Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a6/336cb3-f4f7-4d8a-95ce-6bcf4a42ac7d/1/iOZzGonffpNxq6M-sU1y9h45gLk.mft
File: iOZzGonffpNxq6M-sU1y9h45gLk.mft (raw, json)
Hash identifier: 3M1o6UOi5f4rMevruMewK2y+mngt5zN+NgllQ3QEz5w=
Subject key identifier: BC:22:61:80:2C:A2:F1:48:07:87:74:D4:DB:63:C0:2D:F4:EB:D6:60
Authority key identifier: 88:E6:73:1A:89:DF:7E:93:71:AB:A3:3E:B1:4D:72:F6:1E:39:80:B9
Certificate issuer: /CN=88e6731a89df7e9371aba33eb14d72f61e3980b9
Certificate serial: 0196515AFEB7FEE62E250B08F7A28261C45A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/iOZzGonffpNxq6M-sU1y9h45gLk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a6/336cb3-f4f7-4d8a-95ce-6bcf4a42ac7d/1/iOZzGonffpNxq6M-sU1y9h45gLk.mft
Manifest number: 14FA
Signing time: Sun 20 Apr 2025 04:00:40 +0000
Manifest this update: Sun 20 Apr 2025 04:00:40 +0000
Manifest next update: Mon 21 Apr 2025 04:00:40 +0000
Files and hashes: 1: iOZzGonffpNxq6M-sU1y9h45gLk.crl (hash: 4Pjs2Nr0EWnLkggXZufoFRhZo/YLoH7QiGSfbjwfcHQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a6/336cb3-f4f7-4d8a-95ce-6bcf4a42ac7d/1/iOZzGonffpNxq6M-sU1y9h45gLk.crl
rsync://rpki.ripe.net/repository/DEFAULT/a6/336cb3-f4f7-4d8a-95ce-6bcf4a42ac7d/1/iOZzGonffpNxq6M-sU1y9h45gLk.mft
rsync://rpki.ripe.net/repository/DEFAULT/iOZzGonffpNxq6M-sU1y9h45gLk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 21 Apr 2025 04:00:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:51:5a:fe:b7:fe:e6:2e:25:0b:08:f7:a2:82:61:c4:5a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=88e6731a89df7e9371aba33eb14d72f61e3980b9
Validity
Not Before: Apr 20 04:00:40 2025 GMT
Not After : Apr 21 04:00:40 2025 GMT
Subject: CN=bc2261802ca2f148078774d4db63c02df4ebd660
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:8f:d8:e3:37:7e:d8:62:81:56:47:e5:78:2d:
bf:57:5a:97:5f:45:f2:8b:4e:ef:8f:76:b9:1b:4d:
bd:85:8f:cd:7c:ac:1d:52:53:34:58:48:7e:2f:61:
be:c6:17:1f:f5:2e:af:7c:de:65:cc:8c:8f:0e:76:
6c:99:64:d4:df:d1:44:19:79:b8:7d:c3:a4:ee:1f:
be:68:91:79:f4:a3:49:1d:0a:81:82:76:8e:eb:5b:
2d:4e:b4:48:b0:8a:d7:70:bf:c9:81:ad:54:1b:84:
5b:a3:e4:c0:b3:1b:a0:77:f0:3d:1a:c2:b9:a5:3d:
99:7b:22:e1:09:2c:b1:d2:36:16:3e:1d:61:1d:4d:
b7:02:fa:c7:6d:e0:cc:6e:07:4a:8f:07:fb:af:3c:
f6:52:32:b3:6b:fe:80:39:04:62:d4:8a:6d:92:77:
32:90:89:a8:18:15:6f:bf:40:97:f7:21:83:15:5b:
6f:76:c3:9b:f7:ba:34:b7:83:b5:7e:49:83:6a:99:
c6:12:63:5b:94:53:39:ba:70:40:b8:df:55:8b:3c:
24:e5:14:21:2a:a0:3c:5f:66:40:59:28:65:23:55:
80:ad:35:cd:47:9f:9c:19:b5:95:10:05:d6:f1:ec:
fb:cb:e3:54:fb:bd:52:d4:b2:60:5e:47:51:b9:63:
89:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BC:22:61:80:2C:A2:F1:48:07:87:74:D4:DB:63:C0:2D:F4:EB:D6:60
X509v3 Authority Key Identifier:
keyid:88:E6:73:1A:89:DF:7E:93:71:AB:A3:3E:B1:4D:72:F6:1E:39:80:B9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iOZzGonffpNxq6M-sU1y9h45gLk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a6/336cb3-f4f7-4d8a-95ce-6bcf4a42ac7d/1/iOZzGonffpNxq6M-sU1y9h45gLk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a6/336cb3-f4f7-4d8a-95ce-6bcf4a42ac7d/1/iOZzGonffpNxq6M-sU1y9h45gLk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3d:66:b6:a2:12:d9:2f:cf:09:ba:7f:67:37:75:f5:03:01:ad:
63:75:e7:63:f2:bd:27:38:2a:f5:36:ff:e0:b8:3f:8f:ce:86:
74:fc:72:45:08:79:fd:9e:3f:67:31:fd:a8:44:d5:3a:df:ba:
d4:36:f0:e9:99:b5:73:f2:51:6a:c8:35:4e:e4:93:39:46:ba:
a5:7a:18:e6:a9:ff:08:44:4e:92:e8:e5:c0:d7:03:74:16:a7:
af:ff:48:78:b7:46:0e:b7:5c:eb:ef:0a:34:c1:5d:80:27:0c:
54:77:78:af:b0:d6:88:74:d4:76:8d:64:63:f5:77:b2:49:c4:
b8:13:02:b6:d1:9e:1b:71:5b:b1:13:49:c3:40:d6:61:e4:9d:
d7:0d:37:5e:c8:97:a3:d2:f3:95:25:42:25:71:3a:1a:d1:8a:
09:5d:4f:93:ce:ec:b2:80:b2:99:b3:58:d5:d1:d2:5e:08:ce:
16:80:4f:f7:3a:75:b3:b2:3f:b3:c7:e3:e6:ea:e9:fd:79:a5:
b2:63:6f:45:68:8a:32:f6:bb:1f:83:de:47:b9:62:fd:20:2b:
d9:0c:7d:07:dc:68:c3:59:3b:ab:a8:f0:14:b3:7c:06:42:ac:
a8:d7:ec:07:79:01:ea:3e:e7:69:ec:54:2e:6e:a9:c9:c7:97:
79:b5:f2:6c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 20 13:05:06 2025 by rpki-client