Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e6/407213-b264-4853-9343-ee5585ae13b7/1/oLNzv45HcndefI_F-9Mpze5Eoyw.mft
File: oLNzv45HcndefI_F-9Mpze5Eoyw.mft (raw, json)
Hash identifier: 6F9CL68AaWduhAs3uJ6DyRks74wVRg31RfrX52TybB8=
Subject key identifier: 0A:23:D3:70:1A:0C:DA:99:C6:7A:9C:3F:A5:1E:83:EA:16:16:2D:AA
Authority key identifier: A0:B3:73:BF:8E:47:72:77:5E:7C:8F:C5:FB:D3:29:CD:EE:44:A3:2C
Certificate issuer: /CN=a0b373bf8e4772775e7c8fc5fbd329cdee44a32c
Certificate serial: 0196C9BB33B1941865DCE74FC55207162C58
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/oLNzv45HcndefI_F-9Mpze5Eoyw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e6/407213-b264-4853-9343-ee5585ae13b7/1/oLNzv45HcndefI_F-9Mpze5Eoyw.mft
Manifest number: 1537
Signing time: Tue 13 May 2025 13:00:10 +0000
Manifest this update: Tue 13 May 2025 13:00:10 +0000
Manifest next update: Wed 14 May 2025 13:00:10 +0000
Files and hashes: 1: oLNzv45HcndefI_F-9Mpze5Eoyw.crl (hash: EqjCQJ7OxcewwNtdra6XazAOy1fF1DPa4Fg0chjLv2c=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e6/407213-b264-4853-9343-ee5585ae13b7/1/oLNzv45HcndefI_F-9Mpze5Eoyw.crl
rsync://rpki.ripe.net/repository/DEFAULT/e6/407213-b264-4853-9343-ee5585ae13b7/1/oLNzv45HcndefI_F-9Mpze5Eoyw.mft
rsync://rpki.ripe.net/repository/DEFAULT/oLNzv45HcndefI_F-9Mpze5Eoyw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 14 May 2025 13:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:c9:bb:33:b1:94:18:65:dc:e7:4f:c5:52:07:16:2c:58
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a0b373bf8e4772775e7c8fc5fbd329cdee44a32c
Validity
Not Before: May 13 13:00:10 2025 GMT
Not After : May 14 13:00:10 2025 GMT
Subject: CN=0a23d3701a0cda99c67a9c3fa51e83ea16162daa
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:26:4b:1b:ca:0d:84:db:2c:98:1b:20:19:6e:
94:f0:9b:a1:37:ad:4e:00:40:9b:81:bc:63:68:73:
b2:dd:e5:85:e5:4e:a5:7f:4d:86:2d:ad:ca:75:6f:
08:a3:3b:bb:c3:f0:92:29:c2:86:55:ac:fb:83:6d:
ee:96:4e:18:d9:d8:6b:3f:a6:8f:ca:46:a9:5c:02:
63:18:e0:64:cf:95:b6:0b:c2:11:0a:0e:12:cd:ca:
2e:2b:29:a5:ed:c4:b3:64:a5:39:9d:b4:5e:1b:5e:
18:32:52:e4:38:0b:89:29:03:9d:16:ed:0d:f7:59:
70:ab:93:c4:ce:74:6f:b2:f0:52:a5:96:4d:c8:a9:
3b:98:dd:14:c9:ca:0a:5f:53:0a:aa:09:5c:f7:08:
77:d8:49:25:9c:1b:77:d2:b0:9a:55:5d:a8:bf:7e:
ea:20:67:06:f5:34:5c:32:ff:f6:08:e1:f9:05:bb:
ba:c6:46:fc:b8:9c:ed:98:fe:1c:1a:4a:7f:d3:ae:
a7:6c:9d:7c:d8:ed:7f:ef:91:bd:4d:2d:74:d0:5a:
89:75:78:d0:c4:d9:e2:01:14:e4:ad:2d:11:8f:87:
84:03:48:c2:0d:68:91:33:dd:15:6c:13:b1:27:1f:
28:02:2e:20:65:b5:39:98:25:b9:00:19:60:30:e4:
8c:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0A:23:D3:70:1A:0C:DA:99:C6:7A:9C:3F:A5:1E:83:EA:16:16:2D:AA
X509v3 Authority Key Identifier:
keyid:A0:B3:73:BF:8E:47:72:77:5E:7C:8F:C5:FB:D3:29:CD:EE:44:A3:2C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/oLNzv45HcndefI_F-9Mpze5Eoyw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/407213-b264-4853-9343-ee5585ae13b7/1/oLNzv45HcndefI_F-9Mpze5Eoyw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/407213-b264-4853-9343-ee5585ae13b7/1/oLNzv45HcndefI_F-9Mpze5Eoyw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3c:55:9f:5c:5d:d6:91:b5:f1:13:a6:29:04:95:e2:26:0a:2d:
a3:00:03:f8:d6:15:9e:f7:a1:eb:4c:3d:27:3d:6c:4d:1e:5e:
c1:51:55:a5:99:7c:43:4a:e9:a8:6a:35:54:2f:75:ec:8e:9e:
1c:0b:a0:12:10:00:e3:e3:95:b7:82:e6:9c:c6:81:b8:61:78:
58:02:e9:8f:0e:56:15:45:40:ae:40:65:66:ad:55:e3:0f:22:
7d:73:6e:91:16:0d:c8:d4:26:76:ac:86:38:1a:87:ca:59:f1:
a8:b8:9a:57:b5:4c:71:d7:4a:4c:43:25:06:b9:b5:cf:13:5e:
47:a1:80:41:12:86:46:a0:67:30:a1:43:18:8c:3f:ab:0a:1f:
66:9e:7b:77:94:ed:bb:0c:2a:41:cf:f7:00:37:d1:d1:73:07:
29:a7:9d:0a:10:71:15:19:c9:05:21:1f:f0:cb:72:cd:91:43:
99:64:2c:f8:82:5c:83:d8:a0:e6:28:23:e0:44:16:43:c6:49:
eb:25:e2:84:09:9e:78:87:0b:31:74:94:80:32:07:96:3b:51:
85:38:bf:32:74:75:c5:4a:18:8d:59:68:43:74:48:f2:97:e6:
f3:6e:f9:1c:26:3d:bb:49:e9:0f:59:9a:dc:59:55:13:c3:28:
67:a5:2f:ae
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 13 18:11:12 2025 by rpki-client