Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2a/e78f83-5384-4c36-8f51-883f2f6cbf04/1/o5L8lqSHiVFOsJ9WdLWdpSyRFIM.mft
File: o5L8lqSHiVFOsJ9WdLWdpSyRFIM.mft (raw, json)
Hash identifier: m0rHeeH6JHh7ruOEnn2ryi11Zxrxl0dwvidvLcIpGI0=
Subject key identifier: 42:74:81:A3:ED:1D:F2:3F:81:4A:D3:0C:9D:58:47:CA:9D:1B:B5:CA
Authority key identifier: A3:92:FC:96:A4:87:89:51:4E:B0:9F:56:74:B5:9D:A5:2C:91:14:83
Certificate issuer: /CN=a392fc96a48789514eb09f5674b59da52c911483
Certificate serial: 0196786891EA1EFB2ED55F786A11E629D2F5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/o5L8lqSHiVFOsJ9WdLWdpSyRFIM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2a/e78f83-5384-4c36-8f51-883f2f6cbf04/1/o5L8lqSHiVFOsJ9WdLWdpSyRFIM.mft
Manifest number: 0986
Signing time: Sun 27 Apr 2025 18:00:40 +0000
Manifest this update: Sun 27 Apr 2025 18:00:40 +0000
Manifest next update: Mon 28 Apr 2025 18:00:40 +0000
Files and hashes: 1: o5L8lqSHiVFOsJ9WdLWdpSyRFIM.crl (hash: 4U+A+I9AFRp6xkNeK9isYxYk4XuniI0zlUCAlMK9TXE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2a/e78f83-5384-4c36-8f51-883f2f6cbf04/1/o5L8lqSHiVFOsJ9WdLWdpSyRFIM.crl
rsync://rpki.ripe.net/repository/DEFAULT/2a/e78f83-5384-4c36-8f51-883f2f6cbf04/1/o5L8lqSHiVFOsJ9WdLWdpSyRFIM.mft
rsync://rpki.ripe.net/repository/DEFAULT/o5L8lqSHiVFOsJ9WdLWdpSyRFIM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Apr 2025 14:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:78:68:91:ea:1e:fb:2e:d5:5f:78:6a:11:e6:29:d2:f5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a392fc96a48789514eb09f5674b59da52c911483
Validity
Not Before: Apr 27 18:00:40 2025 GMT
Not After : Apr 28 18:00:40 2025 GMT
Subject: CN=427481a3ed1df23f814ad30c9d5847ca9d1bb5ca
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:33:15:08:31:06:dc:d7:73:d0:45:86:99:97:
95:45:a0:ff:4b:74:59:1a:8f:0b:f6:af:29:68:e1:
d3:7d:5e:72:9d:97:c3:81:76:fb:89:a2:77:c9:3f:
94:ab:b5:d5:0f:1f:a4:88:75:3a:ed:95:f7:66:2c:
9d:6d:5e:38:7b:68:d8:e9:01:5e:d7:53:7a:1c:39:
cf:d0:7c:0a:8a:98:4e:53:62:f2:ba:20:fd:58:84:
c1:17:1b:bc:9d:db:f1:d7:b7:07:31:ea:d9:15:8e:
cd:65:e2:ff:26:9d:68:9f:bb:29:29:45:96:2b:65:
80:79:b1:17:69:07:aa:11:e0:63:b7:70:55:24:10:
cd:81:30:f7:6a:1a:f7:90:82:17:7e:60:c6:9c:5a:
ab:f3:53:0f:a4:aa:c6:d3:a1:ff:91:e5:89:38:53:
d2:e0:54:f1:f2:ef:3a:52:77:66:66:4e:da:7f:2f:
e5:2a:28:44:1b:5f:a8:19:28:6a:fe:c0:0d:d0:40:
a2:b5:63:5a:72:55:a4:34:a5:2f:e8:72:a0:82:71:
1e:ba:2c:f2:88:59:be:85:aa:ad:b0:ad:54:dc:a0:
42:6d:6c:bb:a6:d6:cf:5c:2e:ee:0f:fe:c2:84:0b:
13:05:fb:a7:02:7d:85:a4:a2:5d:92:48:cf:14:37:
28:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
42:74:81:A3:ED:1D:F2:3F:81:4A:D3:0C:9D:58:47:CA:9D:1B:B5:CA
X509v3 Authority Key Identifier:
keyid:A3:92:FC:96:A4:87:89:51:4E:B0:9F:56:74:B5:9D:A5:2C:91:14:83
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/o5L8lqSHiVFOsJ9WdLWdpSyRFIM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/e78f83-5384-4c36-8f51-883f2f6cbf04/1/o5L8lqSHiVFOsJ9WdLWdpSyRFIM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/e78f83-5384-4c36-8f51-883f2f6cbf04/1/o5L8lqSHiVFOsJ9WdLWdpSyRFIM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
30:46:de:19:c7:ce:31:f3:ba:44:9d:dc:a6:4b:4c:70:c5:d3:
63:13:90:7f:ac:be:0a:a7:8d:d0:23:d2:ff:93:69:c1:4e:fe:
2e:fb:63:f7:75:b2:a4:2f:34:66:75:b6:54:e7:48:31:8d:ce:
37:d9:56:03:ea:c4:fe:59:6a:7c:f4:00:09:b7:d5:2d:19:40:
ca:5b:d8:a4:9a:15:27:0d:8f:83:31:2c:f1:2a:85:1e:e5:6c:
31:90:7c:6b:4b:5f:ba:e5:e1:8e:08:1b:3e:7e:47:88:3d:44:
61:6d:20:0a:bf:bb:7e:73:f8:c4:fd:a0:43:ee:51:be:2d:3d:
66:5f:ff:3f:04:37:7f:c1:8a:7f:28:76:41:48:88:d8:5c:77:
62:b9:18:8b:7a:a1:f0:c0:52:f8:42:32:7d:c1:a3:b9:fa:d7:
79:07:ef:d6:47:22:db:63:a2:00:77:66:b6:ad:12:51:45:04:
4e:94:14:86:88:ad:d9:5c:67:ad:4b:ea:d1:77:a6:c8:fa:ae:
37:13:33:28:75:56:78:57:58:4b:00:0d:84:45:5d:02:f9:4c:
a6:95:3d:0d:97:2c:32:02:2d:28:b1:20:27:d1:dd:98:38:f7:
eb:d1:fa:a1:b8:15:05:b3:39:ae:d2:ef:b1:05:66:44:36:10:
9d:18:71:b2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 23:06:44 2025 by rpki-client