Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cd/5e8e04-e6ea-4d59-b2f7-df0a6dc282a0/1/O5pBDtUm-GwybZG2KApEGhbAxnY.mft
File: O5pBDtUm-GwybZG2KApEGhbAxnY.mft (raw, json)
Hash identifier: QVl8ISPfoaJT7XjI56t8CKMyEZh6h4Km8f6PooU5FW0=
Subject key identifier: 5C:89:77:28:44:5B:65:8A:A4:63:E5:10:F8:BB:BB:40:13:E7:A0:BC
Authority key identifier: 3B:9A:41:0E:D5:26:F8:6C:32:6D:91:B6:28:0A:44:1A:16:C0:C6:76
Certificate issuer: /CN=3b9a410ed526f86c326d91b6280a441a16c0c676
Certificate serial: 01965F4DE97813FE1A1EF51E5DC5EFEB8D7A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/O5pBDtUm-GwybZG2KApEGhbAxnY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cd/5e8e04-e6ea-4d59-b2f7-df0a6dc282a0/1/O5pBDtUm-GwybZG2KApEGhbAxnY.mft
Manifest number: 066D
Signing time: Tue 22 Apr 2025 21:01:03 +0000
Manifest this update: Tue 22 Apr 2025 21:01:03 +0000
Manifest next update: Wed 23 Apr 2025 21:01:03 +0000
Files and hashes: 1: O5pBDtUm-GwybZG2KApEGhbAxnY.crl (hash: dN2Kkb8ssqaltcZR1ffHqI/uFoTQ/JuhIK07Ynodx8Y=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cd/5e8e04-e6ea-4d59-b2f7-df0a6dc282a0/1/O5pBDtUm-GwybZG2KApEGhbAxnY.crl
rsync://rpki.ripe.net/repository/DEFAULT/cd/5e8e04-e6ea-4d59-b2f7-df0a6dc282a0/1/O5pBDtUm-GwybZG2KApEGhbAxnY.mft
rsync://rpki.ripe.net/repository/DEFAULT/O5pBDtUm-GwybZG2KApEGhbAxnY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 23 Apr 2025 20:22:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:5f:4d:e9:78:13:fe:1a:1e:f5:1e:5d:c5:ef:eb:8d:7a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3b9a410ed526f86c326d91b6280a441a16c0c676
Validity
Not Before: Apr 22 21:01:03 2025 GMT
Not After : Apr 23 21:01:03 2025 GMT
Subject: CN=5c897728445b658aa463e510f8bbbb4013e7a0bc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:2d:fd:c9:fe:c0:43:93:11:2a:69:ed:cb:f4:
6c:9d:44:5b:9f:4d:bb:d4:7c:45:b3:64:a6:18:4b:
c5:de:02:59:f5:59:b5:48:40:66:b9:4b:59:2a:5d:
bb:6d:7d:f0:9c:31:b2:9c:6c:a7:a8:27:61:f7:d4:
e6:96:a2:58:9c:fc:2c:94:8e:03:1f:18:4f:ca:d2:
08:70:d7:e1:da:2f:ce:d9:bc:56:4e:cd:85:be:3c:
0f:34:e8:e7:e3:c3:44:27:22:08:06:37:80:ae:f3:
24:88:7f:d7:53:4c:08:34:84:0e:03:4f:19:10:d9:
16:8e:20:14:97:35:56:99:b3:01:dc:cd:4a:82:ed:
b0:42:e2:24:ef:5c:e1:11:2c:82:a5:fe:09:b9:6c:
55:3e:fb:a0:f6:25:45:f0:cd:22:62:2d:52:fb:78:
5f:1d:55:3f:b9:c2:8d:3b:12:42:6e:c3:89:d8:c6:
f7:e6:54:97:62:0b:6d:87:56:73:40:e3:a0:cc:62:
8d:79:87:4c:69:b1:27:74:ae:e8:d5:84:b8:84:90:
07:52:58:97:88:8a:3f:f2:b1:f5:70:5e:ff:d2:92:
ff:4f:c1:5f:c5:f0:ab:5f:17:bd:b4:c4:44:e2:11:
8b:f8:28:fb:3d:31:77:b9:49:ee:76:f8:46:81:fd:
d1:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5C:89:77:28:44:5B:65:8A:A4:63:E5:10:F8:BB:BB:40:13:E7:A0:BC
X509v3 Authority Key Identifier:
keyid:3B:9A:41:0E:D5:26:F8:6C:32:6D:91:B6:28:0A:44:1A:16:C0:C6:76
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/O5pBDtUm-GwybZG2KApEGhbAxnY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/5e8e04-e6ea-4d59-b2f7-df0a6dc282a0/1/O5pBDtUm-GwybZG2KApEGhbAxnY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/5e8e04-e6ea-4d59-b2f7-df0a6dc282a0/1/O5pBDtUm-GwybZG2KApEGhbAxnY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
85:c1:72:68:cf:56:56:a6:aa:c5:dc:c7:e4:15:bb:00:be:17:
a1:0e:f0:7d:f5:eb:cf:b5:c6:cc:0a:53:0f:7e:00:93:fb:7d:
bc:88:d3:65:c4:e9:1f:41:85:9b:7f:1a:35:f3:a6:da:16:f3:
ac:a5:50:2c:7c:fa:d6:ef:5f:c6:3d:39:c5:c7:01:a4:ae:49:
1f:5d:8a:2a:a7:cd:58:fb:dc:8e:32:01:53:d3:f1:b7:30:85:
81:14:16:ed:0f:dd:53:25:a4:21:dc:24:83:d3:d3:b0:48:5a:
3d:f7:e4:f1:ef:90:96:d2:d4:bd:3b:f0:d5:ff:f6:82:36:4e:
de:98:1f:fe:c2:75:e6:2b:0d:b3:a3:3e:97:ca:e2:7f:62:be:
30:ec:e8:fd:95:2e:c8:55:5e:48:52:30:7c:d0:12:f1:6e:8c:
6c:97:96:94:e5:c4:85:7a:08:4a:e2:4b:d7:dd:0d:38:76:72:
99:66:44:15:99:c8:e8:d4:db:33:a9:c4:81:0c:20:fb:71:b1:
f9:51:de:6d:55:72:b7:5e:77:73:c0:34:6d:ed:d9:19:f2:0b:
b0:fa:03:3c:cc:26:dd:3b:fd:6e:52:99:43:05:57:04:48:02:
9e:fe:05:20:7b:9b:c6:c7:1f:c9:ff:bf:f7:3c:bb:ae:b7:22:
16:bb:29:04
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 23 03:30:48 2025 by rpki-client