Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f0/dadf3b-c867-4163-8768-6141d99634b5/1/UOaW5uJbSSu34HyzKbtDVLERpoE.mft
File: UOaW5uJbSSu34HyzKbtDVLERpoE.mft (raw, json)
Hash identifier: DAIqZUcOfcNQOLLwxtXhJ3OnPqFUoO3s+juso/MRG5E=
Subject key identifier: 06:91:88:92:FA:2C:7F:79:68:B3:B5:AB:C6:E2:A2:69:4E:A2:DC:4E
Authority key identifier: 50:E6:96:E6:E2:5B:49:2B:B7:E0:7C:B3:29:BB:43:54:B1:11:A6:81
Certificate issuer: /CN=50e696e6e25b492bb7e07cb329bb4354b111a681
Certificate serial: 0196748BFF5138D04D1439A40104B31150C0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UOaW5uJbSSu34HyzKbtDVLERpoE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f0/dadf3b-c867-4163-8768-6141d99634b5/1/UOaW5uJbSSu34HyzKbtDVLERpoE.mft
Manifest number: 07EE
Signing time: Sun 27 Apr 2025 00:00:53 +0000
Manifest this update: Sun 27 Apr 2025 00:00:53 +0000
Manifest next update: Mon 28 Apr 2025 00:00:53 +0000
Files and hashes: 1: UOaW5uJbSSu34HyzKbtDVLERpoE.crl (hash: LlOj3afL55Udto/FEBe17LCKXivMkOt27TCOdMQlXsI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f0/dadf3b-c867-4163-8768-6141d99634b5/1/UOaW5uJbSSu34HyzKbtDVLERpoE.crl
rsync://rpki.ripe.net/repository/DEFAULT/f0/dadf3b-c867-4163-8768-6141d99634b5/1/UOaW5uJbSSu34HyzKbtDVLERpoE.mft
rsync://rpki.ripe.net/repository/DEFAULT/UOaW5uJbSSu34HyzKbtDVLERpoE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Apr 2025 00:00:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:74:8b:ff:51:38:d0:4d:14:39:a4:01:04:b3:11:50:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=50e696e6e25b492bb7e07cb329bb4354b111a681
Validity
Not Before: Apr 27 00:00:53 2025 GMT
Not After : Apr 28 00:00:53 2025 GMT
Subject: CN=06918892fa2c7f7968b3b5abc6e2a2694ea2dc4e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:f2:a5:60:a9:35:ff:80:7f:6d:84:84:d1:d4:
e7:90:f9:6d:71:aa:3b:ae:be:73:26:de:6d:72:82:
72:60:60:5b:76:33:0f:0b:1e:e9:fc:91:eb:2d:91:
9b:3e:70:85:f3:a8:93:2e:70:23:91:a0:e6:5d:3b:
5a:18:35:ee:4a:30:34:9c:14:96:ac:11:c7:32:79:
3a:e2:76:db:1c:24:82:8e:8f:3b:10:74:5b:c9:c6:
c8:ac:1a:a7:0f:60:26:cd:fe:1b:48:be:cd:17:fc:
78:95:0e:74:24:01:ce:31:9c:40:57:4d:50:11:20:
b0:f0:27:e6:92:96:d7:27:2a:fd:bc:3d:0f:7f:86:
7b:fe:7a:f1:13:c7:14:f3:ed:f1:72:24:ae:b4:f4:
5f:2a:d3:06:83:25:29:75:43:97:9f:16:a1:ba:18:
72:bc:d3:76:a1:64:d1:32:08:de:9c:16:4f:c0:68:
50:22:63:da:fa:9a:ec:43:f8:a2:f6:0c:ad:36:55:
8d:d1:95:aa:6d:59:c1:d0:dd:0e:6b:82:53:7a:fe:
b8:59:13:74:1a:d3:1a:f9:04:95:46:8f:27:2d:d9:
cb:88:83:45:db:a8:9b:be:36:fd:1c:2d:e2:41:73:
12:bb:8b:21:6a:9c:2a:7d:08:49:2f:ca:f6:6d:2f:
45:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
06:91:88:92:FA:2C:7F:79:68:B3:B5:AB:C6:E2:A2:69:4E:A2:DC:4E
X509v3 Authority Key Identifier:
keyid:50:E6:96:E6:E2:5B:49:2B:B7:E0:7C:B3:29:BB:43:54:B1:11:A6:81
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UOaW5uJbSSu34HyzKbtDVLERpoE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/dadf3b-c867-4163-8768-6141d99634b5/1/UOaW5uJbSSu34HyzKbtDVLERpoE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/dadf3b-c867-4163-8768-6141d99634b5/1/UOaW5uJbSSu34HyzKbtDVLERpoE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
42:68:22:f5:e2:d0:b6:d8:80:79:51:c9:43:d3:1b:a7:a4:c4:
87:a6:1e:58:0e:e4:27:ef:04:aa:ac:01:f5:cd:86:22:26:05:
e1:81:3f:85:a9:30:6e:b8:91:fc:2b:77:5d:2b:6d:b4:47:7a:
02:01:24:da:cd:39:ab:54:83:93:48:29:52:41:9a:95:e6:e2:
da:d1:9e:2a:dc:52:81:14:e2:94:d2:41:45:99:ce:42:93:ce:
f5:47:7e:26:82:99:f5:58:d6:03:ce:3e:b6:eb:5e:73:91:97:
f4:0e:4d:97:35:09:43:c0:a4:6b:c8:a5:6f:94:d8:8e:6a:50:
66:54:88:cf:cf:e4:a0:a5:39:49:1a:fa:b8:00:b4:ee:3a:5b:
fa:3b:1f:be:90:4f:7c:08:9c:c8:4f:6f:40:7c:b5:75:4f:9e:
b6:57:81:b3:eb:e1:ec:4c:65:c9:c3:b1:c3:52:64:f4:04:6c:
4f:21:b5:cb:b0:b8:bd:7d:c3:d8:5b:6f:d6:5b:4a:20:7d:5a:
81:b4:7a:cc:2a:56:3a:aa:81:34:a6:da:30:88:5a:b4:28:d1:
82:46:de:c7:7f:ac:fd:bd:fe:09:73:53:a7:90:57:95:37:0b:
36:3a:24:2e:4f:48:46:aa:30:07:4e:8b:6f:13:92:a6:af:c1:
fd:f1:ca:10
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 10:09:37 2025 by rpki-client