Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/95/a11417-6abc-4c0d-8afa-1a29a448d309/1/0O4DiWh9vURd5vkjnB0Cw3cM9XQ.mft
File: 0O4DiWh9vURd5vkjnB0Cw3cM9XQ.mft (raw, json)
Hash identifier: Bv4aVzu3yZU3/N6ZYza/G2sxGNpa4LA64Mu8IYJvHHA=
Subject key identifier: B0:99:ED:6F:93:9E:5D:96:0E:3B:72:C6:8B:1D:BD:E2:2F:F2:0F:7A
Authority key identifier: D0:EE:03:89:68:7D:BD:44:5D:E6:F9:23:9C:1D:02:C3:77:0C:F5:74
Certificate issuer: /CN=d0ee0389687dbd445de6f9239c1d02c3770cf574
Certificate serial: 0196816B4D798BC27B135219D6DF81FE64B1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0O4DiWh9vURd5vkjnB0Cw3cM9XQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/95/a11417-6abc-4c0d-8afa-1a29a448d309/1/0O4DiWh9vURd5vkjnB0Cw3cM9XQ.mft
Manifest number: 1516
Signing time: Tue 29 Apr 2025 12:00:15 +0000
Manifest this update: Tue 29 Apr 2025 12:00:15 +0000
Manifest next update: Wed 30 Apr 2025 12:00:15 +0000
Files and hashes: 1: 0O4DiWh9vURd5vkjnB0Cw3cM9XQ.crl (hash: ZLr8408N8jO/MvOxM2MqZWIXmxPwphz9hy069aOJnUo=)
2: 4RiMrm8aaExTJ5NxhFCCQc-LTfQ.roa (hash: xT77mBm76fvxQ/4syBVoQsoquUiDMD7RefgDewlMNII=)
3: O84I_LAanBtJYvSSTZhnAsP3iQA.roa (hash: 6ivMoGITrJjRBuEurkZGNP+0M6whX3cvNI3NRDFJ7b8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/95/a11417-6abc-4c0d-8afa-1a29a448d309/1/0O4DiWh9vURd5vkjnB0Cw3cM9XQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/95/a11417-6abc-4c0d-8afa-1a29a448d309/1/0O4DiWh9vURd5vkjnB0Cw3cM9XQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/0O4DiWh9vURd5vkjnB0Cw3cM9XQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 30 Apr 2025 12:00:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:81:6b:4d:79:8b:c2:7b:13:52:19:d6:df:81:fe:64:b1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d0ee0389687dbd445de6f9239c1d02c3770cf574
Validity
Not Before: Apr 29 12:00:15 2025 GMT
Not After : Apr 30 12:00:15 2025 GMT
Subject: CN=b099ed6f939e5d960e3b72c68b1dbde22ff20f7a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dc:0c:96:85:7d:ee:d6:6c:a9:ca:30:5b:97:e1:
87:70:a8:f1:29:bf:08:15:7e:2a:c0:d5:2f:c3:a5:
74:74:30:04:89:c6:a3:87:1d:2e:98:64:6a:89:b8:
c3:4a:22:63:fa:46:3e:4e:20:04:7a:2a:bd:16:93:
b7:77:6c:b3:e5:24:22:66:0c:2a:e1:b5:4e:57:92:
ba:8b:a2:b2:8c:a4:11:9f:ee:6e:88:0a:d0:fd:b6:
4d:96:91:84:c2:28:94:e7:ef:fe:df:65:e5:3f:fc:
82:84:f9:7e:5f:c4:01:01:f9:eb:07:d2:4c:72:a1:
b1:02:4e:42:eb:7d:bd:08:17:66:e2:ee:18:a8:af:
9d:e4:91:de:4e:62:80:34:7a:2e:87:b3:36:51:63:
6f:50:93:72:06:2d:17:1f:50:0e:7c:63:f3:e5:f3:
78:f1:c1:99:8e:77:09:3c:fa:3e:a8:6e:a6:fd:ec:
e3:31:48:40:8f:cc:77:e8:32:9d:f8:00:cd:2e:61:
20:0b:0c:6f:b6:b0:62:fe:e1:e1:ac:9e:9f:b4:b8:
38:b0:b3:f2:7b:ab:cd:17:73:8c:79:0f:02:f3:62:
2c:2f:de:86:cf:cd:38:8f:82:d5:5b:bb:50:b3:53:
22:30:01:88:62:90:ff:91:ec:ce:52:8f:13:fb:1a:
26:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B0:99:ED:6F:93:9E:5D:96:0E:3B:72:C6:8B:1D:BD:E2:2F:F2:0F:7A
X509v3 Authority Key Identifier:
keyid:D0:EE:03:89:68:7D:BD:44:5D:E6:F9:23:9C:1D:02:C3:77:0C:F5:74
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0O4DiWh9vURd5vkjnB0Cw3cM9XQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/95/a11417-6abc-4c0d-8afa-1a29a448d309/1/0O4DiWh9vURd5vkjnB0Cw3cM9XQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/95/a11417-6abc-4c0d-8afa-1a29a448d309/1/0O4DiWh9vURd5vkjnB0Cw3cM9XQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
54:7d:28:8e:87:c8:e2:96:ab:ba:52:6a:d9:5d:c8:f5:b3:32:
97:4f:e3:92:bf:11:cd:4f:f3:2c:24:b0:69:e5:4f:20:7e:f5:
64:28:46:ea:b9:91:4d:3b:fd:b2:de:e8:bd:94:8f:aa:e2:0f:
54:7f:ed:d7:da:1d:8f:bd:70:0f:07:ac:3e:17:08:22:bf:a8:
94:a8:0e:80:ec:33:c5:b4:80:78:72:d6:ab:c2:e4:8a:0e:a1:
29:59:4f:4a:32:08:a2:07:26:eb:a7:9a:5d:e8:f8:12:c8:93:
54:b4:23:fd:2f:fd:fb:8b:b9:97:f6:23:11:f2:dc:e1:ac:cf:
ab:94:6d:e4:c1:25:44:0a:ff:a5:16:c9:97:52:e9:da:19:43:
06:c9:f7:b6:dc:96:49:c1:db:28:07:87:dd:b7:b5:e1:75:01:
86:a9:a1:08:51:da:0e:53:75:2d:7f:06:2a:d7:6e:fd:bf:0a:
44:5f:03:27:eb:c6:1a:78:e2:fb:54:66:0d:10:3a:ec:e8:75:
20:39:7f:80:c3:ad:64:c0:56:92:72:eb:37:d6:6e:f1:37:0c:
f6:4b:dd:28:46:9c:0e:d1:42:73:1f:fc:53:31:ae:44:c9:2b:
ca:b7:31:f7:c4:8e:58:b5:b1:f2:14:19:88:dd:89:9a:32:a6:
4a:e0:9a:57
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 29 21:35:15 2025 by rpki-client