Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5c/100831-39f8-4bf3-be1a-4f5e265d1679/1/opYekZxsdKh1zuBhj-zF_WP5WVE.mft
File: opYekZxsdKh1zuBhj-zF_WP5WVE.mft (raw, json)
Hash identifier: kPqwg1ibdtlh21gv1JGZm41D3i3YYO5q8cgtk/R/+Bs=
Subject key identifier: 15:F5:68:66:0C:94:6D:9B:8B:AB:25:6F:30:14:62:AA:4D:49:79:4A
Authority key identifier: A2:96:1E:91:9C:6C:74:A8:75:CE:E0:61:8F:EC:C5:FD:63:F9:59:51
Certificate issuer: /CN=a2961e919c6c74a875cee0618fecc5fd63f95951
Certificate serial: 01969228844C1AB9EC43AA1A1147F4176D6C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/opYekZxsdKh1zuBhj-zF_WP5WVE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5c/100831-39f8-4bf3-be1a-4f5e265d1679/1/opYekZxsdKh1zuBhj-zF_WP5WVE.mft
Manifest number: 033A
Signing time: Fri 02 May 2025 18:00:50 +0000
Manifest this update: Fri 02 May 2025 18:00:50 +0000
Manifest next update: Sat 03 May 2025 18:00:50 +0000
Files and hashes: 1: opYekZxsdKh1zuBhj-zF_WP5WVE.crl (hash: LLKUrqslIB7p8Fl51eGgh4K5lzf6kExDs/+RzxzBK58=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5c/100831-39f8-4bf3-be1a-4f5e265d1679/1/opYekZxsdKh1zuBhj-zF_WP5WVE.crl
rsync://rpki.ripe.net/repository/DEFAULT/5c/100831-39f8-4bf3-be1a-4f5e265d1679/1/opYekZxsdKh1zuBhj-zF_WP5WVE.mft
rsync://rpki.ripe.net/repository/DEFAULT/opYekZxsdKh1zuBhj-zF_WP5WVE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 03 May 2025 18:00:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:92:28:84:4c:1a:b9:ec:43:aa:1a:11:47:f4:17:6d:6c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a2961e919c6c74a875cee0618fecc5fd63f95951
Validity
Not Before: May 2 18:00:50 2025 GMT
Not After : May 3 18:00:50 2025 GMT
Subject: CN=15f568660c946d9b8bab256f301462aa4d49794a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:cd:88:ba:12:bd:6c:e5:7e:ae:6f:7a:ee:fb:
64:54:82:d4:34:20:49:75:ea:52:f3:ba:b3:b4:36:
49:11:4b:86:a1:b2:f3:6a:ca:f2:a4:49:4a:c9:b2:
34:ac:43:2a:2c:9d:15:ce:de:cd:7b:9b:fd:35:0a:
f9:46:ad:78:7b:bb:ca:2a:12:54:c3:e9:8d:ee:05:
62:15:0b:13:7d:fc:f7:58:38:85:ee:25:aa:c7:ca:
61:b5:b4:5b:12:d6:2c:13:b5:d7:b8:da:c7:6f:b2:
ab:88:b1:62:85:67:b4:21:63:78:9a:db:df:b0:c0:
af:4d:92:ad:d5:aa:0e:38:b1:52:64:51:65:26:92:
5e:cc:7c:86:ef:85:69:6d:84:8f:39:b6:e6:31:09:
dc:f2:ec:3e:5b:b3:0a:a7:bc:95:73:99:44:34:15:
25:9c:32:73:c5:44:4b:1c:41:59:8c:a3:3d:3c:62:
a9:81:66:b6:48:4f:45:63:41:6e:af:c0:5c:c4:cb:
41:b2:7b:3c:a2:7c:80:c6:3b:dc:0a:79:84:1a:c7:
9c:68:69:0a:6e:3a:25:a6:40:21:26:f3:7a:f4:ce:
8d:f6:b7:d2:f6:21:c8:83:d7:8e:a0:35:b6:00:1c:
21:de:12:59:c0:73:ff:be:82:74:ac:7c:f1:28:d4:
df:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
15:F5:68:66:0C:94:6D:9B:8B:AB:25:6F:30:14:62:AA:4D:49:79:4A
X509v3 Authority Key Identifier:
keyid:A2:96:1E:91:9C:6C:74:A8:75:CE:E0:61:8F:EC:C5:FD:63:F9:59:51
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/opYekZxsdKh1zuBhj-zF_WP5WVE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5c/100831-39f8-4bf3-be1a-4f5e265d1679/1/opYekZxsdKh1zuBhj-zF_WP5WVE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5c/100831-39f8-4bf3-be1a-4f5e265d1679/1/opYekZxsdKh1zuBhj-zF_WP5WVE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0d:79:d6:c2:9b:46:95:5d:6a:e8:1c:fc:6d:2c:35:db:e2:9a:
64:ed:b2:34:c0:2a:f0:6c:a0:0d:56:70:a4:ee:36:4b:63:8f:
7b:98:bd:6e:d3:b4:18:c6:e2:a9:f2:0d:20:ae:62:1d:66:bb:
8f:8f:f4:a3:1c:e4:ad:0f:69:ae:15:ba:e8:d9:d0:df:f2:b4:
ec:2f:bb:02:ff:54:7c:e1:34:f2:26:83:7b:3b:35:75:bc:f5:
7a:24:43:0f:16:3e:79:8b:38:c9:09:3b:54:e5:b7:71:2f:f0:
c4:6e:cc:c6:6a:f2:9d:8b:51:9f:38:6d:ce:e0:30:ad:5c:4d:
3a:ec:80:14:66:63:83:82:bb:93:de:08:5e:b4:c7:21:7f:c7:
b9:b8:9a:fc:85:97:bb:cf:85:31:c6:e7:53:d9:e1:a9:47:1a:
85:d9:f6:8b:9c:43:91:1b:06:63:bf:02:bd:1d:80:0a:08:0f:
10:b3:5f:e6:fc:c8:da:6a:40:60:ac:54:b5:d1:05:42:0b:0f:
d5:a1:14:79:44:ec:01:db:36:4f:56:16:16:a9:34:6a:fc:11:
92:43:e8:80:fa:13:1d:5d:81:c3:08:4e:af:0c:c9:65:74:1c:
67:86:25:07:83:36:b2:d4:10:58:21:66:06:90:39:97:52:63:
e5:38:b1:e6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 3 02:31:04 2025 by rpki-client