Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d1/abb89f-09b9-44e8-8487-e31c0fdecd27/1/rTn6fNFTPal1zzmbms_-v-0mqes.mft
File: rTn6fNFTPal1zzmbms_-v-0mqes.mft (raw, json)
Hash identifier: w4rScoXm8s4C/h2CWQgOSTpa5yYCiUzUXms5KObYfsc=
Subject key identifier: EA:7A:18:CB:3C:B3:92:40:E7:DE:A3:21:1D:EA:B7:11:13:BF:57:1A
Authority key identifier: AD:39:FA:7C:D1:53:3D:A9:75:CF:39:9B:9A:CF:FE:BF:ED:26:A9:EB
Certificate issuer: /CN=ad39fa7cd1533da975cf399b9acffebfed26a9eb
Certificate serial: 019674547C73E3127BE7E8B1B5E70B206534
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rTn6fNFTPal1zzmbms_-v-0mqes.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d1/abb89f-09b9-44e8-8487-e31c0fdecd27/1/rTn6fNFTPal1zzmbms_-v-0mqes.mft
Manifest number: 0BC8
Signing time: Sat 26 Apr 2025 23:00:15 +0000
Manifest this update: Sat 26 Apr 2025 23:00:15 +0000
Manifest next update: Sun 27 Apr 2025 23:00:15 +0000
Files and hashes: 1: CMlrDDFsYjHx1MPg2lyXpQ3DpFs.roa (hash: MsLGIx/t++duqgpMvVk0jo/ApATi4rMLAAgAWe7j6rM=)
2: rTn6fNFTPal1zzmbms_-v-0mqes.crl (hash: 77pBixX/F2kCbAZqijVMwdkUISHIzlCSOLiA0r+WwOc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d1/abb89f-09b9-44e8-8487-e31c0fdecd27/1/rTn6fNFTPal1zzmbms_-v-0mqes.crl
rsync://rpki.ripe.net/repository/DEFAULT/d1/abb89f-09b9-44e8-8487-e31c0fdecd27/1/rTn6fNFTPal1zzmbms_-v-0mqes.mft
rsync://rpki.ripe.net/repository/DEFAULT/rTn6fNFTPal1zzmbms_-v-0mqes.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Apr 2025 20:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:74:54:7c:73:e3:12:7b:e7:e8:b1:b5:e7:0b:20:65:34
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ad39fa7cd1533da975cf399b9acffebfed26a9eb
Validity
Not Before: Apr 26 23:00:15 2025 GMT
Not After : Apr 27 23:00:15 2025 GMT
Subject: CN=ea7a18cb3cb39240e7dea3211deab71113bf571a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8d:09:60:e4:85:bb:9e:8c:18:aa:4c:05:54:bb:
d5:2e:4f:e6:f5:f8:8a:cd:24:4c:74:bf:c6:94:5b:
79:9e:15:a8:13:2d:8e:ce:93:3a:b2:38:8b:bf:1f:
fb:3f:08:e0:5f:8f:74:f6:9f:91:cc:fc:c0:b0:5c:
77:4d:4e:00:53:a7:fe:52:96:85:bf:cf:f5:47:26:
2c:2d:73:44:04:cb:5c:c6:28:84:3f:0f:39:03:a4:
93:e5:ac:c0:e5:f0:b5:57:f6:82:19:47:51:5b:69:
c9:d9:da:ae:2d:10:31:38:5c:a9:33:15:42:a5:d7:
f5:c4:56:41:c5:77:ed:de:24:ba:c7:c2:76:1f:87:
2c:1c:eb:33:7a:af:02:3a:5f:6b:0f:6b:fb:0f:f5:
ff:62:08:b0:5e:3a:69:6f:62:a3:c3:0d:6e:aa:8f:
47:2b:dd:f7:a2:6f:fd:b8:64:df:d1:4e:0c:1b:ac:
7e:e8:6b:4c:ed:eb:96:6d:12:a1:30:14:b0:27:b9:
f1:55:25:c5:cd:9c:28:fb:04:18:4e:5d:bd:81:24:
8a:7c:75:a4:a3:25:c7:3f:93:3b:87:83:ce:c9:f0:
d9:aa:ce:da:03:e7:51:75:b5:23:a2:cc:2f:d6:ad:
3d:04:38:a8:d2:a6:3b:f5:8e:0f:63:af:2f:e6:94:
39:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EA:7A:18:CB:3C:B3:92:40:E7:DE:A3:21:1D:EA:B7:11:13:BF:57:1A
X509v3 Authority Key Identifier:
keyid:AD:39:FA:7C:D1:53:3D:A9:75:CF:39:9B:9A:CF:FE:BF:ED:26:A9:EB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rTn6fNFTPal1zzmbms_-v-0mqes.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d1/abb89f-09b9-44e8-8487-e31c0fdecd27/1/rTn6fNFTPal1zzmbms_-v-0mqes.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d1/abb89f-09b9-44e8-8487-e31c0fdecd27/1/rTn6fNFTPal1zzmbms_-v-0mqes.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
68:a9:4c:90:58:14:3b:42:8c:4a:a4:e9:d5:01:5a:a1:0d:95:
c5:68:91:95:bd:12:a9:45:e4:9b:f3:a0:f8:d7:0f:51:52:c2:
de:2d:bf:5c:69:5a:66:66:1f:4b:c6:3f:b4:41:7a:33:84:03:
78:32:8d:e1:2e:ff:72:62:d9:d5:ea:0c:43:d3:48:b4:3a:00:
b4:a8:58:83:0f:aa:80:57:a5:b8:0c:eb:d6:48:21:bd:c4:0d:
a7:24:33:ba:d8:f1:a6:6a:3c:af:5a:6a:25:2c:68:8d:8d:30:
71:65:95:cf:75:c8:64:23:9f:a3:61:be:e5:17:6e:a7:57:14:
69:13:a1:1a:33:15:1d:f2:39:1c:e7:7a:8c:63:4f:8e:d5:12:
3b:c9:e1:3d:98:1a:d7:98:a3:0f:e7:23:6b:56:32:2a:15:0e:
87:5f:3a:23:75:77:89:09:b5:43:03:e8:e8:d7:fa:4e:3e:b5:
c0:95:73:e3:5e:ae:a8:77:ef:f9:d2:e3:d1:fe:31:7a:5f:de:
9b:6f:bc:4c:42:83:97:d8:3c:60:73:05:e0:8a:21:51:f9:35:
90:82:bf:11:f1:21:4a:f6:99:6c:e3:8f:ed:1a:b7:da:14:c4:
6f:93:17:d6:31:8c:c1:70:00:3f:54:58:dd:77:d5:e8:7f:bb:
32:49:65:6d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 06:17:34 2025 by rpki-client