Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fc/213983-fcd5-42d5-8f15-d498aab4eb2a/1/oDXttQZCEUQxra7YvFBeaFWcrUo.mft
File: oDXttQZCEUQxra7YvFBeaFWcrUo.mft (raw, json)
Hash identifier: lzBt7iR1HRyQk2j6pO33+AS/uGu09v2uMKTIL1IJvBM=
Subject key identifier: 1F:00:A8:9A:8C:6B:A1:C3:59:5C:92:15:B8:1B:2A:07:C0:9F:92:D4
Authority key identifier: A0:35:ED:B5:06:42:11:44:31:AD:AE:D8:BC:50:5E:68:55:9C:AD:4A
Certificate issuer: /CN=a035edb50642114431adaed8bc505e68559cad4a
Certificate serial: 0196C193F5D99CDE6CEE045CBAFE61417BF7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/oDXttQZCEUQxra7YvFBeaFWcrUo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fc/213983-fcd5-42d5-8f15-d498aab4eb2a/1/oDXttQZCEUQxra7YvFBeaFWcrUo.mft
Manifest number: 0245
Signing time: Sun 11 May 2025 23:00:21 +0000
Manifest this update: Sun 11 May 2025 23:00:21 +0000
Manifest next update: Mon 12 May 2025 23:00:21 +0000
Files and hashes: 1: oDXttQZCEUQxra7YvFBeaFWcrUo.crl (hash: ORGlo6lN9KT67oMggD9pdbLx79+s5PTM6wEoQ5ZvVh8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fc/213983-fcd5-42d5-8f15-d498aab4eb2a/1/oDXttQZCEUQxra7YvFBeaFWcrUo.crl
rsync://rpki.ripe.net/repository/DEFAULT/fc/213983-fcd5-42d5-8f15-d498aab4eb2a/1/oDXttQZCEUQxra7YvFBeaFWcrUo.mft
rsync://rpki.ripe.net/repository/DEFAULT/oDXttQZCEUQxra7YvFBeaFWcrUo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 12 May 2025 16:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:c1:93:f5:d9:9c:de:6c:ee:04:5c:ba:fe:61:41:7b:f7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a035edb50642114431adaed8bc505e68559cad4a
Validity
Not Before: May 11 23:00:21 2025 GMT
Not After : May 12 23:00:21 2025 GMT
Subject: CN=1f00a89a8c6ba1c3595c9215b81b2a07c09f92d4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:16:6c:8c:cf:de:6a:83:c3:9e:aa:87:c9:3d:
fe:98:a3:fc:8e:3f:0c:e4:66:47:34:68:ce:7e:64:
dd:4e:32:08:32:f2:39:f1:0c:4a:1f:e4:f8:44:63:
fa:55:d1:6c:06:d0:01:38:16:fe:86:e9:66:a4:34:
63:5c:9c:d8:e6:15:77:a1:82:7c:07:ef:11:e0:52:
e9:06:4b:9f:ce:45:78:d1:ba:bb:2b:e7:12:4a:1f:
75:7a:db:5d:61:eb:97:b6:b8:c1:40:96:13:d8:f4:
60:e1:68:25:8c:b8:35:4e:ed:8c:9c:67:97:46:06:
a7:d8:6c:f3:bc:2f:5a:6a:ad:e1:76:9e:1d:48:95:
95:02:3e:b2:57:93:ae:b1:03:d2:99:96:25:fe:cb:
f8:ac:0c:af:bb:4e:5f:53:9c:a3:7f:66:9d:d8:8e:
82:0f:27:a4:20:8f:f1:8f:0f:3a:d4:5c:f5:ab:3c:
21:ff:42:1b:d9:94:ec:b5:c9:3e:e9:66:e1:10:89:
3c:44:55:e2:0f:ea:da:7a:fb:da:26:70:71:f0:d5:
86:82:48:a2:92:43:85:42:0a:c2:94:d7:ed:78:00:
44:91:0d:3d:f6:fc:00:9d:8a:5a:ee:1e:75:70:cc:
d8:13:d7:6a:f1:db:7d:f5:07:6d:79:c9:cd:7d:0f:
b6:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1F:00:A8:9A:8C:6B:A1:C3:59:5C:92:15:B8:1B:2A:07:C0:9F:92:D4
X509v3 Authority Key Identifier:
keyid:A0:35:ED:B5:06:42:11:44:31:AD:AE:D8:BC:50:5E:68:55:9C:AD:4A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/oDXttQZCEUQxra7YvFBeaFWcrUo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/213983-fcd5-42d5-8f15-d498aab4eb2a/1/oDXttQZCEUQxra7YvFBeaFWcrUo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/213983-fcd5-42d5-8f15-d498aab4eb2a/1/oDXttQZCEUQxra7YvFBeaFWcrUo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
64:74:6d:2d:51:a7:54:2c:86:14:a4:10:73:48:d5:50:7d:b7:
0a:b3:60:9f:0c:3d:34:39:af:7f:86:f4:1f:b1:5d:6d:79:f0:
33:d1:2f:af:d6:1f:ed:37:3d:32:8c:2d:ec:04:5f:26:c3:58:
82:38:57:42:7d:6a:af:99:b9:fd:02:31:6b:46:ae:88:eb:77:
7f:da:d5:a8:f4:ac:e9:d7:72:b8:7a:6a:f6:3c:ed:0f:ef:c7:
e2:7f:aa:04:cf:5e:58:a6:8f:0e:32:a4:7d:0f:3e:f0:ca:07:
d8:28:83:01:71:1f:93:50:ff:fd:d5:dd:21:33:f5:a2:e7:7d:
e7:73:0b:fe:6b:29:4e:f7:5b:7c:2d:d8:10:7d:45:57:e8:90:
4c:04:04:53:72:0b:36:fb:95:c9:29:78:57:ab:18:56:75:83:
cc:e5:d7:03:23:70:d9:5a:db:0a:65:af:ab:fb:6f:fe:e6:28:
ab:fd:63:aa:57:e0:55:c4:e7:21:5c:94:7b:15:a9:1e:2b:f5:
5d:11:5b:b6:1d:c2:f4:66:f1:42:3c:37:21:da:e7:2d:c6:72:
0e:c2:12:19:a2:bc:72:19:a8:c7:5e:df:ec:48:f4:42:6d:ba:
bb:97:bb:af:1d:36:94:60:0b:ab:63:03:59:4f:ed:16:99:01:
00:1d:d3:03
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 12 02:17:08 2025 by rpki-client