Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/81/6914ce-66c2-4238-92b7-a2d636f325e6/1/0BE91dB1nAMAk4AUDGaOu9H5wWg.mft
File: 0BE91dB1nAMAk4AUDGaOu9H5wWg.mft (raw, json)
Hash identifier: Qesqd8ip7ktfu6tlP7Vb6Nh7HM8Bf71sYN8YMi6h2WA=
Subject key identifier: 11:BA:F7:CF:1D:EC:69:2D:C1:B8:AB:A8:C7:E5:FA:F6:7D:82:1B:6F
Authority key identifier: D0:11:3D:D5:D0:75:9C:03:00:93:80:14:0C:66:8E:BB:D1:F9:C1:68
Certificate issuer: /CN=d0113dd5d0759c03009380140c668ebbd1f9c168
Certificate serial: 019680C6E31AA1A89CAC2061306CFA0A0BFF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0BE91dB1nAMAk4AUDGaOu9H5wWg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/81/6914ce-66c2-4238-92b7-a2d636f325e6/1/0BE91dB1nAMAk4AUDGaOu9H5wWg.mft
Manifest number: 0684
Signing time: Tue 29 Apr 2025 09:00:39 +0000
Manifest this update: Tue 29 Apr 2025 09:00:39 +0000
Manifest next update: Wed 30 Apr 2025 09:00:39 +0000
Files and hashes: 1: 0BE91dB1nAMAk4AUDGaOu9H5wWg.crl (hash: J/Hglj4GOnsNsl3MN1tP8pGcDGHxfNktaprmf1lQbm8=)
2: Bx50PRq6KcDkdxbj0-_pFidcJWw.roa (hash: YY2WvnOzjX98gUiJi9jeyqU66NYG8yYekvXH8i5CTIo=)
3: U5cqWkNYnX_IKXRLiqWhPWLnj30.roa (hash: rOJ0i9MLtk8hwnYB2wL88M/HGe+Y/PZ5cxU/VSesy7g=)
4: qiRRCoLxoqoPkxabLfDyCC_ddgo.roa (hash: PHrnZaBjRsNXJj/q3wfcCyeQ30fafauER7XzOTQ6umk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/81/6914ce-66c2-4238-92b7-a2d636f325e6/1/0BE91dB1nAMAk4AUDGaOu9H5wWg.crl
rsync://rpki.ripe.net/repository/DEFAULT/81/6914ce-66c2-4238-92b7-a2d636f325e6/1/0BE91dB1nAMAk4AUDGaOu9H5wWg.mft
rsync://rpki.ripe.net/repository/DEFAULT/0BE91dB1nAMAk4AUDGaOu9H5wWg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 30 Apr 2025 09:00:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:80:c6:e3:1a:a1:a8:9c:ac:20:61:30:6c:fa:0a:0b:ff
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d0113dd5d0759c03009380140c668ebbd1f9c168
Validity
Not Before: Apr 29 09:00:39 2025 GMT
Not After : Apr 30 09:00:39 2025 GMT
Subject: CN=11baf7cf1dec692dc1b8aba8c7e5faf67d821b6f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8c:a9:29:03:10:4b:43:5b:7a:c0:bf:7f:90:5b:
9c:7c:4c:3f:6e:f9:aa:5a:3f:87:f8:98:5f:49:9f:
dd:e4:50:cc:8b:c1:bd:c5:5c:cd:4c:59:75:d9:3c:
5d:8b:57:da:6b:a7:48:e6:e8:08:0c:4f:4e:ba:c4:
cd:b6:10:fb:2b:21:12:09:e7:e2:4e:cb:8f:03:fa:
ad:b2:fa:a1:94:98:8d:47:13:5e:2a:40:ee:a5:28:
58:45:53:37:23:59:87:81:ff:46:84:68:09:aa:d1:
64:9c:66:d9:f4:b7:7b:dc:44:a2:95:58:53:f3:b8:
d0:6c:88:dd:9d:27:a3:33:cb:1b:97:63:a6:5b:92:
5d:bc:4a:84:24:34:c5:25:83:64:00:23:27:db:ea:
b5:5f:db:20:ee:ac:4e:30:b5:e5:7e:bc:e5:5d:6d:
cf:61:02:25:a9:69:fa:84:35:2b:a4:b9:e3:d9:b5:
81:5e:20:20:32:bf:3e:f8:a6:a6:cb:8f:ff:3c:67:
9c:09:a3:c4:53:b4:50:b8:f9:1d:7c:3c:70:c8:7d:
96:cb:06:53:3b:10:5c:ef:01:3d:e7:c0:f9:69:f9:
b0:31:bc:12:bd:8d:cf:5d:bd:f0:a4:a9:12:fb:e4:
b0:b5:fa:ed:da:9c:d6:5b:4c:8c:bc:ad:31:14:a3:
c0:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
11:BA:F7:CF:1D:EC:69:2D:C1:B8:AB:A8:C7:E5:FA:F6:7D:82:1B:6F
X509v3 Authority Key Identifier:
keyid:D0:11:3D:D5:D0:75:9C:03:00:93:80:14:0C:66:8E:BB:D1:F9:C1:68
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0BE91dB1nAMAk4AUDGaOu9H5wWg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/81/6914ce-66c2-4238-92b7-a2d636f325e6/1/0BE91dB1nAMAk4AUDGaOu9H5wWg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/81/6914ce-66c2-4238-92b7-a2d636f325e6/1/0BE91dB1nAMAk4AUDGaOu9H5wWg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7d:85:1a:fe:41:78:ba:8e:08:bc:f8:6a:cf:fc:2d:b0:4f:e6:
55:be:c0:97:78:60:cf:53:d3:c7:dc:2f:ae:47:93:f3:09:28:
1a:3c:3b:a3:47:ff:09:b8:24:83:f2:f6:7a:2b:f7:9b:d9:0a:
c3:98:43:5e:c2:44:a4:5b:06:57:86:cb:64:e7:ec:68:57:e6:
d0:3c:d7:3e:3b:75:dc:5a:0d:b9:91:0c:a4:60:47:0d:28:ac:
f1:0c:d3:a3:f5:b7:1a:d2:cd:f2:53:95:9e:60:b7:ed:01:c9:
ef:6c:f0:76:7d:ef:0c:92:df:4c:cb:84:b5:67:70:af:52:ae:
a5:39:ae:dd:2a:e1:e8:8a:94:0f:e7:3d:46:87:16:fd:97:51:
bc:6b:b4:a3:65:d8:bf:3f:89:ac:08:19:cf:23:30:23:7b:96:
46:43:7d:a2:a2:f1:f2:d0:13:74:b9:62:a1:ce:e5:88:fd:17:
f0:71:88:13:e3:19:5b:c7:64:6b:c5:47:16:c0:70:58:ea:d1:
14:74:c3:d1:21:67:aa:04:1b:81:d9:9f:ab:c2:22:f6:91:50:
41:f8:17:7e:f6:7e:6a:0c:dd:36:90:88:98:0a:54:99:e0:06:
89:89:7a:03:a7:fc:ec:48:ca:76:5a:63:7e:c0:4d:02:0c:6f:
1d:e2:b5:a9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 29 18:37:34 2025 by rpki-client