Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/53/e2cc8b-8606-4f25-92d0-44371b1cc72f/1/oVJWhcluMm8grjcpwDD0T9FJmwU.mft
File: oVJWhcluMm8grjcpwDD0T9FJmwU.mft (raw, json)
Hash identifier: rHbl+iNV4rBfadj9psBgoq+/uv6zGwSXRFTPP8jShPE=
Subject key identifier: CC:D2:C7:EA:48:DD:7B:2C:2A:26:C7:8B:BA:8E:CC:5A:34:70:B9:E0
Authority key identifier: A1:52:56:85:C9:6E:32:6F:20:AE:37:29:C0:30:F4:4F:D1:49:9B:05
Certificate issuer: /CN=a1525685c96e326f20ae3729c030f44fd1499b05
Certificate serial: 0196A0F6D0FC17C5A8F2D75A2C105F1FB289
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/oVJWhcluMm8grjcpwDD0T9FJmwU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/53/e2cc8b-8606-4f25-92d0-44371b1cc72f/1/oVJWhcluMm8grjcpwDD0T9FJmwU.mft
Manifest number: 0731
Signing time: Mon 05 May 2025 15:00:52 +0000
Manifest this update: Mon 05 May 2025 15:00:52 +0000
Manifest next update: Tue 06 May 2025 15:00:52 +0000
Files and hashes: 1: oVJWhcluMm8grjcpwDD0T9FJmwU.crl (hash: 5JgO0VbacpPbe7ioV2f7r9uMCdU89tU1gyXrPkniPHw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/53/e2cc8b-8606-4f25-92d0-44371b1cc72f/1/oVJWhcluMm8grjcpwDD0T9FJmwU.crl
rsync://rpki.ripe.net/repository/DEFAULT/53/e2cc8b-8606-4f25-92d0-44371b1cc72f/1/oVJWhcluMm8grjcpwDD0T9FJmwU.mft
rsync://rpki.ripe.net/repository/DEFAULT/oVJWhcluMm8grjcpwDD0T9FJmwU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 06 May 2025 15:00:52 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:a0:f6:d0:fc:17:c5:a8:f2:d7:5a:2c:10:5f:1f:b2:89
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a1525685c96e326f20ae3729c030f44fd1499b05
Validity
Not Before: May 5 15:00:52 2025 GMT
Not After : May 6 15:00:52 2025 GMT
Subject: CN=ccd2c7ea48dd7b2c2a26c78bba8ecc5a3470b9e0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:88:86:89:f2:da:ac:5d:39:5e:5d:bd:c3:a1:aa:
04:95:3b:ff:c8:f6:6b:2b:87:21:20:ad:3c:f7:20:
33:d5:2e:32:67:e3:32:a0:ab:6f:65:20:9b:d4:93:
d9:7c:9d:c6:90:b6:04:f3:e1:c0:66:06:6c:17:8f:
83:d4:13:8b:db:cd:b6:25:b9:d2:93:a1:32:34:c6:
6f:96:57:49:87:e9:46:15:1c:0c:ab:8b:d8:4e:74:
b1:cd:b6:31:82:36:22:85:2e:95:05:2f:60:7e:0f:
5a:84:d3:c8:d4:aa:24:e9:0e:26:b9:b5:ad:fc:fe:
0d:9f:4b:bb:1f:7d:e2:63:86:1a:4e:4e:87:27:7d:
60:d5:f4:c8:16:ab:62:5d:1d:3e:27:ca:b9:e9:15:
32:e6:e0:22:30:ac:bd:82:0b:a1:4a:aa:6f:c9:ad:
49:b3:9d:48:2e:1d:02:6f:ab:cc:98:42:8f:e0:78:
a8:86:cd:85:3f:2c:53:4a:4d:9c:13:39:35:a3:4d:
44:12:13:50:5d:f5:d4:c4:d2:b2:c7:ce:72:12:db:
e5:c9:e2:e5:67:fe:bf:b9:fc:5e:80:c9:d4:d4:a9:
31:b4:fd:03:02:6c:11:b7:46:5c:a8:38:c7:4c:0f:
87:2d:e3:9b:f9:8e:4a:5d:ff:73:89:32:ff:53:2f:
1c:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CC:D2:C7:EA:48:DD:7B:2C:2A:26:C7:8B:BA:8E:CC:5A:34:70:B9:E0
X509v3 Authority Key Identifier:
keyid:A1:52:56:85:C9:6E:32:6F:20:AE:37:29:C0:30:F4:4F:D1:49:9B:05
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/oVJWhcluMm8grjcpwDD0T9FJmwU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/53/e2cc8b-8606-4f25-92d0-44371b1cc72f/1/oVJWhcluMm8grjcpwDD0T9FJmwU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/53/e2cc8b-8606-4f25-92d0-44371b1cc72f/1/oVJWhcluMm8grjcpwDD0T9FJmwU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
47:91:23:9d:b5:ea:08:8e:64:ec:8b:b8:46:c9:36:5d:cf:7c:
36:51:d2:16:29:0e:c1:28:ba:34:5b:3e:26:d0:97:3c:d8:5f:
c7:13:cd:5a:27:4f:84:70:cd:df:97:a7:cb:7b:60:4d:21:df:
b8:b5:3b:4a:cb:db:d9:53:c0:e9:3b:3c:9c:80:75:4b:5a:6f:
97:af:5b:9f:58:6c:46:d6:ee:c4:7d:3c:f4:54:80:12:77:30:
fd:9f:2b:aa:f4:a1:4f:8d:11:ff:27:51:53:de:e9:5c:81:9d:
f5:b0:44:88:21:22:65:c8:67:6a:1a:e4:3a:d4:09:64:ca:38:
0a:93:2a:69:d7:b6:72:58:8d:f3:63:8f:25:d9:dc:60:ec:0d:
5e:c9:e3:43:8f:13:92:d1:7c:62:e4:95:0c:15:e2:7e:42:2f:
86:18:52:ed:1b:59:ee:6f:4c:2d:d1:19:21:06:c9:5d:c9:a7:
1c:1b:b3:60:19:9e:3f:fd:86:df:db:98:4d:e9:d9:9d:7f:c6:
de:56:c3:31:dd:60:cd:20:98:19:cf:3c:8a:5a:ba:82:46:26:
a4:86:1d:a3:2a:54:10:c6:15:5d:e1:04:60:1e:8f:8d:38:8c:
64:30:c9:56:c2:19:55:a4:73:04:f1:47:e6:63:74:5a:0c:a9:
33:64:58:58
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 5 23:14:38 2025 by rpki-client