Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/84/20d9cc-143f-4ee8-8c69-b3e9be742894/1/o8VuwTDZivLQ0pRZ8g-nm9Y1kBU.mft
File: o8VuwTDZivLQ0pRZ8g-nm9Y1kBU.mft (raw, json)
Hash identifier: BNjV0Lv4cQx+hDDVCkJmEDdTvblJJyPLTQh3fJDgCjI=
Subject key identifier: 3E:22:45:49:31:B6:49:4D:2F:5D:1C:B9:E7:07:F0:94:BD:81:C9:FA
Authority key identifier: A3:C5:6E:C1:30:D9:8A:F2:D0:D2:94:59:F2:0F:A7:9B:D6:35:90:15
Certificate issuer: /CN=a3c56ec130d98af2d0d29459f20fa79bd6359015
Certificate serial: 0196E6B36D5F530A84C09DAF6BD2685A7A29
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/o8VuwTDZivLQ0pRZ8g-nm9Y1kBU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/84/20d9cc-143f-4ee8-8c69-b3e9be742894/1/o8VuwTDZivLQ0pRZ8g-nm9Y1kBU.mft
Manifest number: 04CD
Signing time: Mon 19 May 2025 04:00:40 +0000
Manifest this update: Mon 19 May 2025 04:00:40 +0000
Manifest next update: Tue 20 May 2025 04:00:40 +0000
Files and hashes: 1: o8VuwTDZivLQ0pRZ8g-nm9Y1kBU.crl (hash: 4e6pH1hsX5HpJQ2+1VyIRP0fBFAL08KwNtOhMoTf1ts=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/84/20d9cc-143f-4ee8-8c69-b3e9be742894/1/o8VuwTDZivLQ0pRZ8g-nm9Y1kBU.crl
rsync://rpki.ripe.net/repository/DEFAULT/84/20d9cc-143f-4ee8-8c69-b3e9be742894/1/o8VuwTDZivLQ0pRZ8g-nm9Y1kBU.mft
rsync://rpki.ripe.net/repository/DEFAULT/o8VuwTDZivLQ0pRZ8g-nm9Y1kBU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 19 May 2025 23:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:e6:b3:6d:5f:53:0a:84:c0:9d:af:6b:d2:68:5a:7a:29
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a3c56ec130d98af2d0d29459f20fa79bd6359015
Validity
Not Before: May 19 04:00:40 2025 GMT
Not After : May 20 04:00:40 2025 GMT
Subject: CN=3e22454931b6494d2f5d1cb9e707f094bd81c9fa
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:b4:4c:2b:43:b1:84:ce:08:df:79:1c:8f:34:
1a:b6:ef:a9:9d:fe:e8:70:ad:5e:53:90:87:ca:36:
97:d0:cc:39:4e:0d:3d:fe:a3:4b:12:d3:56:68:26:
f4:95:d8:11:67:36:41:3a:ac:87:11:93:0f:13:ec:
71:2c:00:f9:5d:dd:57:cd:b5:73:d0:ff:2c:20:77:
fc:1e:97:2a:10:70:8e:ae:78:4a:b8:e8:e3:dd:2f:
50:87:51:90:74:21:c2:7f:18:69:02:f0:e0:c0:3f:
e5:62:da:38:7b:b7:c8:e2:1b:3d:3e:16:c6:45:b3:
da:94:77:c3:29:3a:3e:d6:dd:fb:48:88:d6:16:60:
13:f2:46:fd:b1:73:aa:e7:c2:d0:86:8b:9a:06:4a:
6e:ff:57:d1:9f:13:01:ef:32:82:a7:6e:cd:e7:10:
4f:f6:65:a3:9c:7d:4b:c2:ef:38:fe:13:84:45:bf:
62:bf:bf:9b:d4:70:56:60:c2:31:19:4d:c6:0c:ea:
6c:91:a3:ee:85:ce:e3:5b:61:4b:9d:e7:12:e2:31:
4b:ea:08:5e:a9:f4:f4:46:2a:b2:d3:20:6f:cc:22:
f5:09:09:f8:e4:49:d1:75:3b:78:eb:cc:8e:55:a6:
49:5f:42:9f:e0:bc:9b:21:9e:61:03:b8:8a:04:f3:
49:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3E:22:45:49:31:B6:49:4D:2F:5D:1C:B9:E7:07:F0:94:BD:81:C9:FA
X509v3 Authority Key Identifier:
keyid:A3:C5:6E:C1:30:D9:8A:F2:D0:D2:94:59:F2:0F:A7:9B:D6:35:90:15
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/o8VuwTDZivLQ0pRZ8g-nm9Y1kBU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/84/20d9cc-143f-4ee8-8c69-b3e9be742894/1/o8VuwTDZivLQ0pRZ8g-nm9Y1kBU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/84/20d9cc-143f-4ee8-8c69-b3e9be742894/1/o8VuwTDZivLQ0pRZ8g-nm9Y1kBU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a1:9a:76:03:3b:51:71:9e:76:e2:cf:c1:cc:0d:7d:b8:16:ff:
8e:08:60:1b:03:c5:37:81:e0:58:87:41:c0:3a:d9:7c:81:09:
35:f3:28:c1:ba:97:0f:c0:fd:39:74:85:fe:dd:5f:c6:9f:1a:
d0:38:f1:7f:88:f1:55:83:a9:3e:ba:06:f9:96:26:eb:f8:6d:
63:73:c7:44:09:2b:64:7c:65:86:e1:0b:aa:b3:77:2a:24:dc:
f5:44:c1:61:82:ac:5a:1f:80:22:50:b9:ae:80:39:78:a0:d6:
cd:f2:61:13:ff:3f:db:71:33:41:a3:aa:51:23:95:b2:63:d4:
e0:97:9d:65:90:87:73:2f:20:97:73:d5:f4:d6:1f:fa:8d:cc:
20:e5:81:d6:26:05:f8:34:d3:94:d0:6a:60:f9:6c:cc:17:c2:
ee:39:21:08:0c:48:bd:9a:41:c0:4f:65:13:23:01:a0:25:35:
c0:73:e4:2a:70:7e:ad:51:86:62:92:d8:a3:ab:b8:e5:78:a1:
ff:9e:6f:2c:c6:49:93:d5:ef:59:d7:53:54:1e:10:97:9f:05:
75:91:27:29:9b:8d:c6:02:72:a0:89:54:f4:a6:56:2b:17:e0:
12:76:9e:f7:b1:b6:c2:48:e1:d4:f7:5f:88:b4:9e:bc:3d:12:
59:27:6d:d8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 19 07:02:38 2025 by rpki-client