Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/50/206aff-459e-4abb-819a-2d361e4f345c/1/o-VcYHJU0eKwURqFbnADn_r0MDI.mft
File: o-VcYHJU0eKwURqFbnADn_r0MDI.mft (raw, json)
Hash identifier: xKg7Yx9eqLanRARbOGSIno8KcKLL0Uns47Ob072TzT8=
Subject key identifier: FE:BD:ED:48:3D:97:B8:B0:EB:40:52:C8:26:01:2B:B8:B4:75:C5:52
Authority key identifier: A3:E5:5C:60:72:54:D1:E2:B0:51:1A:85:6E:70:03:9F:FA:F4:30:32
Certificate issuer: /CN=a3e55c607254d1e2b0511a856e70039ffaf43032
Certificate serial: 019657262BAAC80AAB909A0511203A4DBC59
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/o-VcYHJU0eKwURqFbnADn_r0MDI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/50/206aff-459e-4abb-819a-2d361e4f345c/1/o-VcYHJU0eKwURqFbnADn_r0MDI.mft
Manifest number: 1079
Signing time: Mon 21 Apr 2025 07:00:41 +0000
Manifest this update: Mon 21 Apr 2025 07:00:41 +0000
Manifest next update: Tue 22 Apr 2025 07:00:41 +0000
Files and hashes: 1: o-VcYHJU0eKwURqFbnADn_r0MDI.crl (hash: WowbagaxKwwL1c1WLXw6p+KyK6LaVYfnw2n/hY3M4H4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/50/206aff-459e-4abb-819a-2d361e4f345c/1/o-VcYHJU0eKwURqFbnADn_r0MDI.crl
rsync://rpki.ripe.net/repository/DEFAULT/50/206aff-459e-4abb-819a-2d361e4f345c/1/o-VcYHJU0eKwURqFbnADn_r0MDI.mft
rsync://rpki.ripe.net/repository/DEFAULT/o-VcYHJU0eKwURqFbnADn_r0MDI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 22 Apr 2025 01:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:57:26:2b:aa:c8:0a:ab:90:9a:05:11:20:3a:4d:bc:59
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a3e55c607254d1e2b0511a856e70039ffaf43032
Validity
Not Before: Apr 21 07:00:41 2025 GMT
Not After : Apr 22 07:00:41 2025 GMT
Subject: CN=febded483d97b8b0eb4052c826012bb8b475c552
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:3f:90:13:b7:65:a1:b8:18:59:64:5e:ad:6a:
c6:ff:91:c0:0f:8b:07:dc:64:6c:ba:35:c4:b2:39:
41:8d:32:00:30:61:97:67:56:b3:d2:12:cb:2d:2b:
1f:70:9d:b9:94:b4:29:1c:db:9d:88:a2:f5:a9:da:
55:fb:c1:01:ee:80:eb:df:c2:b2:35:db:a8:37:47:
85:3c:20:40:1e:f2:26:8e:a8:79:3c:3d:93:5e:02:
b4:9f:2f:89:8a:8c:e3:7d:77:eb:10:a8:81:47:ef:
50:4e:c9:19:8d:35:5d:83:67:0b:f1:85:a4:fd:92:
7a:9a:39:b6:02:7c:61:a4:f0:61:25:91:7f:17:ce:
9f:a5:ba:c8:66:60:6b:96:56:45:0b:93:57:8e:6b:
15:4e:14:47:0b:99:db:6c:df:f3:24:3c:76:61:78:
7c:05:32:aa:b2:ff:67:37:2a:5d:3a:12:95:e4:2f:
84:c8:c1:46:54:03:04:1b:97:3b:0a:3c:b1:41:f2:
77:79:9e:7c:b8:7f:39:29:6a:54:6c:30:49:91:9e:
04:46:2c:f1:2a:2b:ef:ed:f6:6e:0b:03:c1:1d:7b:
df:55:f6:3e:af:80:0c:b5:fc:98:3e:c8:f1:3f:94:
cb:37:2b:33:f6:5c:6f:ce:8c:00:80:b6:6d:b7:dd:
be:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FE:BD:ED:48:3D:97:B8:B0:EB:40:52:C8:26:01:2B:B8:B4:75:C5:52
X509v3 Authority Key Identifier:
keyid:A3:E5:5C:60:72:54:D1:E2:B0:51:1A:85:6E:70:03:9F:FA:F4:30:32
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/o-VcYHJU0eKwURqFbnADn_r0MDI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/50/206aff-459e-4abb-819a-2d361e4f345c/1/o-VcYHJU0eKwURqFbnADn_r0MDI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/50/206aff-459e-4abb-819a-2d361e4f345c/1/o-VcYHJU0eKwURqFbnADn_r0MDI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
16:d6:9e:09:a9:96:04:80:4a:aa:30:0a:c7:ac:f1:9b:be:67:
d4:86:95:38:49:4b:cd:7e:8e:59:6a:87:4a:d6:61:b1:64:a1:
07:bf:3d:6f:7f:cd:23:0f:a3:9e:14:24:c4:58:41:0a:75:56:
30:32:95:b4:0a:45:a6:26:e7:7a:ba:90:06:79:b9:47:91:bc:
a4:ec:8a:b6:0a:d9:5d:8c:28:36:a6:ef:af:6f:74:79:c5:ed:
33:e7:a8:1b:b9:88:4e:bd:13:1d:b6:f3:c8:71:1d:93:c1:89:
fc:ce:96:8f:fa:76:c1:69:fb:61:10:b5:27:82:79:a8:fa:d4:
9a:c7:56:f6:9f:61:e2:39:a6:84:18:80:d5:b7:96:23:7a:19:
0b:50:c7:20:66:71:67:66:fc:f5:36:d9:a5:28:68:e8:6a:cf:
be:06:dc:ba:0b:e8:af:0d:e9:27:7e:1b:0f:24:aa:e5:77:3d:
1b:fe:ad:5b:42:a7:9b:6f:9d:b5:f8:52:a6:79:5a:50:2f:4c:
2a:1f:fc:69:71:99:65:2b:60:41:dc:05:ed:48:f6:46:36:cd:
31:65:a9:af:5c:10:32:c1:ca:9e:f2:76:1e:ad:2d:f1:54:70:
2f:08:bf:d4:4c:8c:f2:29:82:3a:7a:88:05:ea:b6:8b:78:f9:
59:fa:82:64
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 21 10:51:51 2025 by rpki-client