Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/55/3a28e3-8544-48c6-8b8e-baf7ba0c4177/1/orLY2dCvlBb6vW8gNfpyiO-XyME.mft
File: orLY2dCvlBb6vW8gNfpyiO-XyME.mft (raw, json)
Hash identifier: Lx0slVMvT8bvWNwZbVNAvsvZc/f1wsLVCHpY/SBvD6A=
Subject key identifier: BE:56:31:DD:9B:4D:8E:40:08:DA:E5:80:74:9D:D6:82:E5:D0:7C:B1
Authority key identifier: A2:B2:D8:D9:D0:AF:94:16:FA:BD:6F:20:35:FA:72:88:EF:97:C8:C1
Certificate issuer: /CN=a2b2d8d9d0af9416fabd6f2035fa7288ef97c8c1
Certificate serial: 0196A0F6B98F5D46DCD2DE8E4574A8025C95
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/orLY2dCvlBb6vW8gNfpyiO-XyME.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/55/3a28e3-8544-48c6-8b8e-baf7ba0c4177/1/orLY2dCvlBb6vW8gNfpyiO-XyME.mft
Manifest number: 056B
Signing time: Mon 05 May 2025 15:00:45 +0000
Manifest this update: Mon 05 May 2025 15:00:45 +0000
Manifest next update: Tue 06 May 2025 15:00:45 +0000
Files and hashes: 1: orLY2dCvlBb6vW8gNfpyiO-XyME.crl (hash: vWuBKvcBfrCggQW003tEJgxGVTAaYWB3mQ1kelbzSp0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/55/3a28e3-8544-48c6-8b8e-baf7ba0c4177/1/orLY2dCvlBb6vW8gNfpyiO-XyME.crl
rsync://rpki.ripe.net/repository/DEFAULT/55/3a28e3-8544-48c6-8b8e-baf7ba0c4177/1/orLY2dCvlBb6vW8gNfpyiO-XyME.mft
rsync://rpki.ripe.net/repository/DEFAULT/orLY2dCvlBb6vW8gNfpyiO-XyME.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 06 May 2025 10:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:a0:f6:b9:8f:5d:46:dc:d2:de:8e:45:74:a8:02:5c:95
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a2b2d8d9d0af9416fabd6f2035fa7288ef97c8c1
Validity
Not Before: May 5 15:00:45 2025 GMT
Not After : May 6 15:00:45 2025 GMT
Subject: CN=be5631dd9b4d8e4008dae580749dd682e5d07cb1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:a1:2e:f4:c8:ba:6a:94:fd:28:f6:97:78:24:
b8:e1:ee:86:42:40:ce:2a:f2:d2:9b:49:a4:3a:63:
18:9c:5b:88:8d:bf:5b:38:a7:26:b5:1a:5d:ac:f3:
c5:80:36:80:cc:54:03:17:07:8d:61:fc:26:fc:2b:
dd:cc:17:32:6a:0e:f7:60:09:18:2e:2f:25:4a:36:
c9:1f:e4:9f:b3:0a:71:48:97:7f:82:95:fa:74:8d:
93:1e:81:15:d1:91:02:e3:d6:ba:8b:a1:43:aa:0e:
c7:68:eb:c4:61:5e:8d:2f:b0:c6:fb:96:16:8e:af:
2e:86:4e:fc:dc:67:7d:60:10:20:63:eb:da:5a:55:
9e:42:a3:8f:6e:e2:34:d9:70:08:e6:26:e4:78:39:
2c:bd:67:da:73:67:9a:b9:ca:e4:8c:8b:f1:67:c3:
8d:47:3b:ed:d9:93:da:ae:4f:ff:66:a8:b4:0b:b8:
70:46:50:81:8b:3d:06:11:1f:00:36:49:7f:07:33:
72:28:cb:a6:02:b2:29:08:be:71:d6:e9:c3:ef:78:
eb:f0:e5:c8:23:5b:01:0c:60:a7:a8:49:7f:57:2d:
68:23:27:e5:fa:f7:e8:b9:8c:a8:35:df:a9:a4:f4:
7f:f6:af:c5:93:ca:0a:e3:c8:93:e2:92:9a:6b:4e:
77:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BE:56:31:DD:9B:4D:8E:40:08:DA:E5:80:74:9D:D6:82:E5:D0:7C:B1
X509v3 Authority Key Identifier:
keyid:A2:B2:D8:D9:D0:AF:94:16:FA:BD:6F:20:35:FA:72:88:EF:97:C8:C1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/orLY2dCvlBb6vW8gNfpyiO-XyME.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/55/3a28e3-8544-48c6-8b8e-baf7ba0c4177/1/orLY2dCvlBb6vW8gNfpyiO-XyME.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/55/3a28e3-8544-48c6-8b8e-baf7ba0c4177/1/orLY2dCvlBb6vW8gNfpyiO-XyME.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0c:66:1d:7f:3c:50:87:7c:90:ae:29:0c:5f:a7:ad:aa:c4:74:
d2:67:5e:7c:8c:da:e1:3e:d1:4f:fe:4e:cf:5e:ad:ca:34:4f:
99:8e:1b:8c:1b:d7:a3:d3:4c:dc:95:7c:f0:02:9b:72:90:c9:
26:b2:1d:b6:b3:d5:c6:72:e4:51:3c:37:fa:5c:f6:d0:85:e2:
55:dc:9f:07:0c:18:f7:d7:79:68:21:39:a3:9b:a8:4e:fb:4b:
67:75:45:cc:8a:c2:8a:2e:d9:59:66:81:d3:26:81:bd:43:58:
4e:3f:d7:cc:4b:60:39:21:8e:ba:7a:07:2e:e1:2d:06:3e:ab:
09:22:9d:aa:b2:d8:72:3d:66:48:97:c1:1b:cb:d9:93:9e:6e:
11:25:8b:31:5e:52:b9:2c:36:ad:15:40:67:9f:a9:77:63:ed:
c5:d8:3f:36:6d:68:f6:49:e7:55:1e:bc:2d:d9:fc:ea:ed:53:
62:d9:f9:28:ef:36:85:0a:f6:c3:c7:c0:1a:5a:af:3c:26:88:
3e:ed:cf:33:2a:53:39:d1:b2:98:4a:dd:de:d1:c4:b4:82:b9:
f1:6b:2b:63:af:20:68:63:14:b3:5f:32:f5:87:ba:0c:3b:a9:
87:eb:b7:5c:02:ec:72:39:4d:63:19:bc:15:fc:ac:35:57:4b:
d0:68:dd:87
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 5 16:54:11 2025 by rpki-client