Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6f/9185e2-b929-4236-a98b-dde1923ba724/1/o2osPu23l22c4wRYHyNTL-y0bn8.mft
File: o2osPu23l22c4wRYHyNTL-y0bn8.mft (raw, json)
Hash identifier: bXEkS9evRPXtE268N/5z3AjxZe61t2ltsFAV3MjxPXo=
Subject key identifier: A9:7E:F7:67:13:86:D7:3A:7A:11:89:36:92:9C:B1:D6:9E:BC:0F:FB
Authority key identifier: A3:6A:2C:3E:ED:B7:97:6D:9C:E3:04:58:1F:23:53:2F:EC:B4:6E:7F
Certificate issuer: /CN=a36a2c3eedb7976d9ce304581f23532fecb46e7f
Certificate serial: 019653B76C345E7A7F268A1F0A23DE21C66D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/o2osPu23l22c4wRYHyNTL-y0bn8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6f/9185e2-b929-4236-a98b-dde1923ba724/1/o2osPu23l22c4wRYHyNTL-y0bn8.mft
Manifest number: 14FA
Signing time: Sun 20 Apr 2025 15:00:51 +0000
Manifest this update: Sun 20 Apr 2025 15:00:51 +0000
Manifest next update: Mon 21 Apr 2025 15:00:51 +0000
Files and hashes: 1: o2osPu23l22c4wRYHyNTL-y0bn8.crl (hash: Tl2Qr4uL6DXTbTrn6Mrb6fw8wnd8tiToh8j2tClN/bk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6f/9185e2-b929-4236-a98b-dde1923ba724/1/o2osPu23l22c4wRYHyNTL-y0bn8.crl
rsync://rpki.ripe.net/repository/DEFAULT/6f/9185e2-b929-4236-a98b-dde1923ba724/1/o2osPu23l22c4wRYHyNTL-y0bn8.mft
rsync://rpki.ripe.net/repository/DEFAULT/o2osPu23l22c4wRYHyNTL-y0bn8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 21 Apr 2025 15:00:51 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:53:b7:6c:34:5e:7a:7f:26:8a:1f:0a:23:de:21:c6:6d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a36a2c3eedb7976d9ce304581f23532fecb46e7f
Validity
Not Before: Apr 20 15:00:51 2025 GMT
Not After : Apr 21 15:00:51 2025 GMT
Subject: CN=a97ef7671386d73a7a118936929cb1d69ebc0ffb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:9e:e7:bc:47:ec:44:4f:d3:cb:6d:f7:30:cb:
d4:8d:9a:d4:ce:b0:31:e3:fb:8d:73:20:78:fe:4b:
06:80:ad:ee:1b:3a:0e:fd:ec:67:47:ff:4c:81:e2:
63:47:bb:0b:c5:06:13:f6:b9:b8:e5:2e:0b:0a:99:
24:cb:ab:73:7d:bc:ec:ef:7d:bd:f9:6b:6c:ba:c9:
5e:b0:87:b2:7b:b6:8b:cb:65:fd:87:21:08:6a:70:
e4:00:a9:62:e2:c8:97:e2:10:07:84:5f:9f:3f:2e:
f2:ce:3b:d7:41:8c:36:5e:79:c4:79:68:04:37:e8:
06:f8:aa:68:2d:e7:82:f5:3a:2a:6f:15:02:74:d5:
8b:67:a5:f3:50:41:77:fb:86:ce:ef:01:6a:ea:c7:
0b:e9:21:8e:09:22:98:95:39:bc:43:40:7f:9f:ba:
7a:83:47:da:a5:c5:f5:f6:75:09:c4:55:07:53:70:
38:99:3d:54:50:68:cd:45:ef:a7:2f:c6:1d:47:bc:
df:2c:db:15:6c:a4:ae:88:b4:cb:7e:6d:bb:a9:0e:
93:a5:ff:96:ef:0e:1b:b2:b2:ac:fe:82:f1:77:c8:
27:6e:ac:f1:36:8a:58:51:36:4b:bc:ae:84:48:01:
48:bf:00:71:56:c7:72:18:e2:76:3d:ce:a2:9b:61:
e9:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A9:7E:F7:67:13:86:D7:3A:7A:11:89:36:92:9C:B1:D6:9E:BC:0F:FB
X509v3 Authority Key Identifier:
keyid:A3:6A:2C:3E:ED:B7:97:6D:9C:E3:04:58:1F:23:53:2F:EC:B4:6E:7F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/o2osPu23l22c4wRYHyNTL-y0bn8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6f/9185e2-b929-4236-a98b-dde1923ba724/1/o2osPu23l22c4wRYHyNTL-y0bn8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6f/9185e2-b929-4236-a98b-dde1923ba724/1/o2osPu23l22c4wRYHyNTL-y0bn8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
99:56:25:db:b8:60:72:ac:55:70:94:12:40:fe:be:21:e5:00:
93:f8:3b:ab:fe:4f:64:7f:42:28:71:0d:e7:c5:98:08:e7:1d:
81:56:7b:e2:87:19:bb:3a:ce:a4:4d:44:43:6c:e7:0d:e1:b0:
57:22:9d:7b:f5:b6:f7:e3:9d:ef:de:c4:10:30:bc:25:db:fe:
eb:6d:7f:c7:3b:bd:51:69:fc:8b:c9:83:1c:cb:28:9b:84:0f:
5f:8b:2d:17:b7:66:aa:31:91:0c:4e:b5:92:55:de:7d:28:62:
9e:71:44:6f:bc:70:24:20:0d:55:cd:a5:bd:69:92:5f:9e:ac:
d4:a7:3c:5d:52:89:b9:42:59:cd:c4:f4:a5:cb:d7:69:10:15:
ee:54:39:af:5b:db:fb:eb:ff:e2:69:92:05:9d:7a:6e:28:a2:
5e:4c:93:31:37:83:26:01:1e:c7:12:0c:ce:c6:db:e7:c3:3f:
c2:6a:65:c5:53:79:17:32:39:71:50:d7:79:02:7c:01:28:04:
de:5f:bd:21:41:8e:e0:08:f0:62:58:48:e3:20:3a:7e:ee:89:
8d:0d:47:bd:fc:59:23:31:ea:fb:9f:19:21:90:6b:4d:67:25:
67:c8:b5:62:dc:13:23:a2:a3:09:ae:2f:07:f0:52:ad:d1:0b:
69:99:c3:a3
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZZTt2w0Xnp/JoofCiPeIcZtMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGEzNmEyYzNlZWRiNzk3NmQ5Y2UzMDQ1ODFmMjM1MzJmZWNi
NDZlN2YwHhcNMjUwNDIwMTUwMDUxWhcNMjUwNDIxMTUwMDUxWjAzMTEwLwYDVQQD
EyhhOTdlZjc2NzEzODZkNzNhN2ExMTg5MzY5MjljYjFkNjllYmMwZmZiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAu57nvEfsRE/Ty233MMvUjZrUzrAx
4/uNcyB4/ksGgK3uGzoO/exnR/9MgeJjR7sLxQYT9rm45S4LCpkky6tzfbzs7329
+WtsuslesIeye7aLy2X9hyEIanDkAKli4siX4hAHhF+fPy7yzjvXQYw2XnnEeWgE
N+gG+KpoLeeC9ToqbxUCdNWLZ6XzUEF3+4bO7wFq6scL6SGOCSKYlTm8Q0B/n7p6
g0fapcX19nUJxFUHU3A4mT1UUGjNRe+nL8YdR7zfLNsVbKSuiLTLfm27qQ6Tpf+W
7w4bsrKs/oLxd8gnbqzxNopYUTZLvK6ESAFIvwBxVsdyGOJ2Pc6im2HpZwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFKl+92cThtc6ehGJNpKcsdaevA/7MB8GA1UdIwQY
MBaAFKNqLD7tt5dtnOMEWB8jUy/stG5/MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvbzJvc1B1MjNsMjJjNHdSWUh5TlRMLXkwYm44LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82Zi85MTg1ZTItYjkyOS00MjM2LWE5OGIt
ZGRlMTkyM2JhNzI0LzEvbzJvc1B1MjNsMjJjNHdSWUh5TlRMLXkwYm44Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82Zi85MTg1ZTItYjkyOS00MjM2LWE5OGItZGRlMTkyM2JhNzI0
LzEvbzJvc1B1MjNsMjJjNHdSWUh5TlRMLXkwYm44LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAmVYl27hg
cqxVcJQSQP6+IeUAk/g7q/5PZH9CKHEN58WYCOcdgVZ74ocZuzrOpE1EQ2znDeGw
VyKde/W29+Od797EEDC8Jdv+621/xzu9UWn8i8mDHMsom4QPX4stF7dmqjGRDE61
klXefShinnFEb7xwJCANVc2lvWmSX56s1Kc8XVKJuUJZzcT0pcvXaRAV7lQ5r1vb
++v/4mmSBZ16biiiXkyTMTeDJgEexxIMzsbb58M/wmplxVN5FzI5cVDXeQJ8ASgE
3l+9IUGO4AjwYlhI4yA6fu6JjQ1HvfxZIzHq+58ZIZBrTWclZ8i1YtwTI6KjCa4v
B/BSrdELaZnDow==
-----END CERTIFICATE-----
Generated at Mon Apr 21 01:18:52 2025 by rpki-client