Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/42/7672e2-1c7f-4d2e-8961-c26c3e23baf6/1/0wUa-GYelCUtF1k103l-nsos2Aw.mft
File: 0wUa-GYelCUtF1k103l-nsos2Aw.mft (raw, json)
Hash identifier: BoXxcLCNmSCteeCmo+W/YPlnMG8nyipylLr5xN1FFpQ=
Subject key identifier: 96:0A:3B:0E:50:CD:2A:DA:58:81:06:B7:DD:2C:55:61:28:B6:4E:45
Authority key identifier: D3:05:1A:F8:66:1E:94:25:2D:17:59:35:D3:79:7E:9E:CA:2C:D8:0C
Certificate issuer: /CN=d3051af8661e94252d175935d3797e9eca2cd80c
Certificate serial: 01967A571A2A195E3883B7C30E8EAC3EDD6A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0wUa-GYelCUtF1k103l-nsos2Aw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/42/7672e2-1c7f-4d2e-8961-c26c3e23baf6/1/0wUa-GYelCUtF1k103l-nsos2Aw.mft
Manifest number: 0E79
Signing time: Mon 28 Apr 2025 03:00:50 +0000
Manifest this update: Mon 28 Apr 2025 03:00:50 +0000
Manifest next update: Tue 29 Apr 2025 03:00:50 +0000
Files and hashes: 1: 0wUa-GYelCUtF1k103l-nsos2Aw.crl (hash: cqBZrxnY3JFOED8rLTPnd+sN1yj/6N/EYb3FAcxUO/c=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/42/7672e2-1c7f-4d2e-8961-c26c3e23baf6/1/0wUa-GYelCUtF1k103l-nsos2Aw.crl
rsync://rpki.ripe.net/repository/DEFAULT/42/7672e2-1c7f-4d2e-8961-c26c3e23baf6/1/0wUa-GYelCUtF1k103l-nsos2Aw.mft
rsync://rpki.ripe.net/repository/DEFAULT/0wUa-GYelCUtF1k103l-nsos2Aw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 29 Apr 2025 03:00:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:7a:57:1a:2a:19:5e:38:83:b7:c3:0e:8e:ac:3e:dd:6a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d3051af8661e94252d175935d3797e9eca2cd80c
Validity
Not Before: Apr 28 03:00:50 2025 GMT
Not After : Apr 29 03:00:50 2025 GMT
Subject: CN=960a3b0e50cd2ada588106b7dd2c556128b64e45
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:a2:97:f0:55:68:79:66:ed:97:e9:31:01:4d:
21:ae:93:91:00:b1:aa:6f:21:1d:7d:8e:83:6f:b1:
52:17:9a:0e:5d:d5:08:62:9a:da:bf:26:95:69:c2:
10:76:84:12:f7:d4:96:ae:e7:54:de:68:fc:ff:c1:
09:52:1d:ee:5e:f1:20:b7:9e:b0:cc:fd:a4:56:19:
2c:f1:0d:29:e0:60:50:f6:c8:de:63:d9:67:26:bb:
e6:2b:4b:23:39:71:48:d1:95:2d:12:37:79:ec:01:
65:54:55:c4:ec:4e:cc:b5:cb:dc:99:36:5d:51:03:
22:70:a2:09:c4:9b:e1:c5:12:dc:39:f2:a0:fa:86:
02:54:91:9d:7b:b7:f0:8a:6b:fc:93:34:4e:9b:56:
c0:10:75:11:92:dd:00:8c:19:18:d8:21:64:fb:55:
a1:08:1f:11:2a:46:ce:d6:3b:32:ff:2d:4e:e7:ae:
ae:68:05:4e:c2:d6:93:ea:43:af:31:45:56:71:ca:
b8:9c:74:7a:8b:14:53:c3:da:28:41:47:b1:87:bb:
c0:6c:70:51:34:4a:cd:62:6a:8b:c2:f3:0f:bf:7b:
ec:5e:c4:24:94:88:ec:78:24:4e:dd:8f:7c:61:14:
fd:c7:e8:4c:95:4c:42:89:9b:9c:b1:af:8d:9a:b3:
71:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
96:0A:3B:0E:50:CD:2A:DA:58:81:06:B7:DD:2C:55:61:28:B6:4E:45
X509v3 Authority Key Identifier:
keyid:D3:05:1A:F8:66:1E:94:25:2D:17:59:35:D3:79:7E:9E:CA:2C:D8:0C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0wUa-GYelCUtF1k103l-nsos2Aw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/42/7672e2-1c7f-4d2e-8961-c26c3e23baf6/1/0wUa-GYelCUtF1k103l-nsos2Aw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/42/7672e2-1c7f-4d2e-8961-c26c3e23baf6/1/0wUa-GYelCUtF1k103l-nsos2Aw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
e3:82:62:bf:74:44:7c:7b:42:88:ab:49:66:36:fd:ba:23:bb:
04:62:63:ad:8a:22:03:74:aa:bd:23:a1:67:e9:12:a6:7f:01:
f2:36:d5:e8:91:06:d3:ea:b5:ba:f9:a7:dc:af:6d:84:0f:be:
b7:d3:97:58:e2:d0:ab:c0:21:58:8b:77:b9:39:f0:b8:60:0d:
2d:ff:b2:b1:3c:da:0e:9a:85:38:28:11:5b:1c:60:de:1b:aa:
a6:63:a8:fc:35:93:d4:fc:26:7b:63:9f:6c:f9:f5:c9:18:83:
b2:f5:91:57:d1:0b:2b:5f:4b:ed:fd:34:0c:82:23:98:26:7c:
a8:59:2b:ea:ef:5a:83:31:91:b6:07:17:6f:b6:89:32:6c:85:
61:58:47:4a:58:c4:9b:a3:e1:ac:50:7d:9d:23:6e:03:a3:8f:
bb:a5:a3:55:a5:a4:c9:02:a5:c3:86:7e:a4:ab:8c:d7:d9:a0:
ad:fa:25:5e:28:58:7b:2e:8e:e2:c9:d6:a0:61:de:75:46:7b:
85:c6:33:98:b3:de:47:c1:08:6f:2f:34:27:4d:ad:c8:e4:4b:
dd:b7:2f:4a:2f:86:8d:f8:f4:4a:f7:6e:09:9e:94:94:ec:7f:
e6:ba:70:69:2a:49:d3:56:10:d2:e9:8b:9b:b8:3f:b4:54:73:
25:33:61:97
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 13:17:55 2025 by rpki-client