Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bd/aeeea4-651f-4d1a-ab52-23fcc524ea88/1/C-oOzdY0o8B141253KV2jk92zYU.mft
File: C-oOzdY0o8B141253KV2jk92zYU.mft (raw, json)
Hash identifier: vvdTDlMzq0Kc3Uyc85DJ2i9Buv8pYgSJksPrRGnn9dI=
Subject key identifier: 71:1C:3F:2B:F5:57:E3:04:E6:3D:BC:4A:16:8A:88:E9:9B:C1:D6:2F
Authority key identifier: 0B:EA:0E:CD:D6:34:A3:C0:75:E3:5D:B9:DC:A5:76:8E:4F:76:CD:85
Certificate issuer: /CN=0bea0ecdd634a3c075e35db9dca5768e4f76cd85
Certificate serial: 01967E33817A1099E556165BDC2CF0428237
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/C-oOzdY0o8B141253KV2jk92zYU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bd/aeeea4-651f-4d1a-ab52-23fcc524ea88/1/C-oOzdY0o8B141253KV2jk92zYU.mft
Manifest number: 09D3
Signing time: Mon 28 Apr 2025 21:00:26 +0000
Manifest this update: Mon 28 Apr 2025 21:00:26 +0000
Manifest next update: Tue 29 Apr 2025 21:00:26 +0000
Files and hashes: 1: C-oOzdY0o8B141253KV2jk92zYU.crl (hash: LmRR3h7b5rAvznk6wjFtEu0Lp1vKXWjXj16DGbe+UTE=)
2: ThulFZ8R9xpzNZdDBqkxoRYsRek.roa (hash: j39ExXLrnr3e7L1fGlK9W3BRFHLWAFmsEEaBZfVOBbo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bd/aeeea4-651f-4d1a-ab52-23fcc524ea88/1/C-oOzdY0o8B141253KV2jk92zYU.crl
rsync://rpki.ripe.net/repository/DEFAULT/bd/aeeea4-651f-4d1a-ab52-23fcc524ea88/1/C-oOzdY0o8B141253KV2jk92zYU.mft
rsync://rpki.ripe.net/repository/DEFAULT/C-oOzdY0o8B141253KV2jk92zYU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 29 Apr 2025 21:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:7e:33:81:7a:10:99:e5:56:16:5b:dc:2c:f0:42:82:37
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0bea0ecdd634a3c075e35db9dca5768e4f76cd85
Validity
Not Before: Apr 28 21:00:26 2025 GMT
Not After : Apr 29 21:00:26 2025 GMT
Subject: CN=711c3f2bf557e304e63dbc4a168a88e99bc1d62f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:dd:59:23:aa:7f:34:bf:59:ee:5b:6f:2b:d8:
be:f6:0d:d0:3f:33:0a:5f:f1:75:57:ae:9a:24:84:
58:73:7c:39:43:ae:f2:70:75:04:dd:16:9f:39:8d:
c4:d9:1f:10:ce:3c:c3:35:8b:a9:4f:3f:0b:0f:6f:
87:e4:6b:0a:7c:27:fa:6c:54:48:7b:d1:86:ad:9f:
ff:ae:ea:c4:8e:f9:2b:3c:1c:42:d2:36:eb:91:60:
74:09:25:b2:0b:8d:e1:c2:c9:51:a3:51:36:76:09:
8d:07:0c:3f:b3:d8:2f:f1:96:76:22:af:c3:d9:bf:
c1:d5:6c:2a:74:f5:7f:03:a3:81:a6:fb:1b:f7:4b:
be:f9:8c:41:9f:28:45:a9:e5:06:55:09:f6:6f:37:
5a:c4:cb:59:6b:5f:ee:5b:7b:00:81:d4:7f:c5:03:
76:09:fd:81:11:ab:2f:76:bb:c0:b8:df:4f:03:c8:
36:e0:a2:d3:a9:6d:18:96:87:ec:fd:a7:3e:dc:30:
68:bb:de:88:49:e8:c2:4e:f5:d5:f8:10:24:eb:cd:
26:75:6a:93:4b:2f:89:69:4f:a9:2f:03:cf:cf:a4:
ab:d7:4d:ab:96:3e:0e:90:86:9e:d2:89:69:56:da:
6a:07:80:58:93:84:38:03:d0:ff:e8:64:98:a5:6f:
51:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
71:1C:3F:2B:F5:57:E3:04:E6:3D:BC:4A:16:8A:88:E9:9B:C1:D6:2F
X509v3 Authority Key Identifier:
keyid:0B:EA:0E:CD:D6:34:A3:C0:75:E3:5D:B9:DC:A5:76:8E:4F:76:CD:85
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/C-oOzdY0o8B141253KV2jk92zYU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bd/aeeea4-651f-4d1a-ab52-23fcc524ea88/1/C-oOzdY0o8B141253KV2jk92zYU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bd/aeeea4-651f-4d1a-ab52-23fcc524ea88/1/C-oOzdY0o8B141253KV2jk92zYU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1e:2b:b1:41:e7:13:09:49:4e:22:09:f1:99:a2:1b:e2:0e:66:
52:37:88:6f:da:db:b3:4a:03:42:eb:26:5c:23:97:30:ff:e7:
b3:cf:8c:86:7f:41:90:8e:11:7a:e3:19:a2:4b:25:c8:37:70:
3d:19:6b:38:33:52:84:7a:a0:a7:2d:f7:97:c0:16:33:ae:32:
d1:a3:f4:e4:88:c8:ec:10:71:b3:d3:9e:57:a7:d9:a8:e4:ef:
41:1c:88:1b:1f:1b:a1:49:02:b3:dd:03:9e:ed:08:99:3b:6e:
5a:ea:b3:2b:a6:3e:d0:ef:79:37:62:36:3a:c7:83:fb:e8:f9:
7b:97:dc:e5:d0:9d:f0:da:fa:78:e0:57:ee:74:73:73:43:f4:
23:b3:67:eb:3a:fa:47:6a:3c:76:94:90:24:d1:d4:5f:9a:a1:
61:e7:0f:4f:26:8b:73:d1:c7:ae:79:5b:00:74:de:22:13:6b:
67:49:2a:93:93:76:c9:99:cb:ee:11:ec:dd:40:95:74:9b:cb:
2b:82:bc:94:20:1a:13:2c:52:d8:f1:ca:b5:ea:10:bf:ee:68:
8d:b9:f2:a9:6c:98:ee:68:f4:5a:9d:90:c9:00:9b:72:f0:36:
46:97:46:35:36:34:0d:46:bb:cf:17:b9:2c:e8:30:6c:ed:99:
b3:7f:4d:d2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 29 07:04:48 2025 by rpki-client