Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c7/2c3038-9c45-43e8-b69f-b84cff188f55/1/U-r4Oizdyf0L4onM-vMrMjMEz04.mft
File: U-r4Oizdyf0L4onM-vMrMjMEz04.mft (raw, json)
Hash identifier: Ms6uMtcd8IoC64nB6skxTlymb934OX58vx7Bf5xha/s=
Subject key identifier: E0:D2:81:EA:D5:2E:1C:F9:C6:80:BD:95:AB:62:1F:05:B6:B8:67:45
Authority key identifier: 53:EA:F8:3A:2C:DD:C9:FD:0B:E2:89:CC:FA:F3:2B:32:33:04:CF:4E
Certificate issuer: /CN=53eaf83a2cddc9fd0be289ccfaf32b323304cf4e
Certificate serial: 0196124561FC1AF5FDE46B06EC6F5DDFDD87
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/U-r4Oizdyf0L4onM-vMrMjMEz04.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c7/2c3038-9c45-43e8-b69f-b84cff188f55/1/U-r4Oizdyf0L4onM-vMrMjMEz04.mft
Manifest number: 0BA9
Signing time: Mon 07 Apr 2025 22:00:58 +0000
Manifest this update: Mon 07 Apr 2025 22:00:58 +0000
Manifest next update: Tue 08 Apr 2025 22:00:58 +0000
Files and hashes: 1: U-r4Oizdyf0L4onM-vMrMjMEz04.crl (hash: BpbHKOkEEg0wGckJsYkLQ26a5j4Ai/uVefQ1sbhV58M=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c7/2c3038-9c45-43e8-b69f-b84cff188f55/1/U-r4Oizdyf0L4onM-vMrMjMEz04.crl
rsync://rpki.ripe.net/repository/DEFAULT/c7/2c3038-9c45-43e8-b69f-b84cff188f55/1/U-r4Oizdyf0L4onM-vMrMjMEz04.mft
rsync://rpki.ripe.net/repository/DEFAULT/U-r4Oizdyf0L4onM-vMrMjMEz04.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 08 Apr 2025 22:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:12:45:61:fc:1a:f5:fd:e4:6b:06:ec:6f:5d:df:dd:87
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=53eaf83a2cddc9fd0be289ccfaf32b323304cf4e
Validity
Not Before: Apr 7 22:00:58 2025 GMT
Not After : Apr 8 22:00:58 2025 GMT
Subject: CN=e0d281ead52e1cf9c680bd95ab621f05b6b86745
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:89:72:b5:76:d8:03:53:85:4a:f4:69:f7:98:
39:d0:5d:98:94:bc:8c:5a:bf:e3:69:6b:19:47:ee:
dd:83:3d:45:9e:41:98:da:dc:42:d2:fd:5e:0e:72:
36:98:59:45:f7:66:22:d9:58:e4:89:d4:18:0c:8a:
8d:32:90:f7:8c:e2:00:30:52:12:b7:b7:7e:24:46:
89:86:44:77:f8:c4:65:9a:cd:5d:e2:34:1c:5f:37:
ea:75:67:43:a0:9f:ab:68:e1:54:b3:58:46:1e:26:
48:33:81:06:e9:03:06:6d:78:d3:3a:6c:d6:1e:f5:
72:3b:83:e5:f8:44:69:79:c3:a2:98:21:96:34:e6:
cc:22:4a:ba:05:98:16:37:47:7d:c5:3e:51:ae:df:
af:97:dc:66:f6:97:28:28:aa:c7:80:64:ca:23:77:
a1:61:2b:00:ac:ab:d8:fb:fc:35:23:ce:d9:42:75:
fb:ed:61:a2:0c:45:1a:57:dc:75:03:a6:60:57:d7:
3e:35:4b:d6:ca:57:f0:08:47:fd:2b:ad:62:0b:ef:
c7:ba:1b:4e:e6:be:4c:4d:e1:22:0e:09:f6:37:de:
a2:f2:29:c5:35:ae:c3:8c:37:dc:db:b6:2c:bb:b6:
da:4b:09:ee:30:31:62:92:68:e6:b6:27:d1:99:79:
70:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E0:D2:81:EA:D5:2E:1C:F9:C6:80:BD:95:AB:62:1F:05:B6:B8:67:45
X509v3 Authority Key Identifier:
keyid:53:EA:F8:3A:2C:DD:C9:FD:0B:E2:89:CC:FA:F3:2B:32:33:04:CF:4E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/U-r4Oizdyf0L4onM-vMrMjMEz04.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/2c3038-9c45-43e8-b69f-b84cff188f55/1/U-r4Oizdyf0L4onM-vMrMjMEz04.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/2c3038-9c45-43e8-b69f-b84cff188f55/1/U-r4Oizdyf0L4onM-vMrMjMEz04.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
66:82:e0:38:4e:a7:af:6b:e2:d6:e8:ab:fa:16:1d:80:e0:d7:
bd:44:2c:f8:3d:09:f6:bd:68:0a:01:db:1f:a1:73:87:b1:87:
7a:e2:1b:36:a3:15:b3:f6:79:5e:ee:51:c4:2e:1e:3a:d2:f8:
bb:c9:8e:99:52:67:65:e9:73:3d:65:ce:9c:bc:97:c4:37:5c:
b9:a8:bd:e6:7d:5e:de:76:72:c5:f0:9c:86:58:9d:84:2f:fb:
58:8f:66:fd:94:04:77:44:78:16:92:20:1c:b4:fe:d1:34:5c:
19:39:b4:ab:a6:d6:9c:47:52:d6:47:c0:8c:fb:57:0f:e1:e2:
79:97:f2:f0:09:15:45:0c:e6:c3:a4:f5:73:5d:c6:f6:63:40:
bb:a2:43:fe:d0:ef:f1:7b:9d:e7:97:31:a1:21:91:11:1d:de:
c8:a9:36:de:82:23:fb:22:7c:fa:66:cc:9b:48:6c:03:f1:fd:
6c:8b:df:fd:c8:42:9e:3c:41:99:62:80:95:11:59:7f:e0:b3:
c9:67:4e:15:ed:48:ab:7e:6b:3c:70:60:6c:de:61:35:4f:62:
04:8e:4e:d0:26:77:4b:cb:7d:e5:99:5f:ba:2d:13:e8:4b:0c:
f8:16:ea:e0:0c:b2:da:81:fd:41:79:48:72:59:b9:d2:19:7c:
70:56:cb:72
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 8 04:53:37 2025 by rpki-client