Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fc/5931e3-7d10-435c-af69-d6ddacf6a3ec/1/odFVKaRRyVzNk0rFbsCdUYdQZss.mft
File: odFVKaRRyVzNk0rFbsCdUYdQZss.mft (raw, json)
Hash identifier: UlX5hJolkql7Nac8ows5mArUaejwhum2R34Emd7PYxU=
Subject key identifier: BA:D2:9A:DE:60:39:D5:4F:40:28:12:BC:CA:75:5F:CF:A1:FD:B3:54
Authority key identifier: A1:D1:55:29:A4:51:C9:5C:CD:93:4A:C5:6E:C0:9D:51:87:50:66:CB
Certificate issuer: /CN=a1d15529a451c95ccd934ac56ec09d51875066cb
Certificate serial: 0196C2028A39E1BA57E19F802077FF41CEB2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/odFVKaRRyVzNk0rFbsCdUYdQZss.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fc/5931e3-7d10-435c-af69-d6ddacf6a3ec/1/odFVKaRRyVzNk0rFbsCdUYdQZss.mft
Manifest number: 0115
Signing time: Mon 12 May 2025 01:01:08 +0000
Manifest this update: Mon 12 May 2025 01:01:08 +0000
Manifest next update: Tue 13 May 2025 01:01:08 +0000
Files and hashes: 1: odFVKaRRyVzNk0rFbsCdUYdQZss.crl (hash: IGNRepoVqIqYur0i+j45WbYMdRIF8NQRswsri77bo2g=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fc/5931e3-7d10-435c-af69-d6ddacf6a3ec/1/odFVKaRRyVzNk0rFbsCdUYdQZss.crl
rsync://rpki.ripe.net/repository/DEFAULT/fc/5931e3-7d10-435c-af69-d6ddacf6a3ec/1/odFVKaRRyVzNk0rFbsCdUYdQZss.mft
rsync://rpki.ripe.net/repository/DEFAULT/odFVKaRRyVzNk0rFbsCdUYdQZss.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 13 May 2025 01:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:c2:02:8a:39:e1:ba:57:e1:9f:80:20:77:ff:41:ce:b2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a1d15529a451c95ccd934ac56ec09d51875066cb
Validity
Not Before: May 12 01:01:08 2025 GMT
Not After : May 13 01:01:08 2025 GMT
Subject: CN=bad29ade6039d54f402812bcca755fcfa1fdb354
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:5e:5c:ba:32:d4:b3:2e:ab:69:10:99:6b:bd:
66:f1:64:df:d3:21:32:02:91:50:83:38:85:e5:69:
95:d2:6f:02:70:b9:6e:30:17:27:66:d6:30:3d:22:
66:f0:b1:bf:ba:b7:14:bb:ae:51:a2:fa:06:c7:75:
07:55:39:d2:61:dc:e7:bf:cd:67:81:76:47:0c:d7:
b9:85:77:8d:52:fa:c3:eb:6b:f1:4a:be:59:01:c5:
96:ea:f8:b3:14:dd:dc:c7:4a:5c:b7:ab:2c:4c:48:
bd:ad:b5:8d:fd:3b:45:3c:b3:6e:f3:7b:10:48:1a:
97:a5:5e:5c:94:23:fe:34:79:45:c0:2f:2f:ef:fa:
43:39:a9:53:62:51:d1:c7:02:54:1b:b5:d8:f7:30:
e1:1a:af:eb:e5:f8:e0:0a:50:1f:ed:32:57:aa:45:
f8:39:cc:d9:8d:e6:f1:70:26:b9:16:7f:11:86:4a:
81:c9:cd:6e:99:ba:af:df:13:4e:b1:d3:4c:c6:d5:
5c:e3:5f:51:46:14:ae:e7:82:3b:dc:90:08:b8:ed:
c3:25:62:8a:21:c6:5b:9d:d2:39:2c:b0:c8:f2:3a:
b1:81:90:82:85:ba:8d:c8:2f:b1:1e:88:ca:5a:c1:
14:7a:d8:07:32:13:49:47:4d:17:b7:45:de:14:74:
44:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BA:D2:9A:DE:60:39:D5:4F:40:28:12:BC:CA:75:5F:CF:A1:FD:B3:54
X509v3 Authority Key Identifier:
keyid:A1:D1:55:29:A4:51:C9:5C:CD:93:4A:C5:6E:C0:9D:51:87:50:66:CB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/odFVKaRRyVzNk0rFbsCdUYdQZss.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/5931e3-7d10-435c-af69-d6ddacf6a3ec/1/odFVKaRRyVzNk0rFbsCdUYdQZss.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/5931e3-7d10-435c-af69-d6ddacf6a3ec/1/odFVKaRRyVzNk0rFbsCdUYdQZss.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4d:22:4d:1a:5d:c5:84:2c:68:b8:70:a3:21:2f:1d:a1:c7:e7:
2e:07:89:ae:b8:f7:b9:6f:4e:8b:70:15:f4:6a:87:bb:25:f5:
3c:7f:e6:23:4c:db:10:aa:31:26:57:c3:75:2c:78:09:30:49:
50:c3:6a:ba:5e:41:a3:19:a7:52:82:ee:2e:12:53:a1:77:41:
20:2b:5a:17:b0:f6:44:0a:80:2b:01:d1:9b:74:9a:e5:87:60:
17:01:25:d5:ba:52:38:c7:4b:e4:b3:b8:34:18:9d:04:4d:75:
3e:b0:12:37:db:29:11:57:f4:65:23:8d:d1:6a:48:d3:63:e2:
49:ac:61:a8:ba:56:cb:4d:a0:48:00:28:a6:52:3e:13:9f:d6:
db:73:20:ef:67:69:f3:18:3e:61:8e:73:bf:1f:32:23:66:b3:
99:a2:35:8e:fc:a1:de:ef:c3:2f:19:e7:15:15:a3:a6:2e:8f:
84:74:76:23:0c:6e:67:2b:5f:f3:3b:23:6c:0a:a5:ca:3c:46:
39:1d:29:81:a6:1f:17:d4:c5:ab:f9:2c:de:f2:ba:96:35:06:
24:5a:b2:5e:d7:4e:5d:66:f3:8f:91:4d:37:e0:da:5b:2b:5e:
a9:b9:0b:1b:9e:79:18:5c:1c:86:1d:3c:3d:ae:60:7f:c1:26:
11:8d:fd:ce
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 12 10:44:05 2025 by rpki-client