Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/80/730fc5-7301-4a60-86d1-7db6868d8474/1/0As3tvS0RWReaZOpxexghJJCXw4.mft
File: 0As3tvS0RWReaZOpxexghJJCXw4.mft (raw, json)
Hash identifier: 0v5oXF3MUbczkEsKNSGWuB+HK0czqkjWERwRlS10nzw=
Subject key identifier: DA:0C:94:50:60:26:F7:B9:8C:A2:9B:F4:1C:18:79:96:C8:5F:E4:40
Authority key identifier: D0:0B:37:B6:F4:B4:45:64:5E:69:93:A9:C5:EC:60:84:92:42:5F:0E
Certificate issuer: /CN=d00b37b6f4b445645e6993a9c5ec608492425f0e
Certificate serial: 019680F6F62CA104C42FD4EAC40AE182414F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0As3tvS0RWReaZOpxexghJJCXw4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/80/730fc5-7301-4a60-86d1-7db6868d8474/1/0As3tvS0RWReaZOpxexghJJCXw4.mft
Manifest number: 08B6
Signing time: Tue 29 Apr 2025 09:53:10 +0000
Manifest this update: Tue 29 Apr 2025 09:53:10 +0000
Manifest next update: Wed 30 Apr 2025 09:53:10 +0000
Files and hashes: 1: 0As3tvS0RWReaZOpxexghJJCXw4.crl (hash: lGJMMp+LyJiQkP3GjCqRyeUrDYMs79wkwr3J+ZN0r/8=)
2: 3_upC6eL_Exhj1VxezvJQ40V2IM.roa (hash: Dxr09pfEwFq4ycWS6h4E4n2qYVIrqwYkDHsZE2JN5d0=)
3: 6bHyeOEehy6z9J4cC74z4dwZNZM.roa (hash: 7kMISVfjOHaOb0aCdvVe/tfRxRtprtZa+5IWqp1XpCc=)
4: Bt-AqMlv5AGS23NSAHAOENpSz_w.roa (hash: Om38jAdn/FiagKwN0JD11FdBcj5g/guHfAWt957SB1c=)
5: CGr5yHNr-XI-4CHW-sZzCvIid9Q.roa (hash: 5ONFhg1QF43WPksHVSGaT4R+hEeMibeNW7Yj6pnVbKM=)
6: Eey_cZJG1JzbE89yJ5-3WKAQnps.roa (hash: Sd/BEYaeo7DwAgjKLvAs+URaNM8tk1wO8kSwFI5eaf8=)
7: G6xf-2_9WqQfQEDF7v7pcNM6cBg.roa (hash: hCbc2HcFchj9v9WZR4JcZ3aDEye7Ter5KkTxwI9k97k=)
8: YcTIc32XZA-ghsWcGzLeleFcTdg.roa (hash: hArIQsrZH8U5ODHNwYYROkxmUYJ8DizJuV1l/Z6DTPE=)
9: xMV0bTTXomTVa8xc0iCn0sD7g_Q.roa (hash: 43WOZICTIxPYcL8p7aD3gmAQjRkX3uJE7dpL5l+yfxk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/80/730fc5-7301-4a60-86d1-7db6868d8474/1/0As3tvS0RWReaZOpxexghJJCXw4.crl
rsync://rpki.ripe.net/repository/DEFAULT/80/730fc5-7301-4a60-86d1-7db6868d8474/1/0As3tvS0RWReaZOpxexghJJCXw4.mft
rsync://rpki.ripe.net/repository/DEFAULT/0As3tvS0RWReaZOpxexghJJCXw4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 30 Apr 2025 09:53:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:80:f6:f6:2c:a1:04:c4:2f:d4:ea:c4:0a:e1:82:41:4f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d00b37b6f4b445645e6993a9c5ec608492425f0e
Validity
Not Before: Apr 29 09:53:10 2025 GMT
Not After : Apr 30 09:53:10 2025 GMT
Subject: CN=da0c94506026f7b98ca29bf41c187996c85fe440
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:76:c5:ca:9c:91:89:f9:cc:e4:dc:ad:fa:0a:
4e:c7:46:49:18:ab:8f:ee:c5:03:04:17:34:d9:23:
20:28:52:75:9b:51:cc:f3:13:d1:c3:67:61:cc:9f:
01:5b:e4:26:dd:73:74:e6:fa:d4:0f:55:49:30:e8:
20:63:53:19:2c:5a:67:34:da:49:9c:57:0d:d7:a4:
f8:c0:2d:04:94:ab:80:82:d8:b2:49:8e:cb:94:ea:
0b:a6:f2:bf:5e:cb:cc:34:18:2e:8c:74:83:0e:66:
41:2a:41:09:73:4b:47:af:3a:13:33:ea:13:93:a8:
43:d7:fb:f7:17:48:ee:56:ba:ff:a1:47:73:ee:af:
a1:c3:6d:e5:94:97:bb:a3:ef:bc:24:15:5b:fd:b6:
48:8e:0e:ed:d6:dc:f1:06:4c:c8:c3:a2:b8:28:ce:
ac:7e:4b:6b:50:e2:1d:ac:82:73:43:73:c7:4a:44:
40:31:01:ed:62:cb:46:36:7f:20:0e:ec:5e:cf:7b:
6c:13:2e:30:1f:ba:32:13:70:42:2e:4d:1e:85:56:
f4:20:11:4d:fa:15:5a:19:f4:74:67:44:35:2b:5c:
7f:ee:cf:a4:2e:c6:ef:c6:29:58:84:bb:47:82:06:
d1:8e:16:1d:a9:47:02:e9:34:c1:b9:c0:82:1c:b4:
da:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DA:0C:94:50:60:26:F7:B9:8C:A2:9B:F4:1C:18:79:96:C8:5F:E4:40
X509v3 Authority Key Identifier:
keyid:D0:0B:37:B6:F4:B4:45:64:5E:69:93:A9:C5:EC:60:84:92:42:5F:0E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0As3tvS0RWReaZOpxexghJJCXw4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/80/730fc5-7301-4a60-86d1-7db6868d8474/1/0As3tvS0RWReaZOpxexghJJCXw4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/80/730fc5-7301-4a60-86d1-7db6868d8474/1/0As3tvS0RWReaZOpxexghJJCXw4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
54:7b:ec:98:d1:19:8c:e7:f7:90:0a:0f:bb:56:22:31:cc:41:
44:65:cb:59:a7:f8:6f:b8:17:63:fc:15:87:e8:e1:d8:b1:bf:
75:74:ff:95:72:31:ef:92:34:80:d2:4a:52:3a:4f:f8:5b:38:
d0:f2:5a:7a:3a:0c:f6:34:df:1c:ab:55:89:03:cf:80:64:c8:
ec:f2:1c:c6:75:7b:21:fb:17:d3:47:ec:3d:51:2a:3f:56:7e:
d8:0c:31:60:2a:99:9a:c8:e7:6f:b2:a5:25:aa:02:a4:47:5a:
42:1f:06:c9:e9:83:7d:b4:fc:f4:60:1d:91:a7:a2:49:72:6d:
4e:00:dc:b9:79:4f:1c:1e:57:e5:97:96:ef:78:12:35:17:84:
c6:c1:32:c8:1c:ef:b0:e4:af:e4:70:67:6d:bf:fd:cf:e4:4a:
07:ba:fb:7e:ad:26:ca:ee:0b:aa:28:7a:e2:b8:61:14:dd:8a:
1a:a4:d0:a0:83:30:51:bc:9d:d2:f1:29:58:1a:95:45:a0:61:
f1:29:03:47:34:bd:ac:a2:65:31:3d:7a:a7:4c:9c:6c:69:dc:
48:21:8e:2f:44:30:1d:68:33:f0:a2:e0:b1:58:45:a6:1c:15:
f2:59:82:26:fa:50:76:33:2d:5c:ee:ba:76:43:f0:ae:75:66:
1c:30:3c:df
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 29 16:59:31 2025 by rpki-client