
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/50/b08f22-11f6-4ee5-a231-b7cd4490a983/1/OavrWRcW6Qg0XTKf_9NwA1IxW5g.mft
File: OavrWRcW6Qg0XTKf_9NwA1IxW5g.mft (raw, json)
Hash identifier: 6C18gMnIcx/HgeFy6Btgk+N3I9LndFOIAMXwah2xSOc=
Subject key identifier: CB:80:87:6A:2E:C5:A5:A5:E5:DE:92:DC:80:C8:24:F7:ED:31:7B:8B
Authority key identifier: 39:AB:EB:59:17:16:E9:08:34:5D:32:9F:FF:D3:70:03:52:31:5B:98
Certificate issuer: /CN=39abeb591716e908345d329fffd3700352315b98
Certificate serial: 0196A842B97BF33B417A36D4E554E444DBA2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OavrWRcW6Qg0XTKf_9NwA1IxW5g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/50/b08f22-11f6-4ee5-a231-b7cd4490a983/1/OavrWRcW6Qg0XTKf_9NwA1IxW5g.mft
Manifest number: 11BD
Signing time: Wed 07 May 2025 01:01:07 +0000
Manifest this update: Wed 07 May 2025 01:01:07 +0000
Manifest next update: Thu 08 May 2025 01:01:07 +0000
Files and hashes: 1: OavrWRcW6Qg0XTKf_9NwA1IxW5g.crl (hash: NhxI21p+Cy3ZEOEVrEA+CJ+rI99hpCxG25lPEPDTzwo=)
2: sRj9HIjhF6xAzSk8DsZiSona3z0.roa (hash: CKtuOB2HNTtxCaJDk6aobi//RFXR4AYliP1W8tH3cu8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/50/b08f22-11f6-4ee5-a231-b7cd4490a983/1/OavrWRcW6Qg0XTKf_9NwA1IxW5g.crl
rsync://rpki.ripe.net/repository/DEFAULT/50/b08f22-11f6-4ee5-a231-b7cd4490a983/1/OavrWRcW6Qg0XTKf_9NwA1IxW5g.mft
rsync://rpki.ripe.net/repository/DEFAULT/OavrWRcW6Qg0XTKf_9NwA1IxW5g.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 07 May 2025 23:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:a8:42:b9:7b:f3:3b:41:7a:36:d4:e5:54:e4:44:db:a2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=39abeb591716e908345d329fffd3700352315b98
Validity
Not Before: May 7 01:01:07 2025 GMT
Not After : May 8 01:01:07 2025 GMT
Subject: CN=cb80876a2ec5a5a5e5de92dc80c824f7ed317b8b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:e0:34:ee:e3:9f:fd:e8:2f:b1:05:5a:ac:93:
fa:86:b0:b9:27:ac:1c:0b:30:c5:d4:20:9d:fc:05:
62:c5:1e:be:92:7e:63:19:77:bb:63:ef:ba:b8:7a:
b4:81:04:f3:d7:5a:41:f8:f2:24:f7:f8:67:c8:0d:
a4:62:0e:75:8b:7c:07:6d:28:54:21:67:e2:a9:fb:
6b:b8:2c:b8:0e:40:25:30:38:ef:1b:cb:a0:f4:f0:
49:c6:b6:37:29:71:b3:d8:c2:30:e9:2b:8b:9d:0e:
96:f3:80:5e:83:80:85:5d:17:4d:8e:f9:83:f1:76:
de:0f:bb:0e:5d:a1:a0:82:08:cd:5c:07:a3:7f:37:
ea:7b:af:2a:2d:58:d0:eb:9a:d8:31:09:b9:8c:f3:
c1:2b:bb:05:97:80:20:d8:c5:52:bb:86:ca:9a:48:
77:2e:3c:27:55:24:83:d2:e1:76:cd:02:e1:f2:8d:
42:e3:97:42:25:59:61:65:b2:af:94:66:da:ab:6c:
be:0f:5d:98:eb:0e:b2:69:4b:b9:a2:20:1c:b0:87:
01:b6:39:2a:d6:40:3a:19:4d:ce:52:4b:8e:7d:52:
94:07:e6:0d:f6:d2:db:e1:36:85:a7:d9:5a:8a:6a:
2d:e3:2b:0d:f8:9a:29:b6:6f:f7:70:d4:a5:ce:05:
27:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CB:80:87:6A:2E:C5:A5:A5:E5:DE:92:DC:80:C8:24:F7:ED:31:7B:8B
X509v3 Authority Key Identifier:
keyid:39:AB:EB:59:17:16:E9:08:34:5D:32:9F:FF:D3:70:03:52:31:5B:98
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OavrWRcW6Qg0XTKf_9NwA1IxW5g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/50/b08f22-11f6-4ee5-a231-b7cd4490a983/1/OavrWRcW6Qg0XTKf_9NwA1IxW5g.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/50/b08f22-11f6-4ee5-a231-b7cd4490a983/1/OavrWRcW6Qg0XTKf_9NwA1IxW5g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
72:ef:8a:e9:6c:7b:f5:10:bd:8a:4c:5f:4c:06:44:9c:15:49:
31:6f:d9:7d:ad:b7:99:f6:d3:82:da:c4:d6:d9:0d:a3:0b:ae:
8b:94:50:6e:7b:03:37:03:37:33:d8:7b:e4:4e:18:84:3e:cc:
0b:f1:24:ea:02:96:5a:35:18:8d:1f:a6:7a:81:61:12:fb:49:
3e:7e:4f:52:f5:88:f4:02:ca:b5:17:fb:b2:a3:d2:9a:60:7f:
d3:e3:ca:12:6f:78:d6:b5:bf:90:ec:7c:eb:ad:37:98:19:2b:
4f:74:d2:4d:2b:a2:b4:c3:00:8e:b1:3a:66:9f:9b:d3:5d:77:
6f:9b:2a:5d:a8:da:cf:93:74:78:4e:0b:b0:55:b9:b9:6f:38:
44:63:6a:c4:c4:16:73:02:0c:78:af:1b:62:1b:d7:a0:20:56:
72:13:39:5a:ec:39:d8:89:f2:0e:87:49:df:91:8e:69:50:45:
bc:56:32:ee:db:4e:ef:68:95:37:1d:02:31:8d:59:e4:b9:e9:
0f:d2:52:6f:cc:ff:fb:cb:30:4e:df:17:7c:95:ab:96:2c:ac:
50:98:31:cf:e2:b6:63:17:8c:be:4c:8b:d9:c6:b2:b2:3f:eb:
24:b8:9a:10:9c:41:98:0c:27:97:83:27:87:19:b5:3d:3a:84:
99:0d:2f:90
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 7 06:57:16 2025 by rpki-client