Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/be/5ea569-f174-45c5-9db7-2af095ffc9bb/1/0fmHr1rbIwTUJvVA3l1lBUUjHlA.mft
File: 0fmHr1rbIwTUJvVA3l1lBUUjHlA.mft (raw, json)
Hash identifier: exmJoOn8p8oDrhC54L9oSr7dBThWrzxEj1Gg0pgWJNw=
Subject key identifier: 5E:1F:09:D1:6B:25:F6:2C:37:33:7A:BE:C8:F3:C5:11:1A:88:8D:EC
Authority key identifier: D1:F9:87:AF:5A:DB:23:04:D4:26:F5:40:DE:5D:65:05:45:23:1E:50
Certificate issuer: /CN=d1f987af5adb2304d426f540de5d650545231e50
Certificate serial: 019680222A9A9FDB5497549C54D65A0730A7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0fmHr1rbIwTUJvVA3l1lBUUjHlA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/be/5ea569-f174-45c5-9db7-2af095ffc9bb/1/0fmHr1rbIwTUJvVA3l1lBUUjHlA.mft
Manifest number: 09FC
Signing time: Tue 29 Apr 2025 06:00:44 +0000
Manifest this update: Tue 29 Apr 2025 06:00:44 +0000
Manifest next update: Wed 30 Apr 2025 06:00:44 +0000
Files and hashes: 1: 0fmHr1rbIwTUJvVA3l1lBUUjHlA.crl (hash: h6onJFmQ9cnA/hMn/voETP5PA8vyAWYifTOGQqYu4kI=)
2: 5LrP6fsEeipB-xjaCGTQi9KsiHU.roa (hash: IUrzC+/E4lKM4F7rtTCN//MYlbyHBk9E/FLwLHHLeZU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/be/5ea569-f174-45c5-9db7-2af095ffc9bb/1/0fmHr1rbIwTUJvVA3l1lBUUjHlA.crl
rsync://rpki.ripe.net/repository/DEFAULT/be/5ea569-f174-45c5-9db7-2af095ffc9bb/1/0fmHr1rbIwTUJvVA3l1lBUUjHlA.mft
rsync://rpki.ripe.net/repository/DEFAULT/0fmHr1rbIwTUJvVA3l1lBUUjHlA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 30 Apr 2025 06:00:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:80:22:2a:9a:9f:db:54:97:54:9c:54:d6:5a:07:30:a7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d1f987af5adb2304d426f540de5d650545231e50
Validity
Not Before: Apr 29 06:00:44 2025 GMT
Not After : Apr 30 06:00:44 2025 GMT
Subject: CN=5e1f09d16b25f62c37337abec8f3c5111a888dec
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:b7:df:b2:e9:56:cf:d6:0b:0a:38:7e:ea:99:
1d:47:5b:7e:46:0f:34:1a:19:6f:b9:70:90:99:bb:
73:96:7d:c4:8c:4b:6d:ce:64:e5:bb:4d:7d:4f:fb:
71:48:cf:20:b1:55:53:7f:88:01:c5:b4:e0:9d:6b:
fc:7a:28:04:4f:c4:f8:f4:93:69:8d:ce:0c:19:b2:
8d:f9:cb:fb:e0:a7:2a:07:28:9f:d0:b1:7d:07:e8:
1b:f0:7c:5b:86:32:68:c5:51:61:e0:0d:e4:db:55:
5f:0a:19:0a:17:92:b9:ec:79:7e:ac:60:e9:b1:5f:
ef:3a:03:f5:2c:a4:14:9d:2c:78:ad:cb:40:a7:a9:
0f:76:01:27:20:cd:42:fd:31:12:91:15:90:e9:9e:
05:95:22:56:2a:f9:2d:ad:64:86:3c:3e:c0:0a:43:
56:67:cf:2b:4b:46:16:3c:ef:5b:6f:fe:bb:f0:32:
db:98:26:8f:56:35:14:6d:6d:50:1e:19:76:33:75:
62:49:ac:0b:f2:c6:88:9c:cc:cb:52:bd:09:3b:35:
0d:9a:4e:ea:4c:e8:01:a2:76:6f:e5:ee:6a:73:7f:
25:78:59:d5:98:59:05:6a:9c:51:54:7d:66:f9:d9:
1e:e4:5f:b5:f0:5b:54:44:e0:e5:8d:d9:2b:34:e3:
58:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5E:1F:09:D1:6B:25:F6:2C:37:33:7A:BE:C8:F3:C5:11:1A:88:8D:EC
X509v3 Authority Key Identifier:
keyid:D1:F9:87:AF:5A:DB:23:04:D4:26:F5:40:DE:5D:65:05:45:23:1E:50
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0fmHr1rbIwTUJvVA3l1lBUUjHlA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/be/5ea569-f174-45c5-9db7-2af095ffc9bb/1/0fmHr1rbIwTUJvVA3l1lBUUjHlA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/be/5ea569-f174-45c5-9db7-2af095ffc9bb/1/0fmHr1rbIwTUJvVA3l1lBUUjHlA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4b:72:4f:94:84:26:22:47:34:1b:35:54:cd:ef:a4:db:d2:d7:
9a:2c:7a:25:17:d1:32:25:74:30:45:71:7c:2f:25:a8:f3:de:
32:f5:ab:8a:25:25:6d:0b:84:0a:4d:6a:8a:c1:dc:59:4b:09:
12:00:e6:cb:5c:3c:d0:83:79:18:5f:d4:30:14:d3:4b:d8:ce:
04:09:89:35:7b:3f:5b:f6:bd:4f:33:f2:f9:75:fb:57:50:21:
69:fc:df:09:55:6f:14:3e:e0:9e:7d:bc:3b:a8:e3:43:70:a8:
e3:04:62:bd:65:8c:d1:08:16:05:fb:ba:73:f4:9e:1c:30:a1:
64:67:1e:a7:fb:f9:fd:47:a3:66:93:24:31:d4:25:9b:d3:ae:
0a:4d:af:f7:89:c2:0f:d1:d9:f2:c0:2c:d8:9d:2b:0e:9c:d1:
4b:94:4e:47:01:88:d9:2c:fe:e5:30:d9:80:1b:55:cc:26:14:
15:ee:e8:a2:22:30:7b:ae:95:1d:93:b3:fa:37:58:21:43:73:
73:06:b1:ca:d1:a9:66:0c:cd:22:00:35:80:bf:43:76:2d:55:
f8:b5:d1:25:84:37:a0:2e:22:9a:1d:be:d6:e5:04:b5:61:c1:
79:41:4c:6f:e7:90:d0:f5:ad:df:ed:9d:69:2f:5c:99:29:f0:
60:1b:da:94
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 29 12:09:12 2025 by rpki-client