Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/93/ae9081-f651-41f5-b3a2-3706b1fcd6cb/1/u5O3SkaFwcFKueGSF6qxQWNBEdY.mft
File: u5O3SkaFwcFKueGSF6qxQWNBEdY.mft (raw, json)
Hash identifier: GyYAOkqEu2s7zwsLdrT72N5M12jzkFMEIMMCYQ34L/Y=
Subject key identifier: FE:A2:2F:E1:98:16:E6:2C:7A:56:A6:01:81:75:B6:0F:05:D9:45:B5
Authority key identifier: BB:93:B7:4A:46:85:C1:C1:4A:B9:E1:92:17:AA:B1:41:63:41:11:D6
Certificate issuer: /CN=bb93b74a4685c1c14ab9e19217aab141634111d6
Certificate serial: 0196B7103507BBFD21F823ABD5695827CB8F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/u5O3SkaFwcFKueGSF6qxQWNBEdY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/93/ae9081-f651-41f5-b3a2-3706b1fcd6cb/1/u5O3SkaFwcFKueGSF6qxQWNBEdY.mft
Manifest number: 0ED8
Signing time: Fri 09 May 2025 22:00:14 +0000
Manifest this update: Fri 09 May 2025 22:00:14 +0000
Manifest next update: Sat 10 May 2025 22:00:14 +0000
Files and hashes: 1: u5O3SkaFwcFKueGSF6qxQWNBEdY.crl (hash: YIIAidALWYIBC8GtT+fAF7pDgaidGkHev+PCTIehVEs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/93/ae9081-f651-41f5-b3a2-3706b1fcd6cb/1/u5O3SkaFwcFKueGSF6qxQWNBEdY.crl
rsync://rpki.ripe.net/repository/DEFAULT/93/ae9081-f651-41f5-b3a2-3706b1fcd6cb/1/u5O3SkaFwcFKueGSF6qxQWNBEdY.mft
rsync://rpki.ripe.net/repository/DEFAULT/u5O3SkaFwcFKueGSF6qxQWNBEdY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 10 May 2025 19:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:b7:10:35:07:bb:fd:21:f8:23:ab:d5:69:58:27:cb:8f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bb93b74a4685c1c14ab9e19217aab141634111d6
Validity
Not Before: May 9 22:00:14 2025 GMT
Not After : May 10 22:00:14 2025 GMT
Subject: CN=fea22fe19816e62c7a56a6018175b60f05d945b5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:ba:cc:eb:24:bc:37:cb:a6:ef:c6:2d:28:a7:
27:5c:4f:c1:84:8a:e8:68:0c:56:8b:fd:b6:5d:8b:
d8:a6:8a:b6:d2:a7:ca:11:04:a5:31:b3:bb:41:f8:
2e:7c:23:c3:f8:f2:6e:cf:63:d9:47:18:51:7f:3d:
61:4b:d8:f6:0e:be:b3:04:77:b3:5d:2e:40:23:fc:
c3:95:cd:41:3d:d0:f8:b6:3f:c5:3c:68:dc:51:ef:
ec:69:eb:55:a6:aa:05:6b:03:7c:b9:43:35:82:39:
45:37:04:8e:de:0f:97:7f:0b:50:e0:bf:5f:f1:82:
98:07:4a:25:8b:64:f8:8f:95:cf:53:80:c2:85:e4:
06:b0:07:09:5d:02:e2:7e:dd:de:16:81:30:8f:b1:
eb:f4:f2:3c:c9:75:ad:ac:a1:21:6b:bc:6f:e1:44:
9f:4f:0e:3c:59:db:73:de:ba:c3:df:fa:d0:23:9b:
b7:f6:ed:d4:06:1f:5f:ec:0c:22:a6:f5:b5:b9:24:
eb:9e:2c:c8:53:90:90:61:62:42:fb:f1:a1:8e:6c:
01:f3:38:37:e2:f6:6c:fd:a5:17:73:8e:44:84:81:
95:1e:50:93:c7:c7:17:9a:df:5d:d9:12:09:a4:cc:
13:e3:ef:97:15:6a:79:73:a6:2e:12:02:6e:cb:9e:
56:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FE:A2:2F:E1:98:16:E6:2C:7A:56:A6:01:81:75:B6:0F:05:D9:45:B5
X509v3 Authority Key Identifier:
keyid:BB:93:B7:4A:46:85:C1:C1:4A:B9:E1:92:17:AA:B1:41:63:41:11:D6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/u5O3SkaFwcFKueGSF6qxQWNBEdY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/93/ae9081-f651-41f5-b3a2-3706b1fcd6cb/1/u5O3SkaFwcFKueGSF6qxQWNBEdY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/93/ae9081-f651-41f5-b3a2-3706b1fcd6cb/1/u5O3SkaFwcFKueGSF6qxQWNBEdY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1f:ec:79:7c:5d:c9:5d:04:48:78:dc:8d:c1:70:f3:aa:f3:42:
86:74:5b:f0:2d:51:21:3d:83:eb:93:23:9e:5c:59:51:1b:1e:
84:36:33:b8:cd:65:f2:d1:29:7b:f7:fb:40:4d:3b:a2:8c:01:
be:e0:42:cf:b4:23:5c:9a:6b:d1:30:3f:90:9b:d4:e2:62:2a:
ba:55:79:50:a4:eb:0c:f9:d3:16:e6:ce:2c:26:d7:aa:d6:7a:
01:af:ad:9c:e7:c6:bc:8b:78:55:4f:da:37:73:73:a1:ba:c4:
f3:78:be:df:41:92:5b:41:74:5f:56:7d:13:82:b2:62:02:11:
34:7c:a4:5e:40:d0:95:70:e1:66:dd:55:a3:f1:33:e0:49:06:
f8:59:dc:a8:cf:55:fd:3c:ba:97:6e:5d:3a:2f:82:90:99:a8:
e3:03:98:99:1f:f2:af:b6:cf:00:e1:d1:b5:c6:58:f5:3c:ef:
73:d0:e9:20:81:df:08:db:3d:80:81:2e:21:64:0b:f9:cd:6a:
bb:2e:f8:ba:fa:5d:08:23:b6:7e:f1:ec:41:63:3a:8b:2c:46:
7f:bb:3f:fa:75:f2:7e:86:30:29:36:e1:d1:c4:ee:88:c3:6c:
57:0d:c6:df:aa:73:bc:23:78:91:da:33:bd:15:94:47:9b:4d:
14:e8:ec:ee
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 10 05:37:35 2025 by rpki-client