Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5b/a388b6-43c6-4458-abf5-d3332f9044ec/1/oy2niZiHqsRJlYu5DrU1lRqXOgA.mft
File: oy2niZiHqsRJlYu5DrU1lRqXOgA.mft (raw, json)
Hash identifier: pqbFNKGAUg63AEiuKJvhQ4zxWnXf68LOUJ0DZTd4Yjk=
Subject key identifier: 6A:3F:01:93:6F:1A:65:00:9E:7E:89:DC:B7:EF:93:A4:F3:57:3E:DE
Authority key identifier: A3:2D:A7:89:98:87:AA:C4:49:95:8B:B9:0E:B5:35:95:1A:97:3A:00
Certificate issuer: /CN=a32da7899887aac449958bb90eb535951a973a00
Certificate serial: 0196BF6F3191849F52CE256A0C4AA4DF6C60
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/oy2niZiHqsRJlYu5DrU1lRqXOgA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5b/a388b6-43c6-4458-abf5-d3332f9044ec/1/oy2niZiHqsRJlYu5DrU1lRqXOgA.mft
Manifest number: 0E34
Signing time: Sun 11 May 2025 13:00:57 +0000
Manifest this update: Sun 11 May 2025 13:00:57 +0000
Manifest next update: Mon 12 May 2025 13:00:57 +0000
Files and hashes: 1: oy2niZiHqsRJlYu5DrU1lRqXOgA.crl (hash: 2ydkCj1xQecASJIY3CBy/2h+IGRXUByRlMSK1elUzVQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5b/a388b6-43c6-4458-abf5-d3332f9044ec/1/oy2niZiHqsRJlYu5DrU1lRqXOgA.crl
rsync://rpki.ripe.net/repository/DEFAULT/5b/a388b6-43c6-4458-abf5-d3332f9044ec/1/oy2niZiHqsRJlYu5DrU1lRqXOgA.mft
rsync://rpki.ripe.net/repository/DEFAULT/oy2niZiHqsRJlYu5DrU1lRqXOgA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 12 May 2025 07:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:bf:6f:31:91:84:9f:52:ce:25:6a:0c:4a:a4:df:6c:60
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a32da7899887aac449958bb90eb535951a973a00
Validity
Not Before: May 11 13:00:57 2025 GMT
Not After : May 12 13:00:57 2025 GMT
Subject: CN=6a3f01936f1a65009e7e89dcb7ef93a4f3573ede
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e1:2f:5d:3d:27:20:be:a5:26:d1:53:60:ab:58:
8f:57:60:8f:d9:3a:df:fb:da:73:49:82:ee:3f:fa:
0b:02:c9:31:b6:41:b7:7a:c9:79:4d:93:76:d6:da:
3e:c8:84:0d:54:67:e0:2d:20:4e:6c:81:db:0c:65:
e0:bf:59:23:4d:98:38:ff:c0:3a:cd:78:9f:5a:38:
5d:a6:a0:0d:6c:72:73:9e:26:a9:b0:3a:78:82:3c:
5b:5e:28:e2:b1:fe:66:81:80:67:c4:e3:b5:a1:d1:
88:17:ae:58:25:0e:ab:32:f1:8d:b8:f6:e7:7b:f0:
3c:a9:66:1d:48:eb:a8:aa:22:9f:b8:76:47:8a:8c:
6b:91:53:82:77:79:21:54:08:ae:a9:ae:97:5a:ae:
d9:2e:5f:13:b8:3e:81:39:f5:a5:d6:27:d7:8b:1e:
fc:db:52:2a:61:eb:e8:8c:4b:dd:cb:ab:b6:a9:34:
e4:e0:2f:21:20:ae:6f:bb:61:41:2f:76:30:c2:d5:
2d:63:86:35:54:4a:fe:ff:1b:01:b2:31:dc:86:9f:
f8:ce:3b:f8:de:86:06:53:08:35:3e:00:07:8d:3f:
ab:6a:5d:45:65:55:dd:b8:cb:6c:ed:6f:2a:8c:67:
c0:05:39:96:87:fe:81:2f:ef:5b:3f:dd:58:6c:a4:
26:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6A:3F:01:93:6F:1A:65:00:9E:7E:89:DC:B7:EF:93:A4:F3:57:3E:DE
X509v3 Authority Key Identifier:
keyid:A3:2D:A7:89:98:87:AA:C4:49:95:8B:B9:0E:B5:35:95:1A:97:3A:00
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/oy2niZiHqsRJlYu5DrU1lRqXOgA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/a388b6-43c6-4458-abf5-d3332f9044ec/1/oy2niZiHqsRJlYu5DrU1lRqXOgA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/a388b6-43c6-4458-abf5-d3332f9044ec/1/oy2niZiHqsRJlYu5DrU1lRqXOgA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
91:90:49:8b:bf:41:4b:50:71:23:a6:53:43:af:8b:6e:3d:e6:
71:14:65:e0:31:e9:5c:55:17:73:91:cd:9f:51:84:39:71:6b:
b0:9f:ad:cc:57:79:d3:a7:8a:f6:2c:c0:32:19:36:99:bc:04:
89:10:43:94:ca:95:2c:9f:3f:77:97:e5:2f:37:e8:56:af:3a:
81:9b:12:57:a0:af:e9:c7:67:3a:c2:4e:7d:48:a9:1a:9d:c6:
d9:da:37:0a:ce:2f:05:0c:ae:23:12:d2:5a:f3:10:86:e3:5d:
84:d4:a7:f0:d2:2a:ac:28:1b:07:f1:a1:fe:29:e6:42:63:6a:
d6:8c:47:69:7b:27:3e:47:31:4f:e5:78:02:ab:9c:31:b1:cb:
6a:c6:54:6b:8f:81:fe:8b:36:fd:f2:63:1a:93:09:df:20:c7:
f1:9e:06:e9:8a:1d:4d:b1:7c:b6:26:08:90:e9:7b:d7:a3:c9:
a2:61:bb:69:87:6c:c9:6a:64:61:6f:ed:1b:22:d6:04:4d:2c:
68:eb:67:d8:82:9a:b4:21:76:c1:9b:c4:64:9c:d5:06:ee:04:
15:7e:88:ba:ee:19:b7:43:38:b0:9d:e6:48:6c:2c:38:b4:55:
54:33:86:9b:5e:69:a1:89:bc:1d:05:3d:a4:30:69:72:24:dc:
7c:33:a4:85
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 11 16:47:11 2025 by rpki-client