Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/17/70bfd7-711d-4ad9-82f7-2f3c0032e446/1/X06OdhPaoX6FqhB4yOwlXPGNQio.mft
File: X06OdhPaoX6FqhB4yOwlXPGNQio.mft (raw, json)
Hash identifier: o41dbjWjKKyLws0dRtTsqJ+NXlQEn6l5l2sjaFmaaeA=
Subject key identifier: A9:3C:EA:3D:37:5F:BC:17:30:16:94:15:46:AF:EF:90:1B:FB:B5:6E
Authority key identifier: 5F:4E:8E:76:13:DA:A1:7E:85:AA:10:78:C8:EC:25:5C:F1:8D:42:2A
Certificate issuer: /CN=5f4e8e7613daa17e85aa1078c8ec255cf18d422a
Certificate serial: 0196C53A746901B8DB81B674CE924755F54F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/X06OdhPaoX6FqhB4yOwlXPGNQio.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/17/70bfd7-711d-4ad9-82f7-2f3c0032e446/1/X06OdhPaoX6FqhB4yOwlXPGNQio.mft
Manifest number: 0C63
Signing time: Mon 12 May 2025 16:01:04 +0000
Manifest this update: Mon 12 May 2025 16:01:04 +0000
Manifest next update: Tue 13 May 2025 16:01:04 +0000
Files and hashes: 1: X06OdhPaoX6FqhB4yOwlXPGNQio.crl (hash: snYR+w8H6QMyK3TKwo1KLvL6Us3TSEMFzw5aOwGzBaw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/17/70bfd7-711d-4ad9-82f7-2f3c0032e446/1/X06OdhPaoX6FqhB4yOwlXPGNQio.crl
rsync://rpki.ripe.net/repository/DEFAULT/17/70bfd7-711d-4ad9-82f7-2f3c0032e446/1/X06OdhPaoX6FqhB4yOwlXPGNQio.mft
rsync://rpki.ripe.net/repository/DEFAULT/X06OdhPaoX6FqhB4yOwlXPGNQio.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 13 May 2025 14:31:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:c5:3a:74:69:01:b8:db:81:b6:74:ce:92:47:55:f5:4f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5f4e8e7613daa17e85aa1078c8ec255cf18d422a
Validity
Not Before: May 12 16:01:04 2025 GMT
Not After : May 13 16:01:04 2025 GMT
Subject: CN=a93cea3d375fbc173016941546afef901bfbb56e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:1c:30:92:10:5d:d0:9e:f2:c9:f7:8e:44:27:
1a:40:5a:de:f7:b0:05:41:e8:1c:59:83:bf:b9:8a:
93:39:bd:3d:67:15:3b:30:ff:76:be:ce:e5:10:7f:
2f:44:51:82:dd:1b:68:86:14:52:e9:24:fb:af:f9:
75:d7:e2:d5:4f:25:b6:41:ec:df:ca:5d:85:a7:2a:
e0:8a:85:37:7b:4f:6b:f0:bb:b2:33:a1:d0:26:b2:
48:9d:bd:6b:ae:7c:ae:89:20:f0:71:02:06:c2:74:
fe:0d:52:53:a4:db:3d:fa:49:0e:ef:bb:4e:61:a8:
49:1f:64:9b:04:ee:c1:69:11:60:85:aa:96:c3:45:
68:87:78:db:e1:bf:ae:b8:7d:96:aa:4d:91:ac:cf:
d8:12:96:5b:59:aa:01:97:0f:31:6d:78:a1:6f:ec:
e6:cb:26:14:59:96:b9:77:6e:bb:91:0c:3d:f4:ad:
fa:2e:fb:79:e0:46:2c:18:0c:8e:d7:43:18:29:3b:
99:d6:bf:aa:5c:10:d5:96:58:ec:db:ae:c4:8e:c2:
32:7a:c3:4e:0f:d8:ad:23:c0:1b:e2:49:84:4e:e0:
10:2f:23:98:a6:25:7d:91:b7:4a:9b:02:f5:c6:64:
5a:78:e0:b8:8a:79:e0:90:d4:23:3a:a4:61:b8:78:
75:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A9:3C:EA:3D:37:5F:BC:17:30:16:94:15:46:AF:EF:90:1B:FB:B5:6E
X509v3 Authority Key Identifier:
keyid:5F:4E:8E:76:13:DA:A1:7E:85:AA:10:78:C8:EC:25:5C:F1:8D:42:2A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/X06OdhPaoX6FqhB4yOwlXPGNQio.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/17/70bfd7-711d-4ad9-82f7-2f3c0032e446/1/X06OdhPaoX6FqhB4yOwlXPGNQio.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/17/70bfd7-711d-4ad9-82f7-2f3c0032e446/1/X06OdhPaoX6FqhB4yOwlXPGNQio.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
37:33:67:b9:99:5a:9d:2a:27:a2:13:6d:79:7b:d5:b9:f4:bc:
36:4e:56:eb:f3:7a:4c:50:66:22:bd:61:e2:4e:63:74:07:0e:
82:ac:a5:f8:95:21:d9:a5:58:5d:9e:dd:57:4d:e0:00:2e:71:
76:ac:b7:91:f1:79:7b:15:52:ca:3b:a5:40:a1:30:3b:cf:12:
e6:1a:18:72:f7:4d:06:9b:93:c4:e2:b0:1f:d3:21:34:b0:0e:
2d:be:07:3d:4e:dc:68:42:c4:6f:0e:83:59:09:07:43:53:46:
24:1b:c0:7c:a9:6d:41:b1:a4:4a:e6:ef:9c:a5:aa:93:75:0d:
e6:23:95:1c:51:12:9a:df:78:4c:4b:ee:da:ff:35:b5:db:43:
5a:2f:e4:93:3e:0c:2a:18:b4:b0:61:15:a7:7f:5e:c3:07:97:
73:63:8b:93:bb:55:f8:f1:68:f4:d2:c3:fd:fe:ec:b8:30:e7:
0c:d0:4a:72:44:21:a1:82:a0:d6:a2:17:13:a2:70:e4:89:6d:
d0:f0:76:7e:5a:c1:fe:7e:b8:d8:4f:27:67:bc:a5:17:fa:43:
5e:70:97:0a:eb:82:d7:23:5e:8b:91:84:ea:8f:51:e5:e2:b9:
82:83:4c:0a:22:c5:a7:2d:67:68:12:2c:cd:3b:0b:c6:4e:92:
8f:09:52:71
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 12 20:16:01 2025 by rpki-client