Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/17/014526-da31-47c5-9a5c-9d86528da099/1/OY5Tm8xek0YkNE2IT2Ipk7HumqE.mft
File: OY5Tm8xek0YkNE2IT2Ipk7HumqE.mft (raw, json)
Hash identifier: P64RB9zqeBm2mYct3UL7/kkG+KsLPnx58EfZdGUiiQU=
Subject key identifier: BF:30:F0:AD:5B:C2:9C:31:5B:A9:14:1D:E2:6C:BF:BC:A0:E7:03:4B
Authority key identifier: 39:8E:53:9B:CC:5E:93:46:24:34:4D:88:4F:62:29:93:B1:EE:9A:A1
Certificate issuer: /CN=398e539bcc5e934624344d884f622993b1ee9aa1
Certificate serial: 0196549343F6A03E88C2178D930EB263A1FC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OY5Tm8xek0YkNE2IT2Ipk7HumqE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/17/014526-da31-47c5-9a5c-9d86528da099/1/OY5Tm8xek0YkNE2IT2Ipk7HumqE.mft
Manifest number: 034C
Signing time: Sun 20 Apr 2025 19:00:59 +0000
Manifest this update: Sun 20 Apr 2025 19:00:59 +0000
Manifest next update: Mon 21 Apr 2025 19:00:59 +0000
Files and hashes: 1: OY5Tm8xek0YkNE2IT2Ipk7HumqE.crl (hash: KaFpyhWXGE5symMbxE72O9sYGxuZ+LE0bEpuDwvyctc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/17/014526-da31-47c5-9a5c-9d86528da099/1/OY5Tm8xek0YkNE2IT2Ipk7HumqE.crl
rsync://rpki.ripe.net/repository/DEFAULT/17/014526-da31-47c5-9a5c-9d86528da099/1/OY5Tm8xek0YkNE2IT2Ipk7HumqE.mft
rsync://rpki.ripe.net/repository/DEFAULT/OY5Tm8xek0YkNE2IT2Ipk7HumqE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 21 Apr 2025 19:00:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:54:93:43:f6:a0:3e:88:c2:17:8d:93:0e:b2:63:a1:fc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=398e539bcc5e934624344d884f622993b1ee9aa1
Validity
Not Before: Apr 20 19:00:59 2025 GMT
Not After : Apr 21 19:00:59 2025 GMT
Subject: CN=bf30f0ad5bc29c315ba9141de26cbfbca0e7034b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:5f:52:ea:91:d7:4e:e7:a8:3f:69:34:02:3e:
16:23:10:6a:58:0e:eb:7e:89:49:9f:80:f3:fc:cd:
54:a5:f0:34:1b:5e:e3:24:1e:c0:5b:d7:6e:c8:63:
a6:ff:0c:af:bb:0c:e4:09:1b:58:77:40:30:90:1b:
e8:a5:8d:6b:2d:59:52:f8:39:fd:8b:b2:d7:a8:01:
79:f3:b6:5d:ad:b7:f0:45:36:cc:c3:20:49:40:0f:
4f:b0:4a:18:ad:c3:8f:72:78:33:08:d5:15:da:63:
61:28:fd:2c:a4:75:78:27:44:69:88:4b:24:13:72:
ae:ca:0a:b6:b5:86:b6:eb:ed:90:32:0f:83:9a:49:
b9:6b:ec:88:45:f0:4f:b7:04:bb:87:9b:5e:6f:61:
c1:be:42:8f:24:82:08:dc:87:2c:5f:a5:f0:b2:5e:
e0:7e:98:92:f0:7c:f1:05:a4:4a:01:54:aa:30:ce:
d4:d8:56:f4:c3:9e:a7:e4:56:55:b1:a0:98:b9:1f:
8b:59:12:67:29:eb:10:86:3e:7f:44:ec:6b:0e:a4:
86:86:43:66:19:95:ae:56:15:55:8a:d6:a0:50:e3:
f9:92:f0:22:2d:a4:dc:ab:54:7f:49:07:3b:67:55:
54:6c:f1:1d:8b:8b:a3:15:b8:94:4f:e8:29:6e:0f:
63:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BF:30:F0:AD:5B:C2:9C:31:5B:A9:14:1D:E2:6C:BF:BC:A0:E7:03:4B
X509v3 Authority Key Identifier:
keyid:39:8E:53:9B:CC:5E:93:46:24:34:4D:88:4F:62:29:93:B1:EE:9A:A1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OY5Tm8xek0YkNE2IT2Ipk7HumqE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/17/014526-da31-47c5-9a5c-9d86528da099/1/OY5Tm8xek0YkNE2IT2Ipk7HumqE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/17/014526-da31-47c5-9a5c-9d86528da099/1/OY5Tm8xek0YkNE2IT2Ipk7HumqE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
15:9f:64:dc:3a:a4:ea:ed:09:d4:57:88:48:d0:34:83:ee:b5:
46:a8:71:80:77:b9:82:ee:3b:3d:40:92:1b:1c:a5:31:2b:a1:
ae:93:7a:d9:ba:d1:68:b8:98:dd:4a:34:b1:f7:2a:cd:b3:7b:
e8:de:59:ab:67:0c:7c:f4:fe:05:2a:36:b5:99:68:57:10:0c:
2e:67:78:31:41:02:48:bd:7d:c6:21:b9:3e:19:9f:64:f6:ba:
62:93:4e:fa:68:28:70:8a:59:1d:57:9f:28:2c:84:63:01:08:
e6:38:5a:a2:7c:3c:34:b6:2f:34:50:0d:0c:fb:f6:2a:a3:02:
c1:7d:25:9a:94:5e:a7:1a:25:26:12:5d:0c:eb:ca:d9:fe:b5:
30:c7:2b:b4:45:b0:a5:7e:b9:6a:7d:e7:e1:b4:d8:b2:9b:53:
a8:aa:8e:65:68:aa:c0:8f:ad:1e:95:7e:c9:5a:ed:ac:78:24:
b4:46:c9:1e:72:55:e5:6e:23:ad:31:9f:48:aa:8f:96:4f:15:
e5:33:18:40:7d:bc:94:64:09:22:ea:a5:a1:d9:68:ee:75:13:
2c:1e:ff:6d:ac:9c:c3:3d:0b:bb:ee:0e:9d:74:bb:7e:7d:f4:
e1:fa:3a:8d:43:90:78:cf:71:d2:00:a6:99:89:d0:63:df:34:
ca:cc:70:66
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 21 05:51:29 2025 by rpki-client