Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/84/20d9cc-143f-4ee8-8c69-b3e9be742894/1/o8VuwTDZivLQ0pRZ8g-nm9Y1kBU.mft
File: o8VuwTDZivLQ0pRZ8g-nm9Y1kBU.mft (raw, json)
Hash identifier: Ku6aL2WV+2H4gSzsJiDUXoZi5ikaGABIDGnWluCBzHo=
Subject key identifier: E8:3B:02:5F:FC:EB:99:EB:18:53:7D:77:CF:52:61:40:A5:66:70:C6
Authority key identifier: A3:C5:6E:C1:30:D9:8A:F2:D0:D2:94:59:F2:0F:A7:9B:D6:35:90:15
Certificate issuer: /CN=a3c56ec130d98af2d0d29459f20fa79bd6359015
Certificate serial: 019661731A81BDDF118607DF6A076FCCCFB5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/o8VuwTDZivLQ0pRZ8g-nm9Y1kBU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/84/20d9cc-143f-4ee8-8c69-b3e9be742894/1/o8VuwTDZivLQ0pRZ8g-nm9Y1kBU.mft
Manifest number: 0488
Signing time: Wed 23 Apr 2025 07:00:55 +0000
Manifest this update: Wed 23 Apr 2025 07:00:55 +0000
Manifest next update: Thu 24 Apr 2025 07:00:55 +0000
Files and hashes: 1: o8VuwTDZivLQ0pRZ8g-nm9Y1kBU.crl (hash: CsIF+rroWmTwMjmfasSyrL9zLxKKK+CkGTcOCp7clCo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/84/20d9cc-143f-4ee8-8c69-b3e9be742894/1/o8VuwTDZivLQ0pRZ8g-nm9Y1kBU.crl
rsync://rpki.ripe.net/repository/DEFAULT/84/20d9cc-143f-4ee8-8c69-b3e9be742894/1/o8VuwTDZivLQ0pRZ8g-nm9Y1kBU.mft
rsync://rpki.ripe.net/repository/DEFAULT/o8VuwTDZivLQ0pRZ8g-nm9Y1kBU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 24 Apr 2025 07:00:55 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:61:73:1a:81:bd:df:11:86:07:df:6a:07:6f:cc:cf:b5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a3c56ec130d98af2d0d29459f20fa79bd6359015
Validity
Not Before: Apr 23 07:00:55 2025 GMT
Not After : Apr 24 07:00:55 2025 GMT
Subject: CN=e83b025ffceb99eb18537d77cf526140a56670c6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:58:9a:ba:26:d1:f8:d9:b3:97:b0:49:4a:94:
67:10:fe:ea:cd:1d:73:a9:59:91:a4:2e:60:02:e7:
97:01:fc:8d:3e:af:41:a7:88:a9:2f:15:64:06:d7:
9a:20:6b:99:22:34:1d:ef:41:ff:3e:27:87:fe:9d:
17:b7:29:df:e4:c8:4c:76:f2:0d:1c:02:50:9e:0a:
88:34:cf:6f:8b:85:a6:e0:8a:77:41:81:9d:1a:8f:
cd:58:e6:ba:75:b4:4e:1c:89:a3:f1:8f:b3:b1:f1:
cb:d1:01:47:03:20:2e:24:04:bc:a8:9e:cf:2f:f8:
3c:5a:3c:1c:87:8b:5a:72:bb:7b:44:bb:b1:0a:c3:
01:2c:e7:e1:4b:0e:59:7a:fa:f7:4c:46:d2:43:b7:
a0:8b:b6:fa:55:fa:04:0f:2d:5e:ee:dc:e5:26:95:
d1:1d:e7:ec:eb:3c:c2:0a:8f:45:49:a7:8b:7b:ea:
ec:82:d7:91:d7:33:a3:ee:87:7e:2d:33:3a:d6:1c:
9c:81:e1:a6:ae:1f:e9:c2:f7:af:d0:06:a6:c4:41:
32:04:75:51:45:58:5d:4d:1e:71:84:c3:ca:8e:85:
07:bb:ee:f3:ad:2b:63:48:0c:25:26:42:ca:b9:e9:
25:aa:93:4d:06:b4:98:18:76:c0:38:25:fe:fe:d9:
90:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E8:3B:02:5F:FC:EB:99:EB:18:53:7D:77:CF:52:61:40:A5:66:70:C6
X509v3 Authority Key Identifier:
keyid:A3:C5:6E:C1:30:D9:8A:F2:D0:D2:94:59:F2:0F:A7:9B:D6:35:90:15
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/o8VuwTDZivLQ0pRZ8g-nm9Y1kBU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/84/20d9cc-143f-4ee8-8c69-b3e9be742894/1/o8VuwTDZivLQ0pRZ8g-nm9Y1kBU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/84/20d9cc-143f-4ee8-8c69-b3e9be742894/1/o8VuwTDZivLQ0pRZ8g-nm9Y1kBU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
91:d8:be:8c:e5:f5:bf:f2:a3:bc:37:c0:28:d1:a4:f5:50:bc:
2f:08:27:05:5c:e9:00:24:62:d7:7c:7f:d3:a1:a4:16:58:c6:
df:2f:be:dd:d8:bb:4b:4a:87:fe:f2:eb:59:a3:d4:4c:a1:55:
04:49:0a:8e:e9:35:03:cb:d3:55:14:60:3d:92:bd:06:20:d9:
6b:a3:44:56:b7:ca:b0:f4:9a:22:2a:d5:6d:08:7d:a2:0b:52:
4e:f3:f1:7e:08:3a:d4:0a:80:b3:08:11:b0:99:60:d0:ec:3d:
de:4a:0c:d5:ae:97:ab:e3:34:e2:ad:66:a5:9d:c2:a6:fb:b5:
75:38:c7:d6:8a:5c:81:cc:d4:00:c1:02:9c:b0:3d:62:97:68:
fe:66:67:f5:59:d0:03:f1:1a:eb:6e:98:d1:d9:23:2f:0e:bd:
41:53:35:89:b8:45:55:2a:b2:21:01:ca:a5:fd:1c:74:4b:f4:
4c:ac:e5:a1:bc:c3:d3:37:48:b3:f4:fc:f9:67:f4:57:29:94:
e0:63:af:53:5c:aa:36:b4:56:3c:4b:b3:14:21:51:3f:20:ed:
20:11:90:b7:30:f2:36:e2:49:a2:ff:f1:92:6e:29:ab:19:d9:
b6:e9:00:b7:7d:0e:00:24:ce:aa:d2:2a:f2:a1:36:b7:ec:9c:
ab:fa:e0:8e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 23 09:54:39 2025 by rpki-client