Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fa/3cfcd9-494c-41c8-81e2-d418153a30a6/1/B5yXOPx7HkBkxcY2u6aotUk5HKg.mft
File: B5yXOPx7HkBkxcY2u6aotUk5HKg.mft (raw, json)
Hash identifier: dg46IehcLQ5+7WFC/kp1jTKgva5wjAsXstW0rY3py8A=
Subject key identifier: 0F:26:FD:66:EB:B6:A9:8A:58:34:13:C9:31:AA:2F:7D:38:E4:AA:0F
Authority key identifier: 07:9C:97:38:FC:7B:1E:40:64:C5:C6:36:BB:A6:A8:B5:49:39:1C:A8
Certificate issuer: /CN=079c9738fc7b1e4064c5c636bba6a8b549391ca8
Certificate serial: 019676E7AAD946A6DDDA5ECD336327BA7D86
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/B5yXOPx7HkBkxcY2u6aotUk5HKg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fa/3cfcd9-494c-41c8-81e2-d418153a30a6/1/B5yXOPx7HkBkxcY2u6aotUk5HKg.mft
Manifest number: 0C5E
Signing time: Sun 27 Apr 2025 11:00:16 +0000
Manifest this update: Sun 27 Apr 2025 11:00:16 +0000
Manifest next update: Mon 28 Apr 2025 11:00:16 +0000
Files and hashes: 1: B5yXOPx7HkBkxcY2u6aotUk5HKg.crl (hash: tW6TByUI5vBcrn3nR/tiec4v8AKPn5m5Bk9YN87oyPY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fa/3cfcd9-494c-41c8-81e2-d418153a30a6/1/B5yXOPx7HkBkxcY2u6aotUk5HKg.crl
rsync://rpki.ripe.net/repository/DEFAULT/fa/3cfcd9-494c-41c8-81e2-d418153a30a6/1/B5yXOPx7HkBkxcY2u6aotUk5HKg.mft
rsync://rpki.ripe.net/repository/DEFAULT/B5yXOPx7HkBkxcY2u6aotUk5HKg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Apr 2025 07:29:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:76:e7:aa:d9:46:a6:dd:da:5e:cd:33:63:27:ba:7d:86
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=079c9738fc7b1e4064c5c636bba6a8b549391ca8
Validity
Not Before: Apr 27 11:00:16 2025 GMT
Not After : Apr 28 11:00:16 2025 GMT
Subject: CN=0f26fd66ebb6a98a583413c931aa2f7d38e4aa0f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:6c:33:de:6a:09:bd:a9:80:70:4e:18:ff:43:
0c:15:7b:38:00:b6:ca:9a:4d:4d:99:32:79:e6:ca:
f5:83:f6:23:52:11:63:55:18:d6:52:2d:84:e9:65:
a3:ba:93:bd:41:9f:93:b7:8a:c1:c2:1e:51:6f:6e:
92:e6:56:8f:59:9b:fd:30:f9:90:c9:e6:5d:70:94:
ff:f8:89:be:9e:0b:2f:2a:4f:22:1f:25:07:68:61:
82:24:16:c4:63:27:f5:b8:a5:f8:ca:41:17:74:ca:
cc:04:f3:48:09:ab:f9:39:cb:32:a7:a4:f2:19:be:
cd:a9:d6:53:37:28:c9:be:ff:76:34:a4:1e:ea:50:
94:e5:f4:ff:e2:68:92:b5:20:73:fb:e7:7e:07:e7:
70:09:19:cb:df:10:3b:1e:5f:2a:f8:e3:cf:2d:63:
7a:d4:63:04:71:c2:23:a2:b2:1d:40:d1:cd:1c:fe:
94:dd:05:7c:c2:e1:43:47:98:1c:a6:f8:9a:1c:9c:
9c:e1:73:e0:e2:78:e6:de:80:8c:0a:0c:e9:26:0e:
2d:89:f4:65:0b:dc:3c:f5:21:9f:c6:5b:ac:cf:65:
ae:37:e0:3e:d2:b2:bc:66:38:96:39:8e:da:d4:b3:
12:d7:1a:a8:67:81:86:3a:0f:24:ef:06:6f:88:0a:
46:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0F:26:FD:66:EB:B6:A9:8A:58:34:13:C9:31:AA:2F:7D:38:E4:AA:0F
X509v3 Authority Key Identifier:
keyid:07:9C:97:38:FC:7B:1E:40:64:C5:C6:36:BB:A6:A8:B5:49:39:1C:A8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/B5yXOPx7HkBkxcY2u6aotUk5HKg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/3cfcd9-494c-41c8-81e2-d418153a30a6/1/B5yXOPx7HkBkxcY2u6aotUk5HKg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/3cfcd9-494c-41c8-81e2-d418153a30a6/1/B5yXOPx7HkBkxcY2u6aotUk5HKg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4e:3c:b0:62:c2:f9:b5:cb:a7:9b:78:d6:8d:96:de:c2:ad:d4:
d7:b9:3d:f6:9b:2f:d6:2f:70:b7:17:00:a0:5e:7d:6c:8f:71:
2f:8a:ce:eb:11:c1:3f:05:6f:99:40:03:c7:ea:cf:e4:d6:c7:
17:ba:e9:5c:12:28:82:85:ab:86:3d:0c:a1:e2:13:1e:4f:10:
65:72:af:35:1e:2f:45:ee:cd:d2:0f:1f:20:79:1b:fb:85:b3:
b1:73:14:d8:e1:df:ed:0f:e7:1d:ec:5e:27:85:9e:59:61:98:
f2:2d:d4:66:b9:85:f4:e6:6c:bb:ff:d2:c7:0e:fb:ab:b8:24:
d0:40:48:96:f8:9b:0c:ea:0e:2b:e7:a5:00:ae:3d:50:d5:d5:
8a:13:84:8a:53:12:c1:21:6a:96:08:1b:45:4f:cd:b5:7a:ab:
a3:7a:10:54:c7:ae:f9:97:a7:fb:b7:55:1a:78:c7:4e:2d:d1:
6a:ab:ee:b6:5e:c9:68:70:09:37:a8:c2:29:75:d2:1e:64:29:
1b:46:6a:e1:00:ce:69:3a:7e:2b:ed:5e:91:ad:d9:7f:1c:3f:
12:7a:c2:98:f4:20:2c:3d:42:3c:45:94:8f:5b:29:9f:19:f7:
ff:9f:98:d3:b8:17:c3:1f:66:43:f0:55:28:a8:a4:b5:3a:54:
89:cd:9e:56
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 17:54:40 2025 by rpki-client