Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/43/c9ca65-9253-4fc4-9bbf-01dc944c4477/1/oCUv6bQqZD9HflhGYZquiGkX7_s.mft
File: oCUv6bQqZD9HflhGYZquiGkX7_s.mft (raw, json)
Hash identifier: bxKWduCSEIktQ91kF/cbTelVHxAhnYJgVoM/SIoCVu0=
Subject key identifier: C7:78:BC:6A:8E:0C:4F:9B:DE:58:F1:A5:65:69:4B:AA:F7:A4:48:6B
Authority key identifier: A0:25:2F:E9:B4:2A:64:3F:47:7E:58:46:61:9A:AE:88:69:17:EF:FB
Certificate issuer: /CN=a0252fe9b42a643f477e5846619aae886917effb
Certificate serial: 0196580192EDFEF24847132B731609DA4EF3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/oCUv6bQqZD9HflhGYZquiGkX7_s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/43/c9ca65-9253-4fc4-9bbf-01dc944c4477/1/oCUv6bQqZD9HflhGYZquiGkX7_s.mft
Manifest number: 12E8
Signing time: Mon 21 Apr 2025 11:00:20 +0000
Manifest this update: Mon 21 Apr 2025 11:00:20 +0000
Manifest next update: Tue 22 Apr 2025 11:00:20 +0000
Files and hashes: 1: oCUv6bQqZD9HflhGYZquiGkX7_s.crl (hash: JOPCl+LnHDYiFD8/S7uKdYFW3YcLxFBfnFjXu22kE/s=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/43/c9ca65-9253-4fc4-9bbf-01dc944c4477/1/oCUv6bQqZD9HflhGYZquiGkX7_s.crl
rsync://rpki.ripe.net/repository/DEFAULT/43/c9ca65-9253-4fc4-9bbf-01dc944c4477/1/oCUv6bQqZD9HflhGYZquiGkX7_s.mft
rsync://rpki.ripe.net/repository/DEFAULT/oCUv6bQqZD9HflhGYZquiGkX7_s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 22 Apr 2025 10:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:58:01:92:ed:fe:f2:48:47:13:2b:73:16:09:da:4e:f3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a0252fe9b42a643f477e5846619aae886917effb
Validity
Not Before: Apr 21 11:00:20 2025 GMT
Not After : Apr 22 11:00:20 2025 GMT
Subject: CN=c778bc6a8e0c4f9bde58f1a565694baaf7a4486b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:a4:97:4f:e5:02:d2:2d:73:ad:ef:16:c8:7a:
66:41:33:3e:38:15:00:fb:0f:c0:95:d8:9e:fe:1d:
c3:da:22:b2:3c:f9:35:48:87:46:d4:94:cd:b9:2b:
c1:8e:f7:0b:eb:fa:80:cb:2c:07:fb:be:48:70:eb:
7a:3b:d7:a8:2b:0e:56:52:35:21:f1:f2:0f:fa:60:
e2:c9:dc:36:bb:cb:05:b2:2a:07:1b:e0:e2:99:bf:
c0:22:4a:69:9a:67:f7:32:66:4b:13:d7:52:7e:f5:
79:e4:6b:de:52:8a:3c:1e:ab:05:f4:6f:f2:b1:87:
57:df:20:1a:44:a7:3a:5c:d3:17:30:49:5f:7c:f0:
da:46:66:91:7f:82:62:81:6d:96:ec:d6:65:00:d8:
95:df:e6:f7:84:41:60:17:69:a1:bc:70:8e:a3:a1:
ef:a5:1a:2f:a2:40:d5:90:87:1c:2d:17:8b:e7:50:
76:f7:fe:0f:3b:13:7d:d7:a2:50:89:20:72:b9:d0:
ac:47:da:9b:db:b0:49:15:3c:8c:4f:b9:3c:b8:4b:
2b:12:39:22:1a:00:8c:17:40:c1:b1:7b:12:38:f7:
00:80:97:b2:3e:82:5d:9b:27:e5:ba:1e:26:5f:a1:
15:25:a2:e3:82:46:05:88:54:14:4d:f1:7e:27:1b:
bf:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C7:78:BC:6A:8E:0C:4F:9B:DE:58:F1:A5:65:69:4B:AA:F7:A4:48:6B
X509v3 Authority Key Identifier:
keyid:A0:25:2F:E9:B4:2A:64:3F:47:7E:58:46:61:9A:AE:88:69:17:EF:FB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/oCUv6bQqZD9HflhGYZquiGkX7_s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/43/c9ca65-9253-4fc4-9bbf-01dc944c4477/1/oCUv6bQqZD9HflhGYZquiGkX7_s.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/43/c9ca65-9253-4fc4-9bbf-01dc944c4477/1/oCUv6bQqZD9HflhGYZquiGkX7_s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b2:ee:f2:b8:c2:6f:c1:90:22:67:97:47:8a:0f:3d:e7:98:b2:
b3:89:d8:bd:a8:10:d5:34:20:45:ba:70:ed:17:05:09:b0:68:
ec:07:b9:b6:93:9f:b4:29:73:99:db:ea:f3:27:fe:c4:2f:87:
8c:8f:0a:0a:bf:9f:b9:5d:11:a4:4f:02:98:b6:ab:c8:d4:93:
ee:1a:bf:c1:00:42:6e:da:74:c9:41:62:82:10:d0:77:ae:15:
3c:49:41:9c:01:43:ce:cf:6e:89:50:bb:58:e3:da:f9:20:a4:
a7:60:05:d3:10:51:17:40:88:36:07:6f:d1:dc:b0:13:fe:86:
cc:41:22:50:0d:5f:60:12:bf:87:33:d4:94:86:37:3c:07:f6:
c3:38:1c:66:36:98:92:15:d8:d0:22:df:3f:cd:dc:6d:c3:94:
2f:27:3c:4e:34:64:ed:e8:c3:fa:22:c0:5d:58:df:09:e5:ca:
72:51:79:51:7b:69:aa:c1:74:da:47:35:b4:d9:9e:92:2e:37:
bc:d3:18:42:91:15:23:1b:d5:f5:8d:e4:66:ce:a5:58:44:21:
d2:99:cc:72:fa:d3:db:86:c9:f2:3c:a1:94:a1:8d:dd:b6:70:
c0:a0:2e:46:31:e0:51:67:e3:e3:61:9e:5a:e3:ed:6f:51:73:
7f:e6:4e:e4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 21 15:03:26 2025 by rpki-client