Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bc/4963ec-576f-4167-993c-99f182213d4f/1/0d4HoaH2W9EW4R-fEQhgS26VzP0.mft
File: 0d4HoaH2W9EW4R-fEQhgS26VzP0.mft (raw, json)
Hash identifier: 7proc6KArcWReGIcANNRhQ2DTYxN7n6X1hEJix4cpzw=
Subject key identifier: 5B:51:F3:9A:31:04:4B:94:B5:D8:ED:57:FD:00:22:D4:63:57:C0:56
Authority key identifier: D1:DE:07:A1:A1:F6:5B:D1:16:E1:1F:9F:11:08:60:4B:6E:95:CC:FD
Certificate issuer: /CN=d1de07a1a1f65bd116e11f9f1108604b6e95ccfd
Certificate serial: 0196760BDB73BD1DB380D9DA805AB60DE518
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0d4HoaH2W9EW4R-fEQhgS26VzP0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bc/4963ec-576f-4167-993c-99f182213d4f/1/0d4HoaH2W9EW4R-fEQhgS26VzP0.mft
Manifest number: 10A5
Signing time: Sun 27 Apr 2025 07:00:10 +0000
Manifest this update: Sun 27 Apr 2025 07:00:10 +0000
Manifest next update: Mon 28 Apr 2025 07:00:10 +0000
Files and hashes: 1: 0d4HoaH2W9EW4R-fEQhgS26VzP0.crl (hash: RlrmPhOPIMv5IB+of+8KRFdN1dYsVG06DcPdRNexjhw=)
2: QEHZF8Tlk9QKI2YxEH34bnx0Z1c.roa (hash: 8+749rwNuEEuELLtmccQKg/as7h9BdIGWfJq5dqwT3A=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bc/4963ec-576f-4167-993c-99f182213d4f/1/0d4HoaH2W9EW4R-fEQhgS26VzP0.crl
rsync://rpki.ripe.net/repository/DEFAULT/bc/4963ec-576f-4167-993c-99f182213d4f/1/0d4HoaH2W9EW4R-fEQhgS26VzP0.mft
rsync://rpki.ripe.net/repository/DEFAULT/0d4HoaH2W9EW4R-fEQhgS26VzP0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Apr 2025 07:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:76:0b:db:73:bd:1d:b3:80:d9:da:80:5a:b6:0d:e5:18
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d1de07a1a1f65bd116e11f9f1108604b6e95ccfd
Validity
Not Before: Apr 27 07:00:10 2025 GMT
Not After : Apr 28 07:00:10 2025 GMT
Subject: CN=5b51f39a31044b94b5d8ed57fd0022d46357c056
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:24:5a:12:44:ea:28:b3:cb:bb:a0:fa:05:d4:
49:d0:05:dc:64:17:c9:94:90:02:61:f9:1b:9f:ae:
a7:f8:d0:50:b1:ea:d5:f3:3c:7a:7f:56:57:2a:fb:
34:18:8b:c4:d0:9f:f6:b0:e6:21:91:50:f2:09:0e:
3a:45:0b:ad:c5:48:08:cc:a5:d4:b9:3b:05:ec:03:
d6:3c:62:a4:6b:c7:dc:81:b0:b2:8f:ab:0b:4f:86:
06:bb:f1:5b:65:ba:32:6c:34:89:71:24:2a:56:f2:
87:1f:fd:73:6b:07:e7:e9:02:a6:7a:77:0b:35:d2:
4e:3d:38:54:e2:36:97:c1:1c:a8:91:22:f4:fa:1e:
d9:f4:a1:89:e0:ec:6c:b6:66:cc:c3:c2:f4:7d:44:
b4:b2:4e:92:60:fe:ac:ed:cb:a3:80:80:ef:0c:25:
36:01:8d:f0:5f:be:ea:b9:f4:61:77:fe:56:51:cb:
b9:07:9e:d0:ba:4d:8d:6e:b4:d9:54:bc:89:fe:d2:
4c:61:47:f7:e1:8d:ba:05:62:f5:4d:b0:c9:02:7b:
e7:ad:bb:1c:a2:0c:a7:85:31:cc:ac:b6:1d:01:a2:
dc:4a:0f:06:ba:25:3f:89:46:73:a4:17:15:7b:7a:
00:fe:e2:8e:21:46:65:9f:c4:07:92:34:09:7a:ef:
82:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5B:51:F3:9A:31:04:4B:94:B5:D8:ED:57:FD:00:22:D4:63:57:C0:56
X509v3 Authority Key Identifier:
keyid:D1:DE:07:A1:A1:F6:5B:D1:16:E1:1F:9F:11:08:60:4B:6E:95:CC:FD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0d4HoaH2W9EW4R-fEQhgS26VzP0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/4963ec-576f-4167-993c-99f182213d4f/1/0d4HoaH2W9EW4R-fEQhgS26VzP0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/4963ec-576f-4167-993c-99f182213d4f/1/0d4HoaH2W9EW4R-fEQhgS26VzP0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b6:73:d4:49:ae:12:0d:bf:09:26:45:44:0b:c1:a0:99:6a:af:
b6:86:65:50:76:43:02:7f:ed:af:1f:26:f3:21:f9:eb:95:ca:
0e:9a:bb:43:9c:26:87:11:19:3f:50:f9:16:e7:26:cc:df:b5:
f7:35:a7:5e:dc:47:2f:e3:6f:0a:1e:26:ef:65:f7:70:b4:18:
af:6d:a3:bf:a0:28:66:40:20:db:48:01:f5:6b:66:df:e8:f3:
97:fa:32:17:ba:af:a8:bd:e5:c9:c0:bb:d5:a3:f8:4c:37:0f:
07:a1:c5:5f:bf:dd:1d:95:56:f1:28:cd:07:57:52:8a:fb:91:
89:f6:4d:ac:77:4b:8a:d9:8f:14:74:3c:02:a7:4f:69:58:7e:
0a:e6:4f:bf:e2:5e:1f:d9:f2:53:f3:2e:4f:e1:ed:5f:ba:88:
0c:7b:ea:80:25:80:6b:51:fa:10:6d:c8:91:67:af:cd:d4:9f:
0e:8f:9c:42:80:e5:11:df:ec:9b:ce:96:ab:e5:b2:93:97:50:
95:8b:a7:0d:b8:3d:f4:90:72:d9:0a:62:32:b2:77:0c:ee:4e:
b8:44:c8:04:19:4a:76:7b:2d:5b:69:74:4e:b6:07:2e:11:29:
f4:b5:45:15:cd:b2:9d:bb:e0:e8:5f:33:2b:6b:61:58:57:70:
ce:d7:3e:05
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 17:43:59 2025 by rpki-client