Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/46/b64040-98c9-4dbe-9dcc-0bec96787937/1/cOJ6HOd7zUxkl-KFvyum8yRDnrg.mft
File: cOJ6HOd7zUxkl-KFvyum8yRDnrg.mft (raw, json)
Hash identifier: 0nrz704AzyOCK1QtAincpCVNRKTzpcmtRUafRMtud8g=
Subject key identifier: 73:71:7A:51:9E:E2:F7:95:1A:E2:1B:95:2D:A1:E0:B3:B7:81:CA:1C
Authority key identifier: 70:E2:7A:1C:E7:7B:CD:4C:64:97:E2:85:BF:2B:A6:F3:24:43:9E:B8
Certificate issuer: /CN=70e27a1ce77bcd4c6497e285bf2ba6f324439eb8
Certificate serial: 019618102233A3102A24E27B8BBF9B134A00
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cOJ6HOd7zUxkl-KFvyum8yRDnrg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/46/b64040-98c9-4dbe-9dcc-0bec96787937/1/cOJ6HOd7zUxkl-KFvyum8yRDnrg.mft
Manifest number: 084E
Signing time: Wed 09 Apr 2025 01:00:32 +0000
Manifest this update: Wed 09 Apr 2025 01:00:32 +0000
Manifest next update: Thu 10 Apr 2025 01:00:32 +0000
Files and hashes: 1: cOJ6HOd7zUxkl-KFvyum8yRDnrg.crl (hash: MgLfLaMv7ht31GFL1DC/AUfBIngPlCYT8KNB4WKKwCA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/46/b64040-98c9-4dbe-9dcc-0bec96787937/1/cOJ6HOd7zUxkl-KFvyum8yRDnrg.crl
rsync://rpki.ripe.net/repository/DEFAULT/46/b64040-98c9-4dbe-9dcc-0bec96787937/1/cOJ6HOd7zUxkl-KFvyum8yRDnrg.mft
rsync://rpki.ripe.net/repository/DEFAULT/cOJ6HOd7zUxkl-KFvyum8yRDnrg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 10 Apr 2025 01:00:32 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:18:10:22:33:a3:10:2a:24:e2:7b:8b:bf:9b:13:4a:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=70e27a1ce77bcd4c6497e285bf2ba6f324439eb8
Validity
Not Before: Apr 9 01:00:32 2025 GMT
Not After : Apr 10 01:00:32 2025 GMT
Subject: CN=73717a519ee2f7951ae21b952da1e0b3b781ca1c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:d6:77:2f:9f:98:f9:a1:0d:f0:37:7c:c9:a2:
64:c7:fc:a7:f3:4e:c3:92:93:46:09:0c:b1:26:c0:
5e:b7:79:a7:ac:2a:65:cf:90:01:ff:e3:a5:39:cd:
77:fe:ba:13:e3:9a:4c:23:a5:fd:18:aa:b6:48:c1:
90:a4:86:41:dd:0f:ff:ac:1f:83:2b:97:24:2a:07:
b1:c5:4b:55:10:a2:9b:e3:73:74:fd:3d:9b:8e:06:
7a:7a:4a:99:64:10:1b:2b:34:15:1c:31:a8:e9:e2:
e5:c9:d4:b3:41:a0:14:7f:b5:6a:bd:7a:99:4a:4d:
c4:e3:5b:16:8d:03:d0:14:97:db:70:0c:67:41:69:
32:e5:b2:8e:91:90:a3:cf:e3:86:9a:b7:76:8f:6c:
87:b8:58:84:4c:9f:f6:49:97:4f:6b:29:32:4e:d2:
11:56:ad:ba:1c:4b:32:d9:c1:41:7b:df:a6:ca:ea:
e6:35:9a:43:b1:bd:d3:1f:5c:8a:32:82:ab:82:82:
40:e5:5a:d2:85:4c:61:d0:2b:1b:ee:46:ff:70:35:
12:d3:cf:f2:ac:52:7b:be:37:8f:33:0e:3a:54:6f:
b7:37:e7:84:66:28:4c:16:76:fa:37:f4:25:0a:cb:
e6:72:a1:e3:c8:62:5c:d9:d9:66:54:ac:f3:d1:2c:
18:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
73:71:7A:51:9E:E2:F7:95:1A:E2:1B:95:2D:A1:E0:B3:B7:81:CA:1C
X509v3 Authority Key Identifier:
keyid:70:E2:7A:1C:E7:7B:CD:4C:64:97:E2:85:BF:2B:A6:F3:24:43:9E:B8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cOJ6HOd7zUxkl-KFvyum8yRDnrg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/46/b64040-98c9-4dbe-9dcc-0bec96787937/1/cOJ6HOd7zUxkl-KFvyum8yRDnrg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/46/b64040-98c9-4dbe-9dcc-0bec96787937/1/cOJ6HOd7zUxkl-KFvyum8yRDnrg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
80:63:91:e1:5b:ed:9a:7e:3b:a6:72:b6:9e:4a:e1:2e:5b:90:
26:43:55:3a:1c:10:3d:99:63:0a:9c:4b:03:40:46:6c:ed:ef:
31:b5:5e:a9:a3:43:c9:5b:2b:39:54:53:5a:ec:44:5f:67:b4:
93:a8:53:2c:e2:9a:03:80:ce:64:a1:47:ac:90:2a:b2:8c:89:
c2:7e:f7:6c:ef:2d:18:e1:a2:e3:4b:ac:f1:7f:28:05:ba:3c:
4b:7d:17:a3:6d:b2:02:da:a4:f7:57:e8:6a:91:28:b8:ee:2e:
18:01:02:d0:92:1d:18:f4:2d:55:24:f2:35:cf:26:a3:70:91:
0e:bd:65:e4:a8:12:57:95:61:e2:9d:0d:02:d3:e5:84:d2:3f:
8b:41:57:23:f6:ba:72:d7:94:bd:0a:e3:b7:a7:95:34:05:bb:
ee:07:03:f7:d8:58:4d:0c:74:5c:ee:fb:a2:86:8b:31:20:d9:
3c:ed:b5:a8:75:e5:9f:2c:cd:96:7d:96:17:68:54:d0:b4:20:
ec:8f:f5:33:be:26:9b:fa:ad:71:4d:40:1e:da:ba:68:ca:e8:
4c:58:fc:1f:b5:42:29:d6:fd:2e:56:dd:eb:31:6e:17:13:78:
c1:3f:fa:8f:31:b0:dc:9f:c4:01:5a:b9:73:f0:9d:fc:41:eb:
82:ad:2e:d4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 9 11:51:36 2025 by rpki-client