Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/24/d61ddb-b3e5-40b0-abbe-9437e5fe6db4/1/0u0bbMpTCR9vkNGllQzrbVOwOq0.mft
File: 0u0bbMpTCR9vkNGllQzrbVOwOq0.mft (raw, json)
Hash identifier: 8JevSVvV7jDomT/z2rt0qNwwKOaf/tPmImHrHnOUrYQ=
Subject key identifier: D5:22:18:11:17:27:E3:6F:07:E1:15:1A:8E:B0:77:61:97:4C:C3:78
Authority key identifier: D2:ED:1B:6C:CA:53:09:1F:6F:90:D1:A5:95:0C:EB:6D:53:B0:3A:AD
Certificate issuer: /CN=d2ed1b6cca53091f6f90d1a5950ceb6d53b03aad
Certificate serial: 01964F6D67DD1DB3E82F1095E12C45395F6D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0u0bbMpTCR9vkNGllQzrbVOwOq0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/24/d61ddb-b3e5-40b0-abbe-9437e5fe6db4/1/0u0bbMpTCR9vkNGllQzrbVOwOq0.mft
Manifest number: 0907
Signing time: Sat 19 Apr 2025 19:01:32 +0000
Manifest this update: Sat 19 Apr 2025 19:01:32 +0000
Manifest next update: Sun 20 Apr 2025 19:01:32 +0000
Files and hashes: 1: 0u0bbMpTCR9vkNGllQzrbVOwOq0.crl (hash: fhyfG+OTm9ikHG41gxz0rW7/MOM9kp4Hp2Bq5Y8Ginw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/24/d61ddb-b3e5-40b0-abbe-9437e5fe6db4/1/0u0bbMpTCR9vkNGllQzrbVOwOq0.crl
rsync://rpki.ripe.net/repository/DEFAULT/24/d61ddb-b3e5-40b0-abbe-9437e5fe6db4/1/0u0bbMpTCR9vkNGllQzrbVOwOq0.mft
rsync://rpki.ripe.net/repository/DEFAULT/0u0bbMpTCR9vkNGllQzrbVOwOq0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 20 Apr 2025 16:41:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:4f:6d:67:dd:1d:b3:e8:2f:10:95:e1:2c:45:39:5f:6d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d2ed1b6cca53091f6f90d1a5950ceb6d53b03aad
Validity
Not Before: Apr 19 19:01:32 2025 GMT
Not After : Apr 20 19:01:32 2025 GMT
Subject: CN=d52218111727e36f07e1151a8eb07761974cc378
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:33:26:9c:78:d1:0c:dd:41:19:c8:5d:b5:93:
c2:78:75:ce:22:ec:c7:e8:1f:08:4c:a9:8b:c9:13:
2f:f7:96:e6:11:47:20:6c:43:bd:b6:ef:b2:39:17:
56:c7:4b:dc:be:c5:c6:e0:dd:63:fd:ab:59:52:e1:
51:37:c5:36:fa:df:f2:93:1d:8c:50:9c:d6:2f:6a:
28:45:f2:d2:16:6c:20:2c:9e:8c:17:6b:80:6a:92:
f1:5b:93:4e:c5:a3:37:d1:94:01:10:e1:3b:66:77:
7f:90:f6:a9:83:09:d4:f8:ea:ba:9a:dd:56:34:2f:
66:27:6c:84:4b:fa:ce:b9:65:14:2a:f7:8d:60:c6:
f5:ad:59:8f:26:00:fa:f8:48:78:cd:f3:8e:a8:c6:
18:a5:d9:f3:e7:51:f9:ff:bd:67:0c:a2:52:94:70:
74:bb:bf:f8:7e:96:05:7f:dc:e0:ff:5b:2c:b2:2f:
93:0b:44:cd:ba:4c:7b:59:82:4c:9f:21:bb:50:59:
7a:6b:77:4e:20:19:53:6f:a4:08:57:ad:31:14:9c:
d9:61:10:fb:79:e8:cb:0b:6f:53:ac:9f:76:36:c6:
9b:54:dc:af:46:d8:60:7c:08:ec:bf:a8:b3:91:d8:
ab:d9:da:c8:a1:25:c9:09:d1:0d:c1:dd:75:59:73:
02:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D5:22:18:11:17:27:E3:6F:07:E1:15:1A:8E:B0:77:61:97:4C:C3:78
X509v3 Authority Key Identifier:
keyid:D2:ED:1B:6C:CA:53:09:1F:6F:90:D1:A5:95:0C:EB:6D:53:B0:3A:AD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0u0bbMpTCR9vkNGllQzrbVOwOq0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/24/d61ddb-b3e5-40b0-abbe-9437e5fe6db4/1/0u0bbMpTCR9vkNGllQzrbVOwOq0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/24/d61ddb-b3e5-40b0-abbe-9437e5fe6db4/1/0u0bbMpTCR9vkNGllQzrbVOwOq0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7e:41:ff:15:60:84:21:ec:fc:64:bc:d6:7d:23:98:d2:ca:63:
ff:07:ab:9c:46:db:e5:ec:91:cb:df:ec:13:8f:e5:36:9b:a3:
16:8f:80:20:c7:05:16:13:78:35:c0:76:f2:67:42:19:de:89:
b1:79:fc:c8:4a:f0:33:7a:ce:1e:bf:f2:03:5b:c1:ab:af:c5:
42:0e:90:d4:44:d0:ca:37:1a:fc:75:8f:75:7e:a3:b3:34:9e:
2d:57:6c:22:a0:28:58:f7:f8:3e:cb:16:6c:98:0b:35:7e:27:
43:f1:df:9e:d2:56:d1:0a:c1:9f:61:a9:a0:f6:4d:71:9e:04:
be:b8:87:3b:af:82:31:70:f6:91:52:68:2a:43:11:21:b1:c5:
2e:dd:be:f0:41:21:a0:65:54:bf:d7:a8:89:69:ea:41:ca:0a:
27:a7:66:8e:ea:7a:b6:71:3c:be:60:be:0e:07:df:af:6e:33:
b5:4c:1f:25:01:de:48:2d:bc:5a:35:bf:88:6d:13:6e:cf:28:
03:2f:4f:8c:16:9e:a0:47:0c:0e:70:b8:c8:a5:39:a2:e1:be:
40:82:8b:c3:b7:22:12:73:f0:1e:85:ef:45:4d:66:87:3f:02:
cd:ad:e6:30:72:ab:47:3f:11:f5:16:30:79:f0:e0:d4:af:54:
e6:f5:7b:49
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 20 00:13:48 2025 by rpki-client