Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a6/113f5f-be58-478c-9030-32d80d8d1615/1/0tzocORzw1QnPonF5OLtPgwGk1Y.mft
File: 0tzocORzw1QnPonF5OLtPgwGk1Y.mft (raw, json)
Hash identifier: WRtkABRIVBhNDpiYkmLsn//bw07hUBp87qm/yhmgyxE=
Subject key identifier: E6:8C:2F:D6:5D:7E:A9:D9:58:94:43:3D:8B:89:00:4D:57:01:C2:98
Authority key identifier: D2:DC:E8:70:E4:73:C3:54:27:3E:89:C5:E4:E2:ED:3E:0C:06:93:56
Certificate issuer: /CN=d2dce870e473c354273e89c5e4e2ed3e0c069356
Certificate serial: 0196748BA8FE7B625E7375383C152CB259B1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0tzocORzw1QnPonF5OLtPgwGk1Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a6/113f5f-be58-478c-9030-32d80d8d1615/1/0tzocORzw1QnPonF5OLtPgwGk1Y.mft
Manifest number: 0966
Signing time: Sun 27 Apr 2025 00:00:31 +0000
Manifest this update: Sun 27 Apr 2025 00:00:31 +0000
Manifest next update: Mon 28 Apr 2025 00:00:31 +0000
Files and hashes: 1: 0tzocORzw1QnPonF5OLtPgwGk1Y.crl (hash: 3DPi/Cd6Vy3oVNe/nmpwogKpdAjk+g0IC90YVPBNO4I=)
2: tTZ8ChHVIsV9vssdJRRwpvt77Ic.roa (hash: vUfunefLZb2Jpmp53yxYY0pVxR49oq3Pwb2HHqDzrlg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a6/113f5f-be58-478c-9030-32d80d8d1615/1/0tzocORzw1QnPonF5OLtPgwGk1Y.crl
rsync://rpki.ripe.net/repository/DEFAULT/a6/113f5f-be58-478c-9030-32d80d8d1615/1/0tzocORzw1QnPonF5OLtPgwGk1Y.mft
rsync://rpki.ripe.net/repository/DEFAULT/0tzocORzw1QnPonF5OLtPgwGk1Y.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Apr 2025 20:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:74:8b:a8:fe:7b:62:5e:73:75:38:3c:15:2c:b2:59:b1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d2dce870e473c354273e89c5e4e2ed3e0c069356
Validity
Not Before: Apr 27 00:00:31 2025 GMT
Not After : Apr 28 00:00:31 2025 GMT
Subject: CN=e68c2fd65d7ea9d95894433d8b89004d5701c298
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:a5:0b:be:e1:dc:79:bf:d5:9d:69:55:4a:50:
78:78:11:06:7c:e5:f0:b1:ed:31:d7:78:cb:ae:4a:
9c:bb:fa:f3:41:e2:a3:87:aa:23:95:0f:fc:f7:a1:
23:bb:4e:23:2d:da:49:70:a4:10:e0:88:ca:0e:20:
98:5c:f5:be:92:8b:8e:8f:66:c8:cd:1b:f8:85:63:
24:b1:a6:ec:9c:6e:aa:5d:75:24:09:71:c1:c2:63:
c4:3c:bd:b6:a7:b9:95:fa:df:ba:0d:af:77:04:53:
d5:47:b0:b7:10:19:7b:1c:8e:24:00:12:1f:88:b2:
11:32:c0:90:ac:b4:b7:55:9f:05:41:8f:3c:be:f0:
58:1f:23:8b:05:8b:0f:b3:53:7d:b4:93:8c:86:f1:
36:35:4d:bd:8a:e3:cd:83:7d:19:27:aa:36:b6:06:
04:5e:90:b8:5d:1d:15:d2:00:ac:c2:79:12:7c:d6:
4d:c5:a5:49:79:8a:8d:5f:43:72:c8:74:78:36:c7:
07:bb:3e:72:df:73:d0:5e:48:0f:da:ca:7b:d8:18:
bd:5b:cb:60:90:de:7a:39:b8:3f:ce:7d:c1:3e:ac:
b0:4b:32:0f:61:88:27:6d:5a:70:77:35:2f:99:0e:
80:70:9b:45:ea:5f:33:c6:01:78:60:8b:75:1f:6b:
2f:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E6:8C:2F:D6:5D:7E:A9:D9:58:94:43:3D:8B:89:00:4D:57:01:C2:98
X509v3 Authority Key Identifier:
keyid:D2:DC:E8:70:E4:73:C3:54:27:3E:89:C5:E4:E2:ED:3E:0C:06:93:56
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0tzocORzw1QnPonF5OLtPgwGk1Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a6/113f5f-be58-478c-9030-32d80d8d1615/1/0tzocORzw1QnPonF5OLtPgwGk1Y.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a6/113f5f-be58-478c-9030-32d80d8d1615/1/0tzocORzw1QnPonF5OLtPgwGk1Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
35:a7:84:ce:f0:1c:b3:b4:03:ef:cf:5f:14:be:e2:8b:9d:38:
a1:7f:da:43:15:ae:9d:ce:af:57:58:2d:19:e9:21:5d:b7:19:
36:0d:fe:2c:b3:31:c1:24:5f:51:76:9f:cf:37:1c:3b:78:f2:
a9:ba:26:bf:95:a4:b6:cb:37:e9:83:4f:e5:d0:97:db:48:d4:
ee:4b:80:7c:d9:6d:ee:c4:ce:cd:77:89:53:7c:14:8a:36:ac:
76:cf:1f:2e:fa:d7:2c:70:e4:d3:2b:4d:73:e7:cc:2d:09:9e:
e5:d1:36:e1:fd:11:b4:db:b6:ff:9b:a6:66:99:cc:94:03:85:
37:ee:04:78:35:00:2c:4b:0b:cf:76:bf:75:6c:e8:47:db:fc:
d7:1f:5d:83:4f:fc:31:96:39:4a:5d:9f:cf:82:de:72:e6:1c:
51:39:3d:52:b5:b0:11:1f:50:91:36:cb:3d:9a:b5:65:80:ee:
22:35:b1:c0:f8:81:ad:e7:1e:fc:e4:e9:84:53:0b:f0:46:cf:
83:5f:a1:a0:62:c3:bb:97:f2:8e:e0:9d:02:93:72:d3:1d:e3:
58:2f:f6:7f:82:de:4a:86:5f:d2:b9:9d:4e:e8:28:a3:38:8a:
27:c2:44:6a:39:f0:7a:09:68:9c:d9:78:6b:c6:0e:33:81:3b:
dd:5a:7d:89
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 05:48:48 2025 by rpki-client