Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ca/825011-3e5b-4404-a7b0-66f9c92d4fa1/1/ODH5qlDO_oJdpfkNpnswMlSp24U.mft
File: ODH5qlDO_oJdpfkNpnswMlSp24U.mft (raw, json)
Hash identifier: YBTPVMpVwgnXXiD0zpF8gAAiuxPAAcBU2mPWgZtuqw0=
Subject key identifier: B4:56:FB:DE:6C:75:A8:99:4A:3C:91:5F:87:99:1F:CB:DD:D0:8B:80
Authority key identifier: 38:31:F9:AA:50:CE:FE:82:5D:A5:F9:0D:A6:7B:30:32:54:A9:DB:85
Certificate issuer: /CN=3831f9aa50cefe825da5f90da67b303254a9db85
Certificate serial: 01965492BD2F117B20F008DDA0401B6DD9CC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ODH5qlDO_oJdpfkNpnswMlSp24U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ca/825011-3e5b-4404-a7b0-66f9c92d4fa1/1/ODH5qlDO_oJdpfkNpnswMlSp24U.mft
Manifest number: 090D
Signing time: Sun 20 Apr 2025 19:00:24 +0000
Manifest this update: Sun 20 Apr 2025 19:00:24 +0000
Manifest next update: Mon 21 Apr 2025 19:00:24 +0000
Files and hashes: 1: ODH5qlDO_oJdpfkNpnswMlSp24U.crl (hash: ekb37OpPYNxmYVO5jpVUmttz0IO35yId2PjC7wUFX68=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ca/825011-3e5b-4404-a7b0-66f9c92d4fa1/1/ODH5qlDO_oJdpfkNpnswMlSp24U.crl
rsync://rpki.ripe.net/repository/DEFAULT/ca/825011-3e5b-4404-a7b0-66f9c92d4fa1/1/ODH5qlDO_oJdpfkNpnswMlSp24U.mft
rsync://rpki.ripe.net/repository/DEFAULT/ODH5qlDO_oJdpfkNpnswMlSp24U.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 21 Apr 2025 19:00:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:54:92:bd:2f:11:7b:20:f0:08:dd:a0:40:1b:6d:d9:cc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3831f9aa50cefe825da5f90da67b303254a9db85
Validity
Not Before: Apr 20 19:00:24 2025 GMT
Not After : Apr 21 19:00:24 2025 GMT
Subject: CN=b456fbde6c75a8994a3c915f87991fcbddd08b80
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:b7:77:fe:f4:84:a3:a8:43:a6:1e:f8:76:8f:
b5:00:28:78:b7:c0:f2:77:0b:88:da:6a:18:21:bb:
1b:46:4a:61:30:e7:5a:6e:51:e8:e5:86:7e:2b:00:
0b:62:9f:5e:87:0e:01:15:7b:1b:4e:21:1d:00:79:
08:9e:f2:5f:c3:05:55:07:10:e7:04:0b:d0:91:aa:
37:93:23:d6:47:46:bc:d2:c2:ba:a0:d3:65:87:0e:
85:68:36:b2:e0:ec:5e:c2:dd:ca:8e:bd:70:3a:f4:
ae:d8:2c:20:24:81:53:b4:7c:ab:d2:f6:9b:d4:01:
29:2c:6b:3a:7a:d1:8e:63:6d:7b:7e:7e:e6:66:2f:
21:f0:72:e4:d8:de:1e:38:cc:8f:39:de:bc:41:8e:
d0:56:65:f9:9e:01:d7:25:17:8f:01:48:a5:ab:30:
ef:2d:03:7f:09:d3:c4:9b:93:80:6d:9d:e4:7a:d8:
58:55:50:a9:e8:e5:3e:ba:7b:f3:a3:05:8e:d8:bb:
60:02:11:5b:32:68:9e:ab:cc:29:92:92:c5:34:3c:
18:99:eb:f6:00:28:e3:92:16:cb:c1:60:f4:82:97:
df:a4:a1:f5:cf:3a:ac:8c:d8:63:41:e5:09:31:a9:
7e:2d:df:0c:f0:b7:e7:a2:ef:51:03:c7:f5:51:6b:
30:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B4:56:FB:DE:6C:75:A8:99:4A:3C:91:5F:87:99:1F:CB:DD:D0:8B:80
X509v3 Authority Key Identifier:
keyid:38:31:F9:AA:50:CE:FE:82:5D:A5:F9:0D:A6:7B:30:32:54:A9:DB:85
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ODH5qlDO_oJdpfkNpnswMlSp24U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ca/825011-3e5b-4404-a7b0-66f9c92d4fa1/1/ODH5qlDO_oJdpfkNpnswMlSp24U.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ca/825011-3e5b-4404-a7b0-66f9c92d4fa1/1/ODH5qlDO_oJdpfkNpnswMlSp24U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
19:67:49:fd:ab:20:b6:6c:fe:97:bc:c5:21:f4:44:a9:80:43:
1c:7b:4d:84:cc:26:51:83:f9:cc:09:57:04:0e:ac:af:68:8e:
05:d8:64:68:df:a9:c4:ae:06:2c:87:58:a5:54:13:29:72:e9:
25:f0:e5:5d:82:10:9c:fd:47:9f:3e:78:dd:40:2a:0c:47:ef:
46:a7:d1:a5:10:6e:40:a7:59:54:83:1d:41:9b:fe:fc:3a:05:
9f:1e:3d:cf:23:39:b5:4a:e3:23:5b:fc:b8:1a:96:18:62:cc:
fe:85:f2:ee:d8:c2:6e:fa:17:47:df:5e:ff:63:3e:22:75:3d:
9b:a4:51:aa:e6:3b:72:bc:c8:3f:1c:0b:e1:b0:2d:30:7f:2a:
88:46:16:c1:1b:68:8e:10:8f:ec:38:47:db:92:ba:c8:d2:bd:
8b:39:17:4c:18:f1:35:a3:22:a0:c1:31:a0:c2:b1:7f:26:01:
0f:61:e8:f5:29:88:1f:37:ab:8f:2a:a8:d7:fa:cc:38:39:15:
4e:66:b5:02:ba:f9:eb:94:9c:c9:34:fb:14:20:10:3c:ef:a3:
cd:1d:c0:26:4c:fc:57:ad:94:61:f0:a5:17:dd:cf:5b:39:5b:
c8:b6:87:05:30:b7:94:d2:0f:90:ee:42:d0:0d:5a:b8:42:cc:
ac:2c:39:8b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 21 02:45:22 2025 by rpki-client