Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4b/9270b0-8608-4149-a052-099fde63bbf2/1/Or-t4neb0SyuiYiSakZi11cIawE.mft
File: Or-t4neb0SyuiYiSakZi11cIawE.mft (raw, json)
Hash identifier: RZAhJVKfNjsl9vlSLg0iWmJo33y1L6+K3RL+FTL3iLI=
Subject key identifier: E5:A9:A0:CB:7B:E5:60:4E:F6:17:E2:BC:FB:38:88:71:FF:C5:BC:AF
Authority key identifier: 3A:BF:AD:E2:77:9B:D1:2C:AE:89:88:92:6A:46:62:D7:57:08:6B:01
Certificate issuer: /CN=3abfade2779bd12cae8988926a4662d757086b01
Certificate serial: 0196447AF782BE38FC23C96A03E8885AFF2E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Or-t4neb0SyuiYiSakZi11cIawE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4b/9270b0-8608-4149-a052-099fde63bbf2/1/Or-t4neb0SyuiYiSakZi11cIawE.mft
Manifest number: 0A19
Signing time: Thu 17 Apr 2025 16:00:31 +0000
Manifest this update: Thu 17 Apr 2025 16:00:31 +0000
Manifest next update: Fri 18 Apr 2025 16:00:31 +0000
Files and hashes: 1: Or-t4neb0SyuiYiSakZi11cIawE.crl (hash: T35U9wr85yC7r5FjSS9yLyzfNUyDoF3vmEu8OOmjpn4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4b/9270b0-8608-4149-a052-099fde63bbf2/1/Or-t4neb0SyuiYiSakZi11cIawE.crl
rsync://rpki.ripe.net/repository/DEFAULT/4b/9270b0-8608-4149-a052-099fde63bbf2/1/Or-t4neb0SyuiYiSakZi11cIawE.mft
rsync://rpki.ripe.net/repository/DEFAULT/Or-t4neb0SyuiYiSakZi11cIawE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 18 Apr 2025 16:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:44:7a:f7:82:be:38:fc:23:c9:6a:03:e8:88:5a:ff:2e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3abfade2779bd12cae8988926a4662d757086b01
Validity
Not Before: Apr 17 16:00:31 2025 GMT
Not After : Apr 18 16:00:31 2025 GMT
Subject: CN=e5a9a0cb7be5604ef617e2bcfb388871ffc5bcaf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:b5:b7:76:88:ae:c7:4f:0a:cb:83:77:83:91:
84:ca:65:ad:6b:0f:7d:53:ea:3d:2d:d8:91:6b:af:
6f:93:b0:41:73:24:a4:69:d3:09:1a:81:a2:c4:76:
f6:3f:aa:b9:f7:8c:f9:91:14:fe:54:f6:28:17:2f:
8a:07:a1:ae:b4:13:81:d5:44:eb:7b:a8:cc:e8:d8:
57:01:d7:09:57:5b:b8:c3:6e:c7:a5:10:83:5b:03:
cb:11:d1:c4:b6:cd:e2:9d:fc:1a:67:a3:25:ab:b4:
5c:25:e8:f5:30:6a:f4:b4:74:ec:ab:37:ca:ef:3f:
5e:f5:7a:c3:e0:bf:3f:85:42:29:00:53:6f:2c:4a:
4a:77:4f:3e:12:d3:d1:80:41:fb:73:dd:73:00:7d:
2d:9d:a3:0b:87:a2:8f:01:82:e5:b8:01:b9:37:cc:
35:bf:94:75:1c:17:2a:85:e6:36:4c:61:0e:78:9a:
f9:b3:ca:e1:80:b9:1f:93:b6:76:57:fa:e2:99:17:
2a:b6:44:32:38:9f:64:e1:f4:2b:f8:a3:79:d3:66:
a2:81:ef:62:c3:cc:bd:23:76:22:f9:cf:3f:d5:28:
9f:2d:e0:cc:5f:45:23:b1:df:91:48:2c:e0:fb:f1:
43:14:9a:40:d7:ad:a9:0a:a6:da:57:34:0a:dc:e7:
00:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E5:A9:A0:CB:7B:E5:60:4E:F6:17:E2:BC:FB:38:88:71:FF:C5:BC:AF
X509v3 Authority Key Identifier:
keyid:3A:BF:AD:E2:77:9B:D1:2C:AE:89:88:92:6A:46:62:D7:57:08:6B:01
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Or-t4neb0SyuiYiSakZi11cIawE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4b/9270b0-8608-4149-a052-099fde63bbf2/1/Or-t4neb0SyuiYiSakZi11cIawE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4b/9270b0-8608-4149-a052-099fde63bbf2/1/Or-t4neb0SyuiYiSakZi11cIawE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
66:9f:a8:64:7d:38:11:43:cb:a2:a2:ff:1b:84:c5:39:a6:e4:
fd:1a:29:af:25:fd:1d:27:32:8f:89:71:a7:39:a6:47:9a:de:
e9:11:e1:2e:d3:be:ed:6f:c8:d5:57:9a:97:a8:7f:46:ff:75:
d4:73:22:0c:9e:72:6b:91:14:18:6e:76:10:e1:4f:d5:49:80:
8e:40:56:51:21:a3:5d:70:e4:35:35:5f:7b:70:f5:e3:20:aa:
10:e7:ee:30:69:67:fa:8f:84:5f:03:97:44:6a:d6:a6:ef:72:
d7:9b:83:23:f3:32:b2:23:4b:39:3d:85:44:e3:91:ae:eb:5c:
2e:6e:91:49:75:28:0c:03:e1:9f:df:b3:f7:e6:d1:f2:d8:3c:
98:e6:51:97:ae:d1:2c:17:e3:b7:7a:38:c4:06:75:38:c9:db:
e1:2d:83:a0:49:f7:94:7b:50:5f:df:d9:bc:b1:d8:f1:fd:ec:
3a:d1:84:ce:74:1a:36:7b:24:63:83:ed:35:20:d9:99:d1:d9:
b5:57:e5:7f:c0:d8:a2:ca:fe:ec:6b:22:ef:ab:36:2d:99:69:
67:35:18:9c:e2:59:91:ca:f5:b8:52:79:4b:a9:9a:14:72:09:
8a:ed:4b:f5:08:ed:b7:1c:94:c8:32:4f:b9:b1:4b:71:de:d3:
99:75:2d:7b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 18 01:28:13 2025 by rpki-client