Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/95/4d10c0-67bf-4135-97ab-bbf2ce07ecad/1/oaRYJWLDE1u1K9uWFF4a0DeGsUg.mft
File: oaRYJWLDE1u1K9uWFF4a0DeGsUg.mft (raw, json)
Hash identifier: UwTt7DRIca0mXIOQ2sFxdVtGNBoPfchx7vgmXC+FdkM=
Subject key identifier: EE:B8:4E:99:C4:D6:D4:34:92:0A:C4:4C:32:BE:08:59:63:13:10:A1
Authority key identifier: A1:A4:58:25:62:C3:13:5B:B5:2B:DB:96:14:5E:1A:D0:37:86:B1:48
Certificate issuer: /CN=a1a4582562c3135bb52bdb96145e1ad03786b148
Certificate serial: 0196BB91F0A43736E82E467D4F038C902B37
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/oaRYJWLDE1u1K9uWFF4a0DeGsUg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/95/4d10c0-67bf-4135-97ab-bbf2ce07ecad/1/oaRYJWLDE1u1K9uWFF4a0DeGsUg.mft
Manifest number: 12D8
Signing time: Sat 10 May 2025 19:00:25 +0000
Manifest this update: Sat 10 May 2025 19:00:25 +0000
Manifest next update: Sun 11 May 2025 19:00:25 +0000
Files and hashes: 1: oaRYJWLDE1u1K9uWFF4a0DeGsUg.crl (hash: QU5fUgowpoiBM8edpkTE25mkKKWmgr4f2y9oIlUwErQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/95/4d10c0-67bf-4135-97ab-bbf2ce07ecad/1/oaRYJWLDE1u1K9uWFF4a0DeGsUg.crl
rsync://rpki.ripe.net/repository/DEFAULT/95/4d10c0-67bf-4135-97ab-bbf2ce07ecad/1/oaRYJWLDE1u1K9uWFF4a0DeGsUg.mft
rsync://rpki.ripe.net/repository/DEFAULT/oaRYJWLDE1u1K9uWFF4a0DeGsUg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 11 May 2025 19:00:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:bb:91:f0:a4:37:36:e8:2e:46:7d:4f:03:8c:90:2b:37
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a1a4582562c3135bb52bdb96145e1ad03786b148
Validity
Not Before: May 10 19:00:25 2025 GMT
Not After : May 11 19:00:25 2025 GMT
Subject: CN=eeb84e99c4d6d434920ac44c32be0859631310a1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:42:df:7d:cd:0a:d2:04:7c:bf:10:a8:98:74:
fc:8d:fd:95:1c:ae:65:04:84:03:0a:26:53:a2:ee:
11:17:c0:3e:fe:03:fb:69:2d:19:1c:f0:dc:e6:5a:
3f:f5:a6:14:da:18:f0:db:78:d2:db:ca:93:77:7e:
1c:c9:66:54:73:9d:69:dc:81:16:ad:5d:b8:11:61:
e6:57:3c:8b:27:23:8a:86:83:51:10:53:b0:00:c2:
e1:cd:73:77:31:1c:39:3a:a1:ee:2d:3e:ed:27:3d:
87:23:62:0b:92:cd:f1:c4:e8:df:3a:bd:40:08:7f:
4a:84:cb:ff:12:dd:55:fe:65:b0:43:67:ba:f5:e2:
b3:6f:b2:6c:57:80:ba:b4:99:d3:54:88:50:0b:1d:
d7:76:50:6a:01:e2:f6:0d:c2:11:8f:95:47:7e:a1:
f0:5b:f8:e5:e3:02:3f:4f:91:20:0e:f8:69:9f:2b:
69:a9:1e:a5:14:3d:17:8f:ec:97:b6:20:3d:4a:f5:
cb:e3:d3:aa:a7:9f:77:ef:e7:6a:4b:13:36:1c:df:
e3:3f:77:c9:b1:06:81:20:d7:96:cc:5f:8e:43:e3:
8d:1e:98:a5:1b:6a:e8:7b:a5:43:50:a0:42:df:a7:
be:db:72:83:f2:b9:12:53:43:5f:b8:7f:1d:a7:91:
96:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EE:B8:4E:99:C4:D6:D4:34:92:0A:C4:4C:32:BE:08:59:63:13:10:A1
X509v3 Authority Key Identifier:
keyid:A1:A4:58:25:62:C3:13:5B:B5:2B:DB:96:14:5E:1A:D0:37:86:B1:48
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/oaRYJWLDE1u1K9uWFF4a0DeGsUg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/95/4d10c0-67bf-4135-97ab-bbf2ce07ecad/1/oaRYJWLDE1u1K9uWFF4a0DeGsUg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/95/4d10c0-67bf-4135-97ab-bbf2ce07ecad/1/oaRYJWLDE1u1K9uWFF4a0DeGsUg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
90:6a:38:fc:ba:89:e6:78:2a:11:43:fb:92:79:76:34:3c:7e:
56:b7:8d:d3:7e:ae:a4:28:5e:83:d4:f6:39:89:70:f9:f7:96:
9e:a6:8c:82:57:17:73:18:e1:7e:bb:bf:bb:23:84:25:01:5d:
ce:9b:60:76:b1:38:83:fd:ae:69:c2:51:a4:3c:b0:6b:d7:8d:
01:90:20:77:92:ef:0f:79:82:f6:fa:39:d8:d6:b9:0a:11:f1:
f9:c6:06:e2:64:12:96:46:29:a4:6e:90:70:5a:8f:53:9d:78:
2b:a9:b6:82:14:7a:4c:fe:d9:53:37:60:af:35:39:5e:64:79:
14:f4:fb:d8:0a:06:56:d4:94:d7:1a:ea:dc:6f:25:95:2c:17:
0c:11:65:6a:60:4b:44:a4:4d:6c:cf:81:0b:e0:8c:45:28:7c:
fd:1f:0c:ad:ef:1b:3d:c4:92:b2:c7:f3:a4:18:92:3e:a3:76:
b3:ca:d2:17:94:d3:1f:31:8f:5f:b6:7e:83:03:cd:0a:1c:a9:
b8:6b:64:69:c3:55:cb:71:84:35:4a:dd:e8:ab:48:ae:ff:c8:
bb:92:71:2f:cd:6e:87:e3:68:15:09:19:01:df:84:88:fc:f5:
07:0e:1d:52:58:c2:b3:c1:14:7a:24:ef:70:7e:4d:65:38:ba:
c9:ac:23:a8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 11 03:52:03 2025 by rpki-client