Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/df/6587d8-5898-45a4-a5e3-d642e4b081bd/1/OnTgfC3vyhS_LWx6FdWpMw0JN0g.mft
File: OnTgfC3vyhS_LWx6FdWpMw0JN0g.mft (raw, json)
Hash identifier: rY/DooAAWzyYpxSKp+GOmjQSihZNz2m7esY7bhQJ+gA=
Subject key identifier: 00:7A:C9:AC:93:EB:E4:8E:68:55:73:01:12:01:2D:2B:27:26:E9:F4
Authority key identifier: 3A:74:E0:7C:2D:EF:CA:14:BF:2D:6C:7A:15:D5:A9:33:0D:09:37:48
Certificate issuer: /CN=3a74e07c2defca14bf2d6c7a15d5a9330d093748
Certificate serial: 01968E14C8949EDC8AF4439437DF9FB51434
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OnTgfC3vyhS_LWx6FdWpMw0JN0g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/df/6587d8-5898-45a4-a5e3-d642e4b081bd/1/OnTgfC3vyhS_LWx6FdWpMw0JN0g.mft
Manifest number: 0497
Signing time: Thu 01 May 2025 23:00:48 +0000
Manifest this update: Thu 01 May 2025 23:00:48 +0000
Manifest next update: Fri 02 May 2025 23:00:48 +0000
Files and hashes: 1: OnTgfC3vyhS_LWx6FdWpMw0JN0g.crl (hash: ed6LW6UBTr2SEck0GTjZQTxXQBsN6jhLofPt2sFbeTg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/df/6587d8-5898-45a4-a5e3-d642e4b081bd/1/OnTgfC3vyhS_LWx6FdWpMw0JN0g.crl
rsync://rpki.ripe.net/repository/DEFAULT/df/6587d8-5898-45a4-a5e3-d642e4b081bd/1/OnTgfC3vyhS_LWx6FdWpMw0JN0g.mft
rsync://rpki.ripe.net/repository/DEFAULT/OnTgfC3vyhS_LWx6FdWpMw0JN0g.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 02 May 2025 23:00:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:8e:14:c8:94:9e:dc:8a:f4:43:94:37:df:9f:b5:14:34
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3a74e07c2defca14bf2d6c7a15d5a9330d093748
Validity
Not Before: May 1 23:00:48 2025 GMT
Not After : May 2 23:00:48 2025 GMT
Subject: CN=007ac9ac93ebe48e6855730112012d2b2726e9f4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:04:e6:d0:05:b2:d6:51:fb:5b:92:84:a0:da:
c5:e5:7c:11:5d:af:ac:60:80:e1:d3:8d:1c:09:d7:
1c:65:8d:be:ee:a7:b4:33:13:f1:59:da:24:e5:76:
34:ae:27:0f:70:e0:3d:f7:28:0e:73:01:93:5c:0d:
fd:df:a5:77:c5:4d:98:39:c7:85:f8:75:00:03:5f:
63:5f:96:53:43:72:07:fe:78:a9:a9:42:29:d1:93:
1a:73:cd:61:e0:8b:cf:98:e7:ff:1a:07:70:9b:9b:
8a:31:85:a0:ca:30:25:8f:29:17:6e:01:6f:c2:6b:
75:47:1c:10:15:f5:0c:64:60:99:39:44:54:60:8d:
9d:42:28:08:3d:f0:b2:6e:9d:b9:25:96:14:eb:34:
3d:bd:60:23:ca:de:6f:65:55:bc:1a:38:ae:9c:4b:
03:80:fe:10:c7:b0:a0:45:58:ce:3f:d4:00:fd:0b:
22:b3:37:a2:a9:af:f7:42:b5:5b:d6:0d:a1:41:7c:
52:0d:63:2a:25:92:da:31:10:5d:9a:df:21:f9:88:
7d:ae:d4:2f:bb:4f:36:25:f2:69:0f:57:df:2a:53:
11:43:1e:78:5d:f6:20:af:b8:20:48:ae:9e:bd:76:
df:4e:f9:36:24:4d:6e:2a:bb:4d:70:60:36:dc:e3:
62:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
00:7A:C9:AC:93:EB:E4:8E:68:55:73:01:12:01:2D:2B:27:26:E9:F4
X509v3 Authority Key Identifier:
keyid:3A:74:E0:7C:2D:EF:CA:14:BF:2D:6C:7A:15:D5:A9:33:0D:09:37:48
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OnTgfC3vyhS_LWx6FdWpMw0JN0g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/df/6587d8-5898-45a4-a5e3-d642e4b081bd/1/OnTgfC3vyhS_LWx6FdWpMw0JN0g.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/df/6587d8-5898-45a4-a5e3-d642e4b081bd/1/OnTgfC3vyhS_LWx6FdWpMw0JN0g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
50:a9:48:19:95:48:48:f4:26:86:b3:f9:ec:ea:23:06:61:40:
41:1b:c7:c9:ca:8f:95:b5:53:84:ec:0c:16:6a:d8:b5:be:48:
5f:89:b6:1f:d2:e1:a5:95:b1:27:b1:2e:58:e2:55:d1:55:fe:
aa:62:df:50:a6:d6:2d:63:31:2f:a4:db:24:35:ff:f3:45:a6:
58:82:89:6e:02:8f:b9:f1:a4:1b:38:28:6a:6d:aa:e5:cc:40:
ca:41:ec:d8:32:e3:34:53:8c:0b:ee:81:cd:f8:31:da:90:d1:
76:f5:f5:29:1f:00:e4:17:47:92:82:06:cb:16:b4:3f:ed:8f:
68:cb:90:91:f9:06:c8:e2:e2:ce:ef:28:73:62:63:8a:30:f9:
c3:5e:b3:70:ca:69:0d:f7:3e:71:af:55:ba:39:d6:3d:73:2c:
1b:93:8a:3b:66:02:fc:4c:4e:12:c2:78:8e:95:50:0b:6a:ed:
bc:90:7a:83:1c:d0:b1:0a:bd:b1:ed:29:2b:f2:64:93:42:08:
3a:d9:33:4b:fb:57:66:53:e3:a6:ff:73:c4:70:88:4e:65:20:
40:a6:92:f1:10:bf:58:7f:63:8d:cf:ac:d0:27:c3:c2:e4:1f:
ce:7f:86:9c:42:58:79:fe:1a:f2:50:74:a9:f7:15:1e:f7:32:
b4:2c:60:9c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 2 08:46:54 2025 by rpki-client