Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6f/3fa411-af98-4af8-b5b8-50e22ab71f84/1/OeHApbBM1BmsHvkjvI1lcDIwYdo.mft
File: OeHApbBM1BmsHvkjvI1lcDIwYdo.mft (raw, json)
Hash identifier: Bj16aq5OVNDDsMkEnorqEyXU6w5xuJFx5Zd6dlbeqIg=
Subject key identifier: 26:DC:D7:12:1A:80:56:63:F8:28:94:C1:16:FA:CC:77:EF:70:DF:28
Authority key identifier: 39:E1:C0:A5:B0:4C:D4:19:AC:1E:F9:23:BC:8D:65:70:32:30:61:DA
Certificate issuer: /CN=39e1c0a5b04cd419ac1ef923bc8d6570323061da
Certificate serial: 01965726A95B5D41874BB2DE6BD4C1256123
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OeHApbBM1BmsHvkjvI1lcDIwYdo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6f/3fa411-af98-4af8-b5b8-50e22ab71f84/1/OeHApbBM1BmsHvkjvI1lcDIwYdo.mft
Manifest number: 14FA
Signing time: Mon 21 Apr 2025 07:01:13 +0000
Manifest this update: Mon 21 Apr 2025 07:01:13 +0000
Manifest next update: Tue 22 Apr 2025 07:01:13 +0000
Files and hashes: 1: OeHApbBM1BmsHvkjvI1lcDIwYdo.crl (hash: xvP/f1r7ERwYUjoetyvXOCNJIlobSWHhzacObHynt7A=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6f/3fa411-af98-4af8-b5b8-50e22ab71f84/1/OeHApbBM1BmsHvkjvI1lcDIwYdo.crl
rsync://rpki.ripe.net/repository/DEFAULT/6f/3fa411-af98-4af8-b5b8-50e22ab71f84/1/OeHApbBM1BmsHvkjvI1lcDIwYdo.mft
rsync://rpki.ripe.net/repository/DEFAULT/OeHApbBM1BmsHvkjvI1lcDIwYdo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 22 Apr 2025 01:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:57:26:a9:5b:5d:41:87:4b:b2:de:6b:d4:c1:25:61:23
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=39e1c0a5b04cd419ac1ef923bc8d6570323061da
Validity
Not Before: Apr 21 07:01:13 2025 GMT
Not After : Apr 22 07:01:13 2025 GMT
Subject: CN=26dcd7121a805663f82894c116facc77ef70df28
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:94:e2:30:6c:6b:74:87:47:2d:0f:c7:4f:f6:
e2:67:da:4a:d7:65:67:ee:86:87:82:3d:10:69:23:
be:40:68:dc:10:4f:10:a0:0c:af:08:13:7e:21:96:
ec:ce:fc:35:fe:3c:f5:ed:f0:0c:06:d8:19:13:2a:
6c:a5:2c:6b:09:02:94:6e:e7:ef:6b:9a:84:97:70:
5d:a0:9a:8c:80:cc:72:28:b0:d4:a7:db:8e:9c:75:
29:dd:fa:76:f8:13:e6:be:ee:aa:f7:b8:08:56:cb:
d6:aa:93:e5:52:f1:21:f7:c1:50:06:ae:d7:73:88:
d7:af:00:e2:45:69:3c:df:c4:42:ba:c0:22:46:b7:
5b:8d:7b:00:ab:e8:f3:b4:0e:69:1c:c7:88:ab:2c:
14:e7:6d:1e:bc:eb:59:bb:74:2a:1c:76:16:f1:7e:
0e:5a:05:1a:1c:81:8a:bb:07:72:d9:56:4d:7a:60:
f8:a8:54:52:e4:46:3e:8f:a3:df:cd:9f:91:3e:06:
2c:84:c0:21:e8:1e:36:04:35:6e:50:6d:63:2c:cb:
46:7a:f6:38:53:ca:7f:21:20:66:c4:10:79:f6:0b:
64:d7:44:4e:7d:b8:cf:57:28:f6:02:ef:3d:b4:f7:
66:74:5f:1c:d3:42:c5:d6:f3:5c:9c:a8:ad:21:90:
05:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
26:DC:D7:12:1A:80:56:63:F8:28:94:C1:16:FA:CC:77:EF:70:DF:28
X509v3 Authority Key Identifier:
keyid:39:E1:C0:A5:B0:4C:D4:19:AC:1E:F9:23:BC:8D:65:70:32:30:61:DA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OeHApbBM1BmsHvkjvI1lcDIwYdo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6f/3fa411-af98-4af8-b5b8-50e22ab71f84/1/OeHApbBM1BmsHvkjvI1lcDIwYdo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6f/3fa411-af98-4af8-b5b8-50e22ab71f84/1/OeHApbBM1BmsHvkjvI1lcDIwYdo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a5:af:a2:1d:8b:e1:08:47:9b:ba:99:33:31:dd:8f:2a:cf:21:
1b:ec:8e:4e:d8:36:7d:5c:11:f0:b4:8e:35:61:9b:91:77:3c:
aa:a4:11:95:3b:01:68:48:d7:8c:6b:0c:fe:20:5e:0d:08:6d:
77:37:3e:3c:14:e2:c6:44:dc:83:bd:38:51:e7:08:46:13:2f:
f3:38:0f:89:80:c8:00:ed:11:d8:2c:8d:e0:7e:45:ba:42:65:
4e:8f:35:37:54:11:4c:d5:67:28:7b:4d:7a:03:f8:04:e2:3f:
75:99:5c:5d:6e:94:45:f0:fe:12:be:01:b0:d4:7d:0c:05:12:
6b:10:25:73:7c:52:f2:a2:43:d3:bd:bc:e4:ab:86:59:9f:c3:
24:be:70:a2:5d:9d:08:9f:a7:d5:91:6b:c3:5c:60:bc:7e:1d:
16:d8:e8:fc:69:73:cf:22:f4:82:3e:66:b0:80:f9:e2:c4:97:
77:04:21:c9:33:4b:e4:fe:6e:9a:1c:4b:77:c4:69:2c:bc:97:
2b:0c:b5:13:74:9c:66:d7:30:95:c1:89:68:21:50:55:11:cb:
2d:ed:8f:05:fb:be:a6:04:c6:22:5c:46:62:10:5a:76:0e:e9:
47:26:bf:8f:77:3d:46:be:97:66:42:3f:f1:ab:00:55:dd:84:
6e:90:38:40
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 21 10:48:27 2025 by rpki-client