Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cf/689d05-1b14-4f9b-8e7c-371ac7c654da/1/oYNGitFuaZjU23dpvvv6BuofE0I.mft
File: oYNGitFuaZjU23dpvvv6BuofE0I.mft (raw, json)
Hash identifier: QOQaU2XUpqm9+16r+gPnwTjvx4JHM62zSdxta/1JHZU=
Subject key identifier: 89:0D:9D:D1:3C:68:93:04:36:0D:9E:E8:C6:16:32:88:D5:5A:FD:2B
Authority key identifier: A1:83:46:8A:D1:6E:69:98:D4:DB:77:69:BE:FB:FA:06:EA:1F:13:42
Certificate issuer: /CN=a183468ad16e6998d4db7769befbfa06ea1f1342
Certificate serial: 0196CFBDD41AC735A0C9D91C70C4E5B794A9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/oYNGitFuaZjU23dpvvv6BuofE0I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cf/689d05-1b14-4f9b-8e7c-371ac7c654da/1/oYNGitFuaZjU23dpvvv6BuofE0I.mft
Manifest number: 0EB9
Signing time: Wed 14 May 2025 17:00:46 +0000
Manifest this update: Wed 14 May 2025 17:00:46 +0000
Manifest next update: Thu 15 May 2025 17:00:46 +0000
Files and hashes: 1: oYNGitFuaZjU23dpvvv6BuofE0I.crl (hash: gA3kguBuDdp1XH6F1Xq00hTSF7sYZ8uGzT+hH3SAuD8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cf/689d05-1b14-4f9b-8e7c-371ac7c654da/1/oYNGitFuaZjU23dpvvv6BuofE0I.crl
rsync://rpki.ripe.net/repository/DEFAULT/cf/689d05-1b14-4f9b-8e7c-371ac7c654da/1/oYNGitFuaZjU23dpvvv6BuofE0I.mft
rsync://rpki.ripe.net/repository/DEFAULT/oYNGitFuaZjU23dpvvv6BuofE0I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 15 May 2025 17:00:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:cf:bd:d4:1a:c7:35:a0:c9:d9:1c:70:c4:e5:b7:94:a9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a183468ad16e6998d4db7769befbfa06ea1f1342
Validity
Not Before: May 14 17:00:46 2025 GMT
Not After : May 15 17:00:46 2025 GMT
Subject: CN=890d9dd13c689304360d9ee8c6163288d55afd2b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:da:ec:7b:87:2a:ff:91:a0:c4:fc:0d:29:75:c5:
b2:56:75:a3:47:3e:94:3c:97:3a:75:f7:37:14:ec:
7e:51:42:ce:c5:2b:0e:ad:0b:03:83:a1:46:fa:b3:
ef:f9:69:8d:a6:45:af:f5:de:af:3e:58:d9:cc:10:
91:36:fe:1c:c9:2a:4c:8d:94:4a:0e:3d:43:58:df:
ed:06:f7:23:39:75:bc:3d:40:66:ba:5a:1c:43:e7:
53:5b:54:5a:ed:58:36:c0:f7:bd:19:74:88:a6:00:
16:fe:47:bc:fa:41:10:70:6e:38:17:69:f0:c0:f4:
cd:60:6e:a3:19:12:bc:6a:ba:cd:9d:d8:99:54:2b:
ef:3b:3b:ee:b1:10:24:99:37:bb:31:58:0e:81:12:
cf:1b:21:a9:a5:c4:30:40:ad:1e:50:6e:1b:92:c0:
d1:a4:c4:ee:f2:0c:9e:84:d6:44:1e:4e:43:2a:38:
dd:ad:ca:a2:67:70:84:cc:23:dd:8d:52:cd:48:0c:
da:d0:b8:0f:56:d5:cc:f5:6d:39:ba:cb:fb:86:74:
23:71:10:ee:a1:33:9b:1f:66:96:d1:35:d5:f2:3b:
89:20:01:3d:ea:ad:18:42:92:eb:9c:29:e7:57:8d:
72:46:fb:41:76:70:f9:e9:f7:a6:4d:8d:58:56:b9:
f8:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
89:0D:9D:D1:3C:68:93:04:36:0D:9E:E8:C6:16:32:88:D5:5A:FD:2B
X509v3 Authority Key Identifier:
keyid:A1:83:46:8A:D1:6E:69:98:D4:DB:77:69:BE:FB:FA:06:EA:1F:13:42
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/oYNGitFuaZjU23dpvvv6BuofE0I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cf/689d05-1b14-4f9b-8e7c-371ac7c654da/1/oYNGitFuaZjU23dpvvv6BuofE0I.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cf/689d05-1b14-4f9b-8e7c-371ac7c654da/1/oYNGitFuaZjU23dpvvv6BuofE0I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7e:34:4d:e1:37:a4:db:f5:52:e5:77:30:33:1b:b2:a5:ff:04:
c8:16:05:fc:f9:a9:37:44:b0:e2:37:ff:71:ba:5e:e0:9e:08:
69:f0:f7:93:cd:3a:9c:b2:82:20:46:3e:e7:7f:fa:2e:04:e7:
84:bd:c8:88:50:8b:0c:7b:82:14:99:ec:d4:41:67:2a:a5:61:
b1:0a:28:f8:63:78:9e:b2:18:c0:ea:98:20:c4:31:ba:22:61:
73:b0:f6:02:44:0a:19:39:54:7d:41:ba:5d:ee:be:09:e3:18:
8d:4b:69:1e:29:03:b3:bf:e3:18:4b:99:c3:c8:cb:75:d8:04:
4e:65:50:8b:8d:9d:7c:75:03:a9:06:e6:3a:cd:f2:01:ab:57:
52:a3:a5:fa:aa:19:74:85:97:c1:11:2c:bf:58:05:18:39:35:
52:3a:41:71:93:f0:59:20:00:82:bd:1c:2b:fe:b9:76:eb:8a:
c4:68:ec:2e:bf:1d:7e:7d:76:92:e1:fd:91:c6:2b:f1:38:f9:
d4:c8:5c:58:12:55:ea:f6:cb:00:02:d6:d9:ab:44:1b:03:fa:
86:9b:b5:40:f6:a3:cd:bf:03:df:54:d9:55:0d:f4:bf:dd:8e:
28:4c:21:d0:9b:19:1c:b9:62:79:82:e9:1b:80:9e:cd:ed:af:
10:ac:ad:fc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 15 01:29:17 2025 by rpki-client