Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5c/100831-39f8-4bf3-be1a-4f5e265d1679/1/opYekZxsdKh1zuBhj-zF_WP5WVE.mft
File: opYekZxsdKh1zuBhj-zF_WP5WVE.mft (raw, json)
Hash identifier: X1KcDRsx3zOX9A4EHpp7lD1hK0x6rzziripuKYgO1EY=
Subject key identifier: EC:B7:D0:CD:81:6B:ED:09:47:A4:72:57:32:F7:72:87:68:E1:9D:75
Authority key identifier: A2:96:1E:91:9C:6C:74:A8:75:CE:E0:61:8F:EC:C5:FD:63:F9:59:51
Certificate issuer: /CN=a2961e919c6c74a875cee0618fecc5fd63f95951
Certificate serial: 0196C64C4A4C40784B9D3693CCCE85F7740D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/opYekZxsdKh1zuBhj-zF_WP5WVE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5c/100831-39f8-4bf3-be1a-4f5e265d1679/1/opYekZxsdKh1zuBhj-zF_WP5WVE.mft
Manifest number: 0355
Signing time: Mon 12 May 2025 21:00:10 +0000
Manifest this update: Mon 12 May 2025 21:00:10 +0000
Manifest next update: Tue 13 May 2025 21:00:10 +0000
Files and hashes: 1: opYekZxsdKh1zuBhj-zF_WP5WVE.crl (hash: Ra5djnHe4Rj1uU7mS1qIgREl8eknrfDU+BVI42MvkTY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5c/100831-39f8-4bf3-be1a-4f5e265d1679/1/opYekZxsdKh1zuBhj-zF_WP5WVE.crl
rsync://rpki.ripe.net/repository/DEFAULT/5c/100831-39f8-4bf3-be1a-4f5e265d1679/1/opYekZxsdKh1zuBhj-zF_WP5WVE.mft
rsync://rpki.ripe.net/repository/DEFAULT/opYekZxsdKh1zuBhj-zF_WP5WVE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 13 May 2025 21:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:c6:4c:4a:4c:40:78:4b:9d:36:93:cc:ce:85:f7:74:0d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a2961e919c6c74a875cee0618fecc5fd63f95951
Validity
Not Before: May 12 21:00:10 2025 GMT
Not After : May 13 21:00:10 2025 GMT
Subject: CN=ecb7d0cd816bed0947a4725732f7728768e19d75
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:09:83:6c:1a:13:6a:1c:e3:80:1e:59:ff:74:
7c:2c:c7:94:04:26:1d:2a:f2:55:01:cc:ed:95:2f:
78:63:68:d2:79:e0:86:41:c3:b5:9b:88:fa:a4:ab:
a4:6b:af:15:78:57:7c:17:47:ba:a9:be:fe:3d:26:
4b:c2:ea:75:05:d3:f3:d6:85:ad:84:da:7f:1a:30:
97:b4:be:21:f9:2b:83:2d:50:d2:07:c0:95:4c:b3:
8c:14:36:c9:b8:d9:b3:cc:ce:ed:a6:02:48:90:27:
33:01:21:1a:b9:be:e0:55:c3:65:21:c7:5b:26:d8:
f7:74:37:e0:ce:86:bc:78:34:a7:31:46:73:af:bc:
44:2b:01:7f:48:0e:3e:41:31:b5:cb:9d:9e:ce:80:
74:a2:a3:f5:5f:f5:4a:88:fd:1e:ca:0d:b5:3d:d2:
87:6b:b4:19:61:f8:e7:26:61:1d:d3:26:1e:45:1d:
01:88:6b:70:19:9f:07:63:f9:4e:1b:36:22:43:93:
d3:23:9f:de:dd:46:ac:b2:89:2d:37:df:4b:44:bb:
cc:bb:b6:81:4d:1b:43:e6:7a:42:21:ff:91:c2:90:
4d:9a:2e:ca:c1:4e:2b:90:20:57:50:d2:af:2a:4f:
ef:ef:0e:81:9d:2f:f9:d2:ed:06:34:36:06:00:2b:
39:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EC:B7:D0:CD:81:6B:ED:09:47:A4:72:57:32:F7:72:87:68:E1:9D:75
X509v3 Authority Key Identifier:
keyid:A2:96:1E:91:9C:6C:74:A8:75:CE:E0:61:8F:EC:C5:FD:63:F9:59:51
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/opYekZxsdKh1zuBhj-zF_WP5WVE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5c/100831-39f8-4bf3-be1a-4f5e265d1679/1/opYekZxsdKh1zuBhj-zF_WP5WVE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5c/100831-39f8-4bf3-be1a-4f5e265d1679/1/opYekZxsdKh1zuBhj-zF_WP5WVE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
43:7c:0c:74:38:ea:97:99:da:f9:d3:57:79:8e:dd:a4:0e:57:
e8:5c:80:b0:5a:62:16:72:35:b7:6f:e7:3c:59:56:ea:27:30:
cc:91:27:b1:53:ce:25:8d:e7:bc:25:81:26:93:75:45:de:bb:
ec:7d:7f:1d:43:2f:73:51:bf:47:26:7b:08:90:a9:d3:c1:0a:
33:56:88:0a:92:70:8a:52:10:7e:f8:d8:ad:6d:8e:b2:92:f8:
89:ac:8c:fe:3d:7c:b9:b0:d8:98:df:2f:91:fa:f8:06:30:5d:
8f:e9:55:88:12:96:d7:fa:d3:a5:66:e7:08:63:03:3e:51:69:
79:3f:34:a2:4b:97:c6:55:21:02:bf:d9:f8:3b:ec:30:e1:27:
51:9d:4d:79:3a:ac:22:62:8b:c6:fd:14:e6:8e:8f:42:02:f0:
cb:85:3a:4a:a7:26:d9:65:86:07:5f:c6:ef:d3:29:04:27:16:
37:fb:51:b9:66:9a:a8:7c:45:67:57:69:15:da:ce:36:ad:7d:
1d:12:af:76:6f:27:51:5e:db:77:91:52:e3:89:13:e9:13:8c:
f2:7b:71:3a:df:f4:9a:52:04:77:8b:cf:8c:b3:73:81:80:ce:
42:b2:56:e0:0a:c9:eb:57:b2:ea:6b:c9:e8:66:9a:1c:4c:26:
4a:ad:ed:6b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 13 06:55:22 2025 by rpki-client