Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/55/c3b68d-bc5e-4a42-b1b6-dfe41088cc03/1/o9KLNY1BezfsyLKRv5nBUVvOj3I.mft
File: o9KLNY1BezfsyLKRv5nBUVvOj3I.mft (raw, json)
Hash identifier: EY2vq+nPnyoeSPV/ilWvC2aKhCtZUXTCGp4mvz+HSQM=
Subject key identifier: EC:6E:5D:36:09:61:AF:41:2B:D1:41:C0:A3:AB:74:7F:D8:50:83:19
Authority key identifier: A3:D2:8B:35:8D:41:7B:37:EC:C8:B2:91:BF:99:C1:51:5B:CE:8F:72
Certificate issuer: /CN=a3d28b358d417b37ecc8b291bf99c1515bce8f72
Certificate serial: 0196BD8079B00E0D7A5047D74FDF42ECB727
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/o9KLNY1BezfsyLKRv5nBUVvOj3I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/55/c3b68d-bc5e-4a42-b1b6-dfe41088cc03/1/o9KLNY1BezfsyLKRv5nBUVvOj3I.mft
Manifest number: 10B2
Signing time: Sun 11 May 2025 04:00:35 +0000
Manifest this update: Sun 11 May 2025 04:00:35 +0000
Manifest next update: Mon 12 May 2025 04:00:35 +0000
Files and hashes: 1: o9KLNY1BezfsyLKRv5nBUVvOj3I.crl (hash: krW366z0gQrDqxWj6o78AemPVgEZGaXoM/Sw5tpoqiU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/55/c3b68d-bc5e-4a42-b1b6-dfe41088cc03/1/o9KLNY1BezfsyLKRv5nBUVvOj3I.crl
rsync://rpki.ripe.net/repository/DEFAULT/55/c3b68d-bc5e-4a42-b1b6-dfe41088cc03/1/o9KLNY1BezfsyLKRv5nBUVvOj3I.mft
rsync://rpki.ripe.net/repository/DEFAULT/o9KLNY1BezfsyLKRv5nBUVvOj3I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 12 May 2025 04:00:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:bd:80:79:b0:0e:0d:7a:50:47:d7:4f:df:42:ec:b7:27
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a3d28b358d417b37ecc8b291bf99c1515bce8f72
Validity
Not Before: May 11 04:00:35 2025 GMT
Not After : May 12 04:00:35 2025 GMT
Subject: CN=ec6e5d360961af412bd141c0a3ab747fd8508319
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f6:cc:ac:30:c3:57:04:79:a4:76:b7:8b:45:c3:
05:48:11:28:19:b6:06:8a:60:4f:9c:af:fc:7d:27:
d1:9a:43:39:e5:14:dc:2c:79:4d:2d:af:e1:bd:e0:
6d:71:da:5c:5e:17:8d:3b:17:bb:75:60:ab:af:5a:
d3:44:71:73:9e:c0:e4:75:a0:63:59:35:15:e4:37:
ef:3a:03:58:ca:a0:58:3e:89:20:d6:6d:24:33:ee:
db:94:78:9a:f3:96:e9:a9:4b:9e:40:60:53:d7:72:
03:7c:91:12:41:3d:0c:72:7c:53:43:55:4a:d0:ac:
a4:44:ff:a0:6e:99:b0:5f:35:4c:36:36:49:bb:60:
83:62:7c:96:38:db:a9:13:ad:cf:de:51:0a:ea:2e:
71:93:25:18:0c:7a:a4:c6:c5:9a:c4:6f:03:8c:dc:
ef:59:bd:df:00:07:e4:bb:3c:16:7b:84:6b:37:a1:
35:23:5b:60:f9:2a:de:9a:a3:a4:b8:2a:37:1d:17:
55:b6:3a:5d:d5:ff:4e:48:00:5b:85:e6:f4:c6:63:
38:09:de:28:da:99:5c:dc:48:38:d0:1f:10:42:a9:
d2:e4:98:6b:fc:c1:23:d5:11:0b:6f:2d:a7:60:80:
b5:6f:f8:26:a1:d7:44:a9:1d:32:9d:2c:a4:15:72:
f4:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EC:6E:5D:36:09:61:AF:41:2B:D1:41:C0:A3:AB:74:7F:D8:50:83:19
X509v3 Authority Key Identifier:
keyid:A3:D2:8B:35:8D:41:7B:37:EC:C8:B2:91:BF:99:C1:51:5B:CE:8F:72
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/o9KLNY1BezfsyLKRv5nBUVvOj3I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/55/c3b68d-bc5e-4a42-b1b6-dfe41088cc03/1/o9KLNY1BezfsyLKRv5nBUVvOj3I.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/55/c3b68d-bc5e-4a42-b1b6-dfe41088cc03/1/o9KLNY1BezfsyLKRv5nBUVvOj3I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
34:77:05:84:78:69:79:49:d7:e9:04:3b:2d:63:88:d8:f1:04:
30:01:d9:13:98:f4:68:71:2d:79:56:00:0b:a6:c5:fa:82:51:
1d:e6:f3:5d:3d:4d:9f:58:09:ff:dd:ed:5b:e8:8c:20:57:9b:
54:b1:5b:3e:36:63:00:19:43:ea:4c:e5:ee:9c:01:d0:b8:c7:
7f:21:d0:c8:ee:c3:17:de:8e:48:a4:b7:6b:c5:2e:e4:0f:a9:
90:68:f5:dd:d4:47:e9:f4:fd:17:17:c5:ba:24:ed:e7:06:58:
5d:5b:03:53:70:c4:77:d4:f2:ff:22:f1:36:28:1d:25:0b:ea:
d3:48:aa:dd:10:ac:ac:2c:d5:5b:15:9e:2d:97:84:2a:51:2e:
4d:11:02:74:a4:9c:a8:c0:01:84:64:d3:87:bf:68:b4:96:9f:
67:1f:bd:30:de:b7:4c:18:3c:ba:92:8a:c9:14:da:98:dc:13:
b0:b6:7c:ef:86:07:85:f6:ef:6d:52:e0:4f:8d:1a:93:b2:0e:
3d:83:be:db:36:fe:92:ca:47:3b:92:8f:88:b3:8f:06:87:62:
17:69:c8:31:47:63:cd:17:be:a3:68:88:ca:72:ff:b2:fb:a5:
0f:6c:e5:bd:27:d1:f0:34:c3:a2:84:c7:42:10:fa:82:de:16:
8b:83:59:b8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 11 12:44:28 2025 by rpki-client