Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/77/b966c4-50d3-4090-8f46-2e8ec3d6c2f9/1/OardMv4J68lyyFltxaBzWI-WDC0.mft
File: OardMv4J68lyyFltxaBzWI-WDC0.mft (raw, json)
Hash identifier: FIVyTWgYP/+SpiSEul8EHu6jrPdKQ1najvJOFW9Iqvs=
Subject key identifier: 68:8A:C4:C6:E9:2F:63:9C:19:DA:BE:B7:06:2F:EF:F4:59:D6:2A:C7
Authority key identifier: 39:AA:DD:32:FE:09:EB:C9:72:C8:59:6D:C5:A0:73:58:8F:96:0C:2D
Certificate issuer: /CN=39aadd32fe09ebc972c8596dc5a073588f960c2d
Certificate serial: 019653B79156153D9EBDA94CBDF13BD2EE90
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OardMv4J68lyyFltxaBzWI-WDC0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/77/b966c4-50d3-4090-8f46-2e8ec3d6c2f9/1/OardMv4J68lyyFltxaBzWI-WDC0.mft
Manifest number: 0B76
Signing time: Sun 20 Apr 2025 15:01:01 +0000
Manifest this update: Sun 20 Apr 2025 15:01:01 +0000
Manifest next update: Mon 21 Apr 2025 15:01:01 +0000
Files and hashes: 1: OardMv4J68lyyFltxaBzWI-WDC0.crl (hash: 8zxCfhtdTDrirFpKuvFKw3JldR8RDnnGRYSEzy00awQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/77/b966c4-50d3-4090-8f46-2e8ec3d6c2f9/1/OardMv4J68lyyFltxaBzWI-WDC0.crl
rsync://rpki.ripe.net/repository/DEFAULT/77/b966c4-50d3-4090-8f46-2e8ec3d6c2f9/1/OardMv4J68lyyFltxaBzWI-WDC0.mft
rsync://rpki.ripe.net/repository/DEFAULT/OardMv4J68lyyFltxaBzWI-WDC0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 21 Apr 2025 15:01:01 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:53:b7:91:56:15:3d:9e:bd:a9:4c:bd:f1:3b:d2:ee:90
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=39aadd32fe09ebc972c8596dc5a073588f960c2d
Validity
Not Before: Apr 20 15:01:01 2025 GMT
Not After : Apr 21 15:01:01 2025 GMT
Subject: CN=688ac4c6e92f639c19dabeb7062feff459d62ac7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e4:47:12:57:de:3d:79:67:9f:db:af:49:dd:0e:
38:16:c3:0e:f1:89:54:39:32:7a:7a:59:81:8b:44:
f1:46:30:79:64:c8:bb:bb:72:8e:5c:b3:16:27:2a:
00:92:6e:95:8f:30:c4:e2:8c:87:9f:e2:02:5c:a4:
51:2f:c9:99:7d:4f:9d:8c:d8:4e:f6:0b:ae:77:4e:
e8:0f:a1:dd:e5:8d:04:c7:76:8a:7e:f9:7e:70:c9:
fa:2f:61:e3:4e:ea:fd:cf:43:55:6c:e3:ef:0d:da:
0d:f7:5c:54:8e:37:b6:58:4f:ca:67:01:fe:9e:b6:
c0:43:72:64:7b:38:57:b2:4c:46:26:a9:57:fa:c9:
b0:d6:f2:69:c8:54:78:46:6c:c5:7f:03:c4:8f:e9:
36:c0:76:ca:f8:c3:c8:38:49:30:e0:bf:ad:44:d2:
22:36:8e:77:0e:43:41:9d:78:3b:cf:ac:f3:40:e3:
6a:6b:7d:f2:04:3c:7b:f5:55:31:82:c1:ae:71:c2:
ba:0e:ee:1c:db:c1:bb:4f:f4:2f:18:aa:83:64:53:
2c:d4:dc:9c:08:ac:f1:70:ce:47:da:ea:31:c3:3d:
01:41:92:c5:ef:88:40:5d:61:c8:b7:d7:2a:38:2e:
6d:19:4f:85:db:36:64:9b:ab:0b:ac:7f:76:f2:ea:
c1:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
68:8A:C4:C6:E9:2F:63:9C:19:DA:BE:B7:06:2F:EF:F4:59:D6:2A:C7
X509v3 Authority Key Identifier:
keyid:39:AA:DD:32:FE:09:EB:C9:72:C8:59:6D:C5:A0:73:58:8F:96:0C:2D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OardMv4J68lyyFltxaBzWI-WDC0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/77/b966c4-50d3-4090-8f46-2e8ec3d6c2f9/1/OardMv4J68lyyFltxaBzWI-WDC0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/77/b966c4-50d3-4090-8f46-2e8ec3d6c2f9/1/OardMv4J68lyyFltxaBzWI-WDC0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1b:06:50:fe:93:54:fc:04:17:e2:34:44:04:47:b3:5f:15:11:
c8:ca:53:e8:27:63:69:1f:1f:3d:53:76:7c:93:13:8a:99:0e:
1e:8c:a8:9a:d0:06:ad:a0:84:95:da:cb:78:af:fd:7a:28:37:
f7:5e:0f:98:5e:05:0a:75:29:45:ad:e9:d4:d2:48:4f:a0:77:
85:dd:c8:a2:e7:59:63:c2:44:b3:73:23:66:c0:4b:2a:94:44:
59:90:6b:e9:79:1a:89:82:b9:d4:bb:2e:b5:eb:a9:56:49:ef:
17:50:84:5d:e4:7f:b4:c1:6e:f3:67:7a:b2:53:fd:7e:9b:58:
34:1a:20:4f:41:bc:66:66:80:fe:d0:d9:d7:72:9f:14:08:4e:
f1:03:86:28:66:a4:71:75:32:26:4e:59:2f:7e:57:0c:2a:7e:
1f:e9:86:a9:3f:19:3b:b9:55:60:83:0b:1a:d5:00:05:86:40:
53:96:a7:a5:ff:d0:3e:a6:97:13:6c:b3:81:79:c8:0e:8c:84:
09:80:e0:75:e4:ef:05:7c:4e:94:19:c2:0c:8a:9d:74:8e:a1:
b4:e4:00:08:73:80:5a:50:ac:6e:5a:fa:dd:8f:07:78:06:29:
dc:02:57:6b:c3:25:ae:7f:b5:ed:53:95:f9:73:1c:ac:4c:9d:
e4:b8:07:e5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 21 02:28:15 2025 by rpki-client