Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/50/206aff-459e-4abb-819a-2d361e4f345c/1/o-VcYHJU0eKwURqFbnADn_r0MDI.mft
File: o-VcYHJU0eKwURqFbnADn_r0MDI.mft (raw, json)
Hash identifier: msSVmy1mj8uUgCjJNqsOyOWXb+DFcIf4HroFzHUIukE=
Subject key identifier: 79:A0:62:94:90:1A:28:1B:E9:8C:BE:20:2F:AC:5B:19:E0:96:92:39
Authority key identifier: A3:E5:5C:60:72:54:D1:E2:B0:51:1A:85:6E:70:03:9F:FA:F4:30:32
Certificate issuer: /CN=a3e55c607254d1e2b0511a856e70039ffaf43032
Certificate serial: 0196BB9289BD5C134315A9189864DDEB3EA4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/o-VcYHJU0eKwURqFbnADn_r0MDI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/50/206aff-459e-4abb-819a-2d361e4f345c/1/o-VcYHJU0eKwURqFbnADn_r0MDI.mft
Manifest number: 10AD
Signing time: Sat 10 May 2025 19:01:04 +0000
Manifest this update: Sat 10 May 2025 19:01:04 +0000
Manifest next update: Sun 11 May 2025 19:01:04 +0000
Files and hashes: 1: o-VcYHJU0eKwURqFbnADn_r0MDI.crl (hash: Y1IHcvPDARk5GOKfsOlumG2vcAbEZ659CygfLkcvPHk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/50/206aff-459e-4abb-819a-2d361e4f345c/1/o-VcYHJU0eKwURqFbnADn_r0MDI.crl
rsync://rpki.ripe.net/repository/DEFAULT/50/206aff-459e-4abb-819a-2d361e4f345c/1/o-VcYHJU0eKwURqFbnADn_r0MDI.mft
rsync://rpki.ripe.net/repository/DEFAULT/o-VcYHJU0eKwURqFbnADn_r0MDI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 11 May 2025 13:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:bb:92:89:bd:5c:13:43:15:a9:18:98:64:dd:eb:3e:a4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a3e55c607254d1e2b0511a856e70039ffaf43032
Validity
Not Before: May 10 19:01:04 2025 GMT
Not After : May 11 19:01:04 2025 GMT
Subject: CN=79a06294901a281be98cbe202fac5b19e0969239
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:ce:ab:d8:9f:da:8b:cd:bb:ce:5f:c4:24:a4:
94:f8:7e:35:bd:ac:a7:fa:de:2b:6a:ed:02:05:5c:
85:ea:2b:1d:a2:1e:6b:11:6a:36:09:77:00:be:3e:
24:42:21:2c:66:5d:37:15:71:11:57:d6:3a:70:ed:
67:ef:90:2c:ac:74:5a:f6:1a:38:05:87:31:34:d3:
06:2c:d7:e0:fc:20:b3:49:73:33:44:93:49:57:af:
be:5e:30:5a:3e:d0:b2:66:c7:ee:08:2d:e6:8a:34:
d3:8c:ff:94:6c:70:81:64:40:19:78:96:cd:44:6b:
4b:98:b0:68:70:8f:c1:78:df:b3:90:d0:72:d5:5a:
1e:7d:b6:20:b6:ee:33:ed:35:4f:72:1d:c7:69:5b:
a8:cd:05:fe:d9:76:09:10:41:aa:b0:d3:17:ba:38:
30:36:1c:67:84:86:8f:00:5f:e1:fe:4c:b8:ef:2d:
e0:d4:76:d4:fe:99:d9:e7:70:8c:cc:18:eb:26:ed:
5e:f8:47:a0:63:ba:83:0d:ac:64:2b:09:9e:fe:08:
ab:3f:04:8e:1d:4b:ff:47:2e:34:e1:39:f7:ab:7b:
e0:10:6b:15:e4:d2:13:a8:4e:19:11:9b:12:2f:7b:
33:cd:14:3b:b9:9d:b2:8d:49:18:76:bb:c9:01:28:
d7:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
79:A0:62:94:90:1A:28:1B:E9:8C:BE:20:2F:AC:5B:19:E0:96:92:39
X509v3 Authority Key Identifier:
keyid:A3:E5:5C:60:72:54:D1:E2:B0:51:1A:85:6E:70:03:9F:FA:F4:30:32
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/o-VcYHJU0eKwURqFbnADn_r0MDI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/50/206aff-459e-4abb-819a-2d361e4f345c/1/o-VcYHJU0eKwURqFbnADn_r0MDI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/50/206aff-459e-4abb-819a-2d361e4f345c/1/o-VcYHJU0eKwURqFbnADn_r0MDI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7c:42:24:0b:47:43:ac:d1:67:09:e9:84:a7:51:32:be:13:6c:
65:f5:70:b7:7f:1a:2f:12:cf:85:71:bf:12:56:62:49:b7:cd:
27:10:e5:0d:a7:92:3e:1b:e0:ec:25:e6:4a:69:14:f3:35:75:
ab:17:c7:fa:5d:23:8f:ef:08:ce:92:04:24:ad:ed:bc:57:a4:
67:1e:1f:20:7c:14:c3:64:77:05:8e:35:2c:d6:4f:81:46:a0:
a4:5b:c2:22:3c:c5:ed:6b:91:63:1d:46:d3:07:35:b2:91:74:
a6:41:44:8f:0c:25:97:9d:8c:ab:29:eb:63:23:90:70:97:df:
17:31:72:10:c2:2a:fe:94:3d:23:dc:2b:73:e1:c9:2c:c1:47:
c2:ed:1d:19:5a:72:e2:57:6b:42:ba:9f:cd:df:82:b7:27:ab:
f4:13:5b:a6:9e:d3:2b:46:21:b5:7d:97:49:38:38:93:bf:49:
94:49:72:a9:d8:ee:04:6b:e4:44:f4:f1:23:4e:e2:2a:43:5b:
3c:9a:b4:61:51:ca:d1:b7:2a:1b:d9:61:ce:af:09:3b:9a:48:
94:c3:0c:26:6a:c1:7e:83:3a:7d:7d:87:7f:77:7c:f2:3c:0b:
93:03:05:63:8e:23:04:63:06:e8:d9:81:19:c1:f5:23:a6:29:
bb:21:82:a4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 10 21:33:17 2025 by rpki-client