Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/94/392b23-a5ea-458b-bc38-349b52338dbd/1/urOPSeByR4vlU-z_NjXz3Zd1gQE.mft
File: urOPSeByR4vlU-z_NjXz3Zd1gQE.mft (raw, json)
Hash identifier: 8RHImNTB5MJ2OkT/Rtsljfwy86Ye+t4oEurqxrqpP30=
Subject key identifier: 34:D0:D1:DE:BE:B5:64:EC:EA:CD:33:F4:75:DC:53:EA:F4:8B:C7:53
Authority key identifier: BA:B3:8F:49:E0:72:47:8B:E5:53:EC:FF:36:35:F3:DD:97:75:81:01
Certificate issuer: /CN=bab38f49e072478be553ecff3635f3dd97758101
Certificate serial: 019678D6A6789323F34439DB3BB07E2177C1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/urOPSeByR4vlU-z_NjXz3Zd1gQE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/94/392b23-a5ea-458b-bc38-349b52338dbd/1/urOPSeByR4vlU-z_NjXz3Zd1gQE.mft
Manifest number: 0EFF
Signing time: Sun 27 Apr 2025 20:00:55 +0000
Manifest this update: Sun 27 Apr 2025 20:00:55 +0000
Manifest next update: Mon 28 Apr 2025 20:00:55 +0000
Files and hashes: 1: urOPSeByR4vlU-z_NjXz3Zd1gQE.crl (hash: 1EYxtes1ZndR2foXi37oDyR8WJXOQRF8thxCXTSrdtA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/94/392b23-a5ea-458b-bc38-349b52338dbd/1/urOPSeByR4vlU-z_NjXz3Zd1gQE.crl
rsync://rpki.ripe.net/repository/DEFAULT/94/392b23-a5ea-458b-bc38-349b52338dbd/1/urOPSeByR4vlU-z_NjXz3Zd1gQE.mft
rsync://rpki.ripe.net/repository/DEFAULT/urOPSeByR4vlU-z_NjXz3Zd1gQE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Apr 2025 14:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:78:d6:a6:78:93:23:f3:44:39:db:3b:b0:7e:21:77:c1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bab38f49e072478be553ecff3635f3dd97758101
Validity
Not Before: Apr 27 20:00:55 2025 GMT
Not After : Apr 28 20:00:55 2025 GMT
Subject: CN=34d0d1debeb564eceacd33f475dc53eaf48bc753
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:8a:9d:63:96:72:cc:a9:59:6a:3c:de:cd:95:
c2:6a:01:1f:fb:5f:eb:4e:eb:f2:bd:f3:22:ae:e8:
36:d8:c4:47:d4:c9:45:73:29:f1:48:97:71:5c:b4:
aa:44:a2:3d:70:a3:24:39:0b:51:a8:e7:55:d9:bd:
21:3c:38:2d:fa:a9:73:3b:38:05:d5:de:bf:8b:28:
2c:d6:5b:c3:38:86:e3:07:16:77:aa:d6:58:5e:cc:
aa:2e:26:43:3c:e7:ed:73:a5:4b:87:cf:ba:d4:5a:
34:19:fc:2b:09:00:0f:ea:b4:3c:1d:12:88:7f:03:
c0:f1:4f:79:d5:39:1e:aa:db:9f:70:54:82:79:1d:
d0:a6:d6:8f:a6:a0:97:16:19:6e:5b:c0:54:f2:43:
9e:da:95:58:2d:10:63:5a:89:cc:aa:24:31:f8:b8:
00:1c:e6:58:06:23:dc:a6:34:74:91:7f:15:cb:16:
ae:09:df:be:75:94:a1:44:8e:ae:23:f0:4f:a4:e9:
19:04:09:9e:3c:3c:2e:29:f2:e2:ae:56:b9:62:2f:
ef:82:73:81:2f:df:68:18:00:ad:62:f1:ca:17:58:
7e:b2:86:94:b3:0a:2d:3e:1a:38:fa:31:c8:08:bb:
56:19:9b:67:07:53:6b:ec:c7:59:ad:2d:a8:71:b6:
1b:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
34:D0:D1:DE:BE:B5:64:EC:EA:CD:33:F4:75:DC:53:EA:F4:8B:C7:53
X509v3 Authority Key Identifier:
keyid:BA:B3:8F:49:E0:72:47:8B:E5:53:EC:FF:36:35:F3:DD:97:75:81:01
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/urOPSeByR4vlU-z_NjXz3Zd1gQE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/94/392b23-a5ea-458b-bc38-349b52338dbd/1/urOPSeByR4vlU-z_NjXz3Zd1gQE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/94/392b23-a5ea-458b-bc38-349b52338dbd/1/urOPSeByR4vlU-z_NjXz3Zd1gQE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6a:03:f5:8c:cd:e2:25:39:aa:d2:7e:73:d2:6a:62:7d:2b:c7:
9e:d6:f5:af:81:f0:6e:8f:8a:bd:27:19:15:d0:d6:fd:b1:f3:
de:dd:cd:0c:5f:2a:de:1a:05:33:e9:0f:10:8f:bd:d9:0a:f4:
f3:da:bf:33:4e:2c:49:07:64:e5:54:9e:7a:d5:87:8b:29:a8:
a4:90:ec:40:ca:4c:40:84:eb:f0:36:31:2a:82:a9:cf:3e:4d:
dc:7e:e5:3c:65:40:5b:93:c5:89:4f:36:1a:a5:97:da:01:9b:
31:9f:4c:39:bd:47:be:81:3b:be:81:e1:51:b1:3b:8e:00:c7:
ec:5c:21:10:30:03:0d:5f:d6:18:8b:a2:ad:d2:62:c3:f4:2e:
81:16:16:dd:84:e6:84:97:a2:71:e5:75:01:73:8b:55:a5:56:
94:11:10:98:28:1b:1e:fe:c4:fb:de:0a:f0:c5:31:b0:d0:84:
67:c8:2a:3e:87:9c:09:f0:d1:56:32:48:95:ac:5a:74:0c:56:
52:3a:63:95:5c:65:ae:90:a3:38:15:48:c8:05:b2:b2:0b:45:
c2:22:df:d0:c4:2f:38:0d:0e:aa:fe:8a:a2:a8:68:23:e2:83:
35:68:75:37:0f:5e:f2:bf:3a:75:fb:4a:b2:e4:97:80:76:49:
fc:eb:82:28
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 23:01:48 2025 by rpki-client