Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/16/8b768c-0e0a-4ad3-9100-a441e24be036/1/O1Xn_rkHE3KZ9XksNjle-6mzS2I.mft
File: O1Xn_rkHE3KZ9XksNjle-6mzS2I.mft (raw, json)
Hash identifier: 9iITNUsecSwdEQWSsFbLNWcpTTKOreRKHrUMimjX+8Y=
Subject key identifier: C0:2B:50:E6:96:CE:41:B8:87:D9:3D:0B:CB:D1:54:43:FD:DE:D4:89
Authority key identifier: 3B:55:E7:FE:B9:07:13:72:99:F5:79:2C:36:39:5E:FB:A9:B3:4B:62
Certificate issuer: /CN=3b55e7feb907137299f5792c36395efba9b34b62
Certificate serial: 019650116B847E43D55CD66BEBCDF8715069
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/O1Xn_rkHE3KZ9XksNjle-6mzS2I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/16/8b768c-0e0a-4ad3-9100-a441e24be036/1/O1Xn_rkHE3KZ9XksNjle-6mzS2I.mft
Manifest number: 0DA2
Signing time: Sat 19 Apr 2025 22:00:40 +0000
Manifest this update: Sat 19 Apr 2025 22:00:40 +0000
Manifest next update: Sun 20 Apr 2025 22:00:40 +0000
Files and hashes: 1: O1Xn_rkHE3KZ9XksNjle-6mzS2I.crl (hash: 3YHNYMLFgdUTnfl24MjtxtxuazZICOG6E4Be6E8hQLY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/16/8b768c-0e0a-4ad3-9100-a441e24be036/1/O1Xn_rkHE3KZ9XksNjle-6mzS2I.crl
rsync://rpki.ripe.net/repository/DEFAULT/16/8b768c-0e0a-4ad3-9100-a441e24be036/1/O1Xn_rkHE3KZ9XksNjle-6mzS2I.mft
rsync://rpki.ripe.net/repository/DEFAULT/O1Xn_rkHE3KZ9XksNjle-6mzS2I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 20 Apr 2025 16:41:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:50:11:6b:84:7e:43:d5:5c:d6:6b:eb:cd:f8:71:50:69
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3b55e7feb907137299f5792c36395efba9b34b62
Validity
Not Before: Apr 19 22:00:40 2025 GMT
Not After : Apr 20 22:00:40 2025 GMT
Subject: CN=c02b50e696ce41b887d93d0bcbd15443fdded489
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:65:5e:9e:b4:49:2d:f1:40:fe:5c:b3:f3:be:
3d:9a:da:b6:83:6f:77:69:8e:71:18:b2:43:e9:6f:
38:17:47:e8:98:ff:8f:42:d9:c0:ce:31:e2:13:43:
a7:d8:6a:97:28:65:f7:07:75:36:b7:3c:df:27:b8:
92:ef:a1:6f:d6:69:94:85:89:31:f3:01:12:0f:73:
be:3a:b6:f7:2e:cd:9e:0b:e2:10:21:bb:3f:e4:2f:
3f:c2:1a:f4:a3:94:50:f3:1d:54:54:8b:00:ca:0d:
97:4b:0f:b5:75:e6:12:82:09:5a:11:de:c9:2a:1c:
7d:9f:42:59:06:a7:94:b3:8c:00:03:0a:b6:05:2a:
ac:ea:67:22:1c:0c:42:7b:a1:92:ed:8d:5c:1b:4e:
47:30:d2:e9:19:b4:d5:c5:22:88:61:7d:88:1c:95:
4a:6a:49:59:9e:17:36:79:f9:b4:cb:bb:10:0c:b9:
a8:e4:e5:95:72:f9:7d:4a:56:c9:f7:a1:df:97:4b:
3f:e6:da:db:09:12:a5:64:eb:74:5c:5e:5b:a7:57:
fd:ee:b3:59:31:96:3f:29:dd:9b:c4:d4:05:1f:7b:
78:96:f6:d7:a9:68:e7:ea:65:42:74:30:4d:b9:f4:
c4:a3:81:97:10:fb:bf:24:ca:ac:0e:7e:2a:4d:d6:
69:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C0:2B:50:E6:96:CE:41:B8:87:D9:3D:0B:CB:D1:54:43:FD:DE:D4:89
X509v3 Authority Key Identifier:
keyid:3B:55:E7:FE:B9:07:13:72:99:F5:79:2C:36:39:5E:FB:A9:B3:4B:62
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/O1Xn_rkHE3KZ9XksNjle-6mzS2I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/16/8b768c-0e0a-4ad3-9100-a441e24be036/1/O1Xn_rkHE3KZ9XksNjle-6mzS2I.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/16/8b768c-0e0a-4ad3-9100-a441e24be036/1/O1Xn_rkHE3KZ9XksNjle-6mzS2I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
86:a3:f8:e9:9c:66:e0:6e:cb:d2:9d:5d:49:75:1e:90:9b:8e:
f0:fc:1c:d2:1e:4d:c3:fb:e1:ed:cb:f9:3d:15:e5:78:92:d0:
de:b6:db:38:f5:48:b2:cc:a4:5c:6a:87:d7:50:8d:43:57:75:
0b:4a:e0:d9:19:1d:05:52:e1:88:df:b2:57:f5:fe:4f:73:36:
b3:16:1b:9b:d8:52:74:4c:10:00:81:e3:aa:8d:f3:57:db:ab:
d3:80:02:86:0c:dd:38:e4:4e:11:9c:93:8f:fa:82:51:ad:10:
19:fb:33:8a:ae:9e:66:bf:4c:58:80:3c:ba:a4:a0:e2:a2:cd:
5e:a8:b5:ad:15:53:23:20:f8:ee:97:8d:0f:c8:c7:10:37:cd:
7e:85:28:8b:e1:50:b7:a3:89:5d:a9:1b:bc:29:5e:7b:c6:aa:
96:8c:8b:56:aa:79:9c:45:38:95:72:6a:27:d0:7e:d5:5d:64:
bc:a1:42:0f:8a:9b:55:59:67:bb:30:46:dc:27:3d:27:74:f6:
d3:60:a4:e2:cc:21:3b:ef:5b:76:d9:8b:6f:44:da:6e:ac:17:
fc:ba:3b:1e:37:ce:d6:4d:ff:31:f6:85:b5:0c:89:13:e0:ff:
18:22:3c:4a:47:da:52:b8:ca:6d:46:49:8b:ee:47:3a:cc:1c:
46:a2:b0:92
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 20 02:09:27 2025 by rpki-client