8e3f7b-c78f-4663-bf1d-f5dbdf722f5d/1/r-o5b03jVdqNwHmh6IXgwzdezjI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/60/8e3f7b-c78f-4663-bf1d-f5dbdf722f5d/1/r-o5b03jVdqNwHmh6IXgwzdezjI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
26:89:d0:d2:1d:1d:38:d4:12:4a:3e:f0:5a:a9:9f:86:41:52:
a3:2b:96:33:dc:04:a7:0c:01:ff:28:db:46:e2:86:89:56:71:
cb:f4:ee:a9:38:d3:01:6a:c2:56:06:a2:b7:b9:1b:7b:12:69:
82:36:c8:5b:f8:0f:7e:62:99:63:d5:fb:9e:3c:58:3c:de:d6:
53:58:76:54:b0:ff:00:0e:2a:bc:d2:6c:c2:f6:dd:18:94:da:
cf:95:5b:d4:21:d5:0b:8b:dc:2a:fb:0c:28:1f:e1:af:34:0f:
24:9a:66:0d:33:cd:16:46:7b:46:da:8a:52:ae:90:4c:33:b6:
67:a8:72:87:c4:81:9f:18:84:26:97:29:05:af:93:d4:0d:57:
d1:55:25:81:27:ec:d4:ea:d1:0c:1d:4b:cb:7a:cd:05:5e:e7:
5f:41:2a:e5:aa:9b:95:c0:7c:20:16:af:54:a3:a7:81:a9:63:
10:b2:aa:8d:7d:56:cc:13:a1:5b:03:3e:53:5d:da:7b:67:a7:
bd:e5:e8:20:eb:78:af:b2:63:11:bf:e1:57:ad:f0:e5:37:5e:
53:83:7b:37:be:25:f8:cd:aa:b0:b1:3f:a1:79:2d:43:a3:ed:
cd:46:69:cf:75:78:fc:0b:8c:ae:a9:8c:94:70:45:92:8b:c6:
3c:86:6c:8b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 06:09:45 2025 by rpki-client