Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4a/35bb21-2239-4f77-a7fa-55de65a2ea3b/1/o3sePvrqidz80cjpfA6beAxhRl0.mft
File: o3sePvrqidz80cjpfA6beAxhRl0.mft (raw, json)
Hash identifier: u8AE/32iG0wfeIyLQ2fDhncISgh4oLJdrscp9dXg158=
Subject key identifier: 6A:E8:7A:6B:23:5E:BE:4D:06:92:83:66:E1:7B:24:EF:CC:92:67:9B
Authority key identifier: A3:7B:1E:3E:FA:EA:89:DC:FC:D1:C8:E9:7C:0E:9B:78:0C:61:46:5D
Certificate issuer: /CN=a37b1e3efaea89dcfcd1c8e97c0e9b780c61465d
Certificate serial: 01964D7DF239EC8927BE8759BE0B67C87436
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/o3sePvrqidz80cjpfA6beAxhRl0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4a/35bb21-2239-4f77-a7fa-55de65a2ea3b/1/o3sePvrqidz80cjpfA6beAxhRl0.mft
Manifest number: 0B81
Signing time: Sat 19 Apr 2025 10:00:21 +0000
Manifest this update: Sat 19 Apr 2025 10:00:21 +0000
Manifest next update: Sun 20 Apr 2025 10:00:21 +0000
Files and hashes: 1: o3sePvrqidz80cjpfA6beAxhRl0.crl (hash: ydnqT13io3gITGkTV2/jODNTIMQziHxIP7nSTpb3tHM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4a/35bb21-2239-4f77-a7fa-55de65a2ea3b/1/o3sePvrqidz80cjpfA6beAxhRl0.crl
rsync://rpki.ripe.net/repository/DEFAULT/4a/35bb21-2239-4f77-a7fa-55de65a2ea3b/1/o3sePvrqidz80cjpfA6beAxhRl0.mft
rsync://rpki.ripe.net/repository/DEFAULT/o3sePvrqidz80cjpfA6beAxhRl0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 20 Apr 2025 04:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:4d:7d:f2:39:ec:89:27:be:87:59:be:0b:67:c8:74:36
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a37b1e3efaea89dcfcd1c8e97c0e9b780c61465d
Validity
Not Before: Apr 19 10:00:21 2025 GMT
Not After : Apr 20 10:00:21 2025 GMT
Subject: CN=6ae87a6b235ebe4d06928366e17b24efcc92679b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:71:c9:9e:85:bf:b8:04:ac:00:ec:8b:8d:c8:
87:6c:a1:f0:59:75:5c:d3:39:a5:08:69:60:21:61:
bb:cb:7d:94:6f:f4:b2:86:7a:18:fd:fe:f6:86:5c:
3b:d6:c7:87:65:92:d7:f2:3a:dd:42:92:53:59:53:
c0:b1:73:59:4f:b6:9a:40:25:4b:e4:18:88:c4:8b:
1d:0e:e9:28:3e:0c:32:44:39:e8:f4:4b:1f:b5:a7:
4b:fa:22:f7:6c:dd:a1:2f:06:d4:1f:b1:fa:a8:c6:
f6:13:bc:de:e7:38:2a:3d:60:0f:9d:f8:8c:d2:b0:
6a:17:42:b1:66:48:ae:66:fc:cf:19:a8:8d:b3:11:
7e:e8:fb:96:ee:22:37:3e:fc:55:e7:82:4f:b8:06:
2a:15:fe:10:58:e7:ae:9e:35:48:98:bf:1f:f4:02:
30:cb:04:fe:07:c9:e6:1b:48:97:4c:26:12:9f:25:
cb:ce:72:84:a3:ae:e1:8e:27:16:da:18:35:1f:57:
73:38:00:53:e9:fb:3a:1a:be:69:b8:cb:27:9c:ae:
5b:98:3e:73:73:b5:1a:af:75:fa:6a:49:b3:92:1f:
82:89:e1:04:9e:11:13:03:ca:c6:b9:28:a4:1b:00:
4e:c1:fe:dc:8f:4b:e2:9b:96:d6:dc:eb:5c:62:02:
03:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6A:E8:7A:6B:23:5E:BE:4D:06:92:83:66:E1:7B:24:EF:CC:92:67:9B
X509v3 Authority Key Identifier:
keyid:A3:7B:1E:3E:FA:EA:89:DC:FC:D1:C8:E9:7C:0E:9B:78:0C:61:46:5D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/o3sePvrqidz80cjpfA6beAxhRl0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/35bb21-2239-4f77-a7fa-55de65a2ea3b/1/o3sePvrqidz80cjpfA6beAxhRl0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/35bb21-2239-4f77-a7fa-55de65a2ea3b/1/o3sePvrqidz80cjpfA6beAxhRl0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
22:fa:99:83:7d:46:f2:8b:c4:a8:b2:7d:11:68:fe:69:4e:c6:
4a:5a:13:54:ae:e8:a0:26:6d:c2:ed:ed:8d:74:bb:58:b3:b8:
cb:cc:9f:46:0b:21:24:44:e5:8a:bf:1c:d1:68:7f:50:a1:38:
93:12:ef:84:48:81:e4:ce:d5:b9:e8:86:15:8d:49:77:17:42:
f4:b7:bd:99:e6:a4:8e:34:a8:ff:03:f1:f2:ef:51:3f:9f:a0:
b0:60:32:2e:01:e7:eb:21:4c:d0:00:0b:c3:48:5f:2b:e7:42:
78:62:7b:91:75:88:89:14:59:0a:0b:79:9c:f4:a6:4c:28:5f:
bc:f5:6d:bc:da:3d:e9:dc:90:0b:43:db:e8:bb:b2:2c:09:f8:
b7:e3:2b:15:14:c9:22:ef:b7:b3:78:c0:2f:93:8e:a9:d4:bc:
48:90:b6:98:e6:d7:84:1f:48:c7:d8:ba:b3:6e:e9:ca:3e:ca:
bb:97:42:80:f5:82:27:b3:22:26:b6:30:58:6b:bf:5e:f4:c3:
cd:3c:55:26:7f:a0:97:e0:9a:fe:40:d0:7d:dc:b9:47:ef:37:
c7:7f:b9:6b:a8:84:ad:69:c1:3f:1c:c6:ed:6f:0e:6e:78:0d:
a7:94:77:e0:19:36:fa:88:52:90:13:85:11:d0:cd:05:84:89:
f4:1d:cc:0b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 19 12:07:13 2025 by rpki-client