Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ed/4de805-d5dc-46f7-b397-5b5332af1851/1/0ol7M1OC-CJPXYkOMbOGMhxrs-0.mft
File: 0ol7M1OC-CJPXYkOMbOGMhxrs-0.mft (raw, json)
Hash identifier: Vh2kT2+ND/4fHpNEvefNHuSOmrldKMiqwx/P4mrOeL8=
Subject key identifier: 2A:47:12:9B:2E:0B:B9:13:D6:51:0F:C7:43:58:C3:97:FE:EE:E6:7E
Authority key identifier: D2:89:7B:33:53:82:F8:22:4F:5D:89:0E:31:B3:86:32:1C:6B:B3:ED
Certificate issuer: /CN=d2897b335382f8224f5d890e31b386321c6bb3ed
Certificate serial: 0196C34BC463F1C74ED4DC1294D50AD23232
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0ol7M1OC-CJPXYkOMbOGMhxrs-0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ed/4de805-d5dc-46f7-b397-5b5332af1851/1/0ol7M1OC-CJPXYkOMbOGMhxrs-0.mft
Manifest number: 0943
Signing time: Mon 12 May 2025 07:00:44 +0000
Manifest this update: Mon 12 May 2025 07:00:44 +0000
Manifest next update: Tue 13 May 2025 07:00:44 +0000
Files and hashes: 1: 0ol7M1OC-CJPXYkOMbOGMhxrs-0.crl (hash: L60jnKilF3b9+sTxsQYCXQNeCUafI4sX6IwL3KvmbYE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ed/4de805-d5dc-46f7-b397-5b5332af1851/1/0ol7M1OC-CJPXYkOMbOGMhxrs-0.crl
rsync://rpki.ripe.net/repository/DEFAULT/ed/4de805-d5dc-46f7-b397-5b5332af1851/1/0ol7M1OC-CJPXYkOMbOGMhxrs-0.mft
rsync://rpki.ripe.net/repository/DEFAULT/0ol7M1OC-CJPXYkOMbOGMhxrs-0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 13 May 2025 07:00:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:c3:4b:c4:63:f1:c7:4e:d4:dc:12:94:d5:0a:d2:32:32
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d2897b335382f8224f5d890e31b386321c6bb3ed
Validity
Not Before: May 12 07:00:44 2025 GMT
Not After : May 13 07:00:44 2025 GMT
Subject: CN=2a47129b2e0bb913d6510fc74358c397feeee67e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:a7:c9:cd:2a:1b:d7:a4:0c:5c:dd:9b:5c:91:
84:80:b4:98:be:21:99:34:6f:f0:0c:dc:29:cd:8a:
14:50:a7:33:de:8e:10:12:b7:a4:e6:43:70:c5:a0:
40:0a:38:63:a0:8f:c0:4c:b2:93:1c:13:6a:9a:ed:
13:2b:8f:32:1d:33:95:5b:75:e1:7f:a8:d8:5b:d4:
78:b0:a3:85:ef:c6:27:8b:ce:1c:63:4b:7f:60:e8:
aa:c0:68:54:58:9e:89:08:87:41:09:10:51:c9:69:
27:2b:95:64:25:4e:c3:30:2b:fb:85:b5:f5:80:a5:
61:ef:33:c5:6a:38:cd:f9:3a:da:f7:90:d2:ce:16:
5e:8f:a0:8a:1a:ef:24:eb:f2:51:c5:0e:e9:d3:5b:
37:38:b5:14:d6:87:71:34:63:d5:b2:28:c6:fa:1d:
c7:b3:93:3a:8f:f7:ac:20:37:53:4c:4e:03:91:e6:
af:ed:bd:20:82:a9:24:22:ec:df:e3:7e:cb:3e:52:
98:e4:89:5e:a9:94:17:c0:23:2c:12:6b:1d:1c:bf:
d9:75:1d:95:55:23:84:90:8d:c5:26:1f:d0:3f:2c:
49:ac:b0:31:dd:71:4f:0e:42:9d:0f:02:b4:ad:91:
9d:20:c9:bf:f0:57:f7:78:72:d6:0f:9b:3e:b1:35:
ff:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2A:47:12:9B:2E:0B:B9:13:D6:51:0F:C7:43:58:C3:97:FE:EE:E6:7E
X509v3 Authority Key Identifier:
keyid:D2:89:7B:33:53:82:F8:22:4F:5D:89:0E:31:B3:86:32:1C:6B:B3:ED
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0ol7M1OC-CJPXYkOMbOGMhxrs-0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ed/4de805-d5dc-46f7-b397-5b5332af1851/1/0ol7M1OC-CJPXYkOMbOGMhxrs-0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ed/4de805-d5dc-46f7-b397-5b5332af1851/1/0ol7M1OC-CJPXYkOMbOGMhxrs-0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
16:25:ae:57:0b:69:88:bf:77:88:6b:9c:86:49:5b:48:bd:20:
5c:89:c3:1d:30:16:e2:fc:3c:25:58:03:ca:be:66:79:4b:99:
d3:e5:69:d6:51:72:c7:c5:79:22:a8:88:d7:1f:bd:cd:01:19:
6e:de:ed:f5:90:68:a9:5f:3c:61:8c:54:41:02:cf:b2:d2:c8:
8c:c5:a4:fa:51:21:67:d8:f6:b9:3e:8e:df:b5:ce:32:03:cf:
ef:3a:5e:90:90:de:02:97:aa:cf:58:6a:7a:fe:e9:46:de:27:
04:08:6c:c5:be:98:a3:f0:21:fa:ac:5e:8d:b8:da:fc:4e:d5:
c0:e6:c0:fb:1d:e7:57:e6:ef:81:1a:7c:9a:4f:50:50:ca:1a:
a0:5c:be:55:9c:33:30:34:a3:41:ec:c1:01:9a:8b:ec:12:dd:
82:bf:9a:de:69:1d:28:dd:2b:a0:76:b1:24:1e:17:5c:83:1d:
7a:1c:48:33:e3:20:04:ef:75:46:12:68:13:9a:07:be:2d:48:
a7:3a:8d:15:fc:ec:64:7c:8f:12:04:ed:3a:35:fa:dd:a6:7a:
84:ee:4b:e7:ba:d3:06:2d:a3:15:a2:6c:e9:f4:ea:dc:8a:cf:
e2:92:39:9e:4b:1d:5d:ca:05:a9:dc:da:44:8b:93:38:24:a0:
b5:fc:db:25
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 12 13:08:21 2025 by rpki-client