Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b0/546dd9-aa48-445e-be60-0907ad34cb9f/1/0z4TEAje9wWkF_DUDRSKNvJaGjk.mft
File: 0z4TEAje9wWkF_DUDRSKNvJaGjk.mft (raw, json)
Hash identifier: JwNn9Nv6rw1iq3ZK+kF58ZU2lmznct5C+9F4i6W5Lco=
Subject key identifier: 2F:BE:DD:79:56:A6:A0:08:1C:DA:01:FA:E9:44:61:9D:0E:91:5D:32
Authority key identifier: D3:3E:13:10:08:DE:F7:05:A4:17:F0:D4:0D:14:8A:36:F2:5A:1A:39
Certificate issuer: /CN=d33e131008def705a417f0d40d148a36f25a1a39
Certificate serial: 019682102D5E8F5A993632FE3D4A8A26472D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0z4TEAje9wWkF_DUDRSKNvJaGjk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b0/546dd9-aa48-445e-be60-0907ad34cb9f/1/0z4TEAje9wWkF_DUDRSKNvJaGjk.mft
Manifest number: 0F10
Signing time: Tue 29 Apr 2025 15:00:20 +0000
Manifest this update: Tue 29 Apr 2025 15:00:20 +0000
Manifest next update: Wed 30 Apr 2025 15:00:20 +0000
Files and hashes: 1: 0z4TEAje9wWkF_DUDRSKNvJaGjk.crl (hash: L3o19pAXCtfdilxWCxFk4+ArJZ+yabozqMKjmy1WUWI=)
2: A2oqQd54ayoxJnfGY2DGuTLyEzs.roa (hash: cZ73AwWXPJWCopyDomwFy40Gv6sNmCFfCzUBeTVXsq0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b0/546dd9-aa48-445e-be60-0907ad34cb9f/1/0z4TEAje9wWkF_DUDRSKNvJaGjk.crl
rsync://rpki.ripe.net/repository/DEFAULT/b0/546dd9-aa48-445e-be60-0907ad34cb9f/1/0z4TEAje9wWkF_DUDRSKNvJaGjk.mft
rsync://rpki.ripe.net/repository/DEFAULT/0z4TEAje9wWkF_DUDRSKNvJaGjk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 30 Apr 2025 15:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:82:10:2d:5e:8f:5a:99:36:32:fe:3d:4a:8a:26:47:2d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d33e131008def705a417f0d40d148a36f25a1a39
Validity
Not Before: Apr 29 15:00:20 2025 GMT
Not After : Apr 30 15:00:20 2025 GMT
Subject: CN=2fbedd7956a6a0081cda01fae944619d0e915d32
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:94:a7:43:aa:a4:17:06:c2:2b:b4:f8:93:ee:
08:53:58:37:eb:c5:5f:a3:de:af:9f:63:76:96:50:
8c:4d:6e:2d:7d:ed:b9:c2:91:a2:70:41:0c:c0:e1:
f2:7f:1a:86:47:6b:30:04:e8:c2:34:66:bb:4e:55:
c3:e0:31:6d:51:1d:58:6e:2a:51:34:8e:92:e0:64:
0b:c1:c3:2b:0a:96:4a:27:17:6a:ac:2a:8b:3d:20:
61:db:4e:e5:70:e0:e7:d0:22:e6:7f:61:21:e4:99:
cd:87:4a:bd:22:cb:e8:63:8f:96:b8:75:1d:48:c2:
8c:23:7d:e7:5d:ed:1e:50:36:1f:1a:7d:b3:dd:b0:
d5:56:92:a2:fb:46:af:50:72:7e:4d:8c:78:5e:f3:
ed:76:54:b6:79:9c:28:5a:94:e7:86:21:8d:df:47:
7a:93:cd:88:f5:6e:48:db:20:4e:65:21:fb:54:3f:
ea:96:ce:81:17:60:f9:32:31:91:55:bf:f8:87:b3:
10:6f:12:17:7b:9c:e8:4d:96:26:78:27:18:39:b2:
f6:03:8e:58:db:d3:5a:dd:a9:85:fa:5f:43:9d:24:
3d:d0:f8:ae:1f:f1:ae:3b:19:fd:d8:10:79:99:46:
b0:e5:98:5f:eb:3d:2f:e2:2f:b1:86:4c:8a:c8:92:
78:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2F:BE:DD:79:56:A6:A0:08:1C:DA:01:FA:E9:44:61:9D:0E:91:5D:32
X509v3 Authority Key Identifier:
keyid:D3:3E:13:10:08:DE:F7:05:A4:17:F0:D4:0D:14:8A:36:F2:5A:1A:39
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0z4TEAje9wWkF_DUDRSKNvJaGjk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/546dd9-aa48-445e-be60-0907ad34cb9f/1/0z4TEAje9wWkF_DUDRSKNvJaGjk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/546dd9-aa48-445e-be60-0907ad34cb9f/1/0z4TEAje9wWkF_DUDRSKNvJaGjk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
62:82:54:ff:58:26:63:23:4a:1c:cd:bf:4a:82:c9:7b:31:34:
e0:60:47:bf:93:0f:37:94:ed:53:73:96:14:9c:10:e9:8d:64:
fa:f2:70:9a:3a:d6:73:b4:d3:f6:35:b8:3a:e3:af:82:4e:0b:
2f:c6:24:74:02:e5:0f:07:7c:b4:35:58:13:3b:27:eb:11:c6:
c7:69:c9:6f:d3:c1:9c:4e:af:7a:7b:6c:23:d6:a2:ce:d6:31:
50:81:37:d4:2b:3c:3e:3e:20:a2:31:65:31:0b:4c:ed:7b:7b:
31:88:0a:8e:0d:d3:ed:66:5f:47:84:53:4b:45:d3:cd:80:ff:
72:d6:3b:aa:d7:b2:77:f6:75:98:97:b1:56:22:6d:b4:72:60:
13:93:38:31:fe:3d:3c:33:2b:3b:c3:ad:bf:c8:f6:d2:87:43:
ff:60:77:66:3f:8a:34:12:95:82:01:e1:ce:06:97:68:47:fa:
55:91:67:b2:5e:77:f1:22:c9:06:a6:53:a8:54:00:6a:7b:ea:
8e:ed:05:49:db:db:11:1a:58:c3:4f:75:b9:af:1f:f8:20:8f:
42:24:a7:93:ef:cb:d3:d2:52:c0:5e:29:9c:97:79:89:26:1c:
20:72:1d:43:b5:cc:93:a5:00:f7:d6:10:36:6f:cc:7d:e9:e9:
b5:c7:02:07
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 29 19:21:46 2025 by rpki-client