Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f0/52476d-a794-47d5-8f50-aeda824678d4/1/cr0ONuHCAjBKNRM7EWZmJeXW5e8.mft
File: cr0ONuHCAjBKNRM7EWZmJeXW5e8.mft (raw, json)
Hash identifier: K1QignFXzLG42oBaI+7toGN0mlx5KxRHGZXL6R7x2fw=
Subject key identifier: 04:62:EE:4A:80:E0:E3:FE:8C:91:8E:E8:17:9F:23:44:70:8C:C9:DA
Authority key identifier: 72:BD:0E:36:E1:C2:02:30:4A:35:13:3B:11:66:66:25:E5:D6:E5:EF
Certificate issuer: /CN=72bd0e36e1c202304a35133b11666625e5d6e5ef
Certificate serial: 0196876D511D323C114732D03E734B1D07B4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cr0ONuHCAjBKNRM7EWZmJeXW5e8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f0/52476d-a794-47d5-8f50-aeda824678d4/1/cr0ONuHCAjBKNRM7EWZmJeXW5e8.mft
Manifest number: 08B9
Signing time: Wed 30 Apr 2025 16:00:10 +0000
Manifest this update: Wed 30 Apr 2025 16:00:10 +0000
Manifest next update: Thu 01 May 2025 16:00:10 +0000
Files and hashes: 1: YJ__Jpr1denKLIU4A4wwpaBEGuM.roa (hash: HQMvWJSgBySt+TDaIiCe+VSZte2lW30WZtz1IJWSvxM=)
2: cr0ONuHCAjBKNRM7EWZmJeXW5e8.crl (hash: tBGK6kQ+34W7F2ooMwWNMl4fQNL/E5FA4MF+YB2Q8Sg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f0/52476d-a794-47d5-8f50-aeda824678d4/1/cr0ONuHCAjBKNRM7EWZmJeXW5e8.crl
rsync://rpki.ripe.net/repository/DEFAULT/f0/52476d-a794-47d5-8f50-aeda824678d4/1/cr0ONuHCAjBKNRM7EWZmJeXW5e8.mft
rsync://rpki.ripe.net/repository/DEFAULT/cr0ONuHCAjBKNRM7EWZmJeXW5e8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 01 May 2025 13:16:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:87:6d:51:1d:32:3c:11:47:32:d0:3e:73:4b:1d:07:b4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72bd0e36e1c202304a35133b11666625e5d6e5ef
Validity
Not Before: Apr 30 16:00:10 2025 GMT
Not After : May 1 16:00:10 2025 GMT
Subject: CN=0462ee4a80e0e3fe8c918ee8179f2344708cc9da
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:22:7d:af:fb:bd:57:d9:bc:22:19:49:31:7f:
06:7a:f9:d7:3f:5f:64:c9:da:e4:86:91:4a:e6:ec:
33:c2:cc:b5:ab:d0:b2:9b:b9:9f:c1:12:8e:cf:67:
3e:10:e8:c1:64:62:4d:86:e5:2a:00:e2:b7:d4:e6:
4a:af:f1:c4:57:b4:a9:3b:41:63:d2:2d:53:8f:83:
2f:20:75:bc:70:0c:71:68:e9:f8:6f:75:28:f5:04:
d3:8b:42:c1:5b:25:39:ef:ab:48:a6:46:43:14:83:
19:c5:50:39:f8:aa:34:a8:e2:bd:c3:d2:4e:a5:04:
1c:af:89:ed:ea:3e:8d:18:91:51:ac:e3:f3:3e:43:
32:45:c4:ea:93:65:72:d4:01:17:ee:a6:6b:5e:b7:
59:01:a2:5f:02:82:d4:05:ba:21:c8:0d:f6:84:ab:
c8:c4:0d:fc:4f:59:f8:7c:ad:56:b7:ab:12:e5:c9:
34:6e:62:eb:d4:fd:74:0c:6f:31:81:16:df:16:1d:
d6:42:d7:99:35:96:64:31:ff:ac:64:5b:30:12:a9:
86:59:7b:65:9c:a2:ff:18:58:e7:72:8f:da:e4:bc:
92:7f:38:44:fd:95:61:07:a8:e7:0f:dc:4a:4b:2d:
17:c8:77:63:17:e1:88:9e:34:19:2c:23:08:df:90:
a5:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
04:62:EE:4A:80:E0:E3:FE:8C:91:8E:E8:17:9F:23:44:70:8C:C9:DA
X509v3 Authority Key Identifier:
keyid:72:BD:0E:36:E1:C2:02:30:4A:35:13:3B:11:66:66:25:E5:D6:E5:EF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cr0ONuHCAjBKNRM7EWZmJeXW5e8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/52476d-a794-47d5-8f50-aeda824678d4/1/cr0ONuHCAjBKNRM7EWZmJeXW5e8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/52476d-a794-47d5-8f50-aeda824678d4/1/cr0ONuHCAjBKNRM7EWZmJeXW5e8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3b:d3:7b:28:bb:0c:69:23:65:c9:50:64:4f:f5:f6:57:02:f7:
bd:da:36:b7:bd:fd:6e:0c:b5:2f:2d:a3:0f:5d:47:15:fb:4c:
87:61:67:d1:ab:84:fe:69:8b:ca:db:f6:ff:06:8d:6a:62:08:
1e:a7:fe:27:3b:1d:1c:95:94:c5:23:8b:3a:d5:03:c6:09:4e:
d0:7a:08:16:a0:b1:55:24:91:df:1c:f0:87:69:27:e9:12:21:
08:51:d2:c9:f8:f7:3f:e7:48:47:0d:48:30:a9:2a:65:16:5f:
c5:b8:45:48:e8:78:d0:91:92:b3:b3:73:30:a7:80:89:6a:c4:
88:6b:42:8c:6b:eb:69:1c:0d:f6:d0:b4:58:9e:2a:02:45:b8:
5a:a9:5e:15:f1:eb:3b:3b:80:44:f2:8b:1d:3e:7c:d5:33:41:
e5:68:21:0f:2b:30:5a:5c:36:31:46:19:5b:fb:4f:8c:d6:c6:
a3:de:6b:91:eb:c1:36:68:53:cf:7f:73:13:bf:fa:dc:08:b5:
85:39:00:30:ab:b0:b8:d6:0e:86:2d:13:9d:f7:a4:28:e7:ca:
01:3c:6d:62:c5:7b:16:cb:dc:dd:cf:7d:21:a1:0d:ac:9c:aa:
2e:1c:b2:bb:8f:51:91:73:7a:c7:2c:82:e1:a5:1d:42:e5:b6:
40:6b:bc:3a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 30 21:27:39 2025 by rpki-client