Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/24/d61ddb-b3e5-40b0-abbe-9437e5fe6db4/1/0u0bbMpTCR9vkNGllQzrbVOwOq0.mft
File: 0u0bbMpTCR9vkNGllQzrbVOwOq0.mft (raw, json)
Hash identifier: qdWFseycMtVf9IpS0KvCpzzWQTcVk/1i2u7N67pI4+s=
Subject key identifier: 86:C6:DD:56:CE:DD:C7:3C:DA:76:12:55:05:8D:D3:4B:CD:CC:AD:56
Authority key identifier: D2:ED:1B:6C:CA:53:09:1F:6F:90:D1:A5:95:0C:EB:6D:53:B0:3A:AD
Certificate issuer: /CN=d2ed1b6cca53091f6f90d1a5950ceb6d53b03aad
Certificate serial: 0196A653E2496BDCF16594C0DFD3AA047845
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0u0bbMpTCR9vkNGllQzrbVOwOq0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/24/d61ddb-b3e5-40b0-abbe-9437e5fe6db4/1/0u0bbMpTCR9vkNGllQzrbVOwOq0.mft
Manifest number: 0934
Signing time: Tue 06 May 2025 16:00:37 +0000
Manifest this update: Tue 06 May 2025 16:00:37 +0000
Manifest next update: Wed 07 May 2025 16:00:37 +0000
Files and hashes: 1: 0u0bbMpTCR9vkNGllQzrbVOwOq0.crl (hash: zv85uCL/3s8vJICArRck3f2Iu0auFDptAy0WltBvL80=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/24/d61ddb-b3e5-40b0-abbe-9437e5fe6db4/1/0u0bbMpTCR9vkNGllQzrbVOwOq0.crl
rsync://rpki.ripe.net/repository/DEFAULT/24/d61ddb-b3e5-40b0-abbe-9437e5fe6db4/1/0u0bbMpTCR9vkNGllQzrbVOwOq0.mft
rsync://rpki.ripe.net/repository/DEFAULT/0u0bbMpTCR9vkNGllQzrbVOwOq0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 07 May 2025 14:16:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:a6:53:e2:49:6b:dc:f1:65:94:c0:df:d3:aa:04:78:45
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d2ed1b6cca53091f6f90d1a5950ceb6d53b03aad
Validity
Not Before: May 6 16:00:37 2025 GMT
Not After : May 7 16:00:37 2025 GMT
Subject: CN=86c6dd56ceddc73cda761255058dd34bcdccad56
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:0a:d8:0a:12:20:d5:14:a7:5c:b5:cd:fd:7c:
2f:e2:6c:b4:d5:57:04:e5:ed:e6:dd:1b:d5:c1:8f:
4a:68:1c:b0:d0:5f:c1:07:eb:b0:24:31:91:2b:a5:
39:93:20:a0:8f:48:e0:de:eb:54:13:73:82:da:04:
33:ea:6e:b4:dd:85:d1:30:ec:9c:96:b7:d6:f2:14:
6d:0a:f6:77:1f:91:9e:70:4e:7c:e2:73:91:37:a7:
d0:af:50:22:06:be:89:7d:86:81:3b:41:ea:8f:78:
fa:35:09:a7:01:5e:60:95:2a:68:b3:e2:e6:73:31:
19:20:f5:69:8b:e0:ab:04:75:3d:32:3d:f9:b0:d9:
bf:9b:89:79:89:10:0a:5a:81:e0:df:ac:cf:bb:60:
66:06:35:17:51:08:07:b4:b7:6f:fb:bd:d2:94:86:
0b:2d:b3:25:a8:6b:97:54:c7:3c:99:ec:d5:5a:04:
ee:91:08:99:be:16:38:75:50:99:b8:61:cc:9b:7a:
7d:ef:c5:01:51:86:f5:ac:c5:92:db:c8:5b:d6:b7:
83:aa:28:79:47:4b:49:38:c7:52:62:cb:42:b1:e7:
a8:0e:52:66:ba:f5:2e:62:42:3b:74:11:c6:27:61:
2e:66:5a:cc:67:30:67:58:1e:5c:1e:d9:a3:0a:07:
97:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
86:C6:DD:56:CE:DD:C7:3C:DA:76:12:55:05:8D:D3:4B:CD:CC:AD:56
X509v3 Authority Key Identifier:
keyid:D2:ED:1B:6C:CA:53:09:1F:6F:90:D1:A5:95:0C:EB:6D:53:B0:3A:AD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0u0bbMpTCR9vkNGllQzrbVOwOq0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/24/d61ddb-b3e5-40b0-abbe-9437e5fe6db4/1/0u0bbMpTCR9vkNGllQzrbVOwOq0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/24/d61ddb-b3e5-40b0-abbe-9437e5fe6db4/1/0u0bbMpTCR9vkNGllQzrbVOwOq0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
41:33:66:74:41:e4:94:2b:a7:6b:ae:2f:cb:27:ad:c9:95:7d:
2c:a3:bf:1a:ca:e9:81:a0:24:97:b6:c1:2f:1e:78:91:9c:a5:
07:da:47:17:0d:0e:7e:8d:96:8e:8f:66:41:dc:2f:81:13:dc:
52:66:62:31:73:84:2b:2c:35:ba:ea:b8:74:ae:9b:4a:bd:d2:
1b:6f:c5:cb:04:d2:1a:de:1f:fd:5e:91:7d:7e:6f:ac:71:57:
74:8e:16:0f:a2:88:16:c6:93:28:5f:37:2d:6b:21:74:2c:67:
80:0e:0a:c0:a4:da:79:bb:7f:53:20:9d:57:73:df:1b:b3:9a:
28:48:17:ea:69:92:e5:ce:0d:da:fb:46:56:18:bb:3c:c6:14:
f1:04:ba:6c:98:99:df:bf:66:f3:9b:46:62:d5:3c:39:dc:0d:
ee:83:04:bb:ef:a3:46:6d:0a:1d:00:f1:57:88:a2:8f:f2:18:
eb:ba:8b:d8:33:e1:fe:a6:f6:ca:6b:00:c9:40:25:bc:a0:09:
aa:6e:7b:d5:3b:fe:a9:b9:9e:c0:eb:e2:12:44:59:ab:db:0d:
b9:35:34:59:f7:d2:7c:f6:46:ac:30:5c:81:d8:eb:c2:0d:14:
a6:00:1e:56:e4:a0:d8:b7:74:6c:66:0d:f1:35:7f:0f:43:be:
b2:6a:51:1d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 6 22:02:36 2025 by rpki-client