Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cc/cbca0b-6453-494c-8727-57e08f61f2ec/1/0mF9FdtY_jBi0brb4E0wwZSd1f8.mft
File: 0mF9FdtY_jBi0brb4E0wwZSd1f8.mft (raw, json)
Hash identifier: /ulo6i5LfquaNFLqXuAMdgodF52BH99X4Oopyucegbg=
Subject key identifier: CE:1B:A3:AC:28:5F:25:C9:66:33:1D:01:9C:EB:22:4D:BB:D1:4D:00
Authority key identifier: D2:61:7D:15:DB:58:FE:30:62:D1:BA:DB:E0:4D:30:C1:94:9D:D5:FF
Certificate issuer: /CN=d2617d15db58fe3062d1badbe04d30c1949dd5ff
Certificate serial: 019675D50D489C0EB7A9D5F51A3613EC9F37
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0mF9FdtY_jBi0brb4E0wwZSd1f8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cc/cbca0b-6453-494c-8727-57e08f61f2ec/1/0mF9FdtY_jBi0brb4E0wwZSd1f8.mft
Manifest number: 150A
Signing time: Sun 27 Apr 2025 06:00:18 +0000
Manifest this update: Sun 27 Apr 2025 06:00:18 +0000
Manifest next update: Mon 28 Apr 2025 06:00:18 +0000
Files and hashes: 1: 0mF9FdtY_jBi0brb4E0wwZSd1f8.crl (hash: Rb3I+5pNpSRnIjr3OR4nsG8QXhr+yCBPkz/HVOo5dRI=)
2: j-Iupp3EcWQfbMD2aDvdXh5buVM.roa (hash: vNF4TPFh0oVURLAenwqLDdq2RvvuTpEILFtX5lE+Y4U=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cc/cbca0b-6453-494c-8727-57e08f61f2ec/1/0mF9FdtY_jBi0brb4E0wwZSd1f8.crl
rsync://rpki.ripe.net/repository/DEFAULT/cc/cbca0b-6453-494c-8727-57e08f61f2ec/1/0mF9FdtY_jBi0brb4E0wwZSd1f8.mft
rsync://rpki.ripe.net/repository/DEFAULT/0mF9FdtY_jBi0brb4E0wwZSd1f8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Apr 2025 05:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:75:d5:0d:48:9c:0e:b7:a9:d5:f5:1a:36:13:ec:9f:37
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d2617d15db58fe3062d1badbe04d30c1949dd5ff
Validity
Not Before: Apr 27 06:00:18 2025 GMT
Not After : Apr 28 06:00:18 2025 GMT
Subject: CN=ce1ba3ac285f25c966331d019ceb224dbbd14d00
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:34:4c:71:56:d7:88:f2:9f:43:81:ac:45:ec:
b6:be:1e:19:e6:b3:a9:96:a9:51:6e:8a:66:17:9b:
92:60:0f:e1:f2:4b:2f:36:9c:ba:88:a1:6e:9f:d7:
e1:a5:ba:90:06:47:69:ae:4d:3f:47:26:a5:8e:a5:
67:ac:8b:ef:d0:28:ff:26:9b:91:ee:c2:65:86:5c:
2e:65:53:a6:64:57:26:e0:d2:0e:ac:f7:b7:f2:f6:
25:67:2e:9f:58:29:4f:eb:cf:0f:24:87:ba:c2:c2:
d8:0c:be:de:02:4b:5d:a8:4c:8d:05:54:2c:ca:ef:
89:83:92:76:d1:74:4f:49:14:ab:b0:07:ee:f1:7c:
e9:d0:30:0c:24:f9:b3:4a:c7:c7:42:b5:ad:3b:26:
ab:90:9b:69:fe:31:e8:4f:2e:de:34:65:97:22:b4:
fb:c7:6c:39:95:dc:9c:53:4c:fd:b8:9e:00:ae:2b:
10:dc:62:32:0d:a5:cd:d1:a7:d3:d3:f5:0f:d0:bd:
9c:24:24:d1:09:9f:1a:13:f9:ae:c8:8a:76:87:42:
3a:17:bc:c3:a7:11:3b:8c:8c:ef:5a:f6:a7:f1:cf:
4c:19:84:7f:1c:c1:40:b5:bc:d1:b6:bd:dc:05:f2:
0f:36:37:0d:d2:2b:f0:82:84:c2:87:ba:88:be:da:
a7:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CE:1B:A3:AC:28:5F:25:C9:66:33:1D:01:9C:EB:22:4D:BB:D1:4D:00
X509v3 Authority Key Identifier:
keyid:D2:61:7D:15:DB:58:FE:30:62:D1:BA:DB:E0:4D:30:C1:94:9D:D5:FF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0mF9FdtY_jBi0brb4E0wwZSd1f8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/cbca0b-6453-494c-8727-57e08f61f2ec/1/0mF9FdtY_jBi0brb4E0wwZSd1f8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/cbca0b-6453-494c-8727-57e08f61f2ec/1/0mF9FdtY_jBi0brb4E0wwZSd1f8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0f:48:8f:46:32:a1:d1:b9:88:16:5e:41:48:54:75:3b:b2:28:
62:c9:a6:59:61:dd:d6:4d:13:91:bf:aa:74:c2:06:32:ef:c9:
81:c9:b1:d3:18:29:28:fa:9f:49:04:ea:53:9f:b4:3a:c1:2e:
eb:0e:b1:a0:29:a5:8a:bb:26:85:34:14:5d:39:d1:de:68:39:
8c:e4:61:14:8f:4f:42:2e:cd:d2:ab:2a:e2:27:5d:9a:7e:3b:
a0:d2:d1:1b:aa:8f:52:20:eb:7a:46:9c:16:2d:28:bd:01:56:
2c:60:3a:83:af:1f:e1:01:4b:a2:57:a3:4c:de:70:f1:51:d7:
18:d0:16:c5:29:1a:f3:4c:e2:bd:7f:cd:3c:fb:92:3e:63:9e:
53:15:84:99:c5:8d:9a:32:d7:2a:af:11:e2:39:60:ed:71:95:
a6:45:b9:3e:21:32:78:c3:34:3e:cd:61:b2:b1:f1:e6:15:5b:
0b:f8:c9:5c:79:07:69:ff:59:a0:a1:57:f6:ef:2e:c5:ff:21:
46:6b:b8:eb:c7:e5:28:d9:3a:4d:5d:87:12:cd:99:45:79:31:
26:58:a8:ba:e8:1c:35:36:21:49:27:9f:89:99:1f:52:a9:43:
7f:f0:31:fc:96:21:12:13:36:27:e4:4f:e6:7a:d7:00:05:d6:
31:20:5c:2b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 08:57:43 2025 by rpki-client