Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/42/7672e2-1c7f-4d2e-8961-c26c3e23baf6/1/0wUa-GYelCUtF1k103l-nsos2Aw.mft
File: 0wUa-GYelCUtF1k103l-nsos2Aw.mft (raw, json)
Hash identifier: pDJ2eidl/BVsiMO4mo+L25EVhLYprdUxvmhf+Kp0X9o=
Subject key identifier: 64:AF:CD:0C:CD:13:5F:AD:84:55:AF:DB:BB:5B:38:45:06:C4:F5:C0
Authority key identifier: D3:05:1A:F8:66:1E:94:25:2D:17:59:35:D3:79:7E:9E:CA:2C:D8:0C
Certificate issuer: /CN=d3051af8661e94252d175935d3797e9eca2cd80c
Certificate serial: 0196120E63A6E2EC811C5E3CCBA5DC8D1756
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0wUa-GYelCUtF1k103l-nsos2Aw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/42/7672e2-1c7f-4d2e-8961-c26c3e23baf6/1/0wUa-GYelCUtF1k103l-nsos2Aw.mft
Manifest number: 0E43
Signing time: Mon 07 Apr 2025 21:00:54 +0000
Manifest this update: Mon 07 Apr 2025 21:00:54 +0000
Manifest next update: Tue 08 Apr 2025 21:00:54 +0000
Files and hashes: 1: 0wUa-GYelCUtF1k103l-nsos2Aw.crl (hash: TJqhlC/A55TgKKJvJkFeEYBC8VHK5fOJi/XN/RveQUw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/42/7672e2-1c7f-4d2e-8961-c26c3e23baf6/1/0wUa-GYelCUtF1k103l-nsos2Aw.crl
rsync://rpki.ripe.net/repository/DEFAULT/42/7672e2-1c7f-4d2e-8961-c26c3e23baf6/1/0wUa-GYelCUtF1k103l-nsos2Aw.mft
rsync://rpki.ripe.net/repository/DEFAULT/0wUa-GYelCUtF1k103l-nsos2Aw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 08 Apr 2025 14:28:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:12:0e:63:a6:e2:ec:81:1c:5e:3c:cb:a5:dc:8d:17:56
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d3051af8661e94252d175935d3797e9eca2cd80c
Validity
Not Before: Apr 7 21:00:54 2025 GMT
Not After : Apr 8 21:00:54 2025 GMT
Subject: CN=64afcd0ccd135fad8455afdbbb5b384506c4f5c0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e6:b2:56:59:32:52:a9:8a:1e:91:78:d2:b3:9c:
3d:09:d2:2c:f3:97:9c:ce:60:8f:89:3b:ae:33:e2:
a5:5c:75:18:e0:94:83:fd:5c:f3:ae:34:90:71:3c:
75:01:c3:41:db:54:9e:cd:83:d0:32:eb:db:4b:8b:
9d:f8:cd:eb:91:22:f8:d1:3f:7b:e9:44:5e:1c:3f:
90:ca:55:8a:de:95:bb:59:c8:84:ca:8d:ac:02:94:
3c:f1:d5:b7:48:68:39:d4:d1:57:da:f9:4a:ce:56:
b3:69:a7:33:87:07:f1:29:b3:bd:4d:ca:af:7b:f8:
2e:f1:ca:80:eb:b8:3d:c4:a4:55:46:c4:bb:41:15:
70:5d:ff:1f:b8:ac:ce:9d:52:21:22:7d:2d:be:15:
c7:0b:da:cf:e1:5c:9c:81:71:93:6f:68:0f:00:42:
91:6b:4b:31:28:f2:9d:0e:47:2e:01:47:6c:3f:b5:
2d:d6:59:1e:e8:ae:fa:b6:9e:59:af:d0:bb:7f:0d:
90:df:82:5a:db:9c:fb:69:b7:5d:a1:87:5b:33:a1:
b1:40:87:bc:38:50:bc:23:67:de:a0:49:ea:4d:a6:
43:61:c6:47:ea:ea:23:bb:5b:18:ad:81:49:01:f5:
5d:43:c2:2e:af:33:0e:ee:6c:d3:83:94:14:d5:f0:
35:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
64:AF:CD:0C:CD:13:5F:AD:84:55:AF:DB:BB:5B:38:45:06:C4:F5:C0
X509v3 Authority Key Identifier:
keyid:D3:05:1A:F8:66:1E:94:25:2D:17:59:35:D3:79:7E:9E:CA:2C:D8:0C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0wUa-GYelCUtF1k103l-nsos2Aw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/42/7672e2-1c7f-4d2e-8961-c26c3e23baf6/1/0wUa-GYelCUtF1k103l-nsos2Aw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/42/7672e2-1c7f-4d2e-8961-c26c3e23baf6/1/0wUa-GYelCUtF1k103l-nsos2Aw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
e9:e2:a8:d3:0e:b5:94:08:db:ec:2e:73:f6:55:fa:89:f2:9d:
14:23:e2:a9:58:61:ac:31:80:b5:fc:94:4f:41:42:6a:fd:d1:
0f:70:48:1f:0f:37:e0:68:f4:cf:a7:48:8f:63:7c:96:e2:c1:
7d:89:2d:b9:b0:42:ef:9f:ff:22:b9:66:f1:f2:12:21:5c:ef:
93:eb:e0:89:d4:e9:0e:46:f9:d7:75:10:c1:62:f3:ed:76:f4:
e3:6a:5b:11:85:83:27:e2:60:88:7b:a6:ad:37:71:cb:9e:04:
69:ec:d3:26:77:a8:52:dc:c9:9b:a3:b8:52:4d:07:75:18:83:
7d:ab:d4:58:88:ef:45:92:fa:44:96:16:13:70:3c:07:e5:c3:
64:9c:ca:16:f9:f0:8c:6f:e9:7a:b6:05:d6:92:55:c9:50:f7:
5d:7f:06:aa:1e:dd:67:63:a5:a8:4e:e7:c2:21:cd:c3:c6:32:
3b:ea:00:6d:d8:53:ac:1b:e8:e9:6e:27:3d:f8:7d:0d:cc:ce:
ad:6c:b4:bd:84:c3:b1:a8:81:fe:43:86:39:dd:4e:b4:88:db:
6a:e3:20:fc:24:ca:ab:90:5a:2f:00:39:4e:7a:0a:d3:70:7e:
74:5a:92:d8:c7:cc:e1:af:4f:01:4b:83:26:6e:4e:9d:9b:4d:
76:a9:fd:bf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 23:27:17 2025 by rpki-client