Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c7/2c3038-9c45-43e8-b69f-b84cff188f55/1/U-r4Oizdyf0L4onM-vMrMjMEz04.mft
File: U-r4Oizdyf0L4onM-vMrMjMEz04.mft (raw, json)
Hash identifier: IrV9/QBkWBcl733KSHPWRwaMeFGfXEKM5NiYPpo3qQ0=
Subject key identifier: 86:A3:26:9B:2C:75:23:24:58:BA:0C:1B:7D:CC:7B:81:11:A6:43:49
Authority key identifier: 53:EA:F8:3A:2C:DD:C9:FD:0B:E2:89:CC:FA:F3:2B:32:33:04:CF:4E
Certificate issuer: /CN=53eaf83a2cddc9fd0be289ccfaf32b323304cf4e
Certificate serial: 0196A8E6BD9A7A36718B08B73365E7DBCD30
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/U-r4Oizdyf0L4onM-vMrMjMEz04.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c7/2c3038-9c45-43e8-b69f-b84cff188f55/1/U-r4Oizdyf0L4onM-vMrMjMEz04.mft
Manifest number: 0BF7
Signing time: Wed 07 May 2025 04:00:16 +0000
Manifest this update: Wed 07 May 2025 04:00:16 +0000
Manifest next update: Thu 08 May 2025 04:00:16 +0000
Files and hashes: 1: U-r4Oizdyf0L4onM-vMrMjMEz04.crl (hash: gitVKP2SRLXVik9Ha247XStetfo9RP7OIKnV5SLxOmA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c7/2c3038-9c45-43e8-b69f-b84cff188f55/1/U-r4Oizdyf0L4onM-vMrMjMEz04.crl
rsync://rpki.ripe.net/repository/DEFAULT/c7/2c3038-9c45-43e8-b69f-b84cff188f55/1/U-r4Oizdyf0L4onM-vMrMjMEz04.mft
rsync://rpki.ripe.net/repository/DEFAULT/U-r4Oizdyf0L4onM-vMrMjMEz04.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 08 May 2025 04:00:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:a8:e6:bd:9a:7a:36:71:8b:08:b7:33:65:e7:db:cd:30
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=53eaf83a2cddc9fd0be289ccfaf32b323304cf4e
Validity
Not Before: May 7 04:00:16 2025 GMT
Not After : May 8 04:00:16 2025 GMT
Subject: CN=86a3269b2c75232458ba0c1b7dcc7b8111a64349
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:56:07:64:a4:10:e2:2c:a2:cf:3f:a6:b4:ed:
4b:9f:8a:83:82:0e:e9:c6:aa:91:d4:16:db:a6:6c:
1c:e0:11:84:80:02:49:c3:b8:29:8c:ee:f3:3f:1f:
04:0b:f7:e3:8b:99:24:9f:6e:f1:da:79:c7:c6:1c:
42:81:5f:bf:87:02:c4:b6:64:d3:1d:19:71:61:af:
7b:37:2a:6f:02:3d:1d:5a:b4:95:13:6a:b7:8c:ca:
c3:3b:47:9a:71:95:0c:e8:fa:cc:3c:cc:5a:e1:80:
3f:b1:d2:68:8e:30:ea:b9:a6:1b:09:66:71:e5:3c:
f1:94:bc:f8:72:73:c1:a5:2f:d1:23:a7:b4:15:45:
be:aa:d4:25:3a:41:b0:e0:15:ab:f4:06:fe:52:6b:
22:9f:fd:6a:ac:b2:ed:1b:ad:35:e7:95:30:a3:14:
66:d9:e1:ec:2f:5b:86:4c:a9:28:27:28:8d:f2:fa:
4a:bb:a2:bd:02:a8:03:fb:b6:e5:a6:4e:50:c9:d8:
94:72:a0:d5:1a:6c:32:cb:fc:ba:98:c9:11:b7:e8:
8d:ca:cd:da:86:8e:9f:21:12:68:37:62:43:9c:57:
4e:6f:8c:9d:60:36:36:0c:2c:77:12:a9:97:05:36:
e6:9f:13:65:6d:55:6e:dc:40:6b:3b:8c:17:24:11:
af:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
86:A3:26:9B:2C:75:23:24:58:BA:0C:1B:7D:CC:7B:81:11:A6:43:49
X509v3 Authority Key Identifier:
keyid:53:EA:F8:3A:2C:DD:C9:FD:0B:E2:89:CC:FA:F3:2B:32:33:04:CF:4E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/U-r4Oizdyf0L4onM-vMrMjMEz04.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/2c3038-9c45-43e8-b69f-b84cff188f55/1/U-r4Oizdyf0L4onM-vMrMjMEz04.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/2c3038-9c45-43e8-b69f-b84cff188f55/1/U-r4Oizdyf0L4onM-vMrMjMEz04.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8f:74:08:b5:b6:5e:9d:06:b7:28:69:6c:8f:3f:fe:83:22:3a:
6c:7c:f6:81:83:a8:ff:b7:a7:b9:67:bd:85:97:4f:fa:29:77:
3c:2b:b4:d5:7c:d7:b1:cb:3d:9b:14:80:c2:91:f2:6c:3b:38:
9a:d3:03:90:e6:40:3b:64:4a:7c:e9:8a:7c:10:43:8a:51:81:
ca:55:e3:0e:40:69:e7:11:3e:9a:21:a4:e0:fd:f6:4c:9b:6e:
75:22:b7:f1:70:ad:bb:79:55:aa:2f:5b:f1:04:9c:33:6d:12:
e1:bc:a3:db:9a:5a:10:10:a4:e9:da:e9:83:10:4d:b7:b9:88:
66:e0:9f:3c:d8:ea:09:54:d8:ca:68:6f:4a:0a:44:ac:51:8f:
96:a0:1d:e8:9d:2b:e3:1e:1b:79:ae:4f:bb:81:a4:51:26:d4:
0d:37:90:55:9e:ad:33:bc:d5:87:af:4d:26:b6:72:81:dc:3a:
40:18:0c:fe:b3:eb:08:5a:75:01:88:1a:de:8a:e2:86:0a:63:
df:5e:13:83:d9:46:d7:b3:b2:c8:d6:11:51:bf:85:de:17:33:
de:47:17:48:09:b8:91:87:57:e1:cd:fb:b1:c1:2e:81:16:71:
9f:b6:56:17:ea:f2:17:0e:8a:ea:5b:d1:6a:3c:9b:70:c3:29:
2a:ce:35:80
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 7 10:12:50 2025 by rpki-client