Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/67/072b46-0da1-42d2-899c-a0bda8af756a/1/O_LCDaTWMBgu7jNFrZ0cStkXDVA.mft
File: O_LCDaTWMBgu7jNFrZ0cStkXDVA.mft (raw, json)
Hash identifier: /KAKV951UvIxgAVCFzTOINqtyxO7LFz/9D0eSH1No4Y=
Subject key identifier: 21:F5:19:6F:E3:60:EF:B0:90:F3:7A:AD:F1:A2:EC:F7:F3:EB:8D:9F
Authority key identifier: 3B:F2:C2:0D:A4:D6:30:18:2E:EE:33:45:AD:9D:1C:4A:D9:17:0D:50
Certificate issuer: /CN=3bf2c20da4d630182eee3345ad9d1c4ad9170d50
Certificate serial: 01965492AC31852B1AC0FDBAA665D6360ED8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/O_LCDaTWMBgu7jNFrZ0cStkXDVA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/67/072b46-0da1-42d2-899c-a0bda8af756a/1/O_LCDaTWMBgu7jNFrZ0cStkXDVA.mft
Manifest number: 0F3C
Signing time: Sun 20 Apr 2025 19:00:20 +0000
Manifest this update: Sun 20 Apr 2025 19:00:20 +0000
Manifest next update: Mon 21 Apr 2025 19:00:20 +0000
Files and hashes: 1: O_LCDaTWMBgu7jNFrZ0cStkXDVA.crl (hash: +7oLJuHqOJaoGUBPm4NdXB2ZNlaqxMGm7tDH/OMQKLs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/67/072b46-0da1-42d2-899c-a0bda8af756a/1/O_LCDaTWMBgu7jNFrZ0cStkXDVA.crl
rsync://rpki.ripe.net/repository/DEFAULT/67/072b46-0da1-42d2-899c-a0bda8af756a/1/O_LCDaTWMBgu7jNFrZ0cStkXDVA.mft
rsync://rpki.ripe.net/repository/DEFAULT/O_LCDaTWMBgu7jNFrZ0cStkXDVA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 21 Apr 2025 16:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:54:92:ac:31:85:2b:1a:c0:fd:ba:a6:65:d6:36:0e:d8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3bf2c20da4d630182eee3345ad9d1c4ad9170d50
Validity
Not Before: Apr 20 19:00:20 2025 GMT
Not After : Apr 21 19:00:20 2025 GMT
Subject: CN=21f5196fe360efb090f37aadf1a2ecf7f3eb8d9f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:c4:46:3f:5c:bf:33:8a:81:fe:f0:65:49:c8:
cd:2b:a9:0e:15:94:ef:d1:af:01:fe:0b:fd:2c:10:
ad:2a:49:7e:33:a4:16:93:72:5b:f8:8c:ba:31:5f:
40:70:dc:24:aa:fa:37:b5:6c:88:a8:47:37:db:2b:
bd:a0:9d:c9:5a:0c:a3:81:1f:f7:c1:2d:56:2f:7d:
16:79:1e:2c:4f:e1:74:95:06:19:61:40:ba:8a:21:
25:21:ee:82:e0:40:c9:2f:90:b1:fb:bb:52:f5:93:
5b:35:1b:c8:c1:41:ff:ba:af:a0:23:e6:2e:a8:05:
e2:0a:84:e0:77:74:65:d9:9f:9d:59:55:e1:4f:17:
27:3a:a5:82:8e:3c:3b:fb:91:7b:83:46:9b:1c:fa:
a6:19:52:e8:4a:02:74:4b:dd:49:4d:3f:8e:c0:95:
15:4f:fb:87:67:8e:e0:1e:46:ca:bd:cf:f2:6a:e9:
dd:8e:59:a8:32:95:66:d1:06:84:59:ea:cc:b9:55:
f7:57:73:f8:a4:bb:a1:69:ad:79:a5:72:0c:3f:93:
47:5b:8e:24:8e:b3:cb:39:a9:ba:c3:10:21:aa:cb:
a8:bc:42:a4:c1:b6:e9:a6:09:23:c1:c3:05:02:f0:
3b:69:b6:bc:17:bf:b9:1f:90:4d:48:45:fe:59:03:
15:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
21:F5:19:6F:E3:60:EF:B0:90:F3:7A:AD:F1:A2:EC:F7:F3:EB:8D:9F
X509v3 Authority Key Identifier:
keyid:3B:F2:C2:0D:A4:D6:30:18:2E:EE:33:45:AD:9D:1C:4A:D9:17:0D:50
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/O_LCDaTWMBgu7jNFrZ0cStkXDVA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/67/072b46-0da1-42d2-899c-a0bda8af756a/1/O_LCDaTWMBgu7jNFrZ0cStkXDVA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/67/072b46-0da1-42d2-899c-a0bda8af756a/1/O_LCDaTWMBgu7jNFrZ0cStkXDVA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b9:dc:9f:16:4b:ad:a4:07:f0:f9:63:33:f1:41:e2:00:87:5d:
25:a4:67:c7:d7:69:bd:a5:b1:78:9c:6f:29:dd:b2:ea:b8:2a:
97:e3:be:ad:90:59:e3:a2:f2:b2:5c:05:fa:9d:a2:d8:a5:d3:
bd:10:88:40:ed:a5:8e:04:14:1b:bd:c3:5d:45:af:83:35:97:
ba:be:50:b1:67:56:2b:4b:79:08:f4:bf:8f:14:55:44:58:64:
c9:a9:fa:8a:80:94:43:04:99:30:2e:cd:c7:96:28:32:d9:4f:
ca:79:4b:55:be:6f:e3:2b:8a:25:3e:ac:fc:78:03:70:55:9f:
14:c9:fa:47:db:8f:85:a8:dc:f5:6a:f1:32:ff:11:ba:af:f1:
bc:b7:0b:50:8b:d1:37:8c:a7:67:5a:c5:6e:4c:1e:6c:80:98:
f8:e8:65:d9:7f:b1:70:63:89:da:6f:69:7a:62:2c:6c:e9:bd:
05:2d:89:42:c1:d1:2a:53:3f:8b:7e:ac:d5:b4:8e:44:7f:1b:
a3:b6:10:b9:84:30:e9:ed:5a:12:00:f9:7d:e9:de:9c:71:d4:
0d:fa:f8:52:5b:3a:75:4a:52:30:27:90:00:e8:a1:90:49:95:
86:82:56:9b:93:61:eb:d3:6a:db:5b:99:56:19:f7:18:f3:cd:
1d:58:a9:c9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 21 01:18:52 2025 by rpki-client