Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6d/483093-36db-4043-b6d6-762259ab9500/1/ovrHXzkOiAUoM33Qvc3HeTS43zw.mft
File: ovrHXzkOiAUoM33Qvc3HeTS43zw.mft (raw, json)
Hash identifier: kynkb1sQYZheG55D1j6BzzusjtWjt2pzcABFBr5/1Bg=
Subject key identifier: 19:CE:4E:C3:7D:1A:68:F1:3E:FE:71:67:C4:E1:72:A2:1E:76:FB:AD
Authority key identifier: A2:FA:C7:5F:39:0E:88:05:28:33:7D:D0:BD:CD:C7:79:34:B8:DF:3C
Certificate issuer: /CN=a2fac75f390e880528337dd0bdcdc77934b8df3c
Certificate serial: 0196BFDCFC593BD992446039C84BC2051B80
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ovrHXzkOiAUoM33Qvc3HeTS43zw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6d/483093-36db-4043-b6d6-762259ab9500/1/ovrHXzkOiAUoM33Qvc3HeTS43zw.mft
Manifest number: 1533
Signing time: Sun 11 May 2025 15:00:52 +0000
Manifest this update: Sun 11 May 2025 15:00:52 +0000
Manifest next update: Mon 12 May 2025 15:00:52 +0000
Files and hashes: 1: ovrHXzkOiAUoM33Qvc3HeTS43zw.crl (hash: ygCnlQj5yhFdtseKPyPb6bCKUUSr5ofJCsYLiNpYzFg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6d/483093-36db-4043-b6d6-762259ab9500/1/ovrHXzkOiAUoM33Qvc3HeTS43zw.crl
rsync://rpki.ripe.net/repository/DEFAULT/6d/483093-36db-4043-b6d6-762259ab9500/1/ovrHXzkOiAUoM33Qvc3HeTS43zw.mft
rsync://rpki.ripe.net/repository/DEFAULT/ovrHXzkOiAUoM33Qvc3HeTS43zw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 12 May 2025 15:00:52 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:bf:dc:fc:59:3b:d9:92:44:60:39:c8:4b:c2:05:1b:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a2fac75f390e880528337dd0bdcdc77934b8df3c
Validity
Not Before: May 11 15:00:52 2025 GMT
Not After : May 12 15:00:52 2025 GMT
Subject: CN=19ce4ec37d1a68f13efe7167c4e172a21e76fbad
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:ae:c5:77:89:6b:f9:0c:2a:1a:cd:19:a4:b5:
9d:ff:ce:dc:3d:d7:af:82:b3:f3:73:e4:d2:84:18:
64:dd:e8:41:7e:fd:0c:d4:42:05:62:d0:f4:cd:2e:
85:88:8b:63:d2:d9:c2:39:e8:06:38:e1:5c:d7:02:
35:c7:4c:59:f1:fa:39:be:db:85:f3:88:3f:39:9f:
4e:90:c2:35:46:a9:4b:84:f5:75:4b:73:b2:0f:a4:
f3:c4:f3:c9:c3:bc:52:3e:d9:45:32:25:1f:b2:dc:
e4:91:53:ee:e0:98:26:8b:b3:61:2f:ae:1b:2f:da:
93:14:0b:5f:24:39:e1:e2:ed:40:d6:ee:6f:0d:c2:
e0:cc:43:39:2d:d1:f8:14:fb:4b:6e:9a:38:73:f3:
d3:b6:13:13:f3:f0:2b:a9:3a:42:65:1e:c8:47:d0:
fc:b4:09:ad:2e:6a:13:2e:4f:23:f2:65:b4:83:ee:
75:95:b8:b9:d7:83:20:75:83:48:a2:7b:98:36:e7:
5a:dc:98:4a:5f:19:74:76:0c:52:73:dd:ab:1a:86:
a8:d8:a9:91:02:62:bd:88:b1:46:d0:ec:12:48:fc:
1f:4a:7a:0d:4d:0c:4a:17:ef:8a:93:74:b7:e8:78:
2e:5c:8b:23:20:f0:ee:10:b1:66:55:a0:4e:7c:ec:
2f:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
19:CE:4E:C3:7D:1A:68:F1:3E:FE:71:67:C4:E1:72:A2:1E:76:FB:AD
X509v3 Authority Key Identifier:
keyid:A2:FA:C7:5F:39:0E:88:05:28:33:7D:D0:BD:CD:C7:79:34:B8:DF:3C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ovrHXzkOiAUoM33Qvc3HeTS43zw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6d/483093-36db-4043-b6d6-762259ab9500/1/ovrHXzkOiAUoM33Qvc3HeTS43zw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6d/483093-36db-4043-b6d6-762259ab9500/1/ovrHXzkOiAUoM33Qvc3HeTS43zw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3b:5e:44:76:1b:45:fd:a1:f5:f8:f8:ae:42:e2:aa:05:78:04:
10:ef:e7:d9:7f:65:a5:1a:31:4b:cd:46:0c:5e:70:ec:cb:93:
ad:d2:d0:64:9f:cd:ae:82:2a:3a:ba:de:70:99:ef:dc:d5:6a:
f7:6e:d4:0e:ba:af:ba:a4:4b:a7:0f:f7:e9:6c:3f:62:e3:46:
81:b8:16:2d:3b:7d:1e:2a:1b:4f:53:0c:e2:3e:02:ce:31:5b:
fe:49:09:ec:5c:fd:fc:75:3d:fa:72:dc:7b:3e:44:45:04:90:
de:ae:c3:43:9f:2a:d7:d2:ff:bc:5d:85:dc:e2:8d:7f:4a:2d:
6b:b2:4a:57:f9:3a:6b:06:ba:ac:c9:26:ec:01:9b:0c:42:56:
3e:36:18:79:57:12:42:01:60:f8:bf:4d:04:f7:6e:5a:95:12:
0e:21:24:94:01:01:e2:a8:f2:b4:c5:16:d3:60:17:22:86:ec:
34:b4:e5:b8:7f:54:21:e8:17:97:09:87:1b:c3:d9:29:20:bd:
d7:eb:4e:c5:ec:aa:db:4f:ac:1f:a7:60:f3:99:dd:49:93:da:
72:df:0f:50:b3:79:99:da:29:78:f0:1e:cf:75:fc:58:42:aa:
6d:e0:9f:ae:ba:11:0d:c1:e1:16:dc:36:72:93:d9:3b:1c:c6:
f9:09:5d:c0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 11 19:20:25 2025 by rpki-client