Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/91/07512a-12c8-4895-b32f-75c7ba1c073f/1/0vcAvspCZT5kq0NaLwpPPZpQFLA.mft
File: 0vcAvspCZT5kq0NaLwpPPZpQFLA.mft (raw, json)
Hash identifier: NtUZrf5WMqysLE4kyxFxmpvubkgfj6eCiy9LvsdHgnw=
Subject key identifier: 80:D2:80:AC:F0:13:18:A5:9E:93:9A:DF:E4:D5:16:DD:0E:AD:AA:95
Authority key identifier: D2:F7:00:BE:CA:42:65:3E:64:AB:43:5A:2F:0A:4F:3D:9A:50:14:B0
Certificate issuer: /CN=d2f700beca42653e64ab435a2f0a4f3d9a5014b0
Certificate serial: 01969E9AE7B81B635911F78374447ED93CCF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0vcAvspCZT5kq0NaLwpPPZpQFLA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/91/07512a-12c8-4895-b32f-75c7ba1c073f/1/0vcAvspCZT5kq0NaLwpPPZpQFLA.mft
Manifest number: 151E
Signing time: Mon 05 May 2025 04:01:14 +0000
Manifest this update: Mon 05 May 2025 04:01:14 +0000
Manifest next update: Tue 06 May 2025 04:01:14 +0000
Files and hashes: 1: 0vcAvspCZT5kq0NaLwpPPZpQFLA.crl (hash: gfw5t+J4b67mnjXbf9gTDOx52gsYYvs8Yhv1zrOS0eU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/91/07512a-12c8-4895-b32f-75c7ba1c073f/1/0vcAvspCZT5kq0NaLwpPPZpQFLA.crl
rsync://rpki.ripe.net/repository/DEFAULT/91/07512a-12c8-4895-b32f-75c7ba1c073f/1/0vcAvspCZT5kq0NaLwpPPZpQFLA.mft
rsync://rpki.ripe.net/repository/DEFAULT/0vcAvspCZT5kq0NaLwpPPZpQFLA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 05 May 2025 22:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:9e:9a:e7:b8:1b:63:59:11:f7:83:74:44:7e:d9:3c:cf
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d2f700beca42653e64ab435a2f0a4f3d9a5014b0
Validity
Not Before: May 5 04:01:14 2025 GMT
Not After : May 6 04:01:14 2025 GMT
Subject: CN=80d280acf01318a59e939adfe4d516dd0eadaa95
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:8b:d2:91:92:55:d6:f2:03:3e:2a:f6:11:46:
80:f0:aa:cb:c0:9f:5e:8f:b4:40:f8:62:37:f4:5a:
30:ff:c0:6e:60:e1:39:5a:df:0f:82:6a:53:64:44:
cf:90:33:bb:7f:e9:54:df:3a:bb:9c:de:b9:3f:8c:
fc:57:ab:82:21:27:17:4b:d6:02:70:26:d6:bf:e8:
6a:27:6e:b9:80:5f:0e:66:3a:08:e1:a9:0a:80:b6:
19:55:cd:0e:cd:a5:56:79:a7:71:44:8b:3f:04:08:
c0:65:21:5b:21:8e:e5:69:56:75:44:71:a3:5a:b5:
5b:4a:80:36:71:10:65:68:cd:4d:58:b2:a2:71:19:
c7:aa:e2:1d:7e:20:fb:04:f2:21:ad:a9:1a:df:62:
66:cd:d1:53:d2:bf:96:e4:6a:00:10:37:ba:cf:c6:
2f:96:c2:1b:14:c4:a9:57:cb:7b:58:0e:c4:67:21:
81:07:22:de:e5:fd:db:de:b2:6d:f6:13:5b:69:85:
bb:de:cb:a5:a7:2c:c7:00:65:3e:c7:01:e8:60:bb:
19:00:f0:66:40:ea:75:9c:55:58:ce:57:ab:cc:1e:
79:60:39:69:90:f3:84:e6:3d:6f:43:78:95:6d:d8:
c2:ac:ef:e7:5d:1b:9c:f9:92:f4:62:ce:9e:d3:07:
89:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
80:D2:80:AC:F0:13:18:A5:9E:93:9A:DF:E4:D5:16:DD:0E:AD:AA:95
X509v3 Authority Key Identifier:
keyid:D2:F7:00:BE:CA:42:65:3E:64:AB:43:5A:2F:0A:4F:3D:9A:50:14:B0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0vcAvspCZT5kq0NaLwpPPZpQFLA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/91/07512a-12c8-4895-b32f-75c7ba1c073f/1/0vcAvspCZT5kq0NaLwpPPZpQFLA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/91/07512a-12c8-4895-b32f-75c7ba1c073f/1/0vcAvspCZT5kq0NaLwpPPZpQFLA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
36:2f:1f:11:aa:b9:9d:59:be:f0:11:9e:f2:22:cf:d2:76:16:
56:1a:f5:e4:5f:6e:b2:04:96:1d:82:89:da:54:1f:e1:50:06:
b6:e5:dc:17:8b:ec:c7:91:72:ac:89:23:2c:27:e2:81:cd:92:
1d:40:1d:a3:b1:2a:63:0f:07:3d:22:06:8f:fd:2c:9b:91:7d:
52:6c:94:ee:f4:e0:c6:64:8e:f1:90:40:81:1e:a8:03:fb:40:
62:a1:34:b5:a8:96:e1:8d:2a:94:ad:21:4f:71:27:37:de:3f:
d4:32:21:68:30:b3:d6:f8:13:14:10:91:9b:39:b0:a9:58:3f:
bb:0d:30:c9:16:e7:a6:db:c1:c5:a1:2d:da:82:28:89:2a:1d:
22:72:62:01:63:6a:1a:52:3a:7e:54:b3:0a:77:3b:e9:0a:12:
34:56:98:69:4a:31:d1:ac:b3:e3:6e:1c:ec:38:77:fb:ac:a2:
ec:5a:00:51:ee:94:71:e0:4a:68:85:ab:17:c9:3e:81:ca:de:
66:61:4b:59:3c:d7:e0:10:fb:24:14:20:43:8b:19:1e:0d:93:
17:9a:fd:23:f7:20:18:20:92:d8:31:ac:61:52:8c:55:e3:2f:
f0:0a:0f:f3:38:eb:fb:c0:b3:e4:4a:2a:91:f9:27:b6:fc:b5:
df:d4:a3:18
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 5 07:38:33 2025 by rpki-client