Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/eb/ea76fe-6119-4de0-bf4b-4b1af414fd00/1/oVJEYml6J_56uUtqypBnkx2SEC8.mft
File: oVJEYml6J_56uUtqypBnkx2SEC8.mft (raw, json)
Hash identifier: tIavRk/tbKfa+U0gLXDcvxCvDfHBEiLSwK9RlnLHiZw=
Subject key identifier: 3E:1B:37:41:FA:E4:60:E0:1E:DD:AF:0C:97:C3:DC:5C:02:2B:6A:40
Authority key identifier: A1:52:44:62:69:7A:27:FE:7A:B9:4B:6A:CA:90:67:93:1D:92:10:2F
Certificate issuer: /CN=a1524462697a27fe7ab94b6aca9067931d92102f
Certificate serial: 0196B7B5682F0C4FC76254B451522EC88133
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/oVJEYml6J_56uUtqypBnkx2SEC8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/eb/ea76fe-6119-4de0-bf4b-4b1af414fd00/1/oVJEYml6J_56uUtqypBnkx2SEC8.mft
Manifest number: 152E
Signing time: Sat 10 May 2025 01:00:41 +0000
Manifest this update: Sat 10 May 2025 01:00:41 +0000
Manifest next update: Sun 11 May 2025 01:00:41 +0000
Files and hashes: 1: oVJEYml6J_56uUtqypBnkx2SEC8.crl (hash: rBl1uWkpCuPLu5qISQPPAEl5xxNblm9DK58d8hlytec=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/eb/ea76fe-6119-4de0-bf4b-4b1af414fd00/1/oVJEYml6J_56uUtqypBnkx2SEC8.crl
rsync://rpki.ripe.net/repository/DEFAULT/eb/ea76fe-6119-4de0-bf4b-4b1af414fd00/1/oVJEYml6J_56uUtqypBnkx2SEC8.mft
rsync://rpki.ripe.net/repository/DEFAULT/oVJEYml6J_56uUtqypBnkx2SEC8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 11 May 2025 01:00:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:b7:b5:68:2f:0c:4f:c7:62:54:b4:51:52:2e:c8:81:33
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a1524462697a27fe7ab94b6aca9067931d92102f
Validity
Not Before: May 10 01:00:41 2025 GMT
Not After : May 11 01:00:41 2025 GMT
Subject: CN=3e1b3741fae460e01eddaf0c97c3dc5c022b6a40
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:3c:57:35:bc:bf:56:ca:4a:8d:7a:f2:45:35:
8a:7e:2f:1c:28:ac:bb:60:30:97:35:9e:28:ac:e9:
52:83:76:6c:1e:fb:9f:38:35:79:ca:84:d6:66:cf:
75:9d:d3:7e:db:3b:b6:c0:22:29:62:fa:93:ce:70:
36:1b:5f:9d:33:c2:62:e3:c4:ac:14:ab:e3:96:cb:
90:2d:89:cd:f1:d5:3b:0b:22:f4:10:33:12:1c:19:
4a:90:1e:17:dd:fa:cf:a0:a9:ca:92:55:98:79:f1:
6f:1f:a9:46:76:7c:7e:6d:20:30:2a:ad:55:b7:62:
5c:e0:65:56:1f:b5:28:3b:20:16:d9:aa:66:41:4e:
45:e1:8f:a3:b5:90:d2:ed:d2:62:7d:00:53:44:80:
02:a1:5b:1b:4f:7a:57:c4:2d:63:84:e2:b0:ff:06:
f1:bb:df:b9:cc:f1:db:eb:94:b5:f6:94:3d:0a:f9:
19:ec:32:e0:e2:3b:d2:50:e9:1a:7c:fb:0c:cc:96:
bf:d0:c6:9f:5b:0d:85:df:6d:4e:ce:dd:00:24:6d:
c7:0f:3d:12:53:f5:8b:d0:60:01:d1:d1:66:8c:fa:
85:26:71:98:30:ff:2d:64:ba:20:cd:f2:e2:9f:90:
82:b2:c3:13:25:e8:6a:9a:96:de:99:04:34:35:a1:
47:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3E:1B:37:41:FA:E4:60:E0:1E:DD:AF:0C:97:C3:DC:5C:02:2B:6A:40
X509v3 Authority Key Identifier:
keyid:A1:52:44:62:69:7A:27:FE:7A:B9:4B:6A:CA:90:67:93:1D:92:10:2F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/oVJEYml6J_56uUtqypBnkx2SEC8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/ea76fe-6119-4de0-bf4b-4b1af414fd00/1/oVJEYml6J_56uUtqypBnkx2SEC8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/ea76fe-6119-4de0-bf4b-4b1af414fd00/1/oVJEYml6J_56uUtqypBnkx2SEC8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
15:30:23:2c:b8:d4:2f:16:41:72:50:0c:42:a8:9b:35:9d:55:
b1:c6:8d:2b:d2:af:4b:17:9b:1c:cf:15:6b:6f:86:70:98:6c:
eb:8a:65:4d:db:c3:b2:7c:69:56:0e:66:76:28:c0:a4:e7:b6:
90:4f:04:4d:8b:d3:39:9a:17:72:12:56:f5:2c:fc:70:0d:5b:
b2:95:91:e9:67:cb:97:fb:38:e4:4d:66:0d:b0:af:44:f4:4d:
8e:e3:10:a5:03:da:1d:e9:d0:4d:3a:05:1b:f6:58:b3:ed:22:
ec:dc:39:35:69:77:e9:9b:f3:06:d1:33:6e:b6:74:ab:13:ca:
84:ad:00:55:fe:e8:15:09:75:63:e7:80:b9:20:11:97:39:e9:
9d:5a:9e:db:93:2f:e3:2c:0a:78:23:af:67:52:b5:aa:26:c6:
89:4e:f0:cf:e3:19:61:e3:36:11:b6:98:cf:16:d3:6d:8a:48:
2d:b6:27:f8:a4:84:d4:fc:a3:25:a8:3f:d6:51:51:b8:aa:94:
56:92:5f:fc:69:5d:3a:19:da:17:59:c7:89:32:8e:df:38:4b:
a1:7e:ed:9b:74:37:ad:30:88:2d:e9:ee:6e:3b:ab:b6:7b:01:
21:33:6f:90:18:0b:0a:e3:83:3b:2a:30:7c:ba:4c:16:8e:01:
99:81:52:1b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 10 10:32:35 2025 by rpki-client