Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5b/a388b6-43c6-4458-abf5-d3332f9044ec/1/oy2niZiHqsRJlYu5DrU1lRqXOgA.mft
File: oy2niZiHqsRJlYu5DrU1lRqXOgA.mft (raw, json)
Hash identifier: gbIgucRBJ5dOoe9FYPMenoh7D1qbuELd1mldv9RxTZQ=
Subject key identifier: 46:22:DE:97:81:EC:AC:02:0F:A4:18:E7:8F:48:51:B2:C4:35:0A:DC
Authority key identifier: A3:2D:A7:89:98:87:AA:C4:49:95:8B:B9:0E:B5:35:95:1A:97:3A:00
Certificate issuer: /CN=a32da7899887aac449958bb90eb535951a973a00
Certificate serial: 01965B02E4A6ED1AC1B664EE5981A710BEEB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/oy2niZiHqsRJlYu5DrU1lRqXOgA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5b/a388b6-43c6-4458-abf5-d3332f9044ec/1/oy2niZiHqsRJlYu5DrU1lRqXOgA.mft
Manifest number: 0E00
Signing time: Tue 22 Apr 2025 01:00:38 +0000
Manifest this update: Tue 22 Apr 2025 01:00:38 +0000
Manifest next update: Wed 23 Apr 2025 01:00:38 +0000
Files and hashes: 1: oy2niZiHqsRJlYu5DrU1lRqXOgA.crl (hash: ts6Hk2f9cvHH4Eev4qGb+TzqslfqkJ5NtpZFBRP39Co=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5b/a388b6-43c6-4458-abf5-d3332f9044ec/1/oy2niZiHqsRJlYu5DrU1lRqXOgA.crl
rsync://rpki.ripe.net/repository/DEFAULT/5b/a388b6-43c6-4458-abf5-d3332f9044ec/1/oy2niZiHqsRJlYu5DrU1lRqXOgA.mft
rsync://rpki.ripe.net/repository/DEFAULT/oy2niZiHqsRJlYu5DrU1lRqXOgA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 23 Apr 2025 01:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:5b:02:e4:a6:ed:1a:c1:b6:64:ee:59:81:a7:10:be:eb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a32da7899887aac449958bb90eb535951a973a00
Validity
Not Before: Apr 22 01:00:38 2025 GMT
Not After : Apr 23 01:00:38 2025 GMT
Subject: CN=4622de9781ecac020fa418e78f4851b2c4350adc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:90:10:8d:73:f1:86:b2:b2:46:8f:b9:0b:2a:bc:
a4:35:11:d3:96:0c:c3:19:f5:08:75:4b:9a:9e:bc:
32:3d:fa:65:e3:6f:d2:57:7b:c5:69:01:79:33:a3:
9d:a3:16:92:26:f7:72:5d:8f:9a:82:bb:fd:08:e0:
9d:b2:42:41:81:4b:c2:f1:eb:90:85:b7:a5:e0:97:
2d:1a:1f:97:0d:fb:cf:cc:9d:eb:77:14:20:b0:15:
01:0a:f8:84:c5:b1:c3:64:58:4b:21:2c:f3:b8:ad:
6d:97:0f:37:29:78:30:39:02:58:6e:66:6b:b9:eb:
65:6d:7c:e1:c0:17:9f:82:59:69:65:fd:3a:b6:d8:
14:20:79:2f:cc:ce:b9:37:8e:4d:e2:7a:d4:ec:c4:
99:cf:fd:39:2a:ab:d1:ef:ce:31:d8:48:81:6c:dc:
59:83:bb:ec:67:95:e8:f9:13:8f:06:b4:07:6b:4a:
6d:0a:c5:c9:dc:72:80:4b:6a:5a:47:3a:3c:82:89:
4f:76:75:72:5c:6b:60:14:61:03:ab:a9:84:4d:19:
c8:31:29:d7:ba:25:97:3a:55:b1:6b:1c:2b:04:fc:
9e:68:50:08:52:7d:61:f5:e7:81:d3:4d:3e:27:dd:
a6:b3:af:25:76:ba:a3:c1:51:ef:5f:56:68:4e:0c:
82:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
46:22:DE:97:81:EC:AC:02:0F:A4:18:E7:8F:48:51:B2:C4:35:0A:DC
X509v3 Authority Key Identifier:
keyid:A3:2D:A7:89:98:87:AA:C4:49:95:8B:B9:0E:B5:35:95:1A:97:3A:00
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/oy2niZiHqsRJlYu5DrU1lRqXOgA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/a388b6-43c6-4458-abf5-d3332f9044ec/1/oy2niZiHqsRJlYu5DrU1lRqXOgA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/a388b6-43c6-4458-abf5-d3332f9044ec/1/oy2niZiHqsRJlYu5DrU1lRqXOgA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
09:1f:dc:b8:70:f9:e6:bd:63:e3:01:2f:b2:18:86:f8:a2:07:
77:19:65:0f:9a:4c:38:f2:3b:24:b8:fd:a3:88:9a:a6:64:cc:
31:fb:5d:05:46:6c:1b:c2:d2:28:60:31:9d:81:e6:91:37:cc:
d5:36:26:7f:a6:24:9a:ef:97:f8:62:e4:0e:41:84:f5:69:0b:
bf:81:12:a5:da:a5:08:02:6d:a7:db:47:0c:06:a4:92:1d:b7:
c1:0c:30:77:36:cc:e8:2e:ac:d5:9e:56:85:34:c3:50:2e:01:
b4:9b:e3:0e:8f:fa:5b:e0:33:04:dc:68:ed:50:37:e3:78:80:
ab:e7:4b:9b:3a:a4:77:7c:82:a0:d4:13:13:43:73:b8:53:d2:
d9:d2:f8:d7:49:34:b8:21:f1:a5:00:d8:9c:51:c3:58:d1:5a:
6b:03:21:e2:2f:b6:6c:ae:36:d7:70:af:d0:db:4c:9b:6a:5d:
a9:53:82:a5:f9:61:8b:ca:b5:7b:2b:84:01:96:3c:86:98:8b:
c4:45:ce:7a:3c:61:25:11:53:c8:36:24:dd:17:78:0b:e5:8d:
85:a6:0e:a7:3c:56:2d:32:ab:74:c0:41:d2:4d:e6:bc:05:a7:
26:ae:e0:bf:d5:04:e5:c2:ea:0c:b7:ef:c8:84:5d:16:c2:34:
a3:e1:90:82
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 22 10:31:24 2025 by rpki-client