Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4b/9270b0-8608-4149-a052-099fde63bbf2/1/Or-t4neb0SyuiYiSakZi11cIawE.mft
File: Or-t4neb0SyuiYiSakZi11cIawE.mft (raw, json)
Hash identifier: UKmyZ/H5Wz9EYQ3BE8/HXcYaxg2q09/E0UNTeoxI7Q4=
Subject key identifier: 2B:3E:80:FD:CC:04:47:23:BD:F6:E4:76:A8:E1:6A:1A:08:BA:C3:69
Authority key identifier: 3A:BF:AD:E2:77:9B:D1:2C:AE:89:88:92:6A:46:62:D7:57:08:6B:01
Certificate issuer: /CN=3abfade2779bd12cae8988926a4662d757086b01
Certificate serial: 0196C014181BEAC00A161F9517A3673F8560
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Or-t4neb0SyuiYiSakZi11cIawE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4b/9270b0-8608-4149-a052-099fde63bbf2/1/Or-t4neb0SyuiYiSakZi11cIawE.mft
Manifest number: 0A59
Signing time: Sun 11 May 2025 16:01:04 +0000
Manifest this update: Sun 11 May 2025 16:01:04 +0000
Manifest next update: Mon 12 May 2025 16:01:04 +0000
Files and hashes: 1: Or-t4neb0SyuiYiSakZi11cIawE.crl (hash: HD9TCkcFSj0wMrP7WqHL1oyv97B+ekRM7+gvIwtx4zg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4b/9270b0-8608-4149-a052-099fde63bbf2/1/Or-t4neb0SyuiYiSakZi11cIawE.crl
rsync://rpki.ripe.net/repository/DEFAULT/4b/9270b0-8608-4149-a052-099fde63bbf2/1/Or-t4neb0SyuiYiSakZi11cIawE.mft
rsync://rpki.ripe.net/repository/DEFAULT/Or-t4neb0SyuiYiSakZi11cIawE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 12 May 2025 16:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:c0:14:18:1b:ea:c0:0a:16:1f:95:17:a3:67:3f:85:60
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3abfade2779bd12cae8988926a4662d757086b01
Validity
Not Before: May 11 16:01:04 2025 GMT
Not After : May 12 16:01:04 2025 GMT
Subject: CN=2b3e80fdcc044723bdf6e476a8e16a1a08bac369
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:51:6b:82:25:54:38:1a:48:49:0d:24:59:2e:
f2:31:e4:67:f9:f9:2a:ec:b1:33:ed:56:74:f5:36:
af:4e:9e:22:ed:de:87:12:62:f5:b0:36:6d:53:bf:
52:8b:66:8c:b4:e7:cf:d7:e5:09:4a:93:dd:37:a2:
a0:8f:3b:aa:68:3a:32:d5:4d:66:81:aa:06:39:84:
f6:88:7f:4a:c0:21:8d:1f:a6:fc:30:c8:69:f8:f1:
e9:1e:0e:a6:f5:4f:c0:7d:b0:ac:b2:19:7d:58:fd:
e6:7d:dc:30:01:e8:19:34:5d:d0:f1:c2:0f:a8:00:
7b:6b:e7:5a:78:41:fa:de:0e:ed:65:16:81:ab:09:
25:49:73:98:8d:56:8e:d4:f5:c5:bf:00:19:43:c9:
e3:e3:7d:dc:a4:ee:b1:d4:a1:1d:37:e3:85:63:2d:
d5:fa:3e:1d:93:8f:40:21:c1:d3:0b:66:e7:74:d3:
87:36:4e:13:37:c0:e9:12:6c:f0:dc:02:d7:e0:46:
c6:4d:0f:88:7f:1a:c2:bc:d6:1e:a6:f4:5a:c9:f8:
04:99:0a:ec:aa:f5:e2:e1:76:5d:e8:9b:d4:12:88:
c0:4e:46:cb:30:9f:b5:bc:ee:70:8e:2d:f5:cc:7c:
18:ed:d0:69:80:74:3e:4f:e7:85:f2:e5:92:57:ba:
75:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2B:3E:80:FD:CC:04:47:23:BD:F6:E4:76:A8:E1:6A:1A:08:BA:C3:69
X509v3 Authority Key Identifier:
keyid:3A:BF:AD:E2:77:9B:D1:2C:AE:89:88:92:6A:46:62:D7:57:08:6B:01
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Or-t4neb0SyuiYiSakZi11cIawE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4b/9270b0-8608-4149-a052-099fde63bbf2/1/Or-t4neb0SyuiYiSakZi11cIawE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4b/9270b0-8608-4149-a052-099fde63bbf2/1/Or-t4neb0SyuiYiSakZi11cIawE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6a:06:d1:e5:00:9c:32:3f:57:68:bf:66:77:fa:28:17:97:c3:
3e:7f:bb:6c:8d:5d:3f:dc:8d:d2:07:dc:8b:de:99:87:2b:df:
eb:ad:a2:02:f5:bb:a1:71:cc:5c:54:7a:fa:70:ee:48:20:1c:
9b:03:bb:bd:a0:30:3f:0d:10:b5:90:c1:43:78:0b:b0:00:d9:
c0:3c:62:48:e6:25:67:c9:a8:51:44:d0:67:e6:d4:ed:0a:e0:
e0:1d:c2:56:ec:22:b4:78:9d:e5:aa:86:9a:3f:c1:cb:cb:b2:
d9:2b:f2:6b:8e:ee:99:b2:f1:03:33:b3:ee:b3:61:97:a5:4f:
39:92:4d:76:c6:27:23:c4:6f:2f:a6:1d:c2:97:87:de:45:cd:
f7:2d:6e:bc:f1:f7:b2:d8:9e:49:2b:2e:02:b9:d3:71:95:98:
1b:c6:8f:36:b0:ad:82:0e:0f:c0:74:04:00:7c:df:32:3a:d2:
40:6f:db:e0:56:9d:a6:8b:3d:46:f1:ea:4a:78:3c:01:d1:ee:
f0:33:67:54:19:f2:6c:c6:22:c3:50:09:02:7f:f8:79:16:32:
4b:2b:04:c8:51:fe:4f:f5:1e:9b:c4:de:b5:47:e4:42:5f:bc:
eb:84:a4:47:5a:34:ae:25:02:f0:38:b0:08:cf:de:07:5d:fe:
1c:41:17:5b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 11 22:02:11 2025 by rpki-client