Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c3/5c57dd-486e-4c69-a116-f90a8dce1bfc/1/tOOoY2nvedwTz7Q3YV1JI4i_jOM.mft
File: tOOoY2nvedwTz7Q3YV1JI4i_jOM.mft (raw, json)
Hash identifier: dt8U1nEdS0WWJ2hUIrB2mBYEUnTP5PM2MwRJZSmlraw=
Subject key identifier: 2D:92:F0:DA:90:9F:7B:10:E6:A7:78:0C:5F:57:57:E3:35:56:8B:3B
Authority key identifier: B4:E3:A8:63:69:EF:79:DC:13:CF:B4:37:61:5D:49:23:88:BF:8C:E3
Certificate issuer: /CN=b4e3a86369ef79dc13cfb437615d492388bf8ce3
Certificate serial: 01964F6C69FE074E5FA73CB0F75735E89B07
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tOOoY2nvedwTz7Q3YV1JI4i_jOM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c3/5c57dd-486e-4c69-a116-f90a8dce1bfc/1/tOOoY2nvedwTz7Q3YV1JI4i_jOM.mft
Manifest number: 0D95
Signing time: Sat 19 Apr 2025 19:00:27 +0000
Manifest this update: Sat 19 Apr 2025 19:00:27 +0000
Manifest next update: Sun 20 Apr 2025 19:00:27 +0000
Files and hashes: 1: tOOoY2nvedwTz7Q3YV1JI4i_jOM.crl (hash: /Rl+P3UOHtldVLhH2aeAbdIBbmeH077tn4PX+9iwGFY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c3/5c57dd-486e-4c69-a116-f90a8dce1bfc/1/tOOoY2nvedwTz7Q3YV1JI4i_jOM.crl
rsync://rpki.ripe.net/repository/DEFAULT/c3/5c57dd-486e-4c69-a116-f90a8dce1bfc/1/tOOoY2nvedwTz7Q3YV1JI4i_jOM.mft
rsync://rpki.ripe.net/repository/DEFAULT/tOOoY2nvedwTz7Q3YV1JI4i_jOM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 20 Apr 2025 19:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:4f:6c:69:fe:07:4e:5f:a7:3c:b0:f7:57:35:e8:9b:07
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b4e3a86369ef79dc13cfb437615d492388bf8ce3
Validity
Not Before: Apr 19 19:00:27 2025 GMT
Not After : Apr 20 19:00:27 2025 GMT
Subject: CN=2d92f0da909f7b10e6a7780c5f5757e335568b3b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:92:03:86:d7:71:29:2e:9e:73:db:38:1d:b8:0b:
b1:be:5e:b7:51:40:b7:1d:f2:bb:38:40:ce:ba:26:
39:96:9c:a5:8e:b5:6e:db:e6:94:32:bd:9c:0f:ee:
07:a0:d6:bd:57:64:67:25:22:dd:3b:c7:5f:ed:25:
8b:c4:00:b3:d0:f0:91:c4:9c:91:ee:12:d4:81:9a:
5f:0e:5b:df:9b:66:8f:03:9f:60:1c:d9:e0:3a:f9:
65:ee:28:23:02:1e:91:12:5a:2f:0a:81:78:7f:1a:
7d:ec:19:ed:f3:3a:cb:27:08:83:c1:64:a3:35:1f:
f7:86:0b:c5:de:62:3d:7b:24:e4:f3:f3:a6:87:52:
87:56:94:0e:d1:90:87:c5:d0:17:eb:6c:e9:e1:bb:
50:29:0e:d2:7a:c8:98:42:08:b0:25:38:23:3d:66:
54:b3:dc:85:e8:4d:33:f5:1c:b4:75:71:b7:32:08:
e2:d5:70:13:ae:f4:a3:1d:19:3c:80:f8:5d:9a:56:
8b:58:d5:be:69:fc:ac:5f:d8:cc:20:3d:b8:1f:52:
63:26:b8:6a:dc:28:6d:6d:82:92:a5:c3:b1:af:32:
eb:45:a2:8b:14:90:e6:75:35:f1:ae:46:58:4f:92:
7f:41:99:d9:a4:d1:40:86:18:2c:2b:05:c1:06:12:
9e:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2D:92:F0:DA:90:9F:7B:10:E6:A7:78:0C:5F:57:57:E3:35:56:8B:3B
X509v3 Authority Key Identifier:
keyid:B4:E3:A8:63:69:EF:79:DC:13:CF:B4:37:61:5D:49:23:88:BF:8C:E3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tOOoY2nvedwTz7Q3YV1JI4i_jOM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/5c57dd-486e-4c69-a116-f90a8dce1bfc/1/tOOoY2nvedwTz7Q3YV1JI4i_jOM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/5c57dd-486e-4c69-a116-f90a8dce1bfc/1/tOOoY2nvedwTz7Q3YV1JI4i_jOM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6a:ba:e6:4b:d8:d4:8e:28:1b:74:5f:ed:47:3a:fb:f5:2a:7f:
90:d3:e6:d4:76:b0:b5:a3:75:3f:fd:4b:ef:38:fa:f6:82:74:
1c:52:b6:bf:ab:a8:bc:68:5a:5a:ac:f6:33:66:ca:02:da:60:
01:32:0d:2f:cf:5f:54:e3:dc:84:d2:97:1d:23:16:0e:be:a0:
6a:a7:e2:ff:26:77:63:30:d1:24:82:0a:92:89:6f:92:41:5f:
df:8b:5e:8e:c0:4e:3f:c9:7b:7b:8e:aa:a6:f5:7a:cc:cd:0d:
ae:95:c9:43:8b:05:98:94:ed:86:8f:6e:90:e7:ac:e9:fa:b3:
75:4f:f4:c4:c8:c2:b9:7e:b5:59:1a:01:15:59:5c:bb:17:85:
a7:86:fb:08:71:8d:68:8d:0f:91:fa:bd:81:ea:67:22:92:b1:
7f:dc:fc:a1:65:8a:a0:61:b7:dc:51:b4:fd:a8:fb:e7:d3:a6:
2f:42:fb:cc:47:ac:ba:86:27:b3:73:bd:f5:78:d7:c1:a0:c5:
e6:12:56:86:24:65:0c:a0:8d:e8:9a:91:af:70:3d:99:4b:1b:
03:93:d9:4f:b5:91:08:b1:7a:e3:27:c1:cc:02:0c:7f:a4:aa:
b8:f5:f4:64:c8:46:63:60:a8:d8:e2:6a:77:20:53:62:76:9d:
27:2f:dc:b1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 20 04:24:54 2025 by rpki-client