Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6c/416742-7dd6-4101-8c18-05786bfd6857/1/o7HPJ-q7mfazXewahDm21lPc4zo.mft
File: o7HPJ-q7mfazXewahDm21lPc4zo.mft (raw, json)
Hash identifier: fK5zcRC85RuQejP9NZCRWjZp7WVoPWUQc2LRIUPsWpA=
Subject key identifier: E1:12:E9:A0:49:D5:B2:64:22:01:0A:9B:64:33:CE:8E:2F:CC:D9:D7
Authority key identifier: A3:B1:CF:27:EA:BB:99:F6:B3:5D:EC:1A:84:39:B6:D6:53:DC:E3:3A
Certificate issuer: /CN=a3b1cf27eabb99f6b35dec1a8439b6d653dce33a
Certificate serial: 0196D32C96C66E240E9E0903AFDB0902EE88
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/o7HPJ-q7mfazXewahDm21lPc4zo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6c/416742-7dd6-4101-8c18-05786bfd6857/1/o7HPJ-q7mfazXewahDm21lPc4zo.mft
Manifest number: 153C
Signing time: Thu 15 May 2025 09:00:36 +0000
Manifest this update: Thu 15 May 2025 09:00:36 +0000
Manifest next update: Fri 16 May 2025 09:00:36 +0000
Files and hashes: 1: o7HPJ-q7mfazXewahDm21lPc4zo.crl (hash: Ca7Me/WrzI6tGXF2r032N/y6NW0nE522+yaLOWUqdy0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6c/416742-7dd6-4101-8c18-05786bfd6857/1/o7HPJ-q7mfazXewahDm21lPc4zo.crl
rsync://rpki.ripe.net/repository/DEFAULT/6c/416742-7dd6-4101-8c18-05786bfd6857/1/o7HPJ-q7mfazXewahDm21lPc4zo.mft
rsync://rpki.ripe.net/repository/DEFAULT/o7HPJ-q7mfazXewahDm21lPc4zo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 16 May 2025 09:00:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:d3:2c:96:c6:6e:24:0e:9e:09:03:af:db:09:02:ee:88
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a3b1cf27eabb99f6b35dec1a8439b6d653dce33a
Validity
Not Before: May 15 09:00:36 2025 GMT
Not After : May 16 09:00:36 2025 GMT
Subject: CN=e112e9a049d5b26422010a9b6433ce8e2fccd9d7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:db:49:12:37:a3:71:aa:59:df:d9:cb:44:d0:
9f:d3:42:95:cd:92:f8:c9:62:f7:e2:4d:1d:84:06:
97:1c:41:3e:28:f5:24:c3:85:88:db:ea:4e:ab:29:
d4:76:83:e8:c4:22:e7:e2:00:a4:0f:ae:10:50:fa:
dc:78:f4:3d:13:5e:57:b5:e5:4d:47:c2:1f:48:ac:
41:f6:31:8d:17:3f:ec:c9:a5:02:9a:cf:84:16:cd:
fe:40:47:a8:e4:27:9e:cf:4f:77:8e:79:04:a9:ee:
bf:ac:e4:fa:9e:c9:ff:af:b0:9e:0e:76:88:2a:92:
c0:af:9d:3a:8b:76:67:fc:54:46:6b:f3:cb:a9:47:
67:02:56:98:51:fe:bb:74:9b:c0:bb:c8:e4:4f:95:
a3:21:e0:be:15:75:2c:d1:0f:3e:58:8c:39:3b:f5:
67:05:4a:c8:f2:65:82:ec:5f:10:fc:09:5e:21:0a:
9d:6f:3e:ea:5d:71:a2:32:47:63:ad:e8:fd:90:98:
3e:73:ec:8b:50:5f:f0:5a:ec:d8:32:d2:31:80:4e:
d1:82:03:2b:2d:1c:da:25:75:ce:29:29:92:39:40:
16:c4:d3:f1:b9:24:a6:38:89:45:cc:18:d2:34:02:
7e:4b:dc:03:c3:37:d1:20:5d:e9:05:c0:b0:90:88:
5a:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E1:12:E9:A0:49:D5:B2:64:22:01:0A:9B:64:33:CE:8E:2F:CC:D9:D7
X509v3 Authority Key Identifier:
keyid:A3:B1:CF:27:EA:BB:99:F6:B3:5D:EC:1A:84:39:B6:D6:53:DC:E3:3A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/o7HPJ-q7mfazXewahDm21lPc4zo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6c/416742-7dd6-4101-8c18-05786bfd6857/1/o7HPJ-q7mfazXewahDm21lPc4zo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6c/416742-7dd6-4101-8c18-05786bfd6857/1/o7HPJ-q7mfazXewahDm21lPc4zo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
81:5f:a8:ba:f9:87:9a:a1:96:04:7d:02:e3:c4:f5:0b:44:a7:
90:92:21:18:84:ea:ce:f5:f7:9e:4e:30:a0:19:c5:32:94:a6:
ef:fa:dd:84:9f:db:13:50:47:ca:5f:87:d7:5f:65:5e:44:ab:
c2:28:c0:8d:10:65:84:e5:4c:b8:1a:4d:cd:5c:c2:ed:cd:04:
4b:38:23:cf:cd:8d:12:9c:4f:83:56:27:fc:73:45:ae:6b:bf:
8a:d0:e4:9d:8c:3d:38:87:2f:94:6d:c7:55:38:0e:3c:06:80:
01:ab:f0:95:0f:a2:ca:24:9b:93:87:45:33:8f:2e:d8:51:c8:
c1:8f:3f:9d:0e:47:7d:d7:3e:f0:26:78:c2:c3:8a:61:80:df:
02:ba:60:6f:fa:f0:34:12:a3:e4:8c:94:f4:a9:29:4b:ae:a7:
6c:46:ca:b9:a1:2b:3e:28:80:c0:b5:aa:ba:6a:aa:08:0a:30:
54:75:1c:69:84:69:37:ef:63:c5:d5:56:cc:e2:c6:5b:cf:ca:
4b:1e:1d:a6:00:9a:9a:f3:9c:f0:e3:7f:45:4d:4a:8f:a6:03:
56:3d:ca:d5:20:e2:ac:8f:3f:73:0e:b5:e5:6e:18:0e:1d:cf:
84:c8:ed:5a:5d:e3:a5:83:0f:1d:5f:2c:9c:58:5c:c5:3f:2f:
33:a3:bc:52
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 15 17:52:39 2025 by rpki-client