Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dd/6bf5ed-6fe6-4562-b853-9a4ec10607c5/1/0yVj7Zlk5CaBocXSlbDGFIYG5z0.mft
File: 0yVj7Zlk5CaBocXSlbDGFIYG5z0.mft (raw, json)
Hash identifier: WUt5pDnJrzsNgxzcJ1d4/Ilw6q/RdPKSEmE4te1m97c=
Subject key identifier: 2B:D7:B4:BB:43:CD:13:55:30:9A:0F:0F:5B:77:EE:69:B3:59:43:59
Authority key identifier: D3:25:63:ED:99:64:E4:26:81:A1:C5:D2:95:B0:C6:14:86:06:E7:3D
Certificate issuer: /CN=d32563ed9964e42681a1c5d295b0c6148606e73d
Certificate serial: 0196741DB566AE97EEBA25DF1E7F2654DF44
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0yVj7Zlk5CaBocXSlbDGFIYG5z0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/dd/6bf5ed-6fe6-4562-b853-9a4ec10607c5/1/0yVj7Zlk5CaBocXSlbDGFIYG5z0.mft
Manifest number: 0878
Signing time: Sat 26 Apr 2025 22:00:25 +0000
Manifest this update: Sat 26 Apr 2025 22:00:25 +0000
Manifest next update: Sun 27 Apr 2025 22:00:25 +0000
Files and hashes: 1: 0yVj7Zlk5CaBocXSlbDGFIYG5z0.crl (hash: aUaXR8GXvO39oD4vu/PWobtYYnT5s0ibSrt9UsdSq2c=)
2: FAudlpGk_kDfTVYbbohSs3--fwY.roa (hash: s6Wsa14pBQYCdq/M2UXC/KMh/WJZHtqOr4iUBFGtM4E=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/dd/6bf5ed-6fe6-4562-b853-9a4ec10607c5/1/0yVj7Zlk5CaBocXSlbDGFIYG5z0.crl
rsync://rpki.ripe.net/repository/DEFAULT/dd/6bf5ed-6fe6-4562-b853-9a4ec10607c5/1/0yVj7Zlk5CaBocXSlbDGFIYG5z0.mft
rsync://rpki.ripe.net/repository/DEFAULT/0yVj7Zlk5CaBocXSlbDGFIYG5z0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Apr 2025 22:00:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:74:1d:b5:66:ae:97:ee:ba:25:df:1e:7f:26:54:df:44
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d32563ed9964e42681a1c5d295b0c6148606e73d
Validity
Not Before: Apr 26 22:00:25 2025 GMT
Not After : Apr 27 22:00:25 2025 GMT
Subject: CN=2bd7b4bb43cd1355309a0f0f5b77ee69b3594359
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:9f:0e:34:a0:b9:f6:a8:96:da:21:d1:df:d2:
ca:be:f5:be:a2:72:fa:7a:3b:ac:cb:6a:45:48:87:
b6:a9:88:49:15:43:ff:e1:fc:7f:05:6d:fb:b5:9b:
72:9b:a9:a5:a4:c8:7f:7e:c3:77:92:ff:72:2f:00:
95:a0:f5:eb:de:b9:7f:9c:50:b6:43:67:78:87:65:
83:98:43:1f:63:94:a6:4d:43:2e:04:23:a2:cd:ce:
f1:15:18:c8:d5:a2:5d:58:62:9d:44:ec:3a:11:15:
10:88:da:b2:d4:6c:54:8e:bf:61:75:09:97:db:33:
6b:54:a6:d9:a1:e1:f6:e6:e5:fc:0f:52:f8:ac:03:
7b:27:8f:e1:af:1a:24:0e:50:d7:cc:05:b8:0c:e9:
64:b5:f3:bb:4b:9c:97:46:fd:ba:3c:7e:66:0b:8d:
89:48:df:b5:e6:b5:66:88:a1:34:a5:80:a9:a2:5b:
c0:48:a6:16:47:73:25:91:43:d5:8d:ca:87:38:16:
5c:d4:4b:d1:fc:31:07:07:28:1a:38:ec:71:9e:e9:
fc:e9:77:43:97:36:bd:43:ab:22:94:7f:0d:ec:ec:
3a:ac:da:f9:bd:ad:18:01:10:45:fc:44:5c:35:d2:
27:ca:70:c4:83:66:86:e7:aa:2a:5b:48:1f:37:d6:
f9:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2B:D7:B4:BB:43:CD:13:55:30:9A:0F:0F:5B:77:EE:69:B3:59:43:59
X509v3 Authority Key Identifier:
keyid:D3:25:63:ED:99:64:E4:26:81:A1:C5:D2:95:B0:C6:14:86:06:E7:3D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0yVj7Zlk5CaBocXSlbDGFIYG5z0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/6bf5ed-6fe6-4562-b853-9a4ec10607c5/1/0yVj7Zlk5CaBocXSlbDGFIYG5z0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/6bf5ed-6fe6-4562-b853-9a4ec10607c5/1/0yVj7Zlk5CaBocXSlbDGFIYG5z0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5a:f9:92:48:85:5b:6b:2d:c3:7a:c1:3a:48:4c:8d:d5:89:ee:
03:68:db:7b:08:f1:12:f5:7f:76:b8:16:9a:5a:df:17:07:52:
9e:de:15:2a:68:5d:aa:92:ff:d9:15:76:59:f7:e5:ad:75:54:
fb:1f:db:e0:c9:44:aa:28:e7:86:eb:6f:83:04:6b:a1:e2:1a:
cd:79:7d:45:f9:61:71:6f:bb:6e:00:fa:02:a8:91:8a:dd:97:
8f:3a:4e:0d:ec:4d:43:b6:e3:40:3e:41:12:93:d9:72:03:25:
83:4e:0e:5e:4e:f9:53:3d:2f:6f:14:e6:39:1d:95:c6:36:3c:
19:5f:d6:e3:7a:87:1a:6c:36:91:a8:66:07:d0:c1:da:d8:52:
c7:22:f8:24:de:80:2a:9a:6d:65:39:61:0a:e5:97:b5:81:9d:
71:4a:f7:f3:2e:93:8b:20:7d:6d:a1:a2:92:4c:5c:1f:28:92:
c9:e1:c7:92:fe:a6:0b:ce:2b:ee:42:c5:a2:1f:45:47:1d:ea:
64:d2:43:7c:a6:45:a3:bd:a4:d8:5a:ea:10:99:98:54:67:90:
07:7c:e5:28:43:94:85:30:70:50:e4:33:be:c2:8b:1e:0f:a9:
54:c9:a4:f7:95:1a:f2:b0:17:77:9c:d7:3c:b3:63:35:04:f3:
9a:f6:e5:d0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 08:22:01 2025 by rpki-client