Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a0/c83e8f-2457-4e8a-a6bc-3a7980314ea2/1/61C0OdSI4bGmnjWGCYYhlWwO3Hs.mft
File: 61C0OdSI4bGmnjWGCYYhlWwO3Hs.mft (raw, json)
Hash identifier: vaiXS/M82cKQyrnkYiZPya6vO3tlQuHfi4vzRNMKzOo=
Subject key identifier: D5:EC:41:06:D5:C3:D7:73:CE:A5:0B:38:BE:7F:B2:C1:49:74:42:FA
Authority key identifier: EB:50:B4:39:D4:88:E1:B1:A6:9E:35:86:09:86:21:95:6C:0E:DC:7B
Certificate issuer: /CN=eb50b439d488e1b1a69e3586098621956c0edc7b
Certificate serial: 019679E9C94332B8A15FAD79D5420A46E133
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/61C0OdSI4bGmnjWGCYYhlWwO3Hs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a0/c83e8f-2457-4e8a-a6bc-3a7980314ea2/1/61C0OdSI4bGmnjWGCYYhlWwO3Hs.mft
Manifest number: 0B0B
Signing time: Mon 28 Apr 2025 01:01:26 +0000
Manifest this update: Mon 28 Apr 2025 01:01:26 +0000
Manifest next update: Tue 29 Apr 2025 01:01:26 +0000
Files and hashes: 1: 61C0OdSI4bGmnjWGCYYhlWwO3Hs.crl (hash: dEttqJv/wFDZF9K3J0lSL6RDxJIPde1hV0RSjMdyIQI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a0/c83e8f-2457-4e8a-a6bc-3a7980314ea2/1/61C0OdSI4bGmnjWGCYYhlWwO3Hs.crl
rsync://rpki.ripe.net/repository/DEFAULT/a0/c83e8f-2457-4e8a-a6bc-3a7980314ea2/1/61C0OdSI4bGmnjWGCYYhlWwO3Hs.mft
rsync://rpki.ripe.net/repository/DEFAULT/61C0OdSI4bGmnjWGCYYhlWwO3Hs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Apr 2025 23:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:79:e9:c9:43:32:b8:a1:5f:ad:79:d5:42:0a:46:e1:33
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=eb50b439d488e1b1a69e3586098621956c0edc7b
Validity
Not Before: Apr 28 01:01:26 2025 GMT
Not After : Apr 29 01:01:26 2025 GMT
Subject: CN=d5ec4106d5c3d773cea50b38be7fb2c1497442fa
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:88:6a:3e:45:08:ee:9e:1c:d6:6a:fc:38:71:
80:4f:d3:42:5b:34:32:33:6d:be:34:e9:fd:d8:fe:
8c:f3:8d:f4:66:13:49:78:7d:a7:a6:41:48:3f:3f:
f7:ba:25:d3:e8:85:63:0b:48:f1:9c:a3:f3:af:14:
62:4f:83:5e:2f:83:c9:00:25:55:7b:c5:4f:d3:c5:
25:08:c5:be:99:16:e6:be:26:56:a7:bf:d6:38:68:
37:f3:15:98:f1:dd:d6:3d:73:98:2c:c7:c6:50:99:
10:9d:41:7a:b4:35:16:bb:36:a4:ad:c0:9b:b5:de:
e3:28:3f:57:da:62:40:57:d7:c8:2a:98:03:66:cc:
c5:a4:c2:f5:56:75:22:b5:52:50:74:fe:71:24:88:
5c:5c:3d:d2:19:e2:93:44:ed:49:10:7a:4f:b8:76:
5f:65:66:96:3b:c4:83:ae:76:41:a0:3c:00:d7:62:
a5:de:6d:bc:e9:db:6f:d1:ab:3b:a1:4d:b5:05:60:
6f:47:f3:24:eb:21:bf:94:a9:48:eb:26:cb:3e:52:
e0:fa:45:b9:38:b6:9f:ff:2a:35:96:b9:08:3e:3a:
89:4d:0f:0a:29:3e:70:f7:4a:33:3c:da:19:df:8a:
36:cc:11:4a:5f:05:74:1d:e4:56:41:e3:f9:d1:90:
33:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D5:EC:41:06:D5:C3:D7:73:CE:A5:0B:38:BE:7F:B2:C1:49:74:42:FA
X509v3 Authority Key Identifier:
keyid:EB:50:B4:39:D4:88:E1:B1:A6:9E:35:86:09:86:21:95:6C:0E:DC:7B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/61C0OdSI4bGmnjWGCYYhlWwO3Hs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/c83e8f-2457-4e8a-a6bc-3a7980314ea2/1/61C0OdSI4bGmnjWGCYYhlWwO3Hs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/c83e8f-2457-4e8a-a6bc-3a7980314ea2/1/61C0OdSI4bGmnjWGCYYhlWwO3Hs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0b:ca:aa:5c:99:06:a0:1e:b1:99:47:3a:0a:fb:25:6d:3c:79:
1a:4a:eb:59:8c:fd:7c:8e:bd:1b:52:16:46:58:3a:67:26:9a:
fc:a2:ae:62:54:a9:03:ef:49:b0:7a:5a:75:be:ae:30:9b:88:
a9:d6:6f:51:06:e8:e4:2e:c5:7b:b8:ef:64:fe:8d:ab:95:8e:
ec:6b:6b:3e:31:57:d7:98:7e:59:94:5e:99:49:b9:08:5f:72:
bf:44:f2:ed:61:fd:12:9b:89:31:3c:3a:2b:14:92:26:68:e0:
3d:24:44:3d:5e:a5:39:91:a8:19:09:0f:1a:ba:a6:df:e6:27:
7d:07:4c:87:7c:34:a9:f5:bd:88:db:e1:95:a5:55:0d:20:53:
76:7a:45:c9:d3:8f:b5:fa:c9:b2:a6:60:4a:85:a4:2a:5e:f1:
90:3c:dd:2c:e1:06:59:88:f5:50:87:f0:ad:c1:84:57:ad:eb:
cf:ab:5e:0a:5f:ea:54:a8:f2:26:fa:64:4c:18:4e:68:a0:59:
c7:34:0e:4f:ba:95:cf:5e:ce:59:f9:b7:9e:95:6b:3b:82:d2:
de:70:f3:4d:71:9b:d6:7f:d7:78:83:3f:b4:82:80:81:db:e3:
1d:04:4b:c2:d2:18:f6:36:3f:7c:c5:92:a8:7a:5b:8d:a6:44:
07:c4:46:78
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 09:20:56 2025 by rpki-client