Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ac/0c6716-1715-4320-aa25-279906eb5c85/1/OCxntKtK-G_mHqjG4X0R4-BdClE.mft
File: OCxntKtK-G_mHqjG4X0R4-BdClE.mft (raw, json)
Hash identifier: VWBFbSHSt6lZeLib2D71/gfpppDGF/ChlacKFV92SE0=
Subject key identifier: C7:13:93:E4:8C:01:6B:8E:BC:13:F0:07:15:B8:5E:DD:36:F3:A2:D8
Authority key identifier: 38:2C:67:B4:AB:4A:F8:6F:E6:1E:A8:C6:E1:7D:11:E3:E0:5D:0A:51
Certificate issuer: /CN=382c67b4ab4af86fe61ea8c6e17d11e3e05d0a51
Certificate serial: 01965B71394AE457288710BAA652E0976D4A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OCxntKtK-G_mHqjG4X0R4-BdClE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ac/0c6716-1715-4320-aa25-279906eb5c85/1/OCxntKtK-G_mHqjG4X0R4-BdClE.mft
Manifest number: 0D6D
Signing time: Tue 22 Apr 2025 03:01:08 +0000
Manifest this update: Tue 22 Apr 2025 03:01:08 +0000
Manifest next update: Wed 23 Apr 2025 03:01:08 +0000
Files and hashes: 1: OCxntKtK-G_mHqjG4X0R4-BdClE.crl (hash: 1ZcvO2+dbdwZC52BS8EWY4cVtdHsko4VWeItHjxl5VM=)
2: uurNEPjhRtDIDBb3Oc-e5-rgs-I.roa (hash: N52vo6FqVd0GdLu55AAXlbmzEZo+baOISMz+vvdeY6M=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ac/0c6716-1715-4320-aa25-279906eb5c85/1/OCxntKtK-G_mHqjG4X0R4-BdClE.crl
rsync://rpki.ripe.net/repository/DEFAULT/ac/0c6716-1715-4320-aa25-279906eb5c85/1/OCxntKtK-G_mHqjG4X0R4-BdClE.mft
rsync://rpki.ripe.net/repository/DEFAULT/OCxntKtK-G_mHqjG4X0R4-BdClE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 23 Apr 2025 03:01:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:5b:71:39:4a:e4:57:28:87:10:ba:a6:52:e0:97:6d:4a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=382c67b4ab4af86fe61ea8c6e17d11e3e05d0a51
Validity
Not Before: Apr 22 03:01:08 2025 GMT
Not After : Apr 23 03:01:08 2025 GMT
Subject: CN=c71393e48c016b8ebc13f00715b85edd36f3a2d8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:1a:c6:04:98:71:2b:b2:33:2e:23:d2:2e:93:
54:ce:52:37:26:40:bd:2b:09:93:40:54:7c:00:21:
bf:a3:04:e3:2b:f5:72:5c:7d:f0:f4:cd:bb:f2:7c:
fb:0d:c0:0c:f9:a5:4d:c7:ea:03:76:f4:38:f3:91:
91:22:69:17:bd:e0:dd:60:4c:39:2d:be:8c:46:a2:
4e:72:2f:86:9e:e1:b4:ab:38:0b:8e:8b:79:fa:34:
e9:bc:c9:fd:02:aa:2e:63:cf:4f:a5:33:08:48:70:
40:51:a8:d1:38:6d:5e:50:48:d6:ea:13:7e:11:05:
1a:48:a4:c9:f6:9f:ca:84:f9:ad:7e:38:21:5d:db:
2b:da:8b:3c:7a:ef:fe:84:97:fb:67:ee:49:f9:65:
cd:90:2a:4c:ac:db:e5:5c:0b:d0:9b:52:8e:ac:fe:
dc:1e:a0:01:17:79:6a:a5:0b:a4:62:3b:dd:3d:a3:
ee:5c:4e:2d:6d:50:92:e8:66:42:e5:97:bf:73:a2:
ab:6c:7b:cf:2f:80:c6:2b:c4:85:49:46:b5:c1:e0:
bd:49:d3:74:46:81:68:d3:3b:e2:c7:22:2d:0f:d4:
b9:c3:01:45:c0:ca:f4:9d:13:ac:c4:3f:28:4b:0d:
08:2f:1d:20:22:de:1d:0f:f8:9c:f6:42:d8:4f:76:
43:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C7:13:93:E4:8C:01:6B:8E:BC:13:F0:07:15:B8:5E:DD:36:F3:A2:D8
X509v3 Authority Key Identifier:
keyid:38:2C:67:B4:AB:4A:F8:6F:E6:1E:A8:C6:E1:7D:11:E3:E0:5D:0A:51
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OCxntKtK-G_mHqjG4X0R4-BdClE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/0c6716-1715-4320-aa25-279906eb5c85/1/OCxntKtK-G_mHqjG4X0R4-BdClE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/0c6716-1715-4320-aa25-279906eb5c85/1/OCxntKtK-G_mHqjG4X0R4-BdClE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7d:7a:1d:4d:9e:23:9d:c2:b3:d8:13:42:c7:84:5c:71:b8:66:
b2:64:ea:f4:40:9c:72:f2:00:cb:9d:6f:71:9f:e4:7a:40:a1:
aa:48:d1:37:d8:75:4b:d9:c4:66:a2:a3:89:69:63:a6:bc:e2:
55:b1:b0:ea:c9:1e:40:66:ca:7f:12:e5:f3:3f:92:79:dc:ca:
0c:d5:bf:91:7a:11:1b:b0:2f:6c:17:48:65:75:a8:8f:8d:b0:
61:ad:e7:ab:ef:84:c8:fb:87:a6:0f:d0:03:71:e1:4d:cb:6f:
09:b3:c4:e2:86:01:56:5f:bf:dc:62:97:12:1d:67:4a:9b:84:
e7:70:e6:6d:e6:19:10:6d:72:5a:ac:ff:6d:b8:d4:31:a1:27:
44:1c:30:27:39:4a:af:57:33:33:3d:f3:f8:da:01:c1:8b:c6:
93:5f:16:12:aa:8c:bb:2e:7c:13:05:a5:97:4d:e3:24:f0:b0:
6a:7f:15:e8:d7:ef:91:29:7a:05:d1:db:36:49:32:96:43:b9:
3f:de:e8:a0:e7:f0:6c:69:56:04:e6:01:b9:7e:ef:22:60:1c:
7f:8f:ec:f5:e7:ac:15:5f:f9:01:9e:59:24:90:01:5c:ed:6b:
d7:af:ae:ae:3c:26:3b:82:07:e8:db:88:27:24:0f:69:8e:24:
19:f0:6a:cc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 22 13:33:24 2025 by rpki-client