Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9e/6c4c6c-af22-40a4-ae2c-4a02f097cdb1/1/os0snkthAHq1W8aePuP_zmJi2BE.mft
File: os0snkthAHq1W8aePuP_zmJi2BE.mft (raw, json)
Hash identifier: PKqCtjeqB0Pa4JobISwZUHo7T9aaH4N1pvjR8nNTfwU=
Subject key identifier: F4:54:E4:34:08:27:64:2E:3C:09:B0:AC:43:92:1E:02:97:97:9A:9E
Authority key identifier: A2:CD:2C:9E:4B:61:00:7A:B5:5B:C6:9E:3E:E3:FF:CE:62:62:D8:11
Certificate issuer: /CN=a2cd2c9e4b61007ab55bc69e3ee3ffce6262d811
Certificate serial: 0196A842533A8AD418A08618244578013C48
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/os0snkthAHq1W8aePuP_zmJi2BE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9e/6c4c6c-af22-40a4-ae2c-4a02f097cdb1/1/os0snkthAHq1W8aePuP_zmJi2BE.mft
Manifest number: 0D9A
Signing time: Wed 07 May 2025 01:00:40 +0000
Manifest this update: Wed 07 May 2025 01:00:40 +0000
Manifest next update: Thu 08 May 2025 01:00:40 +0000
Files and hashes: 1: os0snkthAHq1W8aePuP_zmJi2BE.crl (hash: CefDgpZLfxMiOq29JtBzs/QSxawNUEzFc3pUJCKDzQ8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9e/6c4c6c-af22-40a4-ae2c-4a02f097cdb1/1/os0snkthAHq1W8aePuP_zmJi2BE.crl
rsync://rpki.ripe.net/repository/DEFAULT/9e/6c4c6c-af22-40a4-ae2c-4a02f097cdb1/1/os0snkthAHq1W8aePuP_zmJi2BE.mft
rsync://rpki.ripe.net/repository/DEFAULT/os0snkthAHq1W8aePuP_zmJi2BE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 07 May 2025 23:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:a8:42:53:3a:8a:d4:18:a0:86:18:24:45:78:01:3c:48
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a2cd2c9e4b61007ab55bc69e3ee3ffce6262d811
Validity
Not Before: May 7 01:00:40 2025 GMT
Not After : May 8 01:00:40 2025 GMT
Subject: CN=f454e4340827642e3c09b0ac43921e0297979a9e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:1a:40:cb:92:6c:23:15:1f:07:35:b6:a3:77:
5a:54:74:3e:9d:75:8b:7d:95:97:2b:5c:12:f3:b0:
d3:3b:33:72:03:61:38:83:b2:b1:7e:64:50:d9:e6:
aa:ff:9a:72:b2:15:c3:ff:95:fb:0f:a9:3a:cc:78:
a4:29:2e:60:93:57:5b:f3:06:31:b8:cc:98:7d:3d:
3e:1e:9e:d5:30:4a:2c:57:f7:17:02:cd:bc:27:e1:
4a:37:19:50:d7:bf:8b:d5:ed:2f:a0:7b:49:9c:ed:
a5:72:37:ab:2a:83:0b:b3:19:c8:53:20:5b:2b:fd:
6e:08:0a:82:24:f0:60:72:87:92:41:91:54:71:8a:
de:ee:50:44:80:01:7a:45:b7:22:4f:ba:4a:81:47:
61:d3:9e:c1:98:d6:3c:66:10:fd:70:53:42:85:8c:
5d:1c:6c:0a:3a:66:2b:01:6e:a3:4e:6f:30:2b:1d:
43:fd:ab:f4:23:9f:c6:b3:3f:d4:ab:48:da:a6:d1:
dd:d1:12:6a:5e:af:0d:c3:0c:a2:66:d6:b0:ba:69:
9f:84:d7:4e:b5:91:d6:03:c8:c5:41:4a:20:5d:db:
68:bf:df:f5:42:d8:b4:f9:e2:7a:37:5d:ae:62:a2:
6f:44:8d:8d:8d:c9:91:9a:a9:1c:25:0f:d3:40:45:
30:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F4:54:E4:34:08:27:64:2E:3C:09:B0:AC:43:92:1E:02:97:97:9A:9E
X509v3 Authority Key Identifier:
keyid:A2:CD:2C:9E:4B:61:00:7A:B5:5B:C6:9E:3E:E3:FF:CE:62:62:D8:11
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/os0snkthAHq1W8aePuP_zmJi2BE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9e/6c4c6c-af22-40a4-ae2c-4a02f097cdb1/1/os0snkthAHq1W8aePuP_zmJi2BE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9e/6c4c6c-af22-40a4-ae2c-4a02f097cdb1/1/os0snkthAHq1W8aePuP_zmJi2BE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
56:15:b2:91:c8:66:83:67:a8:12:cf:46:0a:2b:28:12:a6:a6:
13:f2:cc:91:d7:28:2d:70:14:7e:c1:15:bc:32:c8:da:63:e4:
46:c5:d2:c8:d0:ff:2e:11:97:77:72:f0:bd:69:1d:3d:a2:3f:
20:af:4a:28:73:b7:ef:24:95:ef:3e:20:0b:7e:1f:82:bf:0f:
63:87:d6:c8:1f:00:1d:54:12:a3:b4:ce:b4:fa:4b:fc:f9:79:
cd:8f:ad:52:a5:3d:31:b8:d1:b6:fd:9d:ad:c2:dc:89:48:86:
1d:7e:1f:17:61:d0:0b:64:1c:be:e1:38:50:f3:e6:f1:05:b4:
87:d3:fc:12:a5:8f:89:e8:74:95:80:01:54:d8:94:df:c4:49:
87:1e:9a:5b:9a:1b:e1:7a:d7:38:ee:dd:18:16:68:f7:e9:27:
8f:f5:a3:77:02:fb:c6:ee:ea:d2:83:ee:97:25:5d:07:12:80:
ac:e7:a0:a8:31:2d:40:43:61:71:04:1b:7c:a9:ed:67:65:e8:
9d:d1:73:74:5d:85:99:2a:25:ee:c3:38:d6:60:65:00:f9:73:
c5:1c:fb:ad:ba:17:31:b7:d3:e7:53:db:a4:ba:27:5c:11:b3:
a6:84:c9:e2:8d:fa:1e:3a:57:65:2b:47:17:df:c9:d8:32:35:
b1:cb:5f:e6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 7 06:57:14 2025 by rpki-client