Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ad/465556-70d1-4152-a65a-6c63e152242d/1/0NbmVQW09OT08x2QuLIaOnz7Dr8.mft
File: 0NbmVQW09OT08x2QuLIaOnz7Dr8.mft (raw, json)
Hash identifier: ZN8or4FCB6c0Uyh2Lsz43LpDCu20LP/S47Uqi7Jqe+4=
Subject key identifier: 5A:32:ED:E7:38:2F:02:0B:0A:88:EA:91:97:A4:06:15:BD:64:12:E2
Authority key identifier: D0:D6:E6:55:05:B4:F4:E4:F4:F3:1D:90:B8:B2:1A:3A:7C:FB:0E:BF
Certificate issuer: /CN=d0d6e65505b4f4e4f4f31d90b8b21a3a7cfb0ebf
Certificate serial: 019675D5034F5BFF900FCAE9B53DAB6EDBCC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0NbmVQW09OT08x2QuLIaOnz7Dr8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ad/465556-70d1-4152-a65a-6c63e152242d/1/0NbmVQW09OT08x2QuLIaOnz7Dr8.mft
Manifest number: 0A83
Signing time: Sun 27 Apr 2025 06:00:16 +0000
Manifest this update: Sun 27 Apr 2025 06:00:16 +0000
Manifest next update: Mon 28 Apr 2025 06:00:16 +0000
Files and hashes: 1: 0NbmVQW09OT08x2QuLIaOnz7Dr8.crl (hash: aMH9q8fw0RpuvlteqcSp68lUzPD7zXiUV2BrwSH+6tA=)
2: RLT9vWKmEAqKt6hEtNsyMWI1h0c.roa (hash: xBu31AarPg6SaGrJFYKlAHmm3Mw8LW1iAP2FYDxCvXE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ad/465556-70d1-4152-a65a-6c63e152242d/1/0NbmVQW09OT08x2QuLIaOnz7Dr8.crl
rsync://rpki.ripe.net/repository/DEFAULT/ad/465556-70d1-4152-a65a-6c63e152242d/1/0NbmVQW09OT08x2QuLIaOnz7Dr8.mft
rsync://rpki.ripe.net/repository/DEFAULT/0NbmVQW09OT08x2QuLIaOnz7Dr8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Apr 2025 05:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:75:d5:03:4f:5b:ff:90:0f:ca:e9:b5:3d:ab:6e:db:cc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d0d6e65505b4f4e4f4f31d90b8b21a3a7cfb0ebf
Validity
Not Before: Apr 27 06:00:16 2025 GMT
Not After : Apr 28 06:00:16 2025 GMT
Subject: CN=5a32ede7382f020b0a88ea9197a40615bd6412e2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:75:f9:b7:b4:d9:b1:e8:97:93:7e:f4:1c:49:
5e:88:d6:25:13:44:8f:22:16:c6:c9:12:c8:51:a9:
c6:83:3c:ec:2c:3b:62:40:eb:38:96:41:d0:cd:7c:
ac:60:20:25:8c:e3:af:17:e8:fe:35:ea:12:12:a6:
8e:64:17:6e:58:ba:2a:f1:18:f4:7d:7d:d5:67:a5:
e3:be:80:6a:d8:3b:b1:e0:c1:7d:42:ff:74:91:d7:
fc:98:7b:2e:b6:c8:2b:5b:62:a2:bc:12:f1:84:3e:
a6:5f:d6:ad:83:55:04:6a:f9:48:33:d1:1c:ad:8a:
dc:22:a7:9d:b7:7d:6b:5a:77:b6:14:11:87:13:75:
46:eb:71:99:ce:49:73:b9:eb:89:51:3e:ef:6f:62:
ea:53:56:e8:7a:b9:1c:c0:d2:b5:cc:3c:ea:de:eb:
de:42:4d:24:9d:2c:89:cd:ed:6f:a1:bc:9c:08:15:
a0:67:37:c9:c2:7e:2c:1e:25:68:a7:9c:12:22:7e:
e6:44:cd:61:a6:33:d0:e5:fc:32:78:4e:0c:5d:1f:
00:ec:80:72:30:8d:2c:f6:8f:61:3f:4c:8f:f1:f6:
f8:cd:a1:97:8e:a5:81:30:59:c4:e2:eb:75:12:c8:
82:2b:46:ee:95:01:f5:00:83:e8:73:41:e4:94:b5:
54:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5A:32:ED:E7:38:2F:02:0B:0A:88:EA:91:97:A4:06:15:BD:64:12:E2
X509v3 Authority Key Identifier:
keyid:D0:D6:E6:55:05:B4:F4:E4:F4:F3:1D:90:B8:B2:1A:3A:7C:FB:0E:BF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0NbmVQW09OT08x2QuLIaOnz7Dr8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ad/465556-70d1-4152-a65a-6c63e152242d/1/0NbmVQW09OT08x2QuLIaOnz7Dr8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ad/465556-70d1-4152-a65a-6c63e152242d/1/0NbmVQW09OT08x2QuLIaOnz7Dr8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
c1:4b:27:e8:cb:ee:cb:bb:2c:b6:e6:3b:03:e2:d0:d3:2b:1d:
01:92:7d:38:c6:c4:2b:0c:ea:3a:34:d0:b3:e4:57:d5:26:ea:
d6:5d:c7:e3:67:9d:a8:5c:d4:57:d5:7d:80:9e:40:ab:2c:54:
ab:3c:ea:56:c8:05:78:d4:9b:88:a2:db:5e:f8:86:a1:36:da:
a4:6b:d9:0f:01:19:cd:cf:7b:77:5a:23:d3:9e:6e:ea:9f:42:
ec:f0:c0:de:ed:d1:33:39:00:3c:ba:23:fd:f7:9a:66:88:cc:
2c:89:c8:e4:a0:26:b5:43:be:f9:75:ef:61:0b:1f:10:0e:73:
52:6a:3e:89:61:21:0d:57:0a:89:1d:f1:09:d3:08:9e:0f:8c:
d1:37:bc:25:54:59:cf:73:6d:57:31:c4:cc:86:06:75:c6:52:
20:5e:5d:d4:51:37:71:7c:ff:c3:14:e8:17:a4:ba:a9:de:43:
fe:46:97:13:ce:a9:a8:b8:b8:ea:93:f3:72:57:67:e2:19:42:
ef:32:64:34:c5:bd:d9:8b:80:6a:ef:c4:96:6a:55:96:b6:ec:
00:b0:11:21:52:b6:38:08:06:88:6c:dc:fe:50:b5:63:27:55:
bd:d5:4f:d9:46:17:bb:1b:96:65:65:d1:33:52:0b:62:4f:d6:
b4:d8:77:29
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 10:31:35 2025 by rpki-client