Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8d/969708-e4b9-4ab2-b50b-29dc953620c1/1/Fh4OrnepjDYj0XgfmvRVfTVB0ro.mft
File: Fh4OrnepjDYj0XgfmvRVfTVB0ro.mft (raw, json)
Hash identifier: APR0q0SCv7FvXsOT6k3cc673NCj9/k7tdIPGY47oNfI=
Subject key identifier: A0:BF:5D:99:5F:96:74:4E:89:C6:35:77:BE:EE:2C:7B:B2:C7:89:FB
Authority key identifier: 16:1E:0E:AE:77:A9:8C:36:23:D1:78:1F:9A:F4:55:7D:35:41:D2:BA
Certificate issuer: /CN=161e0eae77a98c3623d1781f9af4557d3541d2ba
Certificate serial: 0196C3B942FFA83F0475F0ADD24C22476D91
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Fh4OrnepjDYj0XgfmvRVfTVB0ro.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8d/969708-e4b9-4ab2-b50b-29dc953620c1/1/Fh4OrnepjDYj0XgfmvRVfTVB0ro.mft
Manifest number: 1534
Signing time: Mon 12 May 2025 09:00:20 +0000
Manifest this update: Mon 12 May 2025 09:00:20 +0000
Manifest next update: Tue 13 May 2025 09:00:20 +0000
Files and hashes: 1: Fh4OrnepjDYj0XgfmvRVfTVB0ro.crl (hash: HZHlwDATiiiWn76VUTE2A0oq3ksHD6JW/5rdvzd9Too=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8d/969708-e4b9-4ab2-b50b-29dc953620c1/1/Fh4OrnepjDYj0XgfmvRVfTVB0ro.crl
rsync://rpki.ripe.net/repository/DEFAULT/8d/969708-e4b9-4ab2-b50b-29dc953620c1/1/Fh4OrnepjDYj0XgfmvRVfTVB0ro.mft
rsync://rpki.ripe.net/repository/DEFAULT/Fh4OrnepjDYj0XgfmvRVfTVB0ro.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 13 May 2025 09:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:c3:b9:42:ff:a8:3f:04:75:f0:ad:d2:4c:22:47:6d:91
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=161e0eae77a98c3623d1781f9af4557d3541d2ba
Validity
Not Before: May 12 09:00:20 2025 GMT
Not After : May 13 09:00:20 2025 GMT
Subject: CN=a0bf5d995f96744e89c63577beee2c7bb2c789fb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:fc:67:84:32:d3:70:69:5c:c6:63:f2:f3:30:
67:3b:93:fe:94:0d:e6:2b:40:a1:cc:83:37:d3:7f:
93:55:7c:7d:77:b5:74:fd:b1:00:d5:09:3d:3f:38:
d0:ae:0c:1f:d0:77:80:90:ac:8a:05:24:64:e8:cf:
8f:01:2c:b6:cd:c9:e5:2d:8b:32:16:74:84:52:d7:
43:c5:c4:d3:19:a3:bf:ae:74:4c:45:10:7e:0b:34:
e9:89:5d:c2:cd:4b:e9:04:10:06:cc:47:e6:f2:76:
2d:d2:36:18:4e:98:4a:59:c3:8a:ce:80:19:f5:bf:
db:9a:d3:12:7b:3a:13:db:11:65:cb:2d:4b:25:a7:
e6:8b:58:84:21:a4:1a:52:12:2f:dd:d7:d2:35:c4:
f2:10:bb:6d:53:ff:70:28:3e:12:cc:7b:6d:2b:58:
a5:ea:ae:33:19:ef:56:ad:7d:2c:54:d6:9a:35:9e:
80:23:81:bd:a6:64:f2:8f:23:b6:a9:81:75:2d:20:
fd:33:f5:88:4b:c8:84:0a:da:40:81:ba:44:e7:eb:
6e:02:65:d9:ed:73:89:c3:fd:3b:bc:16:ac:d1:cc:
19:68:cf:1a:ea:aa:71:47:69:00:4a:bb:24:e5:03:
cd:a2:86:22:e2:5d:2b:89:50:34:0d:ea:16:23:f1:
e9:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A0:BF:5D:99:5F:96:74:4E:89:C6:35:77:BE:EE:2C:7B:B2:C7:89:FB
X509v3 Authority Key Identifier:
keyid:16:1E:0E:AE:77:A9:8C:36:23:D1:78:1F:9A:F4:55:7D:35:41:D2:BA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Fh4OrnepjDYj0XgfmvRVfTVB0ro.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8d/969708-e4b9-4ab2-b50b-29dc953620c1/1/Fh4OrnepjDYj0XgfmvRVfTVB0ro.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8d/969708-e4b9-4ab2-b50b-29dc953620c1/1/Fh4OrnepjDYj0XgfmvRVfTVB0ro.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
36:33:75:76:38:a1:b2:08:23:f2:6f:ce:6a:e5:63:c8:c9:d0:
33:97:d0:9d:e9:63:90:d7:a6:35:4c:f0:3e:69:13:68:f9:7e:
e3:ab:d7:35:de:00:75:7a:59:fd:51:62:68:c0:90:ed:27:a6:
6c:3e:61:ee:9d:c8:bb:69:93:10:de:0a:6a:cc:a4:47:08:58:
2b:b8:8d:38:32:be:3f:2c:b6:1a:70:91:ee:9c:ca:2b:94:8c:
54:3c:61:31:b5:ba:0f:65:4e:54:19:5c:36:a2:b7:63:96:33:
98:e9:2d:3e:88:09:c3:63:d5:41:59:d3:38:ac:c3:64:b7:5c:
aa:54:68:5d:a8:e3:92:35:97:3a:ef:dd:a6:23:db:81:de:23:
e3:4b:a2:5e:88:8c:3f:77:56:16:34:e1:94:ed:fc:ff:d7:07:
f0:ea:4b:37:cc:19:e7:fd:17:28:ad:ee:31:0d:f4:11:ef:e1:
91:c5:3f:44:b1:51:ff:3b:36:c7:c9:dc:52:3f:f3:bc:fd:8c:
b6:80:10:b2:86:62:d3:92:0d:91:af:ed:5a:a6:65:15:f4:f8:
18:e4:72:f4:a0:2d:2c:a9:ea:5e:92:75:bb:aa:57:fc:c5:c0:
6d:cf:e9:df:70:74:f8:ea:47:cd:b6:c0:3e:57:69:bc:c6:0c:
87:1a:ad:c5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 12 13:18:34 2025 by rpki-client