Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3f/82785f-f0c5-4313-91a1-6dfd8bbadfe9/1/0ur89N6SC5zmRdbmlt8IqosFUZs.mft
File: 0ur89N6SC5zmRdbmlt8IqosFUZs.mft (raw, json)
Hash identifier: 7EfJ3mmk+wWKvMQBW04h1+6YDaYu1Ii5x2O17G5IyOU=
Subject key identifier: 25:55:01:02:0A:9E:34:8B:BC:AE:BE:93:4D:30:8B:A6:4C:CB:68:90
Authority key identifier: D2:EA:FC:F4:DE:92:0B:9C:E6:45:D6:E6:96:DF:08:AA:8B:05:51:9B
Certificate issuer: /CN=d2eafcf4de920b9ce645d6e696df08aa8b05519b
Certificate serial: 0196A3528FB68D15B08296B0F7AC025EADA2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0ur89N6SC5zmRdbmlt8IqosFUZs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3f/82785f-f0c5-4313-91a1-6dfd8bbadfe9/1/0ur89N6SC5zmRdbmlt8IqosFUZs.mft
Manifest number: 1228
Signing time: Tue 06 May 2025 02:00:18 +0000
Manifest this update: Tue 06 May 2025 02:00:18 +0000
Manifest next update: Wed 07 May 2025 02:00:18 +0000
Files and hashes: 1: 0ur89N6SC5zmRdbmlt8IqosFUZs.crl (hash: F7ykptsWffPtHR8ohRwWeUpnBrJ7QuXlfTrnu131+ZM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3f/82785f-f0c5-4313-91a1-6dfd8bbadfe9/1/0ur89N6SC5zmRdbmlt8IqosFUZs.crl
rsync://rpki.ripe.net/repository/DEFAULT/3f/82785f-f0c5-4313-91a1-6dfd8bbadfe9/1/0ur89N6SC5zmRdbmlt8IqosFUZs.mft
rsync://rpki.ripe.net/repository/DEFAULT/0ur89N6SC5zmRdbmlt8IqosFUZs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 07 May 2025 02:00:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:a3:52:8f:b6:8d:15:b0:82:96:b0:f7:ac:02:5e:ad:a2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d2eafcf4de920b9ce645d6e696df08aa8b05519b
Validity
Not Before: May 6 02:00:18 2025 GMT
Not After : May 7 02:00:18 2025 GMT
Subject: CN=255501020a9e348bbcaebe934d308ba64ccb6890
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:54:f0:e0:aa:7c:26:fc:c8:80:a4:d7:6e:ad:
56:f5:bf:0e:0f:3f:b2:1a:8f:cc:d6:30:40:dc:81:
fb:d6:9a:0e:83:14:48:46:81:84:8f:bd:3b:ff:84:
e5:ce:be:7d:23:b3:9b:69:80:e2:57:6c:f3:5e:b3:
3c:12:d5:05:be:43:6a:7d:7a:84:4e:3a:dc:79:b3:
12:38:dc:2f:ad:8d:b5:39:28:f6:07:a5:69:df:f6:
aa:e7:ef:26:aa:5d:f0:4b:b9:e7:36:69:dc:64:e9:
a2:ae:d8:24:7b:0a:83:38:42:fe:58:c3:eb:98:13:
52:1d:61:0b:1e:f4:99:7a:2e:e4:d0:c3:df:8f:b0:
66:be:22:12:30:a8:95:59:20:71:27:92:30:fc:c0:
ab:c1:fa:7b:05:26:dd:fc:a3:67:cd:c1:e2:32:c9:
9c:44:7e:02:87:29:a2:01:79:72:be:83:5a:05:15:
17:21:4e:5c:8d:e1:a8:ff:47:f7:34:88:14:01:32:
7d:30:a2:22:ed:a4:4b:f4:9d:f6:28:44:c1:c6:a5:
35:9f:0a:e8:e0:a8:7a:46:9f:bb:38:ee:dc:b8:02:
b0:ac:3f:11:36:32:cb:39:3c:b5:12:ed:bc:80:74:
2d:06:7c:38:f0:93:e6:73:b4:44:61:5a:aa:1f:c8:
3f:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
25:55:01:02:0A:9E:34:8B:BC:AE:BE:93:4D:30:8B:A6:4C:CB:68:90
X509v3 Authority Key Identifier:
keyid:D2:EA:FC:F4:DE:92:0B:9C:E6:45:D6:E6:96:DF:08:AA:8B:05:51:9B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0ur89N6SC5zmRdbmlt8IqosFUZs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3f/82785f-f0c5-4313-91a1-6dfd8bbadfe9/1/0ur89N6SC5zmRdbmlt8IqosFUZs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3f/82785f-f0c5-4313-91a1-6dfd8bbadfe9/1/0ur89N6SC5zmRdbmlt8IqosFUZs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
20:3b:60:85:fe:8a:d4:a2:c9:38:2b:52:bb:cc:f4:f0:d0:02:
7b:a2:b1:ae:82:dc:07:db:23:44:9d:1c:8a:af:99:87:0b:87:
7d:3b:b8:41:08:82:de:4a:dd:9e:19:ad:fa:c0:6e:a9:b7:a2:
d1:a2:f7:f8:25:cf:0a:eb:75:9f:32:93:93:84:6e:4a:58:85:
4a:60:59:49:12:0e:7f:36:1b:f8:93:8e:e5:a4:53:9c:de:75:
b7:06:45:a3:4b:6e:03:77:dc:3f:58:54:74:ee:cc:4f:e5:ac:
58:78:d9:b1:77:bc:79:58:19:c6:40:be:2d:b8:2d:8a:fc:20:
b0:c6:4c:38:4b:55:aa:f4:eb:5d:50:bf:85:95:2d:d1:2d:7f:
d3:1e:a5:ac:70:25:69:61:7a:44:3d:e5:64:71:98:b0:0a:94:
18:bb:d3:cd:e9:0c:df:72:9a:ec:81:15:14:6c:c1:6b:9f:2f:
84:6d:8e:a3:c0:eb:5b:49:dd:2a:f0:a2:8f:30:0e:92:49:21:
56:fb:cb:11:0e:1d:2f:7b:49:e7:ba:28:33:be:72:24:73:cc:
1f:be:40:d6:73:96:4c:44:e2:8e:34:fa:a1:c3:18:89:21:eb:
78:99:ac:71:20:2f:9b:d9:12:93:f2:99:ed:9c:2e:f7:bc:76:
39:90:9d:b4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 6 06:40:14 2025 by rpki-client