Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f0/46238a-a19a-4915-8a47-a0cd141513cb/1/AOezY1s9V4VgNwpYMDz81c2SkQU.mft
File: AOezY1s9V4VgNwpYMDz81c2SkQU.mft (raw, json)
Hash identifier: Jz0hmODreVPXZW2/IChvkAMFUHQtnCJKPf5VOm3c90Y=
Subject key identifier: 83:CC:84:5D:FF:B0:40:22:B4:B9:C1:E8:42:53:EC:03:F8:D3:F5:4D
Authority key identifier: 00:E7:B3:63:5B:3D:57:85:60:37:0A:58:30:3C:FC:D5:CD:92:91:05
Certificate issuer: /CN=00e7b3635b3d578560370a58303cfcd5cd929105
Certificate serial: 0196CCF3AEB5AA626A4E64D2070C2D38C635
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/AOezY1s9V4VgNwpYMDz81c2SkQU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f0/46238a-a19a-4915-8a47-a0cd141513cb/1/AOezY1s9V4VgNwpYMDz81c2SkQU.mft
Manifest number: 0C4E
Signing time: Wed 14 May 2025 04:00:44 +0000
Manifest this update: Wed 14 May 2025 04:00:44 +0000
Manifest next update: Thu 15 May 2025 04:00:44 +0000
Files and hashes: 1: AOezY1s9V4VgNwpYMDz81c2SkQU.crl (hash: Jh3Gs8aGkTKo5s/piIgmLjbAtxBZ/KF7uBcSl8a1UHE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f0/46238a-a19a-4915-8a47-a0cd141513cb/1/AOezY1s9V4VgNwpYMDz81c2SkQU.crl
rsync://rpki.ripe.net/repository/DEFAULT/f0/46238a-a19a-4915-8a47-a0cd141513cb/1/AOezY1s9V4VgNwpYMDz81c2SkQU.mft
rsync://rpki.ripe.net/repository/DEFAULT/AOezY1s9V4VgNwpYMDz81c2SkQU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 14 May 2025 23:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:cc:f3:ae:b5:aa:62:6a:4e:64:d2:07:0c:2d:38:c6:35
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=00e7b3635b3d578560370a58303cfcd5cd929105
Validity
Not Before: May 14 04:00:44 2025 GMT
Not After : May 15 04:00:44 2025 GMT
Subject: CN=83cc845dffb04022b4b9c1e84253ec03f8d3f54d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:5b:89:77:ce:14:ea:85:a4:1f:6d:32:ca:fb:
77:2a:2d:45:05:f5:63:0e:cd:e0:ac:d3:8e:a8:e4:
f7:fb:e4:3e:11:32:eb:a8:12:2e:77:3d:d3:e3:2c:
1c:ce:28:74:ac:21:5e:80:f5:3c:82:95:b7:a3:77:
8e:a0:77:74:22:2d:cd:e0:09:cd:c2:db:94:91:99:
3e:da:ff:38:6e:b5:e7:44:4b:4e:70:ce:dd:5c:f4:
d7:47:b2:b1:d6:89:dc:86:95:1c:a7:39:ae:28:73:
1f:8a:be:7f:ec:c4:76:89:30:60:f7:f3:f4:86:d3:
47:2d:3a:5c:06:4f:2d:93:05:06:05:d9:8a:2c:12:
c4:43:20:7e:32:13:2b:15:66:64:fa:29:be:1b:87:
1f:5b:db:af:db:03:9f:b2:e4:ee:2b:67:d1:dc:93:
7e:5e:ff:b6:d9:62:07:06:9d:96:2f:a9:4f:94:9f:
c3:b0:db:67:e5:47:53:ef:9c:ab:eb:6a:31:1e:b2:
70:e3:b7:ea:e8:71:79:39:9f:c4:dc:c7:1f:ff:57:
aa:69:a1:ec:1e:5c:ee:52:8e:8a:52:17:fe:c6:d8:
ee:3c:5a:4a:bb:6e:7c:04:03:c2:3c:31:2a:aa:1d:
b5:e3:0e:58:48:00:66:63:39:dd:92:23:0b:4c:da:
27:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
83:CC:84:5D:FF:B0:40:22:B4:B9:C1:E8:42:53:EC:03:F8:D3:F5:4D
X509v3 Authority Key Identifier:
keyid:00:E7:B3:63:5B:3D:57:85:60:37:0A:58:30:3C:FC:D5:CD:92:91:05
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AOezY1s9V4VgNwpYMDz81c2SkQU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/46238a-a19a-4915-8a47-a0cd141513cb/1/AOezY1s9V4VgNwpYMDz81c2SkQU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/46238a-a19a-4915-8a47-a0cd141513cb/1/AOezY1s9V4VgNwpYMDz81c2SkQU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2b:20:a7:71:44:a7:39:28:8a:71:e9:15:0f:c7:8f:38:8d:4d:
77:6a:f0:3e:b9:77:12:80:9d:a7:51:7f:2a:eb:8e:20:b8:b6:
1e:c5:45:2d:9e:ce:b3:b7:e9:b2:00:35:c9:7a:6c:83:cb:89:
cc:d7:4c:bb:da:5f:cf:2f:2e:fd:d6:dc:b8:29:cd:3c:b0:e4:
82:78:e3:d1:df:f0:8e:b5:bf:25:28:39:a2:d8:3c:3c:cf:35:
03:89:08:d3:b7:ea:42:99:79:af:2b:ac:73:5c:38:4f:6a:c4:
fa:a4:e0:b5:9e:55:5b:be:46:b8:08:52:49:14:50:49:1d:53:
9c:7f:30:ae:76:d0:8c:74:9a:10:d4:58:e0:5a:f8:7b:b9:32:
fd:77:c0:72:9a:fa:f6:70:2d:36:01:ce:3f:e7:1a:1d:e1:2b:
70:0b:18:c8:dc:f7:b8:9a:dc:b8:ce:46:b2:29:0b:49:1f:54:
95:ea:70:22:d7:02:e8:11:f8:a4:6c:9b:84:6d:00:2b:ba:7d:
62:3f:a9:58:60:02:96:ee:a2:86:00:01:4a:3b:9b:37:b2:ef:
32:40:a5:69:24:2d:0f:9f:8d:67:a5:65:d6:21:de:e7:14:85:
52:17:8e:c8:9b:9c:5b:3c:cd:0a:97:bb:1d:69:61:80:9d:5e:
49:c0:68:96
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 14 09:12:20 2025 by rpki-client