Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fd/abbcc9-f832-4b5b-bc22-25781e116782/1/oJD-k_R_g4ea4suDVIjNn31pm8A.mft
File: oJD-k_R_g4ea4suDVIjNn31pm8A.mft (raw, json)
Hash identifier: 7q8C9hDne8VlWjFRiytO+f/SR3li06IWT7mlNXngVRA=
Subject key identifier: F1:06:20:EE:C9:45:06:AD:51:CD:A1:A1:00:FF:64:EA:41:8B:52:41
Authority key identifier: A0:90:FE:93:F4:7F:83:87:9A:E2:CB:83:54:88:CD:9F:7D:69:9B:C0
Certificate issuer: /CN=a090fe93f47f83879ae2cb835488cd9f7d699bc0
Certificate serial: 0196BD812E927F8503EECF2B7230B440D949
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/oJD-k_R_g4ea4suDVIjNn31pm8A.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fd/abbcc9-f832-4b5b-bc22-25781e116782/1/oJD-k_R_g4ea4suDVIjNn31pm8A.mft
Manifest number: 1532
Signing time: Sun 11 May 2025 04:01:21 +0000
Manifest this update: Sun 11 May 2025 04:01:21 +0000
Manifest next update: Mon 12 May 2025 04:01:21 +0000
Files and hashes: 1: oJD-k_R_g4ea4suDVIjNn31pm8A.crl (hash: iVQ1jzmECoze+EbfZSMn+5VhL3eB9KeJSByWNaJEvRQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fd/abbcc9-f832-4b5b-bc22-25781e116782/1/oJD-k_R_g4ea4suDVIjNn31pm8A.crl
rsync://rpki.ripe.net/repository/DEFAULT/fd/abbcc9-f832-4b5b-bc22-25781e116782/1/oJD-k_R_g4ea4suDVIjNn31pm8A.mft
rsync://rpki.ripe.net/repository/DEFAULT/oJD-k_R_g4ea4suDVIjNn31pm8A.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 12 May 2025 04:01:21 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:bd:81:2e:92:7f:85:03:ee:cf:2b:72:30:b4:40:d9:49
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a090fe93f47f83879ae2cb835488cd9f7d699bc0
Validity
Not Before: May 11 04:01:21 2025 GMT
Not After : May 12 04:01:21 2025 GMT
Subject: CN=f10620eec94506ad51cda1a100ff64ea418b5241
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:79:f2:c6:9b:8a:9a:16:07:0f:ac:b0:31:2d:
7e:b6:0c:69:ac:c3:72:7a:e9:11:ad:fe:64:c6:5b:
73:c4:67:23:44:4a:dd:8d:45:ff:0d:21:86:26:3a:
3c:ca:b2:17:a5:2c:03:d9:8b:77:8b:7c:95:42:7b:
f3:8f:a7:d0:99:f9:23:fd:b4:ba:9c:51:35:6a:57:
b4:5e:5f:45:75:4b:7e:1c:1a:03:05:56:12:7a:f5:
d6:85:02:2f:ce:07:91:db:ab:4b:04:d4:a8:15:0c:
2d:05:a3:aa:7c:00:91:72:c1:39:f6:f0:e8:67:51:
9e:3a:e7:35:80:5c:1f:6f:ca:c3:34:b0:35:b2:5e:
df:1f:ab:c0:e3:cf:c2:f3:46:af:9f:77:59:e7:16:
f1:15:6e:e6:a5:27:18:80:87:d1:cc:3f:4c:a2:61:
64:8f:d7:d1:8d:dc:e1:92:52:b8:71:6d:d3:d3:36:
86:88:4f:c7:31:11:4c:b1:be:3c:eb:16:96:c1:35:
ef:55:1d:c3:3b:d1:44:07:43:85:57:6c:9b:47:ea:
f4:d1:f8:0e:cb:9b:5d:af:63:b5:89:8a:c0:f8:97:
2b:46:c5:af:b6:f0:5d:14:eb:ac:fa:44:9e:f7:f9:
ac:d8:43:7a:96:57:d5:da:04:0f:57:58:2e:f4:44:
73:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F1:06:20:EE:C9:45:06:AD:51:CD:A1:A1:00:FF:64:EA:41:8B:52:41
X509v3 Authority Key Identifier:
keyid:A0:90:FE:93:F4:7F:83:87:9A:E2:CB:83:54:88:CD:9F:7D:69:9B:C0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/oJD-k_R_g4ea4suDVIjNn31pm8A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/abbcc9-f832-4b5b-bc22-25781e116782/1/oJD-k_R_g4ea4suDVIjNn31pm8A.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/abbcc9-f832-4b5b-bc22-25781e116782/1/oJD-k_R_g4ea4suDVIjNn31pm8A.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
07:d6:b4:c5:04:10:56:d3:1b:f6:72:a2:c0:5d:ed:04:39:d8:
c6:9c:9a:b3:2e:0e:b1:f4:45:2b:cf:62:ef:6d:d2:5c:03:c6:
5d:47:aa:e7:ec:c9:84:3c:c1:1d:dc:bd:c2:d6:ee:b5:64:89:
12:d1:10:44:e8:e5:f4:8a:7b:f8:1f:f4:53:c0:f6:48:84:44:
8b:b8:3c:37:7e:a8:69:3f:48:22:5b:03:ec:c2:69:b9:01:33:
d5:3f:d9:60:32:23:4e:f5:a7:90:2d:3f:08:f7:69:55:cc:55:
b4:23:5a:c3:84:da:74:ff:b9:86:8d:c1:4b:fc:b4:a4:8c:44:
84:cc:4f:30:9d:a2:de:dd:3f:25:dc:79:16:6b:0c:d9:33:05:
69:e0:9f:a5:cf:a1:73:ac:91:33:cd:c1:d9:27:7d:d1:0b:2b:
ca:91:19:f6:b3:40:8e:83:3d:3f:4d:90:ba:ab:55:68:83:1e:
3d:9e:c4:24:74:75:19:cd:ec:b3:eb:71:12:2f:fa:ad:b8:d1:
2b:f0:ae:c1:1c:2d:bb:86:57:6e:8d:ac:fc:15:ac:6a:38:b2:
0f:3d:5f:5e:78:73:e4:06:21:7b:a9:6d:ab:0f:a9:f6:01:c4:
bb:36:a3:07:db:5f:a9:b0:16:f8:ed:14:66:3d:94:c8:2b:0b:
5f:78:61:0a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 11 10:44:24 2025 by rpki-client