
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/aa/1c718d-e7a0-40ac-a181-cbaa42a62727/1/0H3DXrzYjdDiqNs6WghlS8O-AmI.mft
File: 0H3DXrzYjdDiqNs6WghlS8O-AmI.mft (raw, json)
Hash identifier: qInspD3Pak2LsC0sVhtYKoe5zTpcfDCi/k2vCMiJjQE=
Subject key identifier: 11:D7:53:05:BB:5B:1B:20:F0:FA:60:25:F9:4F:42:4A:5F:9A:2E:10
Authority key identifier: D0:7D:C3:5E:BC:D8:8D:D0:E2:A8:DB:3A:5A:08:65:4B:C3:BE:02:62
Certificate issuer: /CN=d07dc35ebcd88dd0e2a8db3a5a08654bc3be0262
Certificate serial: 01967F462FF47AC0A9FFF64D305EF601295F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0H3DXrzYjdDiqNs6WghlS8O-AmI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/aa/1c718d-e7a0-40ac-a181-cbaa42a62727/1/0H3DXrzYjdDiqNs6WghlS8O-AmI.mft
Manifest number: 1514
Signing time: Tue 29 Apr 2025 02:00:28 +0000
Manifest this update: Tue 29 Apr 2025 02:00:28 +0000
Manifest next update: Wed 30 Apr 2025 02:00:28 +0000
Files and hashes: 1: 0H3DXrzYjdDiqNs6WghlS8O-AmI.crl (hash: lDV7AdZVlJu5tZ20VxaQCHbGygTxEfzee5pOSOlurfQ=)
2: UtfGmlfffX0cIYFRWQAmKmCxHBQ.roa (hash: eIoevFtzl4KgjvBzeT/oQJHdGPIhlQ4d3q4XFG6eYig=)
3: pkGGNBdhq4ZpQRqIZMsggNSolf0.roa (hash: y34zQyNQE6Dt9rgo+TKZCABmiXucQM6cXI6cZVCrI5E=)
4: qMKz0iOTV-AipsqG6OSykAqBmcw.roa (hash: evn2bcSDR90liMyPkIBPgdH2fICEje6rbDEpXsqQ5bo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/aa/1c718d-e7a0-40ac-a181-cbaa42a62727/1/0H3DXrzYjdDiqNs6WghlS8O-AmI.crl
rsync://rpki.ripe.net/repository/DEFAULT/aa/1c718d-e7a0-40ac-a181-cbaa42a62727/1/0H3DXrzYjdDiqNs6WghlS8O-AmI.mft
rsync://rpki.ripe.net/repository/DEFAULT/0H3DXrzYjdDiqNs6WghlS8O-AmI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 30 Apr 2025 00:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:7f:46:2f:f4:7a:c0:a9:ff:f6:4d:30:5e:f6:01:29:5f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d07dc35ebcd88dd0e2a8db3a5a08654bc3be0262
Validity
Not Before: Apr 29 02:00:28 2025 GMT
Not After : Apr 30 02:00:28 2025 GMT
Subject: CN=11d75305bb5b1b20f0fa6025f94f424a5f9a2e10
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e0:08:5e:d4:7b:c0:f5:61:fd:36:72:40:3b:b7:
dc:e9:77:04:1f:31:d6:ac:42:c7:7f:cc:8c:ee:76:
27:2f:3c:1a:ee:6a:f6:a8:a7:7b:cf:fe:fd:c5:17:
73:31:47:e4:25:51:95:de:64:6f:2b:72:09:3a:fc:
7a:e2:ab:49:ef:51:bc:8e:db:97:ba:2a:bc:32:25:
80:98:53:f3:3c:0e:6f:f4:a5:74:fc:20:5b:ef:c7:
15:00:6f:cc:d6:17:7a:ec:ec:db:00:03:e9:a0:b7:
2b:83:d7:15:80:85:10:71:36:f1:f3:a7:5c:00:c4:
26:6c:33:c1:07:0c:ee:ae:3a:17:52:e7:ca:aa:7f:
df:99:90:9e:86:9e:35:b7:bb:07:e9:30:3b:ea:b5:
b5:27:9c:fe:88:c4:ed:d3:ef:78:32:79:0e:3b:45:
7f:63:7e:e4:51:48:95:fa:62:79:a7:d3:d8:c9:2e:
93:4d:76:a6:84:74:50:a2:5b:df:b3:3d:fb:6f:18:
13:b8:ef:f5:3f:3d:ba:bf:71:0b:b0:91:a5:8d:85:
82:33:2c:c6:b0:b6:75:4e:27:f6:47:6c:12:7b:dd:
cb:a5:0b:bf:1d:00:1c:16:a4:1f:71:0c:1d:dd:19:
ed:3a:fe:38:22:1b:bd:f4:4f:ef:3c:34:9e:0c:d3:
16:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
11:D7:53:05:BB:5B:1B:20:F0:FA:60:25:F9:4F:42:4A:5F:9A:2E:10
X509v3 Authority Key Identifier:
keyid:D0:7D:C3:5E:BC:D8:8D:D0:E2:A8:DB:3A:5A:08:65:4B:C3:BE:02:62
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0H3DXrzYjdDiqNs6WghlS8O-AmI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/aa/1c718d-e7a0-40ac-a181-cbaa42a62727/1/0H3DXrzYjdDiqNs6WghlS8O-AmI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/aa/1c718d-e7a0-40ac-a181-cbaa42a62727/1/0H3DXrzYjdDiqNs6WghlS8O-AmI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6b:89:6f:bf:06:ef:d0:d1:7e:25:de:0f:17:98:72:05:75:a6:
87:a2:95:1e:08:0c:92:5d:ce:3d:44:83:11:c5:bf:28:69:9a:
ae:8c:4d:97:02:28:91:99:7b:51:55:fd:c4:d5:4b:f9:35:67:
e6:e9:3e:8b:02:e0:45:5b:6a:5a:4f:b1:64:64:32:97:e1:a9:
dc:c1:d0:1a:2c:b9:27:4d:68:bd:76:ad:80:c7:f7:7f:15:50:
d8:76:a8:73:f0:e6:f7:3f:80:f0:53:de:1c:7b:46:ad:50:d3:
42:e5:94:01:f5:4c:68:89:2b:b6:cf:39:2c:83:5b:de:c5:ab:
9c:ce:95:08:20:7b:10:25:11:cb:f9:b2:fa:a8:86:5b:f5:d9:
d6:19:44:fc:00:f2:d2:bb:a3:cd:0f:39:8a:40:40:8a:71:09:
0e:c0:f6:43:1d:6f:4c:39:c5:fe:4f:58:8b:d9:cd:d3:23:0d:
96:ac:11:27:29:c4:20:17:93:9b:f3:ef:ca:d9:23:a4:19:44:
e2:60:12:2f:19:8e:d5:9f:6c:15:07:1e:9a:27:0f:26:54:75:
d9:fd:63:3e:72:16:b0:f3:b1:6c:da:fc:b9:35:92:a3:52:a5:
00:97:74:39:d0:3b:e0:16:57:46:a1:12:2d:37:67:57:ce:2b:
a8:72:fd:7e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 29 09:30:10 2025 by rpki-client