Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8c/e8f452-be70-4176-9da0-e689bf57dd27/1/0AQf95gDebeYBJJWho3_OYGcJgQ.mft
File: 0AQf95gDebeYBJJWho3_OYGcJgQ.mft (raw, json)
Hash identifier: Z38SHnFj5y3/S9wBiy5AY6c2agEaQW2AYXZEPO57ZDs=
Subject key identifier: E4:3D:79:F9:2E:DD:81:FA:C4:AF:4E:03:9C:3C:DB:A2:F5:D3:00:47
Authority key identifier: D0:04:1F:F7:98:03:79:B7:98:04:92:56:86:8D:FF:39:81:9C:26:04
Certificate issuer: /CN=d0041ff7980379b798049256868dff39819c2604
Certificate serial: 0196AE0E35F9A7F732BF7ABADAA56552BB59
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0AQf95gDebeYBJJWho3_OYGcJgQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8c/e8f452-be70-4176-9da0-e689bf57dd27/1/0AQf95gDebeYBJJWho3_OYGcJgQ.mft
Manifest number: 1130
Signing time: Thu 08 May 2025 04:01:28 +0000
Manifest this update: Thu 08 May 2025 04:01:28 +0000
Manifest next update: Fri 09 May 2025 04:01:28 +0000
Files and hashes: 1: 0AQf95gDebeYBJJWho3_OYGcJgQ.crl (hash: XWV30pdXbQ7xG/ayeqD47XCJ0jGxaDSS0gxKYZ/ysp8=)
2: M3dHm9GHrYD8lQS4ksiSXCNoje4.roa (hash: Nu6oMe2kKfWTDbq3VinP98dNG8A/F9K2WRgisYnSNqE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8c/e8f452-be70-4176-9da0-e689bf57dd27/1/0AQf95gDebeYBJJWho3_OYGcJgQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/8c/e8f452-be70-4176-9da0-e689bf57dd27/1/0AQf95gDebeYBJJWho3_OYGcJgQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/0AQf95gDebeYBJJWho3_OYGcJgQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 08 May 2025 22:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:ae:0e:35:f9:a7:f7:32:bf:7a:ba:da:a5:65:52:bb:59
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d0041ff7980379b798049256868dff39819c2604
Validity
Not Before: May 8 04:01:28 2025 GMT
Not After : May 9 04:01:28 2025 GMT
Subject: CN=e43d79f92edd81fac4af4e039c3cdba2f5d30047
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:16:ad:8e:f0:3d:76:07:39:f3:09:1b:b1:6b:
f1:19:28:f3:22:87:68:30:36:55:7a:2a:c8:6e:f0:
50:52:29:34:94:08:bb:9e:ce:59:4f:73:8b:2a:59:
da:73:98:2b:2d:aa:17:9e:76:b2:12:f6:ea:68:83:
2e:a9:fb:40:1b:fc:4a:cb:2b:7b:08:e1:8b:e8:a8:
9b:b8:3d:b9:12:2b:06:4b:ad:de:45:dd:6f:01:ba:
eb:ef:be:2c:09:9b:33:a5:73:80:ec:c5:16:6d:ca:
6a:8b:3a:f1:1f:8e:ce:42:c7:d1:4d:e4:3c:7f:98:
1f:c3:a5:52:c5:34:90:09:76:ea:4f:26:81:7f:72:
d2:27:42:5d:7e:7e:08:c0:75:e6:c4:00:f5:d9:b7:
f0:da:64:1c:a3:18:d1:2d:8c:d8:40:af:55:09:95:
9b:8f:f5:a5:fd:56:02:a7:01:1b:33:20:85:ca:26:
b5:12:c5:96:71:4c:2d:f1:61:c7:88:e6:f2:fa:9f:
71:af:b1:19:ab:91:37:b8:62:8e:5a:bd:e9:b8:9e:
c4:1d:70:ca:93:1b:3f:4f:94:6d:fe:de:9c:3d:98:
88:83:dc:d1:7a:29:37:63:6c:f7:78:57:aa:c3:29:
1a:31:1a:12:64:53:a7:b2:d1:e2:c5:2d:8a:39:99:
c8:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E4:3D:79:F9:2E:DD:81:FA:C4:AF:4E:03:9C:3C:DB:A2:F5:D3:00:47
X509v3 Authority Key Identifier:
keyid:D0:04:1F:F7:98:03:79:B7:98:04:92:56:86:8D:FF:39:81:9C:26:04
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0AQf95gDebeYBJJWho3_OYGcJgQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8c/e8f452-be70-4176-9da0-e689bf57dd27/1/0AQf95gDebeYBJJWho3_OYGcJgQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8c/e8f452-be70-4176-9da0-e689bf57dd27/1/0AQf95gDebeYBJJWho3_OYGcJgQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8f:70:6a:09:6c:55:52:aa:2f:a6:16:0a:49:4e:50:52:f7:cd:
b0:5f:b9:f4:fc:36:5d:0c:45:77:ab:19:de:5a:9f:26:41:ec:
7c:be:5c:23:52:c7:9b:4a:3e:68:5b:3e:32:f9:9a:38:d6:e2:
dd:b7:58:b2:11:d9:de:b2:b2:67:e6:85:07:21:59:9e:2b:2f:
64:b3:0d:52:0a:27:ee:53:7b:92:62:5e:3e:1b:55:0f:65:3e:
80:f7:f6:a9:9a:f4:a2:9f:44:46:5b:81:31:68:a9:f3:4d:9d:
d9:64:ea:75:c8:a4:8a:3d:a3:44:05:db:b7:15:10:44:d0:07:
34:cd:8d:2f:a2:59:d0:c7:07:98:73:f5:a4:00:e7:c6:a2:6c:
71:cf:19:81:b0:ba:d1:05:16:a0:cb:3f:dd:89:c9:21:a7:89:
d8:fc:ea:8d:95:f3:a3:70:35:50:a8:c8:fa:12:2a:80:be:2d:
13:a2:12:f0:fc:a6:58:55:6f:c9:41:a7:1d:ab:24:f1:f4:66:
e7:df:eb:ca:16:31:b6:d5:12:20:27:45:fe:0a:53:74:ca:87:
e4:9b:f4:dd:c8:88:70:4e:3d:11:28:7e:9f:8e:a4:44:1c:91:
1e:70:4a:93:ff:16:6c:ff:ce:9f:f5:e6:5a:a4:83:45:b5:59:
af:6f:9e:d9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 8 08:32:44 2025 by rpki-client