Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/22/f55df1-0ba6-430f-809d-6b035cee1981/1/oE_JgO38R54EauArEOVyRbuSyLc.mft
File: oE_JgO38R54EauArEOVyRbuSyLc.mft (raw, json)
Hash identifier: 9d04omm38JqzV6zUW68ttC/TmXXSkmkieYqR2y20stU=
Subject key identifier: 93:BD:95:F2:97:82:E3:46:86:AD:8C:05:69:13:77:F2:66:1C:48:D4
Authority key identifier: A0:4F:C9:80:ED:FC:47:9E:04:6A:E0:2B:10:E5:72:45:BB:92:C8:B7
Certificate issuer: /CN=a04fc980edfc479e046ae02b10e57245bb92c8b7
Certificate serial: 0196C013841B2AB48252BDDF00975C9465C1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/oE_JgO38R54EauArEOVyRbuSyLc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/22/f55df1-0ba6-430f-809d-6b035cee1981/1/oE_JgO38R54EauArEOVyRbuSyLc.mft
Manifest number: 0536
Signing time: Sun 11 May 2025 16:00:26 +0000
Manifest this update: Sun 11 May 2025 16:00:26 +0000
Manifest next update: Mon 12 May 2025 16:00:26 +0000
Files and hashes: 1: oE_JgO38R54EauArEOVyRbuSyLc.crl (hash: EY5it5CAIEGibveRwVSaiKCSZUlfO9HyB7A9P9lzZP4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/22/f55df1-0ba6-430f-809d-6b035cee1981/1/oE_JgO38R54EauArEOVyRbuSyLc.crl
rsync://rpki.ripe.net/repository/DEFAULT/22/f55df1-0ba6-430f-809d-6b035cee1981/1/oE_JgO38R54EauArEOVyRbuSyLc.mft
rsync://rpki.ripe.net/repository/DEFAULT/oE_JgO38R54EauArEOVyRbuSyLc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 12 May 2025 16:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:c0:13:84:1b:2a:b4:82:52:bd:df:00:97:5c:94:65:c1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a04fc980edfc479e046ae02b10e57245bb92c8b7
Validity
Not Before: May 11 16:00:26 2025 GMT
Not After : May 12 16:00:26 2025 GMT
Subject: CN=93bd95f29782e34686ad8c05691377f2661c48d4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:71:65:f4:1d:2f:8d:8f:2e:60:ae:83:df:8c:
db:ca:f7:83:3c:5a:c5:30:ba:8f:e7:66:fd:ab:dd:
31:62:1e:d4:60:d3:02:0d:7b:b2:94:eb:85:6b:66:
7e:f4:3f:19:7a:a7:20:38:3b:3d:3d:00:3e:43:e0:
0f:d8:99:1f:1c:b0:ce:f5:27:b1:78:a9:00:92:50:
bf:63:df:7c:14:a6:08:32:ad:67:90:86:61:61:52:
30:10:2a:da:a9:dd:d3:8c:0d:ba:96:5e:38:c5:26:
b9:d8:a9:bb:da:de:79:07:2a:70:d8:7d:df:4f:68:
c5:71:fd:0e:84:dd:54:9e:71:b3:44:2a:4b:7c:97:
ec:65:55:f5:37:48:4c:0f:ec:56:df:fd:ab:30:17:
d7:82:f2:c4:cb:2d:e5:7a:64:2e:0b:52:f5:34:52:
05:1b:ff:55:b4:cf:56:17:17:0f:52:6b:d5:5f:f6:
72:13:49:cf:ac:53:46:e8:3f:b2:38:17:55:e5:1a:
a4:16:29:28:35:de:4d:67:33:7b:92:50:11:7a:2f:
29:76:d4:42:37:53:33:61:81:b9:b4:f6:48:19:3a:
70:c6:e2:ea:a3:aa:ce:ec:e4:e5:6f:6e:0a:ad:5f:
ef:9d:de:79:18:8b:e1:aa:82:18:ac:44:b1:1e:f6:
f5:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
93:BD:95:F2:97:82:E3:46:86:AD:8C:05:69:13:77:F2:66:1C:48:D4
X509v3 Authority Key Identifier:
keyid:A0:4F:C9:80:ED:FC:47:9E:04:6A:E0:2B:10:E5:72:45:BB:92:C8:B7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/oE_JgO38R54EauArEOVyRbuSyLc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/22/f55df1-0ba6-430f-809d-6b035cee1981/1/oE_JgO38R54EauArEOVyRbuSyLc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/22/f55df1-0ba6-430f-809d-6b035cee1981/1/oE_JgO38R54EauArEOVyRbuSyLc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5e:48:4d:c8:cd:ee:8e:cb:85:67:c0:6a:cf:66:40:6f:72:74:
96:e1:53:26:3f:8c:7a:17:11:d5:5f:28:1f:38:b2:a0:15:43:
cc:08:03:93:26:07:1b:c3:3b:47:cf:25:ac:42:83:9c:ed:ae:
91:cf:26:d7:2a:c8:af:27:d1:48:ae:88:a8:57:84:16:44:1c:
2f:9a:51:e2:df:6e:d5:93:fb:fe:89:c1:03:d1:d1:5c:39:31:
39:d6:b5:d1:bd:e3:84:7c:12:68:77:94:be:9b:e8:3a:18:17:
17:38:d8:52:02:84:09:37:5a:ab:b5:f0:69:52:98:77:a5:93:
3c:83:a4:ed:f0:e0:50:f2:10:e5:09:90:2a:6b:ef:ef:ec:d6:
7d:56:62:8d:49:a6:33:d1:2f:7e:66:75:95:15:3c:2c:e1:ed:
b7:23:22:0f:b7:e3:8c:84:12:05:e4:6d:70:41:1e:5b:9e:21:
eb:21:4b:0a:37:69:1a:f1:3c:ae:93:a5:19:45:2d:5d:6f:80:
1c:93:1c:73:f0:c6:64:94:00:2a:8f:b9:ca:9c:5b:14:90:4d:
d6:c0:0b:b9:8a:7e:88:47:bf:70:36:16:65:45:f6:16:ba:9c:
3e:93:86:18:45:6e:8f:8a:45:e2:d2:71:3d:35:29:e4:05:a8:
44:bd:1f:3a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 11 20:26:26 2025 by rpki-client