Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/af/ca5c19-e496-49e8-8b93-72a1f37719bb/1/0PT6gHWHU7JDohZe3ep12-7oJsQ.mft
File: 0PT6gHWHU7JDohZe3ep12-7oJsQ.mft (raw, json)
Hash identifier: BvuJJNrloI0Ns8369tPVHg86xGirLuY75JHKui5x9/c=
Subject key identifier: 03:79:F0:B6:6A:3F:20:74:93:F6:6B:F4:A0:40:43:02:3A:3F:C0:96
Authority key identifier: D0:F4:FA:80:75:87:53:B2:43:A2:16:5E:DD:EA:75:DB:EE:E8:26:C4
Certificate issuer: /CN=d0f4fa80758753b243a2165eddea75dbeee826c4
Certificate serial: 019684A3AAE66F466DA7D06A3576105D4F38
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0PT6gHWHU7JDohZe3ep12-7oJsQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/af/ca5c19-e496-49e8-8b93-72a1f37719bb/1/0PT6gHWHU7JDohZe3ep12-7oJsQ.mft
Manifest number: 1002
Signing time: Wed 30 Apr 2025 03:00:40 +0000
Manifest this update: Wed 30 Apr 2025 03:00:40 +0000
Manifest next update: Thu 01 May 2025 03:00:40 +0000
Files and hashes: 1: 0PT6gHWHU7JDohZe3ep12-7oJsQ.crl (hash: wEg9Ln53JnNm8MbfiFDPmRZSD/zUx8LzGszpQ1V4xTk=)
2: dylc3WZzrjgV2VB-T70ps5y7_v8.roa (hash: CjiSp/7ghqmIWPlGrqN52h+3zV23QhuVF2kvnW7CFVo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/af/ca5c19-e496-49e8-8b93-72a1f37719bb/1/0PT6gHWHU7JDohZe3ep12-7oJsQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/af/ca5c19-e496-49e8-8b93-72a1f37719bb/1/0PT6gHWHU7JDohZe3ep12-7oJsQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/0PT6gHWHU7JDohZe3ep12-7oJsQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 01 May 2025 03:00:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:84:a3:aa:e6:6f:46:6d:a7:d0:6a:35:76:10:5d:4f:38
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d0f4fa80758753b243a2165eddea75dbeee826c4
Validity
Not Before: Apr 30 03:00:40 2025 GMT
Not After : May 1 03:00:40 2025 GMT
Subject: CN=0379f0b66a3f207493f66bf4a04043023a3fc096
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ec:1b:5a:38:40:ea:ec:95:a5:90:b0:fc:e6:68:
b1:42:46:de:36:a9:d9:0a:ab:93:b9:4f:85:c1:f3:
b4:16:40:f4:f3:ca:87:6c:3b:30:be:22:56:8d:30:
31:b4:32:95:dc:05:33:37:72:be:3c:c2:d7:7b:29:
58:c0:98:ce:e2:5d:9e:1b:a7:a4:ec:21:9e:73:19:
3b:c5:bb:b1:91:58:52:1b:19:97:84:40:a7:cc:b2:
7e:fa:2c:0f:ca:05:e6:67:4c:14:ba:92:f2:32:b4:
65:3d:83:d4:9b:3d:ba:e2:bb:b3:e8:80:1d:13:9c:
39:e7:fa:24:d0:44:18:86:54:da:a6:39:27:07:38:
fb:39:82:7a:9f:54:45:98:b9:74:a7:1c:80:44:43:
1c:f7:ca:57:14:7b:06:60:8c:3e:ec:b8:80:9c:eb:
0f:25:d0:b2:52:50:cb:ba:d6:0e:fd:c4:85:4b:64:
06:b7:39:fe:d8:a3:4b:74:5c:50:36:b7:82:3d:91:
f2:ae:12:03:87:5c:e8:56:c2:9e:66:2a:46:d4:d2:
25:bc:8b:e1:3f:59:52:d3:6c:c5:22:66:0b:a1:89:
29:6a:9b:0f:1b:59:e9:2e:12:2c:dd:cd:fd:5a:be:
8f:40:e2:67:51:74:78:80:f3:b7:e8:22:1f:e8:b2:
bb:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
03:79:F0:B6:6A:3F:20:74:93:F6:6B:F4:A0:40:43:02:3A:3F:C0:96
X509v3 Authority Key Identifier:
keyid:D0:F4:FA:80:75:87:53:B2:43:A2:16:5E:DD:EA:75:DB:EE:E8:26:C4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0PT6gHWHU7JDohZe3ep12-7oJsQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/af/ca5c19-e496-49e8-8b93-72a1f37719bb/1/0PT6gHWHU7JDohZe3ep12-7oJsQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/af/ca5c19-e496-49e8-8b93-72a1f37719bb/1/0PT6gHWHU7JDohZe3ep12-7oJsQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
77:44:e5:44:c9:93:cc:c0:d8:70:a8:2f:db:36:6a:d1:55:0d:
89:0f:af:b5:68:80:2a:c9:d7:7b:26:08:e5:1d:64:f6:4b:81:
66:87:a1:2d:20:41:6c:7c:c7:c7:43:ff:d8:07:0a:e7:a1:16:
a9:32:99:cd:2f:31:4e:c3:ac:3a:ed:33:14:c4:91:8f:ac:95:
93:22:3b:99:e2:5d:79:1f:d8:75:1a:96:74:25:b7:fa:9b:3e:
74:d6:a0:47:11:d7:bc:73:5f:3c:8d:cd:32:4a:31:cc:d8:0f:
57:c7:5f:75:91:ce:7e:25:ac:54:59:9b:65:19:ce:85:ce:96:
7e:3f:7c:3f:09:79:48:6d:c9:62:49:32:df:5c:dd:be:36:ac:
4a:ed:32:e0:99:ae:2b:78:cf:79:48:3b:3f:0e:ed:1c:56:d2:
82:ef:02:64:53:b7:e4:72:a2:47:4c:c7:4d:d9:f2:ae:2c:7c:
5e:f0:47:68:ca:9d:b3:38:37:58:51:20:ea:0f:e4:45:c0:c2:
cf:25:1d:6e:4e:b5:03:b9:4d:d8:46:1f:f8:e0:09:24:a9:bb:
d2:1b:fb:f3:b2:5f:e3:97:e4:de:c2:07:60:a3:1e:76:86:e8:
61:9c:31:ae:82:2a:83:1b:9e:7b:80:50:a5:90:bf:f2:2c:f1:
76:28:f0:ec
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 30 12:24:55 2025 by rpki-client