Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fa/d01d58-5418-4217-89ae-23a84eedd956/1/0zWMPscfwZpqyYRrr03lmDY1cpM.mft
File: 0zWMPscfwZpqyYRrr03lmDY1cpM.mft (raw, json)
Hash identifier: AIq4q1pYkA605uIeNKQSE8n5dRew2UIXBbNxRJDajpg=
Subject key identifier: A8:A0:71:04:3B:76:D6:CB:88:4C:C0:ED:D8:59:88:96:1B:C8:76:D0
Authority key identifier: D3:35:8C:3E:C7:1F:C1:9A:6A:C9:84:6B:AF:4D:E5:98:36:35:72:93
Certificate issuer: /CN=d3358c3ec71fc19a6ac9846baf4de59836357293
Certificate serial: 01968B4A2FD610701B8C463F57044D828C9B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0zWMPscfwZpqyYRrr03lmDY1cpM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fa/d01d58-5418-4217-89ae-23a84eedd956/1/0zWMPscfwZpqyYRrr03lmDY1cpM.mft
Manifest number: 14AB
Signing time: Thu 01 May 2025 10:00:16 +0000
Manifest this update: Thu 01 May 2025 10:00:16 +0000
Manifest next update: Fri 02 May 2025 10:00:16 +0000
Files and hashes: 1: 0zWMPscfwZpqyYRrr03lmDY1cpM.crl (hash: Cm7OEKUcX/PP3srzdHdKny67nPO/G3rjCPBqQJAPh0I=)
2: LYl-ckZTCA5UyIouoIve31n38qY.roa (hash: vPSTPP2+IXPu60S6+w3ugZNedqIYo00aGNP955WAY1c=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fa/d01d58-5418-4217-89ae-23a84eedd956/1/0zWMPscfwZpqyYRrr03lmDY1cpM.crl
rsync://rpki.ripe.net/repository/DEFAULT/fa/d01d58-5418-4217-89ae-23a84eedd956/1/0zWMPscfwZpqyYRrr03lmDY1cpM.mft
rsync://rpki.ripe.net/repository/DEFAULT/0zWMPscfwZpqyYRrr03lmDY1cpM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 02 May 2025 07:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:8b:4a:2f:d6:10:70:1b:8c:46:3f:57:04:4d:82:8c:9b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d3358c3ec71fc19a6ac9846baf4de59836357293
Validity
Not Before: May 1 10:00:16 2025 GMT
Not After : May 2 10:00:16 2025 GMT
Subject: CN=a8a071043b76d6cb884cc0edd85988961bc876d0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:ab:7d:b0:8a:79:f5:5c:cc:a8:cc:18:74:dc:
9d:01:23:fd:34:a0:0c:7e:32:12:2e:26:7b:66:1c:
5e:ba:92:82:6e:01:20:8c:16:bc:b9:01:ce:e2:5e:
4c:a1:ba:08:37:38:97:5e:45:ab:a4:31:2e:09:19:
c6:9d:6c:8f:0c:d9:d5:9c:f7:80:ff:37:fe:4e:dd:
2a:be:72:3b:93:f5:8a:02:c1:23:5f:d4:b3:45:67:
88:1f:df:1e:f8:00:a1:04:cc:97:de:4e:69:5a:f9:
7d:99:f6:1d:6e:72:73:18:ab:a3:8b:7c:83:98:de:
d9:21:a7:e8:a2:01:f9:0f:21:0d:9e:e9:62:62:86:
c2:f6:5a:07:d3:51:be:f0:57:d3:13:81:18:69:5f:
72:14:1a:c4:d2:f1:2e:bd:fa:6f:2c:4e:37:5a:a5:
6c:0e:38:63:07:1c:82:7a:1c:c1:b7:79:63:25:2f:
37:bf:24:93:b4:d5:88:97:c6:c9:11:d1:f1:0a:fa:
be:47:d8:6b:2e:49:31:4b:2a:ea:4e:1a:d5:be:52:
09:58:2a:95:c5:69:70:35:04:ff:17:26:74:2a:8b:
8b:56:62:92:e9:be:1a:6c:ef:fe:d8:9b:39:75:58:
da:bd:e6:2e:88:91:2f:9d:a2:18:85:ef:7e:6f:03:
0c:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A8:A0:71:04:3B:76:D6:CB:88:4C:C0:ED:D8:59:88:96:1B:C8:76:D0
X509v3 Authority Key Identifier:
keyid:D3:35:8C:3E:C7:1F:C1:9A:6A:C9:84:6B:AF:4D:E5:98:36:35:72:93
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0zWMPscfwZpqyYRrr03lmDY1cpM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/d01d58-5418-4217-89ae-23a84eedd956/1/0zWMPscfwZpqyYRrr03lmDY1cpM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/d01d58-5418-4217-89ae-23a84eedd956/1/0zWMPscfwZpqyYRrr03lmDY1cpM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
75:a0:e0:b0:d2:2a:bf:d7:66:c7:a1:f7:81:61:dc:72:c1:89:
bc:24:9f:6e:ad:5a:c3:65:70:43:a8:a4:da:cb:17:66:11:12:
f0:96:f5:9e:3a:9a:e1:07:71:d5:9a:b6:7f:f4:5e:7c:f9:8e:
ef:d5:d6:b9:47:f1:0a:6c:65:64:b3:80:99:88:22:b6:1d:6e:
9d:b1:d3:f7:e3:be:23:2f:21:3e:6c:8e:26:44:1d:9a:f9:05:
d2:a8:98:3f:54:cb:4e:2a:a5:cd:6d:b3:6e:2e:57:97:93:4a:
e6:14:00:ed:59:a0:ca:01:cd:ee:eb:9c:73:ab:ed:e4:f3:78:
8f:63:9a:d1:11:db:aa:3c:4d:4e:84:9f:2d:37:fd:ce:42:6b:
61:6a:7c:c9:ee:e6:1e:05:8b:65:ca:09:e2:50:ab:c3:63:0b:
2b:d4:bc:a0:fb:76:be:1a:00:a3:6b:7c:c3:e0:4f:3b:69:1f:
49:7b:dc:ad:01:5d:c4:d2:7f:98:76:ad:04:22:be:16:85:f8:
62:a9:90:1c:fd:38:52:08:4d:c6:ed:07:93:5d:00:db:c2:18:
b6:15:52:49:eb:d4:8e:32:6b:49:48:26:4c:21:6e:5f:8f:c3:
94:f4:b1:9f:37:74:70:16:10:d1:d4:e8:43:e4:78:b4:9d:7b:
4e:36:8d:bc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 1 16:05:31 2025 by rpki-client