Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7a/64666e-af1b-4118-823d-5de99a52aa39/1/0m5FOPHd6nf1c5a7k7kH8VLfaXw.mft
File: 0m5FOPHd6nf1c5a7k7kH8VLfaXw.mft (raw, json)
Hash identifier: fKsr+9UZ7naQbLXLzNnX8lQ7u4lAWX/FCMaaRprA84o=
Subject key identifier: B1:34:19:9F:2D:49:DA:5B:ED:A2:A6:60:DE:1C:97:8B:F7:B2:87:FE
Authority key identifier: D2:6E:45:38:F1:DD:EA:77:F5:73:96:BB:93:B9:07:F1:52:DF:69:7C
Certificate issuer: /CN=d26e4538f1ddea77f57396bb93b907f152df697c
Certificate serial: 0196771ED75056224ACBD952EBB29A1DF54D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0m5FOPHd6nf1c5a7k7kH8VLfaXw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7a/64666e-af1b-4118-823d-5de99a52aa39/1/0m5FOPHd6nf1c5a7k7kH8VLfaXw.mft
Manifest number: 02F8
Signing time: Sun 27 Apr 2025 12:00:31 +0000
Manifest this update: Sun 27 Apr 2025 12:00:31 +0000
Manifest next update: Mon 28 Apr 2025 12:00:31 +0000
Files and hashes: 1: 0m5FOPHd6nf1c5a7k7kH8VLfaXw.crl (hash: OaAubw7ySDa4HcFyFqlylaEUiCz2H30+FaAY+a3L7q4=)
2: NJkr6UX1dyZbz9hAAHSEva9N1dU.roa (hash: dH1+iQ8jrIWNeK4bcaaw6PWPrPpzci2xfb2T6H4KeWY=)
3: nh7sfAMY2Tccb18ce2fpxnrtx8Q.roa (hash: b96JAOO8n31SIeeTv1ll8vmQplePANc0Xbj3yOfw8j0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7a/64666e-af1b-4118-823d-5de99a52aa39/1/0m5FOPHd6nf1c5a7k7kH8VLfaXw.crl
rsync://rpki.ripe.net/repository/DEFAULT/7a/64666e-af1b-4118-823d-5de99a52aa39/1/0m5FOPHd6nf1c5a7k7kH8VLfaXw.mft
rsync://rpki.ripe.net/repository/DEFAULT/0m5FOPHd6nf1c5a7k7kH8VLfaXw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Apr 2025 12:00:31 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:77:1e:d7:50:56:22:4a:cb:d9:52:eb:b2:9a:1d:f5:4d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d26e4538f1ddea77f57396bb93b907f152df697c
Validity
Not Before: Apr 27 12:00:31 2025 GMT
Not After : Apr 28 12:00:31 2025 GMT
Subject: CN=b134199f2d49da5beda2a660de1c978bf7b287fe
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:19:b3:6d:c9:b6:a8:9c:35:44:d2:20:98:52:
14:00:36:69:0e:0c:d0:31:d7:e5:98:b7:41:5f:fa:
81:a3:4b:85:e1:a8:c5:18:69:b3:5b:8e:b4:65:83:
16:b2:05:ee:aa:b8:2b:10:90:05:df:4d:ba:e7:df:
ea:5f:76:17:cb:cc:97:b5:f8:d9:ca:bf:69:2a:d4:
e3:cd:60:26:3a:12:03:7e:1e:39:58:d2:76:99:92:
c4:a0:71:50:53:aa:3d:e3:e5:13:39:fd:89:40:36:
9c:e9:22:a8:0b:66:82:bd:c9:5c:61:f8:9c:4b:4b:
16:ed:d8:54:81:d8:c0:a6:48:96:89:bd:95:5a:28:
47:5a:05:b3:e1:e9:16:a3:9b:c0:76:ee:ed:5c:73:
6c:e8:50:ea:5d:a3:15:a5:8a:0a:d1:e5:d9:57:d1:
a0:97:a0:03:36:47:a8:a5:c3:0c:8c:36:48:b9:52:
2c:70:3e:2a:5e:d2:44:66:95:4d:47:fb:ef:0c:8c:
55:b2:c3:e7:52:4c:47:e9:13:cb:d7:91:3d:5c:83:
b9:f3:ac:2c:d9:72:94:4e:de:65:e9:0e:5c:b5:23:
3c:cb:18:72:bb:2e:5e:68:55:dd:52:de:06:ac:33:
7c:31:93:1b:0d:25:59:f3:12:10:e4:de:db:30:13:
80:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B1:34:19:9F:2D:49:DA:5B:ED:A2:A6:60:DE:1C:97:8B:F7:B2:87:FE
X509v3 Authority Key Identifier:
keyid:D2:6E:45:38:F1:DD:EA:77:F5:73:96:BB:93:B9:07:F1:52:DF:69:7C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0m5FOPHd6nf1c5a7k7kH8VLfaXw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7a/64666e-af1b-4118-823d-5de99a52aa39/1/0m5FOPHd6nf1c5a7k7kH8VLfaXw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7a/64666e-af1b-4118-823d-5de99a52aa39/1/0m5FOPHd6nf1c5a7k7kH8VLfaXw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
58:b4:59:f3:f2:e3:95:27:aa:35:6d:f7:2b:99:ba:c1:76:52:
43:aa:e5:29:4a:d7:f1:42:47:25:4a:0d:a1:87:ce:75:ae:69:
0c:f0:3b:b2:cc:ef:b2:72:6f:03:78:17:23:ed:6c:62:81:10:
e8:02:4c:ef:af:85:8c:09:49:86:11:aa:89:60:32:59:11:f3:
2f:c7:8d:98:d0:f5:ae:a2:7d:43:b8:e9:74:5a:5b:e6:8c:50:
76:50:40:e0:bf:12:4a:f7:df:19:72:e7:7d:aa:07:34:0f:b2:
60:4d:4e:e1:d0:89:c5:8a:3b:98:94:62:db:3c:0b:c2:05:45:
b0:42:d0:f1:4d:5c:62:e0:44:9a:e7:89:28:03:c2:9d:5b:50:
e3:28:aa:f8:c0:74:52:42:02:a6:0a:47:5e:29:9e:cf:50:87:
d9:91:3b:dc:f7:0f:0a:de:54:51:9a:34:7b:a4:2f:cb:b5:58:
c3:f1:db:c4:7a:20:57:47:aa:63:4e:fe:6a:aa:41:8d:d6:a1:
6a:ee:0e:b6:43:59:bc:fb:e2:94:da:8c:e4:d4:40:65:5e:71:
5b:20:07:a6:f9:1f:e4:f6:77:36:0d:d1:9e:8f:9a:5e:cf:6c:
a5:0d:0c:1e:19:8a:74:d4:d6:57:c3:e7:17:d9:13:81:ab:01:
a0:ec:36:e9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 20:20:32 2025 by rpki-client