Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f8/70e964-601e-4f4b-911e-6e3a7d969a40/1/5OIv9yeFHntJFhTwetExVxQcwwk.mft
File: 5OIv9yeFHntJFhTwetExVxQcwwk.mft (raw, json)
Hash identifier: UpDhnOUwJWkUFkmZXACVDutUkSKxxG9bgJtQMB3Z0go=
Subject key identifier: 41:06:6D:BA:F4:35:36:70:24:FD:82:48:F9:0D:85:CA:EA:0A:25:83
Authority key identifier: E4:E2:2F:F7:27:85:1E:7B:49:16:14:F0:7A:D1:31:57:14:1C:C3:09
Certificate issuer: /CN=e4e22ff727851e7b491614f07ad13157141cc309
Certificate serial: 01965236EB28A73D8E7733798EBDFB383E71
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5OIv9yeFHntJFhTwetExVxQcwwk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f8/70e964-601e-4f4b-911e-6e3a7d969a40/1/5OIv9yeFHntJFhTwetExVxQcwwk.mft
Manifest number: 13AB
Signing time: Sun 20 Apr 2025 08:00:52 +0000
Manifest this update: Sun 20 Apr 2025 08:00:52 +0000
Manifest next update: Mon 21 Apr 2025 08:00:52 +0000
Files and hashes: 1: 5OIv9yeFHntJFhTwetExVxQcwwk.crl (hash: rOnP8ZClZ7Ns12RZJgDgZTQ9AcJqviuZmyzQtIrimTI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f8/70e964-601e-4f4b-911e-6e3a7d969a40/1/5OIv9yeFHntJFhTwetExVxQcwwk.crl
rsync://rpki.ripe.net/repository/DEFAULT/f8/70e964-601e-4f4b-911e-6e3a7d969a40/1/5OIv9yeFHntJFhTwetExVxQcwwk.mft
rsync://rpki.ripe.net/repository/DEFAULT/5OIv9yeFHntJFhTwetExVxQcwwk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 21 Apr 2025 07:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:52:36:eb:28:a7:3d:8e:77:33:79:8e:bd:fb:38:3e:71
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e4e22ff727851e7b491614f07ad13157141cc309
Validity
Not Before: Apr 20 08:00:52 2025 GMT
Not After : Apr 21 08:00:52 2025 GMT
Subject: CN=41066dbaf435367024fd8248f90d85caea0a2583
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:68:64:03:62:fd:0e:50:7b:66:88:9e:41:f1:
c0:e6:a0:ea:80:ce:23:ef:4f:d2:ac:f1:f9:37:e7:
f5:2c:04:bd:09:93:8f:ec:2b:c7:4d:09:13:c4:2b:
6f:fc:ee:7e:4e:0c:7b:30:4c:b4:d7:41:6c:fc:71:
46:61:eb:55:28:e0:15:c0:17:d0:d5:5b:40:70:42:
4c:f9:4e:38:cc:c5:97:71:ef:d6:12:b9:7e:c8:48:
ee:49:59:5f:33:2b:ad:38:43:4c:63:66:e4:90:f5:
09:0c:e3:88:df:10:00:df:98:18:50:a9:8b:5f:11:
a5:6f:05:ff:ea:47:3b:26:b6:3f:a5:26:43:b4:0c:
c7:80:8c:d7:ab:4d:4d:41:ab:79:39:ef:02:23:2f:
01:b5:04:3c:40:f3:5f:48:e7:91:8b:9a:fe:b4:de:
3b:cf:c2:07:15:4c:50:b5:02:7b:ca:b2:b5:e2:c7:
58:8d:d3:a9:b1:8e:30:89:6b:cf:b0:16:f7:0d:ba:
f7:e6:27:36:02:0e:09:7d:be:a4:41:f4:1b:84:9b:
c5:a4:8f:55:8d:9b:45:10:0e:16:99:0a:54:96:c7:
63:50:1b:9a:54:a2:b5:c3:50:c4:0d:f6:c2:24:55:
1d:62:f6:4b:82:44:20:67:1b:40:05:43:40:6e:bd:
29:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
41:06:6D:BA:F4:35:36:70:24:FD:82:48:F9:0D:85:CA:EA:0A:25:83
X509v3 Authority Key Identifier:
keyid:E4:E2:2F:F7:27:85:1E:7B:49:16:14:F0:7A:D1:31:57:14:1C:C3:09
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5OIv9yeFHntJFhTwetExVxQcwwk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/70e964-601e-4f4b-911e-6e3a7d969a40/1/5OIv9yeFHntJFhTwetExVxQcwwk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/70e964-601e-4f4b-911e-6e3a7d969a40/1/5OIv9yeFHntJFhTwetExVxQcwwk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
23:3c:05:b0:86:77:54:fe:8c:86:0b:15:b7:c7:8d:27:15:0d:
07:59:15:ec:06:09:57:2c:57:e2:37:c9:3f:5a:a9:2d:d5:22:
ae:78:ea:05:26:73:1d:2e:c3:38:bb:c2:84:e9:66:d3:d3:a8:
20:85:f6:8f:bc:f2:5b:0e:f6:b5:49:e6:4d:0c:61:fc:e6:56:
2d:6c:68:1d:cb:a4:d6:26:6b:92:3e:ac:40:4a:47:7b:14:d8:
ab:00:53:4d:35:bf:15:65:5f:52:b8:06:34:be:46:46:e0:45:
0a:e7:a7:0c:9c:e1:30:a5:07:7e:8c:4f:ba:35:f4:d3:e8:7d:
d9:d5:9a:29:a4:55:b7:45:7d:99:f3:c4:13:aa:3c:a7:42:d1:
90:ac:f3:e2:35:fc:6e:d4:5a:e7:ee:a9:84:f3:17:89:84:e2:
82:81:43:ef:a2:03:bc:93:f0:76:97:6a:09:5b:3e:fd:9a:ae:
cd:b9:05:fe:2b:d8:c4:80:3e:63:37:43:ca:a1:f3:d3:5a:3e:
01:6e:93:c4:d7:6f:4c:43:50:03:b2:6d:ef:98:08:5e:40:4c:
72:95:85:06:f6:16:f0:dc:cb:af:59:67:db:92:d5:40:ef:f8:
80:f5:58:44:e8:1a:65:ea:d4:d7:0e:68:d1:09:60:24:7b:53:
ac:8a:4a:a9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 20 13:03:34 2025 by rpki-client