Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/55/c3b68d-bc5e-4a42-b1b6-dfe41088cc03/1/o9KLNY1BezfsyLKRv5nBUVvOj3I.mft
File: o9KLNY1BezfsyLKRv5nBUVvOj3I.mft (raw, json)
Hash identifier: lFiy72ix2wggOUUVofPvajR+WWmFsr3RWJb4a6f12nA=
Subject key identifier: EC:50:04:C8:E0:FC:11:0B:77:3E:B1:72:62:FF:30:CA:E8:9E:D5:BE
Authority key identifier: A3:D2:8B:35:8D:41:7B:37:EC:C8:B2:91:BF:99:C1:51:5B:CE:8F:72
Certificate issuer: /CN=a3d28b358d417b37ecc8b291bf99c1515bce8f72
Certificate serial: 01967FB49402E005CA705BE2A0D5AA8F686D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/o9KLNY1BezfsyLKRv5nBUVvOj3I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/55/c3b68d-bc5e-4a42-b1b6-dfe41088cc03/1/o9KLNY1BezfsyLKRv5nBUVvOj3I.mft
Manifest number: 1092
Signing time: Tue 29 Apr 2025 04:01:02 +0000
Manifest this update: Tue 29 Apr 2025 04:01:02 +0000
Manifest next update: Wed 30 Apr 2025 04:01:02 +0000
Files and hashes: 1: o9KLNY1BezfsyLKRv5nBUVvOj3I.crl (hash: 7S9M7G4vT81p7MHbJnIAqDI7lWDpuakd1whWGt0ohIo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/55/c3b68d-bc5e-4a42-b1b6-dfe41088cc03/1/o9KLNY1BezfsyLKRv5nBUVvOj3I.crl
rsync://rpki.ripe.net/repository/DEFAULT/55/c3b68d-bc5e-4a42-b1b6-dfe41088cc03/1/o9KLNY1BezfsyLKRv5nBUVvOj3I.mft
rsync://rpki.ripe.net/repository/DEFAULT/o9KLNY1BezfsyLKRv5nBUVvOj3I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 30 Apr 2025 04:01:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:7f:b4:94:02:e0:05:ca:70:5b:e2:a0:d5:aa:8f:68:6d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a3d28b358d417b37ecc8b291bf99c1515bce8f72
Validity
Not Before: Apr 29 04:01:02 2025 GMT
Not After : Apr 30 04:01:02 2025 GMT
Subject: CN=ec5004c8e0fc110b773eb17262ff30cae89ed5be
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:6a:83:6a:8f:b1:27:e3:7d:42:01:8d:f4:26:
30:33:39:a9:4f:b7:87:fb:f2:1b:fc:ed:e4:94:24:
d1:9b:8c:75:7c:52:d6:e9:63:56:a0:64:2f:41:87:
fe:65:5d:6e:2c:22:3e:c4:ab:12:2a:ca:ed:97:bf:
25:a4:12:32:e4:29:96:96:c8:2c:91:39:ce:1e:86:
7d:82:46:f3:1a:d1:e1:37:a3:59:60:40:1a:e2:26:
8c:0b:1b:4c:ed:61:74:aa:ee:8a:c7:18:bb:f2:fa:
8e:1e:08:bd:4c:dc:a5:0c:77:23:dc:6a:84:f8:21:
48:bf:f0:6f:41:8d:c8:8b:e9:05:3b:f3:39:b1:e8:
96:66:8a:aa:4b:7a:31:c4:d6:b1:ee:1c:63:c3:c7:
ea:53:bd:34:63:0d:16:49:e1:d2:6a:f5:9a:a8:aa:
cd:85:30:58:a9:57:68:7b:0c:c6:6e:41:c0:ba:b1:
3b:41:dc:12:94:8a:1b:e8:72:9c:46:91:33:19:f8:
df:f4:9f:1d:0f:b6:1c:fe:a6:3c:6f:3c:7c:f7:df:
3e:62:61:cf:ff:96:aa:ee:c1:86:4c:3f:95:ff:5c:
f5:4c:82:ba:e0:dc:41:db:69:e5:9a:1d:59:14:ff:
4b:1a:bc:4e:32:ba:b6:95:ff:0e:81:3a:7a:e5:1e:
f8:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EC:50:04:C8:E0:FC:11:0B:77:3E:B1:72:62:FF:30:CA:E8:9E:D5:BE
X509v3 Authority Key Identifier:
keyid:A3:D2:8B:35:8D:41:7B:37:EC:C8:B2:91:BF:99:C1:51:5B:CE:8F:72
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/o9KLNY1BezfsyLKRv5nBUVvOj3I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/55/c3b68d-bc5e-4a42-b1b6-dfe41088cc03/1/o9KLNY1BezfsyLKRv5nBUVvOj3I.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/55/c3b68d-bc5e-4a42-b1b6-dfe41088cc03/1/o9KLNY1BezfsyLKRv5nBUVvOj3I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
62:97:dc:21:cb:2c:a0:9f:18:a4:93:69:d8:bb:5d:b6:fc:1b:
98:0f:20:ae:96:26:f1:4b:fc:f9:67:5e:06:77:f4:e5:a6:ab:
93:60:5e:d5:41:8d:51:36:e2:4f:33:86:77:56:de:27:0b:40:
dd:91:74:2e:fc:1a:d1:74:3d:48:a5:0a:8b:fa:1b:df:b7:9a:
a7:c7:f9:7f:eb:8c:da:b1:f6:43:fb:09:c3:e2:be:3c:e8:93:
04:d9:f0:b7:78:5d:24:43:ec:a1:05:c6:2d:08:ad:68:17:e9:
6f:3f:76:71:88:ef:ab:53:67:0d:14:58:63:08:be:ae:83:c9:
1e:59:24:f4:96:d2:80:68:8f:bb:74:0f:60:a4:08:ab:2a:32:
b1:9a:19:66:d1:dc:61:1b:1b:fe:50:3f:aa:c1:11:27:df:16:
d9:11:59:a5:0e:dd:30:02:11:28:63:53:79:a0:3e:13:f8:e1:
3f:8c:b3:c1:27:ef:65:0d:2d:1c:1f:27:a5:d8:52:41:bc:f5:
dd:29:39:41:f1:d5:ba:96:cd:b3:ba:0c:1c:02:f3:21:1b:a3:
98:4e:24:86:5d:13:da:43:cf:3a:15:9e:17:b0:76:93:68:a2:
3b:65:c5:76:77:10:1a:8b:a0:c3:ae:16:cb:18:f3:c4:79:d1:
40:21:da:3a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 29 10:54:41 2025 by rpki-client