Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4e/c63c8d-d7c7-4e8c-b876-ffedf0ad0be3/1/oIRWvGXLSxVanmtLMW3VFOBDG2k.mft
File: oIRWvGXLSxVanmtLMW3VFOBDG2k.mft (raw, json)
Hash identifier: jrg2rhET3XzPLqaR31dNUoryLQhsnV8m/iknyQ0ZvKA=
Subject key identifier: 6D:75:27:92:59:20:3A:6A:6A:9F:FE:0B:9A:43:78:BE:D5:2A:4E:DE
Authority key identifier: A0:84:56:BC:65:CB:4B:15:5A:9E:6B:4B:31:6D:D5:14:E0:43:1B:69
Certificate issuer: /CN=a08456bc65cb4b155a9e6b4b316dd514e0431b69
Certificate serial: 01969DF574F3F281C6DCD5A2602194D6BBEA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/oIRWvGXLSxVanmtLMW3VFOBDG2k.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4e/c63c8d-d7c7-4e8c-b876-ffedf0ad0be3/1/oIRWvGXLSxVanmtLMW3VFOBDG2k.mft
Manifest number: 0DE2
Signing time: Mon 05 May 2025 01:00:31 +0000
Manifest this update: Mon 05 May 2025 01:00:31 +0000
Manifest next update: Tue 06 May 2025 01:00:31 +0000
Files and hashes: 1: oIRWvGXLSxVanmtLMW3VFOBDG2k.crl (hash: aFMxvS5iptBeyzbc2rvxOKCFEINQG8Mfqd3sGmCe/k8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4e/c63c8d-d7c7-4e8c-b876-ffedf0ad0be3/1/oIRWvGXLSxVanmtLMW3VFOBDG2k.crl
rsync://rpki.ripe.net/repository/DEFAULT/4e/c63c8d-d7c7-4e8c-b876-ffedf0ad0be3/1/oIRWvGXLSxVanmtLMW3VFOBDG2k.mft
rsync://rpki.ripe.net/repository/DEFAULT/oIRWvGXLSxVanmtLMW3VFOBDG2k.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 05 May 2025 22:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:9d:f5:74:f3:f2:81:c6:dc:d5:a2:60:21:94:d6:bb:ea
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a08456bc65cb4b155a9e6b4b316dd514e0431b69
Validity
Not Before: May 5 01:00:31 2025 GMT
Not After : May 6 01:00:31 2025 GMT
Subject: CN=6d75279259203a6a6a9ffe0b9a4378bed52a4ede
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:9d:d9:db:11:14:0d:94:b8:74:37:63:e4:41:
4e:cc:cc:ba:d7:a0:b2:45:f5:99:e2:45:ff:7f:8b:
b1:41:71:d3:7c:79:4e:ba:4a:9f:3a:8d:21:f4:09:
65:06:10:bd:94:70:30:95:d9:b5:96:bc:f3:96:aa:
f8:b3:9a:34:d4:06:14:33:44:4f:a8:5b:4e:04:82:
7a:56:15:50:a1:2d:2e:92:a3:f2:0b:31:62:53:b1:
4a:80:1f:bc:03:3c:e2:9c:e1:0f:84:7b:a9:da:b6:
e5:b3:d6:37:26:19:47:af:11:72:cd:a8:c1:36:58:
65:ee:05:0d:e8:ee:bc:f1:d5:a2:a8:7e:bf:ee:8b:
40:75:c5:5c:5e:5f:d9:00:bb:e1:f4:ab:58:11:08:
75:c2:62:b7:32:37:3a:f8:c8:f4:b1:de:59:e4:98:
0d:87:95:b4:44:ec:65:c2:b5:48:4d:18:0f:e2:cf:
87:a9:64:6b:b4:c1:eb:2c:29:18:97:0b:23:13:86:
94:fb:ad:e1:3a:10:b7:33:20:53:26:07:1c:0e:f6:
af:e8:c4:45:3b:fa:94:0c:f8:14:04:d0:76:93:bc:
bd:ce:5f:43:a0:14:e7:28:1b:09:cb:05:83:5e:9c:
c7:da:11:24:a2:48:ae:ff:fd:8f:7e:7e:2e:e6:f3:
4e:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6D:75:27:92:59:20:3A:6A:6A:9F:FE:0B:9A:43:78:BE:D5:2A:4E:DE
X509v3 Authority Key Identifier:
keyid:A0:84:56:BC:65:CB:4B:15:5A:9E:6B:4B:31:6D:D5:14:E0:43:1B:69
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/oIRWvGXLSxVanmtLMW3VFOBDG2k.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/c63c8d-d7c7-4e8c-b876-ffedf0ad0be3/1/oIRWvGXLSxVanmtLMW3VFOBDG2k.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/c63c8d-d7c7-4e8c-b876-ffedf0ad0be3/1/oIRWvGXLSxVanmtLMW3VFOBDG2k.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
88:cc:f2:3b:5b:cd:8f:84:64:d2:73:dc:6a:c9:e4:76:90:b8:
d6:38:52:5a:0f:4e:4e:d2:31:33:22:97:ed:c3:85:24:b2:0e:
24:a5:ad:cd:16:4e:42:fd:3d:d1:ff:a6:80:40:13:ae:eb:03:
21:b1:05:44:15:6e:af:90:32:74:c0:5e:86:1d:80:ee:fa:ff:
8a:06:dc:ce:f4:ac:20:c6:cd:24:b4:12:e1:e7:52:65:ce:60:
e6:b5:25:f5:7d:08:31:d7:87:a1:fc:f6:c4:dc:e4:83:1f:a7:
08:fc:f5:dd:a5:41:39:d3:d6:23:dc:60:7c:b3:f4:77:62:f6:
72:63:c1:d0:0c:4b:95:b4:cd:21:b8:7d:ae:b4:de:86:32:7d:
15:a9:95:a9:94:3f:7d:c1:e6:e2:46:65:5e:20:83:68:17:82:
7e:dc:0e:c5:a6:06:77:70:35:99:77:de:89:4d:e5:d4:df:5a:
c2:2f:dd:25:46:ef:11:28:ad:71:6a:be:96:24:b0:bb:60:0b:
0b:d8:32:74:b2:2d:cd:6b:f3:be:2b:32:ff:de:f7:5e:00:95:
30:7f:60:46:a5:35:08:37:d3:af:1f:b2:3b:4e:51:dc:47:fa:
73:a6:7a:4c:74:7f:41:8a:cd:a7:89:b8:63:24:2b:2d:f0:45:
09:67:89:a3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 5 08:23:32 2025 by rpki-client