Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a0/64470b-1a7a-4966-9325-7a407da666d4/1/Ro-K5KJnyBLyQr8CwGTrkofDUVU.mft
File: Ro-K5KJnyBLyQr8CwGTrkofDUVU.mft (raw, json)
Hash identifier: y9uDdlv7lX+BKL5rPj3T7UH+W/ZgAl6rWaf0aDJ9Q4I=
Subject key identifier: 7D:F2:37:F4:C9:68:A5:D7:35:06:4A:D8:A2:B3:D6:2B:F6:A5:41:6F
Authority key identifier: 46:8F:8A:E4:A2:67:C8:12:F2:42:BF:02:C0:64:EB:92:87:C3:51:55
Certificate issuer: /CN=468f8ae4a267c812f242bf02c064eb9287c35155
Certificate serial: 01965982286B48B76D58951251A35340B9B2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Ro-K5KJnyBLyQr8CwGTrkofDUVU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a0/64470b-1a7a-4966-9325-7a407da666d4/1/Ro-K5KJnyBLyQr8CwGTrkofDUVU.mft
Manifest number: 0BF7
Signing time: Mon 21 Apr 2025 18:00:24 +0000
Manifest this update: Mon 21 Apr 2025 18:00:24 +0000
Manifest next update: Tue 22 Apr 2025 18:00:24 +0000
Files and hashes: 1: Ro-K5KJnyBLyQr8CwGTrkofDUVU.crl (hash: NAeWIDMLgTFHEEWyJRC76H+OvKmgnSW+jp4VJFKrwhA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a0/64470b-1a7a-4966-9325-7a407da666d4/1/Ro-K5KJnyBLyQr8CwGTrkofDUVU.crl
rsync://rpki.ripe.net/repository/DEFAULT/a0/64470b-1a7a-4966-9325-7a407da666d4/1/Ro-K5KJnyBLyQr8CwGTrkofDUVU.mft
rsync://rpki.ripe.net/repository/DEFAULT/Ro-K5KJnyBLyQr8CwGTrkofDUVU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 22 Apr 2025 10:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:59:82:28:6b:48:b7:6d:58:95:12:51:a3:53:40:b9:b2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=468f8ae4a267c812f242bf02c064eb9287c35155
Validity
Not Before: Apr 21 18:00:24 2025 GMT
Not After : Apr 22 18:00:24 2025 GMT
Subject: CN=7df237f4c968a5d735064ad8a2b3d62bf6a5416f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:1e:c4:31:bc:18:f9:39:50:51:9d:29:d0:bb:
3f:01:23:df:44:36:95:57:74:8f:43:7c:b6:c6:a7:
46:4f:2b:c8:09:79:7a:b2:3a:2e:e9:93:2b:ac:68:
97:e8:df:70:22:0f:cb:06:e1:d4:c5:1b:6f:67:68:
0d:fa:e8:dc:bc:16:6d:db:3b:6b:b9:a6:84:1b:f4:
c7:72:66:4d:1b:8a:2a:01:c2:3c:83:8b:5c:c1:5a:
b3:5a:b6:bf:7a:a3:13:b9:0f:bd:00:f0:3d:16:70:
75:7a:a9:2f:cf:66:b8:4f:48:1e:e9:cd:17:cf:b8:
91:df:d4:81:30:a8:d9:9c:51:8b:33:07:af:75:af:
e5:63:f3:aa:a4:53:39:d5:c4:c0:f5:21:24:aa:d0:
c2:be:92:63:a0:f5:57:23:8d:16:d2:e9:07:07:fa:
4b:e5:4a:a1:d5:ff:8b:07:2b:ed:d0:32:17:de:b8:
5c:5f:4d:02:11:cf:9c:b9:26:56:84:ce:2c:7a:cf:
ea:86:6a:3f:7a:58:5e:bf:cf:71:e1:f6:65:8f:f1:
c2:22:5d:65:33:7e:c7:da:eb:83:c6:7e:09:f3:fe:
79:5e:9a:a2:bf:92:21:d3:ed:b5:21:bf:05:fd:19:
2a:5f:a9:fc:04:44:10:94:41:ce:af:72:00:1d:08:
68:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7D:F2:37:F4:C9:68:A5:D7:35:06:4A:D8:A2:B3:D6:2B:F6:A5:41:6F
X509v3 Authority Key Identifier:
keyid:46:8F:8A:E4:A2:67:C8:12:F2:42:BF:02:C0:64:EB:92:87:C3:51:55
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Ro-K5KJnyBLyQr8CwGTrkofDUVU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/64470b-1a7a-4966-9325-7a407da666d4/1/Ro-K5KJnyBLyQr8CwGTrkofDUVU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/64470b-1a7a-4966-9325-7a407da666d4/1/Ro-K5KJnyBLyQr8CwGTrkofDUVU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7d:09:f3:62:1b:8f:79:f3:d9:87:59:bf:66:b2:20:bf:6c:82:
bb:13:a7:4d:3a:ad:aa:cf:94:84:8f:4c:af:56:89:98:35:9d:
d8:9b:17:1e:ae:19:95:1c:cf:37:3a:e1:1f:4f:6b:15:1b:13:
72:8d:a0:54:77:e4:09:df:11:bf:6d:4d:fe:91:25:7d:54:7c:
4b:da:74:b6:bb:15:60:86:bd:ba:c5:5f:8d:a7:16:af:1a:6d:
8c:69:e6:c2:55:5b:73:24:bb:b5:24:96:c0:22:cc:ce:f6:de:
5a:61:37:36:de:ac:76:61:71:af:5f:c6:8a:14:bf:0a:ed:75:
48:bb:36:16:d6:a8:20:4d:a8:ea:1e:b6:63:68:04:5f:b3:ff:
0e:0e:da:78:8e:7a:25:76:15:b3:6d:6f:81:f1:50:0f:4a:e0:
d8:28:02:5a:b0:80:1d:7d:3e:ac:dc:24:79:0a:98:2d:e0:38:
97:f5:5d:00:61:b7:e2:da:ce:95:a6:2a:3e:04:18:ed:1c:6f:
54:82:76:fc:6f:5d:79:77:6e:bf:79:a4:bf:9f:01:3d:7f:c4:
c0:eb:cc:6f:dc:75:ff:1a:00:5d:92:d9:f2:81:6c:3d:ba:e7:
3c:7e:1a:ba:aa:cf:6a:47:46:2c:26:86:60:26:c6:ef:99:18:
45:ab:66:ad
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 21 20:02:07 2025 by rpki-client