Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/18/6ca5b6-c423-4b54-9655-7c5964990397/1/oDavImaRg7om8jl2Uw40mzRlGWg.mft
File: oDavImaRg7om8jl2Uw40mzRlGWg.mft (raw, json)
Hash identifier: hSA5VIM1SFcEXK3qYGQblA4VpXGTHR+D90tLZ8n1qH0=
Subject key identifier: 76:58:C5:97:48:01:30:04:5F:16:D6:6A:BF:75:22:E9:54:49:85:33
Authority key identifier: A0:36:AF:22:66:91:83:BA:26:F2:39:76:53:0E:34:9B:34:65:19:68
Certificate issuer: /CN=a036af22669183ba26f23976530e349b34651968
Certificate serial: 0196B7B61B4B2D461834D20C68C00EF2820F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/oDavImaRg7om8jl2Uw40mzRlGWg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/18/6ca5b6-c423-4b54-9655-7c5964990397/1/oDavImaRg7om8jl2Uw40mzRlGWg.mft
Manifest number: 153A
Signing time: Sat 10 May 2025 01:01:27 +0000
Manifest this update: Sat 10 May 2025 01:01:27 +0000
Manifest next update: Sun 11 May 2025 01:01:27 +0000
Files and hashes: 1: oDavImaRg7om8jl2Uw40mzRlGWg.crl (hash: yXyW2L6yRM8BVg1qhAQI7/kfMooZn4yJqHf6XXAWjWg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/18/6ca5b6-c423-4b54-9655-7c5964990397/1/oDavImaRg7om8jl2Uw40mzRlGWg.crl
rsync://rpki.ripe.net/repository/DEFAULT/18/6ca5b6-c423-4b54-9655-7c5964990397/1/oDavImaRg7om8jl2Uw40mzRlGWg.mft
rsync://rpki.ripe.net/repository/DEFAULT/oDavImaRg7om8jl2Uw40mzRlGWg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 11 May 2025 01:01:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:b7:b6:1b:4b:2d:46:18:34:d2:0c:68:c0:0e:f2:82:0f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a036af22669183ba26f23976530e349b34651968
Validity
Not Before: May 10 01:01:27 2025 GMT
Not After : May 11 01:01:27 2025 GMT
Subject: CN=7658c597480130045f16d66abf7522e954498533
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:87:22:0e:07:4d:5b:79:b7:a1:7d:14:3c:fd:
29:f5:4e:bc:69:3e:92:c6:13:8f:66:48:83:aa:f3:
7f:75:22:a5:82:e8:96:45:38:17:b9:41:b3:e5:a0:
dc:a2:0e:05:4b:f0:f9:5f:9d:bd:e9:80:9b:0b:17:
22:76:4c:ee:74:60:b8:75:07:ff:49:2a:1f:30:58:
a5:19:a2:89:e9:64:8e:b5:d6:14:35:1f:68:3e:5e:
aa:ab:da:f4:3d:7e:cb:9d:a9:0c:63:2e:a4:d4:7e:
6f:10:0b:fe:3e:1a:d5:a1:37:58:63:ff:f1:79:7f:
84:49:28:78:d9:82:38:ee:7b:b9:1a:9a:06:3b:4d:
ca:62:74:53:05:63:1f:6e:0d:fa:8e:47:f7:d2:60:
7a:26:04:54:e9:18:9c:24:0a:9e:49:68:18:05:d1:
6b:92:7b:d5:f9:7f:17:f5:c9:30:18:9d:4b:4a:39:
8d:3f:a3:70:57:4e:b2:10:e1:5d:80:ce:93:d7:8c:
2b:83:e8:cb:59:ae:51:3b:9c:af:59:28:53:79:94:
61:7d:8c:65:51:77:8b:ee:ef:16:c6:10:52:0c:4b:
be:2b:29:3e:86:e4:d6:58:98:16:99:06:f3:40:b1:
6a:34:75:1b:f8:ff:87:57:98:5a:d6:e5:0e:dd:d2:
4b:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
76:58:C5:97:48:01:30:04:5F:16:D6:6A:BF:75:22:E9:54:49:85:33
X509v3 Authority Key Identifier:
keyid:A0:36:AF:22:66:91:83:BA:26:F2:39:76:53:0E:34:9B:34:65:19:68
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/oDavImaRg7om8jl2Uw40mzRlGWg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/18/6ca5b6-c423-4b54-9655-7c5964990397/1/oDavImaRg7om8jl2Uw40mzRlGWg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/18/6ca5b6-c423-4b54-9655-7c5964990397/1/oDavImaRg7om8jl2Uw40mzRlGWg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
76:e3:4e:c4:17:ae:de:87:43:23:f1:93:fa:77:a0:2c:6c:59:
41:ed:d2:6d:9e:83:20:4b:a4:d8:25:35:bc:1b:06:ce:63:4b:
7f:3c:cb:fd:62:e9:5b:30:11:0a:45:fa:06:1b:03:dd:59:69:
38:a7:96:16:9c:91:6b:c0:e5:e3:97:b5:32:53:a6:70:60:3d:
4a:c7:16:e9:e8:5d:b8:56:b1:80:01:4c:88:81:e7:cf:00:d5:
4a:1b:1e:9b:e1:3a:36:74:c0:b4:4d:24:e1:db:e1:14:90:79:
28:d2:bb:37:c7:1a:55:c2:35:d4:da:74:3e:e0:fb:37:40:bf:
26:ef:15:42:4e:a4:f1:b1:0d:d3:32:4e:5c:bf:6e:05:73:7f:
a2:c8:5d:8f:7d:27:b1:0e:b5:ea:b6:46:ca:ff:a6:05:8d:ee:
aa:57:8f:a6:5f:1c:83:6e:5a:93:24:35:e7:2b:cb:3e:8c:56:
2d:e0:19:ba:48:7e:d4:d0:8b:c8:46:f6:b9:fa:87:cd:a6:50:
f3:db:87:f7:76:16:e1:1a:70:26:37:7d:af:7f:e2:42:e1:f2:
d1:de:57:4a:98:77:a5:b9:79:81:56:38:64:01:c3:5f:14:83:
94:f1:68:c7:45:48:d1:2f:13:97:44:ca:ee:86:bf:a4:b2:af:
26:e6:13:b1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 10 10:28:10 2025 by rpki-client