Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1d/290789-1922-4eb0-8ad4-fed89d170da4/1/gOtx0BmkgyJcMkyIxsSAIO-fEWg.mft
File: gOtx0BmkgyJcMkyIxsSAIO-fEWg.mft (raw, json)
Hash identifier: UBx3wvii//aweJIfNye+nXRcMQ3OsssWEAeNseqsEpk=
Subject key identifier: C3:87:01:06:A5:80:73:8D:BC:A5:FA:5E:17:54:94:9E:59:25:CF:C9
Authority key identifier: 80:EB:71:D0:19:A4:83:22:5C:32:4C:88:C6:C4:80:20:EF:9F:11:68
Certificate issuer: /CN=80eb71d019a483225c324c88c6c48020ef9f1168
Certificate serial: 0196B66BD1B7B822C703EFF21A905A0D353E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gOtx0BmkgyJcMkyIxsSAIO-fEWg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1d/290789-1922-4eb0-8ad4-fed89d170da4/1/gOtx0BmkgyJcMkyIxsSAIO-fEWg.mft
Manifest number: 152D
Signing time: Fri 09 May 2025 19:00:41 +0000
Manifest this update: Fri 09 May 2025 19:00:41 +0000
Manifest next update: Sat 10 May 2025 19:00:41 +0000
Files and hashes: 1: gOtx0BmkgyJcMkyIxsSAIO-fEWg.crl (hash: pFzrxHZo9wVkTbjGYOl3auAoB5BY+9ux9tqGN4yQtMU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1d/290789-1922-4eb0-8ad4-fed89d170da4/1/gOtx0BmkgyJcMkyIxsSAIO-fEWg.crl
rsync://rpki.ripe.net/repository/DEFAULT/1d/290789-1922-4eb0-8ad4-fed89d170da4/1/gOtx0BmkgyJcMkyIxsSAIO-fEWg.mft
rsync://rpki.ripe.net/repository/DEFAULT/gOtx0BmkgyJcMkyIxsSAIO-fEWg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 10 May 2025 19:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:b6:6b:d1:b7:b8:22:c7:03:ef:f2:1a:90:5a:0d:35:3e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=80eb71d019a483225c324c88c6c48020ef9f1168
Validity
Not Before: May 9 19:00:41 2025 GMT
Not After : May 10 19:00:41 2025 GMT
Subject: CN=c3870106a580738dbca5fa5e1754949e5925cfc9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:57:7f:eb:9a:ab:f0:8a:5f:99:6c:47:e4:82:
78:35:4e:57:50:54:2c:a4:41:2a:12:d5:a7:9b:f0:
ba:0b:dc:d5:53:91:b0:3f:a7:c9:03:68:e3:4b:fc:
56:1e:9b:f6:39:57:de:f9:14:04:7f:a1:58:6f:60:
3f:6f:bc:9a:fb:58:e4:43:f2:de:21:2a:18:13:f9:
64:30:40:4e:8f:79:f8:1d:94:65:be:ff:97:64:c6:
21:ef:26:81:72:03:65:3e:0b:15:86:7a:6e:ff:fc:
03:10:28:fb:1c:a3:eb:da:35:5e:fd:c5:8f:42:ce:
8e:e1:07:e5:80:1a:db:c5:54:a6:77:73:42:ae:f1:
74:a7:b3:c9:42:5a:11:66:b8:c7:31:39:fe:cb:07:
61:2f:07:a3:0f:11:da:4f:5f:ed:fb:73:79:4d:05:
86:da:88:fd:2b:cb:97:7f:5e:c1:f1:08:7a:e8:67:
4f:3b:b9:0c:05:85:e3:04:b2:9b:98:28:4a:87:40:
cf:48:eb:05:74:cf:4f:a8:ea:1a:28:f8:20:9c:fe:
4e:55:1a:54:ee:4f:80:e5:24:5d:c4:a6:0b:cd:11:
f7:ac:f5:f9:ab:17:d0:8b:d5:48:b0:66:84:a6:9c:
94:c8:4a:d8:21:ab:ff:1b:2f:23:61:25:48:a9:80:
ab:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C3:87:01:06:A5:80:73:8D:BC:A5:FA:5E:17:54:94:9E:59:25:CF:C9
X509v3 Authority Key Identifier:
keyid:80:EB:71:D0:19:A4:83:22:5C:32:4C:88:C6:C4:80:20:EF:9F:11:68
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gOtx0BmkgyJcMkyIxsSAIO-fEWg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1d/290789-1922-4eb0-8ad4-fed89d170da4/1/gOtx0BmkgyJcMkyIxsSAIO-fEWg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1d/290789-1922-4eb0-8ad4-fed89d170da4/1/gOtx0BmkgyJcMkyIxsSAIO-fEWg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8a:3d:10:e6:f9:b0:f2:11:07:1f:6e:06:42:71:d8:11:44:56:
6a:43:5c:1f:63:3f:26:e8:bc:ea:3d:cb:27:19:43:ce:09:8b:
09:1e:a1:48:70:93:52:69:84:85:0c:8e:37:bf:76:6e:5f:fb:
b6:ee:22:11:53:c1:09:4b:73:d1:00:f5:16:28:5e:25:ec:b2:
b0:3d:4b:db:5e:13:51:dd:ad:ea:97:e9:51:eb:fb:77:ba:d6:
5b:21:b0:08:e0:0d:fd:ae:d6:71:3f:b2:66:88:ce:93:9e:1a:
34:a0:3f:94:56:1a:ff:06:94:8e:cf:97:b8:93:6c:45:ab:46:
c3:23:a3:da:c3:e6:29:42:13:99:ea:79:ac:1e:dc:6e:ba:6c:
66:62:7a:55:de:c6:95:8e:d6:66:db:6a:2d:76:13:15:7b:9c:
a7:40:31:cd:b4:49:34:51:09:74:f0:d3:d4:6d:89:89:1b:0e:
70:d2:31:d9:c8:4c:55:b2:9f:81:cb:c7:fe:13:5f:8c:68:c5:
0e:00:ff:68:8c:ed:0e:e3:44:5d:ec:89:9d:41:b8:ad:7e:b1:
57:a4:dd:8a:d5:81:45:14:08:e6:1d:bd:a8:db:df:3d:73:8a:
bb:f2:3c:fa:4b:d0:36:09:30:e7:7e:35:63:86:1c:8b:0e:a5:
cf:5b:66:eb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 10 04:58:15 2025 by rpki-client