Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6f/e3a381-77e3-4290-91ec-fda58edee5e6/1/mO4cQpzn8y4xDctEE9iv6MdkWmE.mft
File: mO4cQpzn8y4xDctEE9iv6MdkWmE.mft (raw, json)
Hash identifier: oFNfTgMu4rbZZAfMRuaH7LF4nIbLs7kdLyLghves434=
Subject key identifier: 65:43:E4:D3:BE:B2:4A:AC:45:EE:8C:76:4E:41:0F:97:91:84:E0:C3
Authority key identifier: 98:EE:1C:42:9C:E7:F3:2E:31:0D:CB:44:13:D8:AF:E8:C7:64:5A:61
Certificate issuer: /CN=98ee1c429ce7f32e310dcb4413d8afe8c7645a61
Certificate serial: 0196BB91FF8C524C3CC235EEA6199BF36DE8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mO4cQpzn8y4xDctEE9iv6MdkWmE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6f/e3a381-77e3-4290-91ec-fda58edee5e6/1/mO4cQpzn8y4xDctEE9iv6MdkWmE.mft
Manifest number: 096E
Signing time: Sat 10 May 2025 19:00:29 +0000
Manifest this update: Sat 10 May 2025 19:00:29 +0000
Manifest next update: Sun 11 May 2025 19:00:29 +0000
Files and hashes: 1: mO4cQpzn8y4xDctEE9iv6MdkWmE.crl (hash: QEGSsQg2vJoERlkP/oabbHUTY7yn53XnmsuZnN+KEvY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6f/e3a381-77e3-4290-91ec-fda58edee5e6/1/mO4cQpzn8y4xDctEE9iv6MdkWmE.crl
rsync://rpki.ripe.net/repository/DEFAULT/6f/e3a381-77e3-4290-91ec-fda58edee5e6/1/mO4cQpzn8y4xDctEE9iv6MdkWmE.mft
rsync://rpki.ripe.net/repository/DEFAULT/mO4cQpzn8y4xDctEE9iv6MdkWmE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 11 May 2025 13:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:bb:91:ff:8c:52:4c:3c:c2:35:ee:a6:19:9b:f3:6d:e8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=98ee1c429ce7f32e310dcb4413d8afe8c7645a61
Validity
Not Before: May 10 19:00:29 2025 GMT
Not After : May 11 19:00:29 2025 GMT
Subject: CN=6543e4d3beb24aac45ee8c764e410f979184e0c3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:87:fb:82:3c:a8:cf:6b:43:c2:30:24:6b:9a:27:
f0:09:a7:7e:09:d9:43:79:ea:7a:ee:79:82:e7:d2:
f0:61:06:6f:74:2d:20:1a:97:7d:30:7c:35:a4:60:
6d:39:3d:c3:59:a2:e6:93:b9:93:9f:5e:fd:26:ca:
bb:a9:fa:38:45:1a:30:80:79:4f:cf:dd:9d:9f:a6:
17:1c:1a:eb:6a:29:29:ec:0f:62:bd:54:a0:e5:8f:
53:c5:76:23:42:ce:79:a5:d6:77:b5:39:5d:7b:f7:
75:b7:7f:2d:95:ca:f5:0c:5b:a1:ce:bb:a1:a1:2c:
27:41:e3:93:5f:82:d2:08:91:02:90:46:c5:87:fd:
a5:de:e8:50:a3:d9:0a:8f:bd:c1:6f:26:7b:1b:94:
70:c6:ce:17:b9:3a:8c:45:b2:77:70:ad:03:2c:da:
f9:e9:8e:8a:94:03:d0:4d:41:df:89:ed:5d:b2:de:
6c:98:dc:f7:53:45:e9:92:aa:4b:39:cc:a5:03:4e:
3a:27:04:4f:af:8b:0c:8a:4c:20:50:93:1a:80:8c:
83:0b:d4:7c:e0:8e:df:7d:fd:d3:da:22:f3:a5:ad:
f1:05:a8:c0:93:4d:43:e0:8e:17:4d:7d:bf:37:ad:
7c:ff:eb:23:3e:08:6b:52:1b:e7:ad:e6:ed:d7:e7:
22:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
65:43:E4:D3:BE:B2:4A:AC:45:EE:8C:76:4E:41:0F:97:91:84:E0:C3
X509v3 Authority Key Identifier:
keyid:98:EE:1C:42:9C:E7:F3:2E:31:0D:CB:44:13:D8:AF:E8:C7:64:5A:61
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mO4cQpzn8y4xDctEE9iv6MdkWmE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6f/e3a381-77e3-4290-91ec-fda58edee5e6/1/mO4cQpzn8y4xDctEE9iv6MdkWmE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6f/e3a381-77e3-4290-91ec-fda58edee5e6/1/mO4cQpzn8y4xDctEE9iv6MdkWmE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
27:89:f6:e3:9e:45:5b:2d:28:0c:36:e4:0f:e5:d6:c5:6a:99:
c8:73:f7:f7:c2:a0:a3:08:3f:82:f3:f2:a2:75:cf:db:a2:28:
c5:b2:af:96:fa:13:11:ac:7c:23:14:95:dc:3f:e5:9e:10:b7:
86:84:6e:35:7d:06:c8:72:1d:28:9f:2f:63:f1:0d:bf:b7:f6:
72:24:1b:8c:68:c5:14:df:97:15:37:27:75:c9:04:0b:d1:d4:
8f:51:a9:5b:18:eb:71:d9:17:b1:46:e6:90:59:d3:3f:e4:f5:
f2:f1:4c:17:b1:be:f2:d6:e9:f4:c0:f7:53:cb:54:17:4e:a4:
ab:2f:83:e9:cf:6c:c6:c7:20:1d:53:21:68:58:b1:a4:80:a1:
27:95:ba:b1:c8:1c:ad:65:59:e8:19:df:cf:1d:e5:77:94:d9:
8f:12:81:1c:12:e1:51:3f:35:60:16:ef:fd:b9:29:33:25:7b:
29:74:81:6a:76:bf:2d:e1:fe:40:eb:11:4f:b3:e1:31:4a:b1:
61:be:4c:b6:c1:9e:c7:9a:1e:87:e0:41:d3:f3:14:b5:c4:16:
26:11:40:ed:b0:3f:d2:ab:f8:84:14:62:60:99:6e:3a:19:35:
0e:c8:cd:b9:ee:4e:97:0e:fb:08:3c:26:0b:94:33:c0:2e:99:
3c:19:2f:05
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 10 22:22:03 2025 by rpki-client