Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/95/a11417-6abc-4c0d-8afa-1a29a448d309/1/0O4DiWh9vURd5vkjnB0Cw3cM9XQ.mft
File: 0O4DiWh9vURd5vkjnB0Cw3cM9XQ.mft (raw, json)
Hash identifier: Db0MvHAVXDivPT1aKk2WAnAiVF/nU87X3m8nicaTWa8=
Subject key identifier: 48:99:72:CF:A2:8D:C0:AB:99:E5:40:D7:8A:10:7D:29:4B:37:AE:74
Authority key identifier: D0:EE:03:89:68:7D:BD:44:5D:E6:F9:23:9C:1D:02:C3:77:0C:F5:74
Certificate issuer: /CN=d0ee0389687dbd445de6f9239c1d02c3770cf574
Certificate serial: 0196835A27212979B8592D919AF7B149BE4B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0O4DiWh9vURd5vkjnB0Cw3cM9XQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/95/a11417-6abc-4c0d-8afa-1a29a448d309/1/0O4DiWh9vURd5vkjnB0Cw3cM9XQ.mft
Manifest number: 1517
Signing time: Tue 29 Apr 2025 21:00:45 +0000
Manifest this update: Tue 29 Apr 2025 21:00:45 +0000
Manifest next update: Wed 30 Apr 2025 21:00:45 +0000
Files and hashes: 1: 0O4DiWh9vURd5vkjnB0Cw3cM9XQ.crl (hash: eGNllJzpV8q2xUjnvgwn7jeaXm5WIbh2cGjjWGiWCzM=)
2: 4RiMrm8aaExTJ5NxhFCCQc-LTfQ.roa (hash: xT77mBm76fvxQ/4syBVoQsoquUiDMD7RefgDewlMNII=)
3: O84I_LAanBtJYvSSTZhnAsP3iQA.roa (hash: 6ivMoGITrJjRBuEurkZGNP+0M6whX3cvNI3NRDFJ7b8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/95/a11417-6abc-4c0d-8afa-1a29a448d309/1/0O4DiWh9vURd5vkjnB0Cw3cM9XQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/95/a11417-6abc-4c0d-8afa-1a29a448d309/1/0O4DiWh9vURd5vkjnB0Cw3cM9XQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/0O4DiWh9vURd5vkjnB0Cw3cM9XQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 30 Apr 2025 21:00:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:83:5a:27:21:29:79:b8:59:2d:91:9a:f7:b1:49:be:4b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d0ee0389687dbd445de6f9239c1d02c3770cf574
Validity
Not Before: Apr 29 21:00:45 2025 GMT
Not After : Apr 30 21:00:45 2025 GMT
Subject: CN=489972cfa28dc0ab99e540d78a107d294b37ae74
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:6d:15:55:58:16:98:89:61:ac:ae:e9:ae:51:
17:8d:69:c9:fd:3d:19:a5:15:55:27:00:c4:60:9d:
92:3e:07:74:da:77:f1:e9:56:01:4f:d4:71:62:f4:
58:88:2c:50:ce:b0:b8:64:13:82:b6:0c:e6:6c:39:
06:30:4a:86:42:30:b0:39:68:6f:6b:8a:27:b1:1e:
41:7d:9e:51:04:30:e3:16:36:ed:5c:d5:0f:23:f5:
f6:1c:f1:59:8b:f9:e8:57:07:52:45:05:b6:b1:62:
23:a5:85:85:38:f6:9a:cd:48:06:49:1b:1e:0b:14:
05:b0:2e:91:77:3b:fc:1e:54:d3:e2:6b:bd:dd:3d:
91:18:40:81:1f:8e:47:94:6c:ef:b9:1a:4a:57:a7:
06:76:9f:68:fc:49:06:bf:fa:d5:7e:1f:47:66:a7:
fd:2e:19:5c:f8:f0:7b:ab:f8:f3:4e:bd:37:e2:8d:
13:7c:94:7b:08:32:51:91:78:24:56:f5:64:1a:87:
e5:d7:e6:3f:58:a5:bd:ab:3a:ed:48:75:ad:25:3a:
78:4b:c1:9a:a8:9d:f9:82:4f:a9:26:2e:fa:30:51:
91:77:db:bf:a5:75:cf:ed:62:1e:fe:d0:a8:44:95:
e0:73:b0:07:81:e9:5c:3e:f8:11:8d:9c:a6:80:4d:
5e:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
48:99:72:CF:A2:8D:C0:AB:99:E5:40:D7:8A:10:7D:29:4B:37:AE:74
X509v3 Authority Key Identifier:
keyid:D0:EE:03:89:68:7D:BD:44:5D:E6:F9:23:9C:1D:02:C3:77:0C:F5:74
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0O4DiWh9vURd5vkjnB0Cw3cM9XQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/95/a11417-6abc-4c0d-8afa-1a29a448d309/1/0O4DiWh9vURd5vkjnB0Cw3cM9XQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/95/a11417-6abc-4c0d-8afa-1a29a448d309/1/0O4DiWh9vURd5vkjnB0Cw3cM9XQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
86:34:9b:26:d3:0b:71:d6:cc:2d:f1:d2:3c:f8:a1:30:8f:c8:
b7:3d:45:3b:df:68:2f:ee:bd:33:41:76:b0:43:64:16:be:f4:
cc:c1:2e:0e:01:a9:86:90:4e:6b:3c:10:26:8e:61:b5:d7:17:
1d:1d:bd:df:0a:ec:67:ee:44:32:fc:19:02:e2:a1:9f:10:67:
13:5f:74:6a:2b:0f:f6:e4:86:fa:86:4f:1e:aa:49:c1:c1:6f:
63:08:85:ae:39:b2:ee:01:6f:cd:f3:25:ed:25:90:7b:69:7f:
7c:a0:fd:4a:5c:b2:24:b8:cb:43:16:6a:c0:d0:f7:25:f9:96:
6b:df:73:9a:14:8c:35:e1:03:06:f5:03:ff:9b:33:fa:59:8d:
10:99:92:20:52:54:ca:83:51:1f:31:af:9d:dc:46:09:0f:13:
dd:47:c4:88:35:66:9c:1f:ad:9a:38:ea:55:c3:09:d4:26:9e:
75:c0:69:2c:43:93:3c:59:e9:f7:5d:11:e7:bd:8d:fd:73:17:
c8:a8:e3:83:34:e8:17:a8:15:fa:1e:28:b8:a4:2e:77:68:b9:
14:cb:61:58:87:e0:ea:e4:8a:7d:03:6f:5d:c5:6f:37:e5:de:
4a:2e:22:d9:67:47:5f:89:8a:f3:b4:18:5e:ac:e0:9a:e1:c1:
ea:a3:e0:98
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 30 05:44:25 2025 by rpki-client