Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2a/fceb02-b0f1-4917-85c2-706ab3e83d1d/1/o8B3uDdyoALVxPi5IY7A3H8EDL8.mft
File: o8B3uDdyoALVxPi5IY7A3H8EDL8.mft (raw, json)
Hash identifier: 3gpIatc3gZ3XtiPJK7Y/a5Dd+OPF9C//Ck12GJB1wDo=
Subject key identifier: 79:A5:DD:5A:EC:9D:FA:E3:D9:16:43:C1:C1:32:17:38:D4:75:E6:61
Authority key identifier: A3:C0:77:B8:37:72:A0:02:D5:C4:F8:B9:21:8E:C0:DC:7F:04:0C:BF
Certificate issuer: /CN=a3c077b83772a002d5c4f8b9218ec0dc7f040cbf
Certificate serial: 0196808FBF48165693EF8641FB238A8EA9B2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/o8B3uDdyoALVxPi5IY7A3H8EDL8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2a/fceb02-b0f1-4917-85c2-706ab3e83d1d/1/o8B3uDdyoALVxPi5IY7A3H8EDL8.mft
Manifest number: 1513
Signing time: Tue 29 Apr 2025 08:00:26 +0000
Manifest this update: Tue 29 Apr 2025 08:00:26 +0000
Manifest next update: Wed 30 Apr 2025 08:00:26 +0000
Files and hashes: 1: o8B3uDdyoALVxPi5IY7A3H8EDL8.crl (hash: xBZrFAPOus/7mGK/h8wWA+CNb/AXsmGqgZZta75Hxlo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2a/fceb02-b0f1-4917-85c2-706ab3e83d1d/1/o8B3uDdyoALVxPi5IY7A3H8EDL8.crl
rsync://rpki.ripe.net/repository/DEFAULT/2a/fceb02-b0f1-4917-85c2-706ab3e83d1d/1/o8B3uDdyoALVxPi5IY7A3H8EDL8.mft
rsync://rpki.ripe.net/repository/DEFAULT/o8B3uDdyoALVxPi5IY7A3H8EDL8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 30 Apr 2025 08:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:80:8f:bf:48:16:56:93:ef:86:41:fb:23:8a:8e:a9:b2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a3c077b83772a002d5c4f8b9218ec0dc7f040cbf
Validity
Not Before: Apr 29 08:00:26 2025 GMT
Not After : Apr 30 08:00:26 2025 GMT
Subject: CN=79a5dd5aec9dfae3d91643c1c1321738d475e661
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8f:1d:6f:9f:30:22:da:59:1c:d5:a9:f4:52:ca:
1c:ac:43:c9:16:55:1e:a6:bd:dc:24:f1:f5:f6:a1:
23:47:ed:61:11:e3:be:a2:f1:31:24:61:7e:b4:f5:
91:0a:b7:57:92:a0:c3:85:40:b5:6f:42:71:81:38:
24:11:7f:a8:c5:ae:53:39:b5:4e:d3:79:bc:bc:3f:
43:8e:7c:cf:71:77:ca:8e:e0:40:26:61:5f:a5:e2:
4d:4f:16:7a:ae:54:a0:2c:2e:a5:a7:c2:66:17:ff:
8c:48:f2:b8:6c:3b:ef:4d:cb:27:ed:05:43:54:dd:
08:3d:49:b8:45:8e:88:2e:8a:f2:56:d5:82:e9:c3:
2e:5f:c0:bd:80:91:4b:b4:f5:7b:a3:4e:42:db:2a:
20:a0:0e:4e:ee:52:0f:15:91:95:c7:7d:17:fe:2e:
98:43:70:7b:0b:1e:96:2b:fa:f1:29:05:ec:d9:f1:
e1:65:81:87:bc:1f:95:e5:5f:9e:67:81:17:1e:d4:
74:2a:b5:c3:f4:85:32:59:5a:06:b5:15:03:22:02:
d7:1b:40:c8:81:33:91:fb:db:bd:c5:01:f0:8a:f9:
3a:c6:73:31:12:22:29:c7:ec:6b:68:60:27:64:c1:
02:21:2d:ed:fb:a7:28:76:a7:ca:6e:47:06:6c:86:
95:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
79:A5:DD:5A:EC:9D:FA:E3:D9:16:43:C1:C1:32:17:38:D4:75:E6:61
X509v3 Authority Key Identifier:
keyid:A3:C0:77:B8:37:72:A0:02:D5:C4:F8:B9:21:8E:C0:DC:7F:04:0C:BF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/o8B3uDdyoALVxPi5IY7A3H8EDL8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/fceb02-b0f1-4917-85c2-706ab3e83d1d/1/o8B3uDdyoALVxPi5IY7A3H8EDL8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/fceb02-b0f1-4917-85c2-706ab3e83d1d/1/o8B3uDdyoALVxPi5IY7A3H8EDL8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2f:50:ad:f5:d3:d6:ff:3b:dd:30:ac:57:46:35:06:0f:c4:e3:
40:b8:92:a9:88:28:96:76:a3:dd:78:05:a3:6f:34:bd:6b:67:
88:2a:2b:3f:e3:97:d2:f5:ee:34:bb:34:69:9d:49:4c:9a:a8:
83:3c:7b:4a:01:61:6d:ab:19:94:f3:8e:7c:5c:86:39:9a:4b:
80:48:71:ef:d0:f8:1b:eb:79:8c:2b:42:92:07:1b:2f:b3:a5:
8b:68:7d:2a:a4:d5:82:61:f8:bb:9f:0d:36:75:28:0b:bd:58:
6f:ef:99:b9:5f:bf:2f:00:43:43:9d:b1:8f:5d:af:42:73:9b:
50:e4:af:55:43:89:3f:67:b4:21:68:8e:f6:31:5b:c6:b4:d4:
3c:60:c5:56:3f:fd:12:d7:fe:a8:2a:1a:22:a4:03:49:ff:4c:
f2:28:d3:2e:7d:a6:92:37:8b:00:9d:7f:84:c1:36:dd:7c:91:
5f:fa:fe:0f:26:2c:4c:91:f1:fd:19:ff:a2:ab:43:9f:ee:e3:
27:81:bf:68:b5:b2:42:87:f9:9a:b8:00:3b:c3:e8:fd:46:d7:
f3:e4:0f:e4:2c:0c:99:8a:8b:bb:00:33:81:0f:71:7f:0e:19:
60:47:43:a7:6f:ab:f9:61:7b:59:b8:18:45:d9:41:ce:5d:cf:
58:7a:b4:95
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 29 16:38:26 2025 by rpki-client