Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/92/c62e0c-4454-43c8-97bc-81674d953d56/1/B9oznlzTwb4CzmgCoEIYVqoLVHs.mft
File: B9oznlzTwb4CzmgCoEIYVqoLVHs.mft (raw, json)
Hash identifier: 0vBXO8zgHCoouz+asnqTRXF8QignfdaKrV5l/R5aPv8=
Subject key identifier: AB:4A:CD:29:0F:BE:83:80:70:4E:16:A1:30:65:E3:C6:FE:B1:CE:98
Authority key identifier: 07:DA:33:9E:5C:D3:C1:BE:02:CE:68:02:A0:42:18:56:AA:0B:54:7B
Certificate issuer: /CN=07da339e5cd3c1be02ce6802a0421856aa0b547b
Certificate serial: 019687DBE26E1C2A49091A2D4B739D744861
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/B9oznlzTwb4CzmgCoEIYVqoLVHs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/92/c62e0c-4454-43c8-97bc-81674d953d56/1/B9oznlzTwb4CzmgCoEIYVqoLVHs.mft
Manifest number: 0D80
Signing time: Wed 30 Apr 2025 18:00:56 +0000
Manifest this update: Wed 30 Apr 2025 18:00:56 +0000
Manifest next update: Thu 01 May 2025 18:00:56 +0000
Files and hashes: 1: B9oznlzTwb4CzmgCoEIYVqoLVHs.crl (hash: 3OLmLeC7E3Zl6ZlBoCCF0DzmG+fcBZUSgpJTbvaT4ls=)
2: x6Cel_08OWE19q-AcizBR0ACi2Y.roa (hash: Sht5kyrGhRMA3M4THfiOB/W3LAiYhjT0defWZa2cBtA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/92/c62e0c-4454-43c8-97bc-81674d953d56/1/B9oznlzTwb4CzmgCoEIYVqoLVHs.crl
rsync://rpki.ripe.net/repository/DEFAULT/92/c62e0c-4454-43c8-97bc-81674d953d56/1/B9oznlzTwb4CzmgCoEIYVqoLVHs.mft
rsync://rpki.ripe.net/repository/DEFAULT/B9oznlzTwb4CzmgCoEIYVqoLVHs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 01 May 2025 13:16:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:87:db:e2:6e:1c:2a:49:09:1a:2d:4b:73:9d:74:48:61
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=07da339e5cd3c1be02ce6802a0421856aa0b547b
Validity
Not Before: Apr 30 18:00:56 2025 GMT
Not After : May 1 18:00:56 2025 GMT
Subject: CN=ab4acd290fbe8380704e16a13065e3c6feb1ce98
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e0:62:9f:4f:7c:ef:b5:b8:f8:86:25:17:22:01:
52:df:2a:e4:4e:b1:bb:0f:77:6d:90:a8:fd:fc:c0:
4d:4e:6a:e9:71:fd:77:1b:f4:1c:43:6b:48:0b:c9:
17:97:a8:7c:7c:cc:02:66:bf:04:91:67:1f:6a:b9:
85:eb:47:4d:35:4d:94:fd:49:d4:b6:2b:05:ec:da:
f8:24:c0:96:9c:ce:25:94:7f:47:6b:d8:9a:5c:24:
1b:49:55:9e:aa:8c:4b:ee:97:ba:39:f0:35:0e:8d:
7a:db:c3:13:53:c0:be:7a:4b:38:dc:41:98:75:bf:
f1:3f:5d:b9:57:87:53:bb:02:8f:0e:75:1c:12:6b:
05:a8:e2:0b:c5:e2:51:86:7f:8d:2e:92:f5:0d:98:
65:0b:71:95:02:bd:bb:4c:7a:57:21:35:7b:d7:9e:
8c:ed:f6:62:e4:35:a9:05:14:d9:9e:d8:ba:a4:f5:
aa:61:06:59:b5:eb:1c:cf:ef:e1:31:04:df:89:a6:
90:5d:15:d6:34:f5:9b:fd:30:bf:c2:f9:37:79:cc:
a1:78:84:14:40:67:bd:5b:6d:b4:22:62:e9:ff:4b:
d1:c2:b2:fa:79:0b:1c:82:88:7e:60:82:31:e1:75:
3d:c1:50:bb:d7:12:4a:7a:e5:f4:55:59:d9:41:66:
04:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AB:4A:CD:29:0F:BE:83:80:70:4E:16:A1:30:65:E3:C6:FE:B1:CE:98
X509v3 Authority Key Identifier:
keyid:07:DA:33:9E:5C:D3:C1:BE:02:CE:68:02:A0:42:18:56:AA:0B:54:7B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/B9oznlzTwb4CzmgCoEIYVqoLVHs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/c62e0c-4454-43c8-97bc-81674d953d56/1/B9oznlzTwb4CzmgCoEIYVqoLVHs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/92/c62e0c-4454-43c8-97bc-81674d953d56/1/B9oznlzTwb4CzmgCoEIYVqoLVHs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a8:d5:33:7e:6c:18:c7:8c:83:66:74:5f:da:f6:1a:bb:b9:51:
79:fb:a8:8b:d2:4d:cf:b1:89:4e:0f:92:ee:e4:0e:92:3a:12:
9f:ab:36:9c:2e:43:0d:6a:1b:55:91:2a:57:09:88:e0:7d:b7:
55:5b:77:d6:80:85:bc:2c:04:9f:65:78:91:c5:66:15:b4:35:
ff:8c:da:be:4b:a5:4b:85:ed:5a:ad:16:8a:57:b3:ce:1f:ad:
50:a1:32:ea:db:7c:36:70:24:72:5a:6f:09:93:44:5a:7a:93:
9f:bb:89:de:3d:3d:94:96:b9:11:72:65:ce:cf:18:50:a5:21:
9f:8b:f9:cb:17:c6:ab:22:ed:d0:61:ef:9c:a3:71:f2:1f:80:
70:bd:71:fc:90:d1:a0:54:e9:b3:40:be:72:a6:91:ad:cf:2d:
af:a9:bc:ad:bc:95:a3:8c:94:2f:0c:07:c2:8c:2d:37:c1:a1:
57:63:b6:4b:fe:a5:50:52:e5:79:fc:e3:42:2a:1c:5b:99:7b:
ec:da:9c:93:0a:db:a6:ed:cc:b9:e1:01:51:39:75:d5:eb:da:
fa:f2:f2:af:de:5f:e8:2e:d6:49:fa:a4:e5:72:ff:96:b5:d6:
94:2a:72:f7:69:af:08:ed:53:e0:5d:7e:8c:b0:24:10:20:68:
38:29:33:f0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 30 22:12:07 2025 by rpki-client