Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9d/b284a3-c2f1-4205-b1d5-47977669958d/1/RMO0TLvE89paS0KFyW6jy1DU0HM.mft
File: RMO0TLvE89paS0KFyW6jy1DU0HM.mft (raw, json)
Hash identifier: hSTXzP8barUnb5V/VHqrGuehbohxJ8RWV+KMSvDATyc=
Subject key identifier: 66:8A:20:08:14:52:5C:F9:3C:D2:39:6B:E8:36:CB:44:4A:1E:8D:31
Authority key identifier: 44:C3:B4:4C:BB:C4:F3:DA:5A:4B:42:85:C9:6E:A3:CB:50:D4:D0:73
Certificate issuer: /CN=44c3b44cbbc4f3da5a4b4285c96ea3cb50d4d073
Certificate serial: 019683C7A2360669D41B7B59EF2F1A924870
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RMO0TLvE89paS0KFyW6jy1DU0HM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9d/b284a3-c2f1-4205-b1d5-47977669958d/1/RMO0TLvE89paS0KFyW6jy1DU0HM.mft
Manifest number: 0B94
Signing time: Tue 29 Apr 2025 23:00:20 +0000
Manifest this update: Tue 29 Apr 2025 23:00:20 +0000
Manifest next update: Wed 30 Apr 2025 23:00:20 +0000
Files and hashes: 1: Bfc7EUchdTgGElUv3uM8P6L_JN4.roa (hash: zmd7LnQJEMvAXNDrVc3GmLiOfsPuEL2IoD+oEByUhjA=)
2: RMO0TLvE89paS0KFyW6jy1DU0HM.crl (hash: G/IUWMMQXvYSEkHR/INbT2ZCgiZFob584alvR10qRqQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9d/b284a3-c2f1-4205-b1d5-47977669958d/1/RMO0TLvE89paS0KFyW6jy1DU0HM.crl
rsync://rpki.ripe.net/repository/DEFAULT/9d/b284a3-c2f1-4205-b1d5-47977669958d/1/RMO0TLvE89paS0KFyW6jy1DU0HM.mft
rsync://rpki.ripe.net/repository/DEFAULT/RMO0TLvE89paS0KFyW6jy1DU0HM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 30 Apr 2025 23:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:83:c7:a2:36:06:69:d4:1b:7b:59:ef:2f:1a:92:48:70
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=44c3b44cbbc4f3da5a4b4285c96ea3cb50d4d073
Validity
Not Before: Apr 29 23:00:20 2025 GMT
Not After : Apr 30 23:00:20 2025 GMT
Subject: CN=668a200814525cf93cd2396be836cb444a1e8d31
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dc:d6:80:21:c9:ac:14:28:10:8c:d2:d8:1b:7a:
60:7d:11:bf:09:7a:93:94:91:c4:b0:a4:da:6b:0d:
b3:ea:8b:c7:2e:25:62:1c:75:6c:70:49:02:51:b2:
29:42:14:31:e2:40:08:7e:8b:5c:fb:bc:08:af:a9:
ad:96:53:06:0d:c6:a5:66:f0:40:fc:26:29:4c:b0:
9d:61:4f:1a:d3:15:80:be:5c:0b:4d:1f:ed:b7:b8:
8d:13:fb:1b:34:87:5e:66:89:5d:43:4d:98:df:26:
76:9f:e1:fc:d8:ae:9e:f7:75:b3:5d:c0:6a:35:25:
7e:b0:0b:ff:2f:ab:62:5b:de:dc:8d:41:ca:ac:93:
40:1a:aa:75:f9:51:d0:c9:0f:76:fa:76:7a:50:f0:
df:30:30:5f:e6:34:69:af:3a:1c:9a:54:28:25:71:
ca:f0:d0:81:69:ae:8c:cc:e3:78:fd:39:8a:7c:ac:
3a:85:ad:4d:c3:16:a6:9c:10:87:53:79:c6:97:f2:
5d:be:16:b9:72:60:be:f0:fc:15:c5:11:38:f3:55:
f9:f3:fe:c7:74:07:6e:d8:93:23:99:6a:60:8d:c9:
27:46:32:a0:cb:e3:40:01:73:ed:dd:a7:d2:26:42:
bf:b1:a2:98:2a:a9:fb:18:e8:5d:fa:52:d9:5d:8a:
ee:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
66:8A:20:08:14:52:5C:F9:3C:D2:39:6B:E8:36:CB:44:4A:1E:8D:31
X509v3 Authority Key Identifier:
keyid:44:C3:B4:4C:BB:C4:F3:DA:5A:4B:42:85:C9:6E:A3:CB:50:D4:D0:73
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RMO0TLvE89paS0KFyW6jy1DU0HM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9d/b284a3-c2f1-4205-b1d5-47977669958d/1/RMO0TLvE89paS0KFyW6jy1DU0HM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9d/b284a3-c2f1-4205-b1d5-47977669958d/1/RMO0TLvE89paS0KFyW6jy1DU0HM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
83:33:d1:e9:ad:f1:7d:1e:0c:89:7c:54:a3:24:1c:33:f3:12:
ae:9e:af:d0:28:36:46:cd:25:bf:0b:40:65:87:30:d3:14:83:
a3:e7:2f:b8:87:d0:4a:8a:0c:f8:a1:25:be:f6:ef:f1:91:88:
5a:b6:3a:a7:09:0e:6b:1d:56:20:22:3d:a0:1b:8e:35:3e:4e:
b3:fe:4a:a8:16:d6:74:3c:35:41:8f:2c:cc:95:ac:d4:80:c0:
b0:4a:5b:a9:8a:c9:a7:36:15:44:8c:1f:e6:10:81:d5:dd:71:
2f:13:1f:4f:ef:db:06:9f:c0:12:db:9c:9c:80:c9:bc:e5:ab:
71:f5:04:07:36:7b:69:b7:34:c2:00:c3:4c:2b:40:37:ca:73:
1c:90:25:ac:c3:bb:a5:aa:e3:7d:6b:ba:46:e2:21:88:a3:c2:
ea:2a:c7:71:ad:4e:14:ba:a2:2e:98:d5:90:15:bb:05:32:5d:
5f:08:d6:54:18:ad:34:c9:6b:af:b3:23:ef:81:6a:e7:f2:be:
22:4a:f3:3e:37:80:2c:44:a0:49:82:c7:b4:29:42:71:62:e4:
34:7e:b9:00:44:6e:1f:e3:6f:5e:bc:17:47:0b:dc:10:c7:87:
e4:de:9e:dc:c4:70:a3:6b:45:d7:62:e9:ca:3a:29:82:b5:27:
5e:3d:d4:02
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 30 02:48:45 2025 by rpki-client