Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/84/440cb1-b6f5-48cf-8886-e144ab19c5d1/1/D7o0uxz-i22g8bKwUkBsPpFhvyM.mft
File: D7o0uxz-i22g8bKwUkBsPpFhvyM.mft (raw, json)
Hash identifier: vlmP93cNrpswTORPs/kMRpIBgGPYNmtFKJQWKJUshS8=
Subject key identifier: E6:9C:E8:6D:45:A2:BE:DC:00:FB:79:75:A2:94:98:1B:19:2B:77:66
Authority key identifier: 0F:BA:34:BB:1C:FE:8B:6D:A0:F1:B2:B0:52:40:6C:3E:91:61:BF:23
Certificate issuer: /CN=0fba34bb1cfe8b6da0f1b2b052406c3e9161bf23
Certificate serial: 01965726C086DBD5713400CF839DB2F4C996
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/D7o0uxz-i22g8bKwUkBsPpFhvyM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/84/440cb1-b6f5-48cf-8886-e144ab19c5d1/1/D7o0uxz-i22g8bKwUkBsPpFhvyM.mft
Manifest number: 14FB
Signing time: Mon 21 Apr 2025 07:01:19 +0000
Manifest this update: Mon 21 Apr 2025 07:01:19 +0000
Manifest next update: Tue 22 Apr 2025 07:01:19 +0000
Files and hashes: 1: D7o0uxz-i22g8bKwUkBsPpFhvyM.crl (hash: vsYD2NYnkmFGQFZdm4ZXHLhJNZY9h76TSC+zRaeV2Uk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/84/440cb1-b6f5-48cf-8886-e144ab19c5d1/1/D7o0uxz-i22g8bKwUkBsPpFhvyM.crl
rsync://rpki.ripe.net/repository/DEFAULT/84/440cb1-b6f5-48cf-8886-e144ab19c5d1/1/D7o0uxz-i22g8bKwUkBsPpFhvyM.mft
rsync://rpki.ripe.net/repository/DEFAULT/D7o0uxz-i22g8bKwUkBsPpFhvyM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 22 Apr 2025 07:01:19 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:57:26:c0:86:db:d5:71:34:00:cf:83:9d:b2:f4:c9:96
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0fba34bb1cfe8b6da0f1b2b052406c3e9161bf23
Validity
Not Before: Apr 21 07:01:19 2025 GMT
Not After : Apr 22 07:01:19 2025 GMT
Subject: CN=e69ce86d45a2bedc00fb7975a294981b192b7766
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:53:17:f3:a0:3e:c1:2e:25:67:36:f5:fa:2b:
e0:47:5c:fc:4b:d4:ec:90:63:5e:39:55:68:64:f6:
53:a6:71:a6:2e:ad:5e:47:39:b9:2c:bb:43:c5:67:
86:8f:85:a3:d7:8d:cd:e0:66:6f:48:ab:a9:4a:08:
ab:c9:85:56:f3:49:5c:f6:d2:c4:17:c4:1c:af:a9:
ee:f2:7b:66:98:17:33:00:00:d3:08:4f:b5:1d:c9:
94:91:ac:8e:c2:28:2a:cd:a6:ae:63:da:69:0c:b3:
d2:19:11:1e:eb:af:a0:9e:be:57:52:42:cc:23:7e:
8e:de:33:20:72:f3:a7:6f:89:a3:3e:a8:65:88:28:
3b:a9:1a:d1:8a:96:4d:37:28:23:d5:5d:d6:78:e6:
53:14:85:88:76:d3:27:21:cf:42:71:e7:d7:ff:ab:
f1:1c:df:7b:17:6c:ce:f4:1a:8d:d7:d2:db:2f:23:
f1:2b:84:05:f0:53:11:f3:9f:ac:d5:83:0d:87:72:
9b:3e:f9:aa:5a:42:db:86:14:ae:b2:8e:80:00:ea:
8b:c5:2f:4d:64:67:86:9c:8e:e6:da:08:0f:2d:0e:
ab:57:ba:8a:10:ae:76:d1:8b:60:6c:db:32:61:83:
14:a3:a4:4b:7f:85:0b:9a:38:f8:dc:7f:48:d2:c0:
ca:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E6:9C:E8:6D:45:A2:BE:DC:00:FB:79:75:A2:94:98:1B:19:2B:77:66
X509v3 Authority Key Identifier:
keyid:0F:BA:34:BB:1C:FE:8B:6D:A0:F1:B2:B0:52:40:6C:3E:91:61:BF:23
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/D7o0uxz-i22g8bKwUkBsPpFhvyM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/84/440cb1-b6f5-48cf-8886-e144ab19c5d1/1/D7o0uxz-i22g8bKwUkBsPpFhvyM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/84/440cb1-b6f5-48cf-8886-e144ab19c5d1/1/D7o0uxz-i22g8bKwUkBsPpFhvyM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1c:91:7b:eb:ab:ab:9c:a0:eb:9d:f7:10:68:c2:57:4e:f1:a2:
0c:f8:01:ec:e6:63:a6:9e:32:f0:9a:a6:cf:b9:35:e0:e5:24:
d9:43:b4:be:c8:fc:7c:06:4a:45:54:5b:69:d3:b8:bf:31:29:
7c:ef:36:7a:b7:b4:45:45:96:76:d1:c3:27:83:a3:66:d2:58:
2c:be:9e:ed:26:0a:4f:b9:f8:bc:44:07:29:29:ad:bb:b3:d3:
f9:68:85:d1:d6:f2:ca:8f:b9:5b:2e:2f:99:0c:5d:f5:17:3c:
12:ce:48:6c:d4:fc:5c:17:49:4c:72:e1:c3:34:06:47:32:68:
2e:28:bf:a3:b9:53:b1:d8:9f:9c:89:4a:6e:40:03:8c:c7:a2:
5a:8d:70:4e:ca:1f:a1:f9:4a:c5:77:6b:ba:a1:ec:e4:a9:6c:
b0:96:7f:e8:5f:b4:c8:a9:a3:cb:7a:c7:e9:5c:a5:81:c1:7e:
e0:3b:16:b8:35:63:64:57:2e:43:17:3b:da:b3:0a:d4:ec:53:
32:f6:e7:4d:5d:c7:be:c7:b1:06:7c:52:74:f0:6a:10:5d:c2:
37:c9:94:74:39:49:1c:c3:73:d9:48:1a:cf:fa:24:2d:bb:0f:
1a:f3:38:c2:0f:cf:3c:16:2d:4d:fb:43:33:4c:e5:fd:50:d2:
da:d6:30:cc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 21 17:18:43 2025 by rpki-client