Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d9/d7a4d5-5144-4e18-887c-a6b0fde21906/1/OXy939eSBtZcTugWjq9ucJAg-V0.mft
File: OXy939eSBtZcTugWjq9ucJAg-V0.mft (raw, json)
Hash identifier: NOnT6XV5nqlCtjlSzIsOfFzWJ47NbUvoxd69YOZaQd0=
Subject key identifier: 29:02:B9:2E:7E:FC:B4:40:E2:BA:47:AE:5F:39:11:88:32:0E:87:8D
Authority key identifier: 39:7C:BD:DF:D7:92:06:D6:5C:4E:E8:16:8E:AF:6E:70:90:20:F9:5D
Certificate issuer: /CN=397cbddfd79206d65c4ee8168eaf6e709020f95d
Certificate serial: 0196C34C500223A530CE3B533BCE90ABDBBC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OXy939eSBtZcTugWjq9ucJAg-V0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d9/d7a4d5-5144-4e18-887c-a6b0fde21906/1/OXy939eSBtZcTugWjq9ucJAg-V0.mft
Manifest number: 08F6
Signing time: Mon 12 May 2025 07:01:20 +0000
Manifest this update: Mon 12 May 2025 07:01:20 +0000
Manifest next update: Tue 13 May 2025 07:01:20 +0000
Files and hashes: 1: OXy939eSBtZcTugWjq9ucJAg-V0.crl (hash: gw4t0THNcros7rlTIQPdQ/F7AioeYX2I80OX3+5KM78=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d9/d7a4d5-5144-4e18-887c-a6b0fde21906/1/OXy939eSBtZcTugWjq9ucJAg-V0.crl
rsync://rpki.ripe.net/repository/DEFAULT/d9/d7a4d5-5144-4e18-887c-a6b0fde21906/1/OXy939eSBtZcTugWjq9ucJAg-V0.mft
rsync://rpki.ripe.net/repository/DEFAULT/OXy939eSBtZcTugWjq9ucJAg-V0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 13 May 2025 07:01:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:c3:4c:50:02:23:a5:30:ce:3b:53:3b:ce:90:ab:db:bc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=397cbddfd79206d65c4ee8168eaf6e709020f95d
Validity
Not Before: May 12 07:01:20 2025 GMT
Not After : May 13 07:01:20 2025 GMT
Subject: CN=2902b92e7efcb440e2ba47ae5f391188320e878d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:20:de:23:5c:bc:64:64:2f:26:3c:a3:6d:bb:
e8:09:1b:65:d9:bd:ff:f9:84:ae:64:cd:53:e3:20:
ab:56:28:fc:23:fd:fd:70:16:b4:8e:72:32:63:b9:
23:88:8d:4a:f6:df:29:b9:9c:a3:84:96:66:9b:43:
a3:2a:22:a9:cc:a2:f2:71:86:68:b7:65:5c:81:73:
e4:3f:bf:68:ef:64:4d:ba:03:15:45:d0:da:4c:d6:
93:41:2e:a0:cb:6d:78:6a:88:7d:8a:91:50:34:e0:
32:b5:dd:ef:5f:8b:54:fc:26:08:e8:94:55:07:d3:
62:aa:c2:0f:29:5a:99:94:f0:6b:da:4b:4e:99:28:
64:d2:ad:98:1a:19:33:77:83:2e:54:e5:86:17:1d:
4f:f4:5b:12:a1:d8:42:98:e8:44:f2:37:1e:9b:ad:
54:4c:de:2f:f5:01:78:0d:dc:46:da:44:3c:cc:12:
c3:b3:b7:d3:4c:74:b1:5b:3a:f5:6d:5c:90:d7:53:
b7:30:1d:6b:ea:31:0e:e1:8f:5d:4b:43:50:07:ba:
9a:e1:ba:a9:11:e5:7a:e2:d2:5a:3e:0d:91:38:d6:
f5:2d:8e:da:8b:79:49:06:85:ca:fe:2e:83:29:fd:
75:83:dc:83:10:02:eb:50:a6:a0:da:29:b2:90:dc:
b2:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
29:02:B9:2E:7E:FC:B4:40:E2:BA:47:AE:5F:39:11:88:32:0E:87:8D
X509v3 Authority Key Identifier:
keyid:39:7C:BD:DF:D7:92:06:D6:5C:4E:E8:16:8E:AF:6E:70:90:20:F9:5D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OXy939eSBtZcTugWjq9ucJAg-V0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/d7a4d5-5144-4e18-887c-a6b0fde21906/1/OXy939eSBtZcTugWjq9ucJAg-V0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/d7a4d5-5144-4e18-887c-a6b0fde21906/1/OXy939eSBtZcTugWjq9ucJAg-V0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
54:ed:b1:24:f9:cc:ca:e6:26:ea:a0:c0:80:dc:91:a6:36:99:
5f:27:ca:7e:26:ca:27:40:c4:50:33:4e:cf:0b:ed:d7:17:b5:
ea:77:8a:25:10:f5:97:54:67:53:f3:c6:22:32:2a:cc:47:40:
7f:4a:3a:cf:33:cd:cb:75:65:20:56:aa:e8:a2:16:25:ba:48:
1f:6a:c0:95:26:16:e5:28:3e:57:86:c1:de:1d:c6:67:2d:59:
2c:07:56:e5:cf:db:46:51:e5:1b:07:30:13:d1:9e:f3:8e:b3:
fe:86:01:00:e6:43:b8:0d:76:a6:06:3d:7e:44:a0:c1:2b:12:
16:85:d2:f3:ec:6e:96:83:5d:d5:4f:a6:6b:40:fd:ce:bc:84:
f9:da:86:64:17:54:5b:9b:3f:58:1e:75:ac:80:df:b6:fb:e4:
96:2d:e8:32:8d:8b:e5:50:2b:5c:d3:75:49:83:94:e4:a0:55:
35:49:31:7b:c3:91:0e:24:9d:f7:e9:72:26:0d:c0:41:69:5f:
e6:c4:32:5b:80:c5:8a:53:3b:a9:16:22:1b:38:a6:f7:88:ea:
79:68:74:d4:28:90:7c:53:8a:19:bd:4f:37:ca:8e:a5:90:05:
cb:30:28:6d:8d:3b:b3:82:3f:d8:3f:0c:96:94:73:8b:15:26:
dd:70:a5:9a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 12 17:22:01 2025 by rpki-client