Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a0/64470b-1a7a-4966-9325-7a407da666d4/1/Ro-K5KJnyBLyQr8CwGTrkofDUVU.mft
File: Ro-K5KJnyBLyQr8CwGTrkofDUVU.mft (raw, json)
Hash identifier: 5goPf85qkgO03LI0L+TB9KtFkF8WzCuIrhhTt3Hb7Uc=
Subject key identifier: FA:33:B1:11:40:A8:98:85:84:2C:77:CD:28:6E:B6:5C:9A:C9:F0:5D
Authority key identifier: 46:8F:8A:E4:A2:67:C8:12:F2:42:BF:02:C0:64:EB:92:87:C3:51:55
Certificate issuer: /CN=468f8ae4a267c812f242bf02c064eb9287c35155
Certificate serial: 01958CCE52004C189318CF9F1C667F5D68AD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Ro-K5KJnyBLyQr8CwGTrkofDUVU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a0/64470b-1a7a-4966-9325-7a407da666d4/1/Ro-K5KJnyBLyQr8CwGTrkofDUVU.mft
Manifest number: 0B8D
Signing time: Thu 13 Mar 2025 00:01:26 +0000
Manifest this update: Thu 13 Mar 2025 00:01:26 +0000
Manifest next update: Fri 14 Mar 2025 00:01:26 +0000
Files and hashes: 1: Ro-K5KJnyBLyQr8CwGTrkofDUVU.crl (hash: Kt+HwF16mYbZUKp1iCnzCgupRMBckRSY0Rk+LCANUWI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a0/64470b-1a7a-4966-9325-7a407da666d4/1/Ro-K5KJnyBLyQr8CwGTrkofDUVU.crl
rsync://rpki.ripe.net/repository/DEFAULT/a0/64470b-1a7a-4966-9325-7a407da666d4/1/Ro-K5KJnyBLyQr8CwGTrkofDUVU.mft
rsync://rpki.ripe.net/repository/DEFAULT/Ro-K5KJnyBLyQr8CwGTrkofDUVU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 13 Mar 2025 19:14:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:8c:ce:52:00:4c:18:93:18:cf:9f:1c:66:7f:5d:68:ad
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=468f8ae4a267c812f242bf02c064eb9287c35155
Validity
Not Before: Mar 13 00:01:26 2025 GMT
Not After : Mar 14 00:01:26 2025 GMT
Subject: CN=fa33b11140a89885842c77cd286eb65c9ac9f05d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:c3:a8:4a:e7:13:f9:46:58:7e:ff:4f:d9:af:
ef:2a:df:af:2c:85:bc:01:68:f9:61:72:47:5f:68:
12:82:d0:a6:32:3b:85:e8:90:9b:ac:41:12:a3:97:
0d:13:c1:18:6f:f2:20:06:d4:63:2a:d2:82:9a:58:
b4:7a:2f:9f:f9:14:0e:91:e1:03:97:56:d7:64:e2:
bb:15:e1:b5:b4:a1:99:fd:3e:be:12:1d:90:c4:ce:
50:91:be:1d:45:3f:78:c2:b2:08:f2:3b:0b:5d:ff:
64:f6:a3:da:99:d4:c0:1d:fa:ee:b7:55:9a:c2:16:
e6:ae:25:06:66:5e:3d:b9:e6:d8:e9:20:3e:ae:d2:
f1:08:fd:d0:96:ab:d3:04:3d:1f:02:b3:d5:77:58:
bf:51:7d:24:5a:55:51:f5:31:10:d1:86:72:5c:d9:
8c:6b:49:7c:c7:d8:7d:af:18:09:c1:18:8e:54:cc:
21:b6:64:5b:cc:49:9a:c6:95:80:c7:7d:cc:04:fd:
42:73:2c:9d:4b:2e:70:f2:99:f9:46:86:f4:8a:74:
6f:6a:26:59:ef:50:59:db:58:46:58:0b:9e:a7:09:
bc:14:ca:33:5a:66:01:c1:ee:17:89:77:35:ae:2e:
05:19:78:de:b3:23:52:b8:dd:9e:d9:90:d1:de:0c:
6f:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FA:33:B1:11:40:A8:98:85:84:2C:77:CD:28:6E:B6:5C:9A:C9:F0:5D
X509v3 Authority Key Identifier:
keyid:46:8F:8A:E4:A2:67:C8:12:F2:42:BF:02:C0:64:EB:92:87:C3:51:55
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Ro-K5KJnyBLyQr8CwGTrkofDUVU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/64470b-1a7a-4966-9325-7a407da666d4/1/Ro-K5KJnyBLyQr8CwGTrkofDUVU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/64470b-1a7a-4966-9325-7a407da666d4/1/Ro-K5KJnyBLyQr8CwGTrkofDUVU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7a:3b:0c:8f:23:e6:0c:10:c5:6d:a4:3f:2a:95:90:20:62:86:
e8:95:7c:63:a7:51:29:df:c7:53:52:e1:db:16:ee:5a:57:3e:
ea:9d:6f:0f:9c:c7:c5:37:a8:18:11:0f:1c:c4:b7:0e:72:c0:
1e:d8:a7:9f:07:90:5d:ad:ea:78:a7:50:be:a5:f1:bf:5a:71:
e9:ef:78:17:d6:5f:38:ed:e3:f9:4c:b4:51:0d:e6:fd:39:2e:
eb:01:e6:07:20:03:92:f1:8b:71:6e:fb:1b:38:10:0c:cd:9e:
3b:56:c8:05:db:06:65:44:6c:db:72:92:41:4c:82:88:a5:48:
95:e0:e6:8b:f3:e4:fc:b2:e8:90:32:0d:7e:ba:34:f0:ca:ec:
ff:97:86:20:f0:9d:d5:ca:f8:18:6a:2c:a3:b7:eb:6c:00:ee:
82:af:06:8f:e0:1c:c3:d5:3a:2c:29:77:d7:bf:57:bb:ec:3a:
0e:68:7b:bc:54:ec:40:40:ea:c0:2e:82:7f:31:b8:51:46:2d:
00:00:e3:e9:a9:09:3e:dd:58:ba:11:46:dd:04:db:82:4d:6f:
51:95:b0:4b:4a:1b:ef:d1:16:fb:db:5d:c8:65:cb:0b:d1:15:
e7:f6:44:16:2d:da:42:16:90:01:d1:3c:95:8b:7e:99:cf:0f:
06:66:ed:58
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 13 02:34:12 2025 by rpki-client