Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a4/eeafef-3852-4e36-8c81-9372267cf951/1/0mepGaXTLOov1ByKnhhRC__86NY.mft
File: 0mepGaXTLOov1ByKnhhRC__86NY.mft (raw, json)
Hash identifier: SIvHXkUYdr/W/TL1tcYtGhpRfM2pvDwSEz4loLYWuOA=
Subject key identifier: C5:9D:18:0A:F7:B5:26:5D:73:5B:C1:63:B3:54:EA:25:98:CB:99:98
Authority key identifier: D2:67:A9:19:A5:D3:2C:EA:2F:D4:1C:8A:9E:18:51:0B:FF:FC:E8:D6
Certificate issuer: /CN=d267a919a5d32cea2fd41c8a9e18510bfffce8d6
Certificate serial: 01965725FD1062C587C7D6849116D070B48C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0mepGaXTLOov1ByKnhhRC__86NY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a4/eeafef-3852-4e36-8c81-9372267cf951/1/0mepGaXTLOov1ByKnhhRC__86NY.mft
Manifest number: 0F6E
Signing time: Mon 21 Apr 2025 07:00:29 +0000
Manifest this update: Mon 21 Apr 2025 07:00:29 +0000
Manifest next update: Tue 22 Apr 2025 07:00:29 +0000
Files and hashes: 1: 0mepGaXTLOov1ByKnhhRC__86NY.crl (hash: 3LS86fPe5AQauS1IbSwMD8/d+hOdxNE78K8vcnQ2q7M=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a4/eeafef-3852-4e36-8c81-9372267cf951/1/0mepGaXTLOov1ByKnhhRC__86NY.crl
rsync://rpki.ripe.net/repository/DEFAULT/a4/eeafef-3852-4e36-8c81-9372267cf951/1/0mepGaXTLOov1ByKnhhRC__86NY.mft
rsync://rpki.ripe.net/repository/DEFAULT/0mepGaXTLOov1ByKnhhRC__86NY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 22 Apr 2025 01:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:57:25:fd:10:62:c5:87:c7:d6:84:91:16:d0:70:b4:8c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d267a919a5d32cea2fd41c8a9e18510bfffce8d6
Validity
Not Before: Apr 21 07:00:29 2025 GMT
Not After : Apr 22 07:00:29 2025 GMT
Subject: CN=c59d180af7b5265d735bc163b354ea2598cb9998
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:89:b2:41:ce:67:d2:19:85:c0:a3:1f:2d:89:65:
3b:99:79:77:46:59:84:14:9f:56:27:c6:0c:69:40:
9d:bd:54:32:08:f6:42:ef:64:71:06:32:0a:f8:ac:
94:bb:ed:6c:87:f5:93:25:96:33:e7:d8:c2:84:ff:
67:88:24:62:cf:b3:2b:82:76:6d:bc:f8:be:1c:d0:
f0:77:5b:43:6f:e2:c2:e5:5b:6d:7f:ad:74:a8:e3:
b4:15:cf:a7:3c:31:3c:e6:61:c5:d0:96:4d:ce:4a:
fb:c1:09:f7:30:13:93:31:69:51:3c:f9:f5:fd:37:
b3:93:82:af:c7:20:5e:e1:6f:3f:4e:28:ee:2a:5c:
02:36:c7:90:d9:e4:8e:7e:d2:bc:7c:ab:8f:ae:ae:
25:06:a6:3e:67:a4:7e:b5:f7:2c:3b:89:8d:bf:e9:
4d:47:d1:13:94:2b:31:7a:ef:42:17:c9:09:8c:8e:
b6:09:fe:b1:54:7f:de:51:40:e0:af:83:3d:29:bb:
df:c4:46:2f:18:bf:9b:87:61:17:ea:c0:c0:f2:a3:
1c:62:6f:18:7f:2c:b0:16:12:52:e3:71:dc:fc:86:
5b:59:60:89:f0:15:f7:37:2a:34:5f:df:01:8b:e5:
13:31:25:e5:36:7b:e5:08:f6:b8:eb:43:a2:e6:f4:
b6:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C5:9D:18:0A:F7:B5:26:5D:73:5B:C1:63:B3:54:EA:25:98:CB:99:98
X509v3 Authority Key Identifier:
keyid:D2:67:A9:19:A5:D3:2C:EA:2F:D4:1C:8A:9E:18:51:0B:FF:FC:E8:D6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0mepGaXTLOov1ByKnhhRC__86NY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a4/eeafef-3852-4e36-8c81-9372267cf951/1/0mepGaXTLOov1ByKnhhRC__86NY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a4/eeafef-3852-4e36-8c81-9372267cf951/1/0mepGaXTLOov1ByKnhhRC__86NY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
45:69:8a:bf:bc:72:f3:5e:0f:c6:e3:1e:5e:b5:61:7d:ed:55:
a9:e1:52:83:39:82:f4:93:2b:e3:b3:01:80:b7:cf:01:3f:5d:
df:b2:01:ae:9b:0f:83:9a:4f:3f:95:8c:f2:ed:68:36:d2:1b:
3c:e8:97:40:42:79:ef:33:02:c6:f1:99:c8:f3:25:c4:17:6e:
7e:90:d3:78:0c:19:ae:7e:7d:5c:6f:50:a9:10:85:fa:23:97:
22:47:bc:e4:35:6a:77:29:0d:20:af:6b:4d:3a:85:98:e7:51:
d1:28:8c:86:e9:81:1e:b3:f3:1f:6a:34:5f:57:6d:74:70:e4:
c8:e2:9a:64:aa:35:2c:c8:af:06:33:41:d7:8b:9f:3d:a0:23:
5f:fc:41:fc:45:56:dd:e8:1d:fd:d5:ce:6e:b8:e5:04:3d:e8:
c0:76:5d:d8:8b:44:8e:9b:5e:ed:5f:66:9f:e3:41:82:c0:2f:
43:2b:83:08:04:92:3c:90:fb:71:8a:46:17:35:25:6c:11:27:
49:05:9e:07:9b:d8:89:4b:29:4d:ee:07:e9:27:38:c6:0b:79:
95:9f:b2:67:29:f4:47:f7:a2:aa:af:82:29:d3:d9:bf:b0:86:
64:dc:c2:5e:70:1d:0f:98:e2:1b:88:14:60:96:00:53:f2:46:
f3:c7:2f:e7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 21 10:43:38 2025 by rpki-client