Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9c/ec6b88-5e6b-4cfe-bc95-33ac6dbcfb97/1/O6Lif-dUJu_ItSsmjoKTqJlOaP0.mft
File: O6Lif-dUJu_ItSsmjoKTqJlOaP0.mft (raw, json)
Hash identifier: 6XYvs+7TRza8kRLhcncl88p/y3CuGIpDoNPGSE7Ot00=
Subject key identifier: 76:DC:B7:0B:72:03:56:52:2A:A6:5B:2C:FB:CC:E9:5D:DF:4C:31:A5
Authority key identifier: 3B:A2:E2:7F:E7:54:26:EF:C8:B5:2B:26:8E:82:93:A8:99:4E:68:FD
Certificate issuer: /CN=3ba2e27fe75426efc8b52b268e8293a8994e68fd
Certificate serial: 0196A0890EFA828A3276F1C772E6471AA198
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/O6Lif-dUJu_ItSsmjoKTqJlOaP0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9c/ec6b88-5e6b-4cfe-bc95-33ac6dbcfb97/1/O6Lif-dUJu_ItSsmjoKTqJlOaP0.mft
Manifest number: 0D8D
Signing time: Mon 05 May 2025 13:00:58 +0000
Manifest this update: Mon 05 May 2025 13:00:58 +0000
Manifest next update: Tue 06 May 2025 13:00:58 +0000
Files and hashes: 1: O6Lif-dUJu_ItSsmjoKTqJlOaP0.crl (hash: Tykk17Qt11NWcOPctci6DIM+qMcyhylGtTiIzdrN6xw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9c/ec6b88-5e6b-4cfe-bc95-33ac6dbcfb97/1/O6Lif-dUJu_ItSsmjoKTqJlOaP0.crl
rsync://rpki.ripe.net/repository/DEFAULT/9c/ec6b88-5e6b-4cfe-bc95-33ac6dbcfb97/1/O6Lif-dUJu_ItSsmjoKTqJlOaP0.mft
rsync://rpki.ripe.net/repository/DEFAULT/O6Lif-dUJu_ItSsmjoKTqJlOaP0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 06 May 2025 13:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:a0:89:0e:fa:82:8a:32:76:f1:c7:72:e6:47:1a:a1:98
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3ba2e27fe75426efc8b52b268e8293a8994e68fd
Validity
Not Before: May 5 13:00:58 2025 GMT
Not After : May 6 13:00:58 2025 GMT
Subject: CN=76dcb70b720356522aa65b2cfbcce95ddf4c31a5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:19:11:d0:1a:b9:0b:2a:76:4d:34:c5:17:8c:
9a:0a:35:e7:1d:be:ad:8d:8f:fa:48:40:9b:de:71:
60:1a:94:e0:aa:91:d6:5f:c8:d8:39:ca:92:d1:18:
6a:14:23:97:46:d5:ca:03:4c:c2:b0:c9:96:d1:1c:
bc:2c:51:f1:fe:52:94:2d:43:75:b3:45:62:53:65:
8a:47:97:35:53:ec:ed:61:52:3a:ca:16:fc:47:f1:
85:b9:fa:7a:11:e3:e6:f9:11:55:14:bc:ab:80:44:
e6:0d:2a:7a:f1:54:f8:c0:91:24:05:ee:d9:0a:4f:
78:77:20:34:22:da:d0:c1:15:c5:43:d1:ee:f8:81:
d5:c7:f8:a0:91:b5:6c:57:7b:d2:2b:b4:46:62:d8:
b4:33:0f:f3:96:47:6d:a8:c7:08:01:eb:ea:8a:ea:
d4:fc:ae:43:ac:ec:05:e1:fe:c3:0d:e6:c5:ce:d3:
65:ac:55:d2:24:36:31:23:4d:2d:57:fa:46:1d:3c:
ea:20:f6:59:a0:a6:87:26:ad:db:ec:a2:73:bf:5c:
d0:da:49:0c:52:c8:08:d3:f7:24:ef:6c:4f:ea:20:
5b:fe:74:8e:71:98:94:6a:01:2b:12:63:30:19:c4:
75:69:f2:1a:39:ad:82:58:be:72:14:64:9d:48:b8:
93:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
76:DC:B7:0B:72:03:56:52:2A:A6:5B:2C:FB:CC:E9:5D:DF:4C:31:A5
X509v3 Authority Key Identifier:
keyid:3B:A2:E2:7F:E7:54:26:EF:C8:B5:2B:26:8E:82:93:A8:99:4E:68:FD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/O6Lif-dUJu_ItSsmjoKTqJlOaP0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9c/ec6b88-5e6b-4cfe-bc95-33ac6dbcfb97/1/O6Lif-dUJu_ItSsmjoKTqJlOaP0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9c/ec6b88-5e6b-4cfe-bc95-33ac6dbcfb97/1/O6Lif-dUJu_ItSsmjoKTqJlOaP0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
bf:40:af:29:2d:40:41:88:ef:f4:c9:35:ef:16:f8:8a:e1:94:
1a:1f:2d:e7:1f:83:e2:7b:a4:b7:7d:da:22:84:84:25:c5:5e:
cc:88:86:eb:dc:da:2c:1a:ca:ee:0a:af:ec:7c:6b:a5:4e:30:
95:26:8a:94:64:b3:71:18:05:4a:a5:e4:4b:d5:1a:2d:f1:79:
1d:fe:3f:08:4c:23:d4:4f:3f:91:86:f8:ff:9d:e7:43:02:4b:
36:72:0b:e3:9f:fb:37:8c:24:18:cb:6c:ec:c2:ff:60:68:00:
5c:4b:1e:6e:26:89:2c:5a:98:d7:e5:cf:1c:cf:e2:13:d9:fe:
b3:df:a5:41:8d:19:dd:30:10:64:03:da:27:5a:46:36:0a:cf:
86:b4:fc:0a:be:ab:95:cc:b7:bb:13:49:9e:94:88:81:54:ce:
a3:63:44:43:2d:18:dc:75:66:50:4a:c0:e8:fe:db:c6:97:16:
16:09:81:fd:a6:e2:e8:b5:19:cc:28:76:e5:98:18:df:19:25:
2b:e9:fc:7c:73:c2:4d:22:08:14:fb:e6:d4:db:b7:cf:a1:37:
7d:42:43:f2:72:31:3e:4c:22:32:b1:0b:0d:57:f7:75:36:03:
a3:9d:71:b6:33:2d:f9:ad:9f:b6:c1:93:00:3e:f5:79:89:9f:
8f:49:b3:bc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 5 22:00:40 2025 by rpki-client