Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f7/97c353-0c36-4066-a56b-139a496cd59c/1/0kMistCnlP0Ha4Xo3FeKuw0D7EA.mft
File: 0kMistCnlP0Ha4Xo3FeKuw0D7EA.mft (raw, json)
Hash identifier: x2aH/nfZ4WT2FGGwjqWrGMysi4tTWXJ3t/IwRHm/Yc0=
Subject key identifier: 77:63:9C:EB:19:B3:F0:4A:61:73:42:D4:27:BC:19:C0:31:49:AD:43
Authority key identifier: D2:43:22:B2:D0:A7:94:FD:07:6B:85:E8:DC:57:8A:BB:0D:03:EC:40
Certificate issuer: /CN=d24322b2d0a794fd076b85e8dc578abb0d03ec40
Certificate serial: 01967AC50E7D5B653A677BD0F8D8D1E776BF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0kMistCnlP0Ha4Xo3FeKuw0D7EA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f7/97c353-0c36-4066-a56b-139a496cd59c/1/0kMistCnlP0Ha4Xo3FeKuw0D7EA.mft
Manifest number: 04A6
Signing time: Mon 28 Apr 2025 05:00:56 +0000
Manifest this update: Mon 28 Apr 2025 05:00:56 +0000
Manifest next update: Tue 29 Apr 2025 05:00:56 +0000
Files and hashes: 1: 0i_jhQqN2iNg5AEP50J1N6ocU14.roa (hash: dte6GhHBF0dhj/nHMGGQvO/MzVf6vGP1TT8x/x47jYs=)
2: 0kMistCnlP0Ha4Xo3FeKuw0D7EA.crl (hash: oGT6AYYSSC7ucLsHuOnKYAvrpNLaZ9MJfEgR991mUFY=)
3: wH2BXhQbp4RbWEqazf0ETM0OAOI.roa (hash: WPj1rnPevOFK6Wz2Mo2etzdEIyu2IX1IvghxSjU5v1Q=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f7/97c353-0c36-4066-a56b-139a496cd59c/1/0kMistCnlP0Ha4Xo3FeKuw0D7EA.crl
rsync://rpki.ripe.net/repository/DEFAULT/f7/97c353-0c36-4066-a56b-139a496cd59c/1/0kMistCnlP0Ha4Xo3FeKuw0D7EA.mft
rsync://rpki.ripe.net/repository/DEFAULT/0kMistCnlP0Ha4Xo3FeKuw0D7EA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 29 Apr 2025 05:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:7a:c5:0e:7d:5b:65:3a:67:7b:d0:f8:d8:d1:e7:76:bf
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d24322b2d0a794fd076b85e8dc578abb0d03ec40
Validity
Not Before: Apr 28 05:00:56 2025 GMT
Not After : Apr 29 05:00:56 2025 GMT
Subject: CN=77639ceb19b3f04a617342d427bc19c03149ad43
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:97:d9:8d:fa:a1:0e:1d:a2:7c:d7:55:9d:fe:
3d:b9:8a:26:cf:5f:b6:56:24:5e:d9:9d:b0:01:a7:
97:8c:4a:a9:93:d8:20:b3:89:e2:ce:59:b8:bf:1f:
f7:72:ba:f2:df:3d:49:9b:da:c9:64:41:27:cd:16:
84:33:0a:05:5f:70:90:48:4d:83:8d:2d:67:15:63:
6d:8f:3e:50:f1:e7:20:b3:71:c1:91:a7:88:93:04:
f3:a5:71:3e:5f:5f:ac:81:71:3d:a4:0c:7c:3d:8e:
b6:86:a3:47:22:c3:d6:36:64:59:f6:f9:03:34:b0:
13:e0:84:27:68:bf:3b:71:75:8b:64:14:9c:f8:7a:
cb:c8:7a:67:43:4b:bb:a1:ab:ce:f2:6c:fb:ba:0e:
56:e7:82:30:18:08:9d:7c:70:99:ef:27:15:7b:74:
97:3a:67:c2:de:36:29:4e:29:06:2c:ce:fa:ce:e4:
78:30:48:96:5a:ab:0a:d4:99:e5:9b:6c:11:31:48:
e1:c3:f8:71:fe:4d:f8:3d:bb:29:3c:ca:33:12:4d:
50:50:47:46:80:15:e8:e3:96:ce:65:11:44:e8:db:
39:29:a1:c6:70:2a:35:44:fe:26:c5:07:95:71:bf:
47:62:bf:66:05:77:9c:6b:83:4b:3d:de:1b:07:ae:
1b:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
77:63:9C:EB:19:B3:F0:4A:61:73:42:D4:27:BC:19:C0:31:49:AD:43
X509v3 Authority Key Identifier:
keyid:D2:43:22:B2:D0:A7:94:FD:07:6B:85:E8:DC:57:8A:BB:0D:03:EC:40
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0kMistCnlP0Ha4Xo3FeKuw0D7EA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f7/97c353-0c36-4066-a56b-139a496cd59c/1/0kMistCnlP0Ha4Xo3FeKuw0D7EA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f7/97c353-0c36-4066-a56b-139a496cd59c/1/0kMistCnlP0Ha4Xo3FeKuw0D7EA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4c:7c:67:3e:8f:66:07:4a:e1:9a:4b:25:db:d9:e3:04:42:93:
29:60:72:81:4e:85:26:74:d8:3d:34:ad:bb:33:25:4d:39:9d:
5e:33:1f:db:ae:80:75:53:04:23:ef:87:c0:3d:ae:45:2a:8c:
9b:93:be:36:b0:ac:94:f6:b5:0f:e8:04:49:ae:6a:ae:f5:a2:
c9:dd:dc:b8:9e:b9:42:33:d3:dd:cd:67:e0:fc:74:11:0d:7e:
de:22:dd:d6:d3:5c:79:7f:22:10:41:eb:7f:7f:20:ab:ed:bd:
d0:cb:bd:87:54:f2:57:1c:bb:38:ca:65:2e:f6:f4:f9:8a:48:
3d:d7:d9:45:d5:aa:cf:5a:6d:1b:88:f9:89:34:1e:e0:8d:48:
f4:0a:bd:90:94:2c:80:ab:8a:b2:c5:6d:94:f1:b2:5c:f3:b8:
7f:19:03:e5:86:b5:b7:3b:ca:97:e1:bc:1e:22:7f:6f:01:3b:
83:72:cd:9b:76:46:49:a8:1f:55:c5:4f:e1:35:9a:be:39:c4:
2f:59:06:0f:b9:84:8c:00:91:6a:21:65:96:7c:ba:c3:73:ab:
d6:fe:a0:6f:00:d0:97:64:ae:9e:30:b0:02:95:b9:41:26:c0:
22:fe:80:58:ad:00:f8:11:76:12:83:6c:4f:c6:cc:c0:0b:55:
26:e8:18:5c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 10:42:21 2025 by rpki-client