Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/84/20d9cc-143f-4ee8-8c69-b3e9be742894/1/o8VuwTDZivLQ0pRZ8g-nm9Y1kBU.mft
File: o8VuwTDZivLQ0pRZ8g-nm9Y1kBU.mft (raw, json)
Hash identifier: X3ohklo6tFedo4/esVr87cuBGLcgPCJjyiKdbvaEhxI=
Subject key identifier: 7D:0F:02:8E:27:42:E6:AE:FE:C8:D1:33:D3:D0:B6:19:EB:B6:69:17
Authority key identifier: A3:C5:6E:C1:30:D9:8A:F2:D0:D2:94:59:F2:0F:A7:9B:D6:35:90:15
Certificate issuer: /CN=a3c56ec130d98af2d0d29459f20fa79bd6359015
Certificate serial: 0196B66BE96E061715ED82E0B231805679FD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/o8VuwTDZivLQ0pRZ8g-nm9Y1kBU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/84/20d9cc-143f-4ee8-8c69-b3e9be742894/1/o8VuwTDZivLQ0pRZ8g-nm9Y1kBU.mft
Manifest number: 04B4
Signing time: Fri 09 May 2025 19:00:47 +0000
Manifest this update: Fri 09 May 2025 19:00:47 +0000
Manifest next update: Sat 10 May 2025 19:00:47 +0000
Files and hashes: 1: o8VuwTDZivLQ0pRZ8g-nm9Y1kBU.crl (hash: 2Oa2RxDaoTndQ8TxHltYBfmz1HZ6jPcSa4XpkUxvWUg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/84/20d9cc-143f-4ee8-8c69-b3e9be742894/1/o8VuwTDZivLQ0pRZ8g-nm9Y1kBU.crl
rsync://rpki.ripe.net/repository/DEFAULT/84/20d9cc-143f-4ee8-8c69-b3e9be742894/1/o8VuwTDZivLQ0pRZ8g-nm9Y1kBU.mft
rsync://rpki.ripe.net/repository/DEFAULT/o8VuwTDZivLQ0pRZ8g-nm9Y1kBU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 10 May 2025 17:53:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:b6:6b:e9:6e:06:17:15:ed:82:e0:b2:31:80:56:79:fd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a3c56ec130d98af2d0d29459f20fa79bd6359015
Validity
Not Before: May 9 19:00:47 2025 GMT
Not After : May 10 19:00:47 2025 GMT
Subject: CN=7d0f028e2742e6aefec8d133d3d0b619ebb66917
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:04:e1:1a:d7:04:f9:de:e7:13:a0:4a:b4:8b:
28:87:a7:90:75:e8:5b:64:df:19:6e:bb:d9:e0:20:
a2:70:01:fd:7c:c8:c7:5e:1e:36:61:f9:ef:1a:c9:
e0:e9:d4:6a:bd:7e:a4:8f:64:03:7d:35:cd:8f:b7:
98:70:0c:ed:d5:18:68:52:90:c0:e2:2b:9a:89:19:
d5:ab:09:d6:93:d3:05:e4:31:0b:a6:51:3c:37:e5:
7e:68:b4:ed:34:69:a4:5f:f6:b7:d2:74:0e:d3:5a:
89:7d:e2:9e:ff:0c:e8:20:03:2c:09:bb:60:98:44:
e1:cf:17:94:ca:53:43:59:ff:6b:2e:be:57:a2:63:
fa:d2:07:f5:78:17:e9:38:21:77:2c:6c:30:8e:af:
a2:ca:20:5e:5e:df:a3:a4:45:6f:ea:4f:6d:80:11:
4e:a5:98:00:e1:c2:4c:df:9f:43:f2:71:ad:23:a2:
a8:2c:37:b9:a4:ba:2f:3f:65:5e:03:45:26:58:7c:
7a:59:c1:27:ed:6b:91:28:97:a0:a9:22:0e:93:1e:
c3:48:1c:4c:69:8d:9d:fe:d0:92:9d:9a:bd:c4:4f:
8b:bd:cf:a5:62:ea:19:e2:ec:bd:cc:f9:38:23:6b:
4c:01:d7:7b:c4:77:d7:48:b1:01:6e:27:26:fa:c2:
4f:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7D:0F:02:8E:27:42:E6:AE:FE:C8:D1:33:D3:D0:B6:19:EB:B6:69:17
X509v3 Authority Key Identifier:
keyid:A3:C5:6E:C1:30:D9:8A:F2:D0:D2:94:59:F2:0F:A7:9B:D6:35:90:15
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/o8VuwTDZivLQ0pRZ8g-nm9Y1kBU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/84/20d9cc-143f-4ee8-8c69-b3e9be742894/1/o8VuwTDZivLQ0pRZ8g-nm9Y1kBU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/84/20d9cc-143f-4ee8-8c69-b3e9be742894/1/o8VuwTDZivLQ0pRZ8g-nm9Y1kBU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
bc:97:a9:9d:77:06:f7:1a:dd:d2:82:92:03:c6:b6:80:f9:b3:
3c:aa:9d:7c:51:3a:bd:d7:24:b2:3b:5d:83:e9:73:95:b3:c3:
99:d4:41:64:2f:94:46:51:c8:0c:44:65:72:78:07:bf:2d:71:
bc:65:2b:60:56:62:34:6e:7d:f1:e9:05:bd:7c:0b:51:32:d8:
06:00:4f:8d:77:08:19:e7:09:fe:f2:ba:f8:dd:9f:19:16:a8:
6c:72:f7:fa:b2:8f:d8:6b:59:34:24:37:e3:f7:64:ff:86:32:
85:06:d8:a9:17:6f:1c:74:70:51:91:79:ed:32:aa:e1:b0:83:
59:c7:e0:b3:78:bb:a2:af:56:cd:aa:0a:9c:52:1f:83:16:af:
2a:e3:d0:31:9d:cd:f0:ef:e3:5a:d6:ca:43:78:56:74:57:8b:
e3:17:dd:67:92:83:1a:5b:e4:b4:76:05:8c:c5:f5:b5:82:29:
01:92:52:42:b5:30:e0:d1:2c:f1:72:37:19:04:8f:79:c9:60:
09:9a:ff:ef:da:a0:31:3e:06:5e:43:fe:5f:5a:98:fc:f2:b0:
1f:27:d5:41:03:b4:04:52:79:6a:6b:11:56:d6:01:13:dc:fd:
ef:18:24:c6:b3:54:3a:c7:4d:47:7a:e8:b6:44:d5:83:98:84:
de:5b:df:d0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 9 23:18:31 2025 by rpki-client