Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9c/5cdeb4-ea79-4a66-90bf-e5fb4ac110db/1/ORvm1CiPvt6_hkKmoeOXeupfHzU.mft
File: ORvm1CiPvt6_hkKmoeOXeupfHzU.mft (raw, json)
Hash identifier: ULw1zdp5840TXX2q11bJ7JIqqLSTXG426Aak8s0pCJk=
Subject key identifier: EE:82:25:AD:9A:9B:B7:E5:B4:2C:62:2A:42:7A:7F:6F:07:E3:D2:D7
Authority key identifier: 39:1B:E6:D4:28:8F:BE:DE:BF:86:42:A6:A1:E3:97:7A:EA:5F:1F:35
Certificate issuer: /CN=391be6d4288fbedebf8642a6a1e3977aea5f1f35
Certificate serial: 019654934985E46EE3DFA77D06ADAA8B6F5F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ORvm1CiPvt6_hkKmoeOXeupfHzU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9c/5cdeb4-ea79-4a66-90bf-e5fb4ac110db/1/ORvm1CiPvt6_hkKmoeOXeupfHzU.mft
Manifest number: 0C79
Signing time: Sun 20 Apr 2025 19:01:00 +0000
Manifest this update: Sun 20 Apr 2025 19:01:00 +0000
Manifest next update: Mon 21 Apr 2025 19:01:00 +0000
Files and hashes: 1: ORvm1CiPvt6_hkKmoeOXeupfHzU.crl (hash: 2rEcJhfJlwMAiTJ5EfIwJxpaogNQjtAeXRmxnsDQTrM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9c/5cdeb4-ea79-4a66-90bf-e5fb4ac110db/1/ORvm1CiPvt6_hkKmoeOXeupfHzU.crl
rsync://rpki.ripe.net/repository/DEFAULT/9c/5cdeb4-ea79-4a66-90bf-e5fb4ac110db/1/ORvm1CiPvt6_hkKmoeOXeupfHzU.mft
rsync://rpki.ripe.net/repository/DEFAULT/ORvm1CiPvt6_hkKmoeOXeupfHzU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 21 Apr 2025 16:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:54:93:49:85:e4:6e:e3:df:a7:7d:06:ad:aa:8b:6f:5f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=391be6d4288fbedebf8642a6a1e3977aea5f1f35
Validity
Not Before: Apr 20 19:01:00 2025 GMT
Not After : Apr 21 19:01:00 2025 GMT
Subject: CN=ee8225ad9a9bb7e5b42c622a427a7f6f07e3d2d7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8c:03:ab:54:7b:51:e5:39:40:9e:df:db:38:5c:
d3:e4:f5:c6:a7:b2:ef:4c:ca:d9:59:9d:61:4c:f2:
e6:ab:3c:c2:95:dc:bc:61:d7:47:26:9d:2c:a4:4b:
42:4f:e6:59:4f:66:1b:cf:62:46:24:b0:0a:f8:8d:
4c:4c:7b:0b:5a:5b:4c:cf:b9:35:3e:9a:ac:82:a8:
aa:41:cf:a2:b2:d9:fe:56:78:41:fd:81:73:5f:af:
bf:2f:cf:5a:fa:78:6b:d7:27:4c:32:41:10:0e:15:
e9:ae:b8:28:15:56:d0:16:a9:7e:cb:0d:18:cd:37:
25:2f:e8:b4:c6:df:5f:bf:55:5b:3d:1f:c4:e4:b5:
3a:e7:ad:bb:a6:b2:74:13:31:7d:76:a3:fb:41:92:
8d:fc:1f:c1:c5:83:cb:09:9c:04:4d:4f:6b:9e:50:
35:31:66:23:b1:5f:eb:e3:aa:da:95:d8:03:8a:c3:
2a:f6:c0:08:9e:c4:33:33:db:9c:71:db:5e:38:bb:
f8:e1:1b:ed:c4:dd:c1:75:ea:45:78:f8:65:cb:66:
5c:57:30:48:b0:07:33:46:63:ff:8a:28:bb:a1:cc:
24:3a:41:82:12:80:07:eb:69:c6:26:f4:eb:69:a3:
be:52:9f:0b:10:70:20:fa:a6:e9:46:a2:f6:8a:80:
14:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EE:82:25:AD:9A:9B:B7:E5:B4:2C:62:2A:42:7A:7F:6F:07:E3:D2:D7
X509v3 Authority Key Identifier:
keyid:39:1B:E6:D4:28:8F:BE:DE:BF:86:42:A6:A1:E3:97:7A:EA:5F:1F:35
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ORvm1CiPvt6_hkKmoeOXeupfHzU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9c/5cdeb4-ea79-4a66-90bf-e5fb4ac110db/1/ORvm1CiPvt6_hkKmoeOXeupfHzU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9c/5cdeb4-ea79-4a66-90bf-e5fb4ac110db/1/ORvm1CiPvt6_hkKmoeOXeupfHzU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
50:90:d6:f8:2b:d3:9e:b0:65:0d:9d:0c:66:f9:bd:d8:0e:65:
94:39:13:50:9f:da:4b:2e:6c:78:2f:b4:a8:ab:0a:03:cd:31:
19:62:63:88:c1:7b:0f:80:bc:40:a9:60:a1:dc:f4:6a:34:0f:
8a:2a:c8:f9:f3:1f:7e:02:06:9d:8a:b0:34:a9:dd:3c:8d:4c:
a3:81:9c:3f:fa:19:b1:1f:92:86:09:95:55:ea:04:b0:57:5f:
44:a9:df:e8:09:c1:db:a5:02:ed:18:23:b9:68:19:72:4e:82:
75:f1:a4:53:72:a3:22:69:15:38:37:9d:df:7c:9c:ea:70:0a:
43:da:a3:c5:65:1b:75:95:e7:0d:36:ff:80:50:ba:91:31:67:
79:5e:b6:b6:19:69:39:b9:a1:a9:a9:61:dc:6a:9d:a4:f1:a6:
5d:4a:f6:6b:3e:32:b3:c4:f1:4b:f9:a4:4f:3f:cf:36:10:74:
bb:60:13:70:ad:da:00:43:1c:a7:a2:13:50:a2:6c:07:eb:1b:
aa:1c:ad:f6:d8:57:c0:5b:96:9d:a2:77:fa:9d:1a:9f:1f:15:
ac:f7:02:87:1b:9b:ec:c2:dc:aa:d2:54:c1:04:ac:b0:4e:67:
a7:92:2c:8e:ec:fb:c7:0a:50:fb:46:ab:94:cd:3c:4d:08:ed:
fe:da:eb:e9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 21 01:18:49 2025 by rpki-client