Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ba/8a33aa-af38-4c4e-bad7-b91f50c5b7e0/1/oBhxQsOFxByo--yy9VpP_wB5vPQ.mft
File: oBhxQsOFxByo--yy9VpP_wB5vPQ.mft (raw, json)
Hash identifier: gG0tCtq9ibZV8fuhxMbZtRoT7x6ce8tzSUr3sB0eVpc=
Subject key identifier: 08:DC:58:20:21:F5:6C:A3:AB:4E:CA:CA:E5:0A:5B:76:76:81:0D:D3
Authority key identifier: A0:18:71:42:C3:85:C4:1C:A8:FB:EC:B2:F5:5A:4F:FF:00:79:BC:F4
Certificate issuer: /CN=a0187142c385c41ca8fbecb2f55a4fff0079bcf4
Certificate serial: 019650B62BD6E524C51BEC221F04939AE6CC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/oBhxQsOFxByo--yy9VpP_wB5vPQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ba/8a33aa-af38-4c4e-bad7-b91f50c5b7e0/1/oBhxQsOFxByo--yy9VpP_wB5vPQ.mft
Manifest number: 07D5
Signing time: Sun 20 Apr 2025 01:00:38 +0000
Manifest this update: Sun 20 Apr 2025 01:00:38 +0000
Manifest next update: Mon 21 Apr 2025 01:00:38 +0000
Files and hashes: 1: oBhxQsOFxByo--yy9VpP_wB5vPQ.crl (hash: trc9LatvvT8c755UpSDiDDXtseWRPBl5iIQfMXZeCxs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ba/8a33aa-af38-4c4e-bad7-b91f50c5b7e0/1/oBhxQsOFxByo--yy9VpP_wB5vPQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/ba/8a33aa-af38-4c4e-bad7-b91f50c5b7e0/1/oBhxQsOFxByo--yy9VpP_wB5vPQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/oBhxQsOFxByo--yy9VpP_wB5vPQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 20 Apr 2025 22:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:50:b6:2b:d6:e5:24:c5:1b:ec:22:1f:04:93:9a:e6:cc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a0187142c385c41ca8fbecb2f55a4fff0079bcf4
Validity
Not Before: Apr 20 01:00:38 2025 GMT
Not After : Apr 21 01:00:38 2025 GMT
Subject: CN=08dc582021f56ca3ab4ecacae50a5b7676810dd3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:1a:25:fd:30:47:84:5f:9f:e2:d6:c9:ff:85:
65:4b:59:3d:ca:aa:b8:ed:4b:34:b8:a1:4c:f0:18:
76:85:37:1f:cd:5b:94:7e:0c:5e:da:e4:6b:77:b3:
82:53:19:e2:c7:02:b6:78:b8:b8:4a:95:64:34:ab:
37:98:41:75:3f:b2:f0:83:99:b5:3f:70:a3:fd:2a:
70:38:ad:be:b9:70:c6:65:4c:0f:d9:bb:f4:21:61:
f3:d6:77:37:24:28:7f:0a:7b:cd:9e:48:35:6a:d8:
90:e5:82:5a:40:d4:77:5e:0a:dc:43:e8:a9:29:66:
de:9f:7a:10:da:06:c5:2e:15:9c:54:4c:2d:5d:a9:
f9:03:2a:01:4c:73:87:37:1a:83:2a:eb:fc:95:7e:
df:66:59:9f:b4:fd:68:a2:fd:61:d4:ba:89:f0:dc:
2d:14:02:a2:32:e9:48:31:2d:0c:a4:c1:a1:01:a2:
a3:04:ae:fc:ca:18:71:eb:6c:14:a4:e2:a7:17:6a:
77:10:ee:7a:0b:2b:de:a6:f2:3c:9c:ae:7d:7e:27:
9c:85:5f:ef:61:39:a7:0b:23:18:c0:74:e1:54:04:
25:15:e4:ac:1b:c9:25:80:75:fa:d6:59:27:7a:3f:
f0:01:d9:76:01:9a:f7:6c:21:be:90:71:b9:c8:ef:
b4:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
08:DC:58:20:21:F5:6C:A3:AB:4E:CA:CA:E5:0A:5B:76:76:81:0D:D3
X509v3 Authority Key Identifier:
keyid:A0:18:71:42:C3:85:C4:1C:A8:FB:EC:B2:F5:5A:4F:FF:00:79:BC:F4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/oBhxQsOFxByo--yy9VpP_wB5vPQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ba/8a33aa-af38-4c4e-bad7-b91f50c5b7e0/1/oBhxQsOFxByo--yy9VpP_wB5vPQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ba/8a33aa-af38-4c4e-bad7-b91f50c5b7e0/1/oBhxQsOFxByo--yy9VpP_wB5vPQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5c:48:9e:e4:3b:d8:cf:74:f1:14:8b:b8:79:a1:69:2c:be:2e:
10:b7:5e:f2:e7:bc:9f:12:e9:41:9b:8c:fc:fd:57:c2:2f:cd:
08:d1:7a:aa:3c:36:5c:89:da:00:a3:c4:47:2f:9f:91:de:9c:
04:ad:96:29:b2:f5:95:ad:57:dc:e8:6f:5f:1c:ec:7c:56:96:
63:70:55:bc:ec:e3:67:cd:a1:5d:5a:49:50:30:56:84:5a:8a:
e6:2a:cd:46:8a:9c:cd:72:79:42:29:d4:63:d3:98:e1:49:49:
59:d7:14:d4:76:3b:1f:fa:70:77:82:d7:7e:d5:60:d0:ff:dd:
0a:25:74:cd:6c:a3:34:88:44:de:cc:be:29:4c:49:02:b6:77:
a1:43:fe:46:30:d3:9a:aa:d8:7e:40:ff:cd:cc:9e:e7:95:84:
1e:f7:8c:66:b8:56:e6:65:a2:0d:73:85:c2:72:89:a6:a0:42:
cb:9c:55:78:34:f1:aa:53:32:7e:ce:fa:26:15:de:5b:e1:a3:
cb:1f:79:36:49:a0:e2:78:fc:28:ba:e1:7a:9a:0b:4e:ab:72:
5a:de:94:1e:99:4b:92:b0:c0:fd:99:fc:37:b5:e9:05:3d:ec:
b2:c9:87:bc:76:91:a1:4c:a0:96:5b:50:52:82:d8:25:be:42:
e5:1e:d4:a0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 20 03:19:03 2025 by rpki-client