Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/61/6453c4-6687-4ef9-9fdc-a88bb7805b09/1/0u9GpBNBlOckI9VyobZtSp0uTBM.mft
File: 0u9GpBNBlOckI9VyobZtSp0uTBM.mft (raw, json)
Hash identifier: b1rdQoxqLWGmXACtb6mKCBgndu3POxt3j0lnt3Nhomw=
Subject key identifier: 27:2F:AD:9A:5C:24:17:72:19:81:38:F1:FD:26:3D:0B:61:F8:C9:F7
Authority key identifier: D2:EF:46:A4:13:41:94:E7:24:23:D5:72:A1:B6:6D:4A:9D:2E:4C:13
Certificate issuer: /CN=d2ef46a4134194e72423d572a1b66d4a9d2e4c13
Certificate serial: 0196789F820AB7AA6AB0CA8F497AD06ED4B3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0u9GpBNBlOckI9VyobZtSp0uTBM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/61/6453c4-6687-4ef9-9fdc-a88bb7805b09/1/0u9GpBNBlOckI9VyobZtSp0uTBM.mft
Manifest number: 1252
Signing time: Sun 27 Apr 2025 19:00:41 +0000
Manifest this update: Sun 27 Apr 2025 19:00:41 +0000
Manifest next update: Mon 28 Apr 2025 19:00:41 +0000
Files and hashes: 1: 0u9GpBNBlOckI9VyobZtSp0uTBM.crl (hash: twW7E/7rI6zVZYgPQlpfzKPC1cueuc59CuXVf1gOn/Y=)
2: dW_FLnsv0zWikILQzBidDijXgG4.roa (hash: ma0ra8OYlImfY3CwT3NNDf0BfbTV59KzDn/miuP7r78=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/61/6453c4-6687-4ef9-9fdc-a88bb7805b09/1/0u9GpBNBlOckI9VyobZtSp0uTBM.crl
rsync://rpki.ripe.net/repository/DEFAULT/61/6453c4-6687-4ef9-9fdc-a88bb7805b09/1/0u9GpBNBlOckI9VyobZtSp0uTBM.mft
rsync://rpki.ripe.net/repository/DEFAULT/0u9GpBNBlOckI9VyobZtSp0uTBM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Apr 2025 16:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:78:9f:82:0a:b7:aa:6a:b0:ca:8f:49:7a:d0:6e:d4:b3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d2ef46a4134194e72423d572a1b66d4a9d2e4c13
Validity
Not Before: Apr 27 19:00:41 2025 GMT
Not After : Apr 28 19:00:41 2025 GMT
Subject: CN=272fad9a5c241772198138f1fd263d0b61f8c9f7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:58:3a:e5:53:72:0d:8c:64:de:20:67:33:38:
c7:dd:40:24:2e:37:7c:03:e3:e1:05:f0:32:a1:b5:
b3:f5:5c:9d:9b:ae:b8:75:c9:2f:94:26:a0:65:85:
67:4c:a0:04:84:06:a8:2d:cf:b1:aa:74:7e:e8:ad:
45:03:58:26:e6:26:b4:bc:29:4d:45:c0:ad:a7:a2:
4d:22:32:2c:c1:4e:6b:8f:8e:00:39:6e:0f:e3:c8:
5a:ed:af:da:8c:13:90:c3:11:4f:50:fe:e8:9b:17:
14:41:b0:d1:aa:f9:56:44:b7:a6:fc:3b:69:4f:92:
46:e0:5e:a9:50:e6:5c:5a:9d:61:14:31:e8:49:a4:
8b:07:90:44:37:25:f4:da:f6:bb:de:4a:74:5c:00:
59:0b:8b:07:0f:19:d1:b2:6f:b5:bf:c3:b1:a1:80:
ce:b1:0c:94:0f:06:c1:e0:fd:9e:f9:21:fa:cf:d7:
5e:88:77:1e:a3:99:88:62:72:2f:fc:05:b5:74:cf:
8e:2c:01:c2:42:9b:93:b3:e9:02:1c:0d:c3:d1:5d:
96:d3:ad:f2:11:ce:d1:4c:18:50:86:95:40:1f:97:
3f:02:4e:6e:95:24:d4:1c:3f:af:c0:b2:fa:c0:eb:
f5:ff:c6:8e:2c:48:bf:aa:90:f7:ea:ae:e9:77:1b:
99:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
27:2F:AD:9A:5C:24:17:72:19:81:38:F1:FD:26:3D:0B:61:F8:C9:F7
X509v3 Authority Key Identifier:
keyid:D2:EF:46:A4:13:41:94:E7:24:23:D5:72:A1:B6:6D:4A:9D:2E:4C:13
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0u9GpBNBlOckI9VyobZtSp0uTBM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/61/6453c4-6687-4ef9-9fdc-a88bb7805b09/1/0u9GpBNBlOckI9VyobZtSp0uTBM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/61/6453c4-6687-4ef9-9fdc-a88bb7805b09/1/0u9GpBNBlOckI9VyobZtSp0uTBM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
d6:d6:38:9b:ca:3e:07:83:77:1c:91:d4:bf:66:b9:4b:e6:19:
c1:99:f2:6c:9f:ed:e4:b8:92:0a:9a:50:42:2a:ac:df:08:18:
20:fb:fe:8c:ec:57:d4:b6:2b:6b:6b:fe:90:1a:7d:91:dc:5d:
ad:1a:81:96:5b:b3:2d:8c:42:dc:5b:13:92:14:99:86:e6:d8:
35:ed:2b:58:1b:18:1d:31:59:6d:e7:01:4f:ef:74:ae:56:f2:
e7:32:79:86:2d:1a:f9:0d:4c:dd:51:60:c3:2e:a8:f2:98:2b:
0e:de:04:da:38:fd:b3:16:b9:d7:42:18:1f:32:0e:7c:18:c3:
05:2d:9b:fc:61:3e:78:37:1d:1e:fe:b8:ac:fc:64:dc:59:69:
49:67:cd:8f:ad:24:66:1d:3e:6d:b1:89:37:dc:75:27:16:16:
25:cd:bc:fd:6b:6b:16:5b:62:55:70:97:c3:da:c1:97:34:d0:
b8:58:19:c9:4e:86:a9:db:21:7c:3a:83:c4:5c:42:25:fb:9d:
d0:d7:75:62:37:94:29:a5:26:f2:61:68:65:ea:76:0f:f0:33:
da:cb:e9:0c:8d:a7:d0:f5:d7:47:28:1f:55:64:50:0b:33:59:
8d:8d:a8:ff:b1:aa:82:01:6c:ea:86:42:6a:eb:7c:dc:9d:55:
1f:02:d1:31
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 02:52:14 2025 by rpki-client