Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e6/0d0300-74ee-4677-ad62-c24b7db20de7/1/0BbMVqmVUHtPqHxkkEQvBrYYZoc.mft
File: 0BbMVqmVUHtPqHxkkEQvBrYYZoc.mft (raw, json)
Hash identifier: DfrceaMoueWdIdGwBxgmWx6Z7k5Red7/DnslG4F2unM=
Subject key identifier: D6:6B:71:32:CF:CD:34:0E:37:89:17:C3:5D:12:CA:12:99:94:30:1F
Authority key identifier: D0:16:CC:56:A9:95:50:7B:4F:A8:7C:64:90:44:2F:06:B6:18:66:87
Certificate issuer: /CN=d016cc56a995507b4fa87c6490442f06b6186687
Certificate serial: 019689CA1C990F05A3007EBC125B3061AA86
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0BbMVqmVUHtPqHxkkEQvBrYYZoc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e6/0d0300-74ee-4677-ad62-c24b7db20de7/1/0BbMVqmVUHtPqHxkkEQvBrYYZoc.mft
Manifest number: 1518
Signing time: Thu 01 May 2025 03:00:46 +0000
Manifest this update: Thu 01 May 2025 03:00:46 +0000
Manifest next update: Fri 02 May 2025 03:00:46 +0000
Files and hashes: 1: 0BbMVqmVUHtPqHxkkEQvBrYYZoc.crl (hash: FvGUij3AfDcg4RpY6rTY5Cuh5YTr3TQ17/52zdat0QE=)
2: f7YxschREuysiSjDT6JDZ1hIzJU.roa (hash: od3isdJHCZlHUjM+HPneCDkTI9VrgHkYJNlcsSC6Dag=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e6/0d0300-74ee-4677-ad62-c24b7db20de7/1/0BbMVqmVUHtPqHxkkEQvBrYYZoc.crl
rsync://rpki.ripe.net/repository/DEFAULT/e6/0d0300-74ee-4677-ad62-c24b7db20de7/1/0BbMVqmVUHtPqHxkkEQvBrYYZoc.mft
rsync://rpki.ripe.net/repository/DEFAULT/0BbMVqmVUHtPqHxkkEQvBrYYZoc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 02 May 2025 03:00:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:89:ca:1c:99:0f:05:a3:00:7e:bc:12:5b:30:61:aa:86
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d016cc56a995507b4fa87c6490442f06b6186687
Validity
Not Before: May 1 03:00:46 2025 GMT
Not After : May 2 03:00:46 2025 GMT
Subject: CN=d66b7132cfcd340e378917c35d12ca129994301f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:e5:39:16:9c:73:96:d9:d3:cf:81:30:4b:24:
c6:16:03:ab:93:88:6e:b2:87:52:bf:53:84:59:f0:
22:e8:55:e0:26:e7:af:52:c0:79:0b:71:24:52:f4:
fe:11:db:7a:18:5c:4d:8f:e8:f1:7d:8a:92:e2:54:
45:59:c2:ef:bc:9a:44:7e:dc:71:8d:c8:17:19:5b:
6e:0e:fc:9b:32:06:e2:c0:9d:bc:31:54:3f:69:0a:
71:dd:61:f0:29:75:6a:16:8c:8e:83:9b:bd:e9:14:
31:35:3f:c8:7e:95:cf:fe:0d:ef:1d:61:d2:23:5f:
5b:6d:ef:36:50:9e:6e:16:40:39:98:59:a4:a5:bc:
f8:86:f3:e2:4f:a2:91:c0:80:f0:a7:c3:8c:a1:84:
5c:2b:06:95:dc:77:a3:29:7f:b0:24:9e:34:ed:c5:
d5:f4:11:d7:cc:09:22:14:19:2c:32:3b:08:4c:a4:
36:a5:4e:cc:ba:08:86:e0:d0:dd:69:87:f2:cc:1c:
43:32:11:9e:24:6d:6d:51:a1:68:bf:28:95:18:2b:
a5:b1:f0:f8:27:e1:db:2e:b5:dd:f7:f7:be:f6:e1:
fb:2c:db:86:b8:04:18:d7:e2:87:fa:d0:0a:fd:f2:
c9:0b:35:d2:cb:6f:b8:5c:cb:13:f1:d5:37:a1:0e:
c4:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D6:6B:71:32:CF:CD:34:0E:37:89:17:C3:5D:12:CA:12:99:94:30:1F
X509v3 Authority Key Identifier:
keyid:D0:16:CC:56:A9:95:50:7B:4F:A8:7C:64:90:44:2F:06:B6:18:66:87
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0BbMVqmVUHtPqHxkkEQvBrYYZoc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/0d0300-74ee-4677-ad62-c24b7db20de7/1/0BbMVqmVUHtPqHxkkEQvBrYYZoc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/0d0300-74ee-4677-ad62-c24b7db20de7/1/0BbMVqmVUHtPqHxkkEQvBrYYZoc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a9:ae:7d:3d:8c:c1:18:06:4f:b3:2c:75:5f:88:ba:7d:e4:b3:
14:5d:52:27:6c:17:50:de:a4:ff:47:7e:63:7a:29:c5:d6:7e:
76:de:81:64:fc:db:b6:d8:fe:cf:72:72:7c:20:63:bc:30:2a:
57:a5:eb:2e:73:ec:c4:6e:f6:92:78:7d:10:44:13:e3:7c:ba:
51:60:6b:e3:da:d7:0e:a3:72:7c:ac:51:04:1e:0f:3c:7a:3b:
e8:dd:4c:b2:e7:fd:9c:e1:e1:f7:20:fe:0b:7c:0b:1d:f2:20:
46:d9:63:a5:93:a7:b0:1d:47:7b:89:fb:4b:0b:49:fb:62:40:
ab:97:24:71:a5:d5:9e:4d:39:a9:dc:8a:59:5b:3f:c3:78:c0:
42:87:db:49:36:e6:27:34:54:3e:be:58:54:d7:d7:e7:44:c2:
56:86:d7:26:69:62:fd:9e:64:c5:0e:94:6c:84:bc:61:fb:33:
ee:f7:ba:4f:14:97:a7:db:c6:af:f5:b2:27:64:49:ed:b5:e6:
c7:94:0c:f1:a2:a4:40:10:65:e4:5a:ef:53:26:5c:69:5f:dd:
7b:dd:8e:8f:91:ee:d9:36:77:63:fd:71:77:a9:3c:c3:e8:07:
7d:73:72:2a:8c:73:49:6b:6f:58:d4:26:29:ab:6d:f5:b3:b6:
a5:ea:3c:02
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 1 10:10:38 2025 by rpki-client