Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cf/689d05-1b14-4f9b-8e7c-371ac7c654da/1/oYNGitFuaZjU23dpvvv6BuofE0I.mft
File: oYNGitFuaZjU23dpvvv6BuofE0I.mft (raw, json)
Hash identifier: Phz7AJiJhRaqpNcRheaiYCfTxItUy95ZrillzIgdBn4=
Subject key identifier: D6:F4:89:E1:25:CB:63:B0:4B:5F:59:1D:68:C0:F4:46:27:B1:4F:16
Authority key identifier: A1:83:46:8A:D1:6E:69:98:D4:DB:77:69:BE:FB:FA:06:EA:1F:13:42
Certificate issuer: /CN=a183468ad16e6998d4db7769befbfa06ea1f1342
Certificate serial: 01965BDED1BBE7196D4CEC3D63745D8135B5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/oYNGitFuaZjU23dpvvv6BuofE0I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cf/689d05-1b14-4f9b-8e7c-371ac7c654da/1/oYNGitFuaZjU23dpvvv6BuofE0I.mft
Manifest number: 0E7D
Signing time: Tue 22 Apr 2025 05:00:51 +0000
Manifest this update: Tue 22 Apr 2025 05:00:51 +0000
Manifest next update: Wed 23 Apr 2025 05:00:51 +0000
Files and hashes: 1: oYNGitFuaZjU23dpvvv6BuofE0I.crl (hash: GFf90XUUIVUHNGbI6hVpr9v76zF0ZeVzlNCWbY+DBAE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cf/689d05-1b14-4f9b-8e7c-371ac7c654da/1/oYNGitFuaZjU23dpvvv6BuofE0I.crl
rsync://rpki.ripe.net/repository/DEFAULT/cf/689d05-1b14-4f9b-8e7c-371ac7c654da/1/oYNGitFuaZjU23dpvvv6BuofE0I.mft
rsync://rpki.ripe.net/repository/DEFAULT/oYNGitFuaZjU23dpvvv6BuofE0I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 23 Apr 2025 04:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:5b:de:d1:bb:e7:19:6d:4c:ec:3d:63:74:5d:81:35:b5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a183468ad16e6998d4db7769befbfa06ea1f1342
Validity
Not Before: Apr 22 05:00:51 2025 GMT
Not After : Apr 23 05:00:51 2025 GMT
Subject: CN=d6f489e125cb63b04b5f591d68c0f44627b14f16
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e3:9f:76:41:8c:27:89:2d:40:8f:3b:04:20:68:
f7:13:51:50:b0:94:b8:02:fe:22:fe:f1:62:1f:a7:
32:1d:a9:fa:d2:ca:00:79:a2:d0:17:f0:1b:6e:85:
93:22:42:3d:c1:74:b3:c7:e3:56:9e:ad:ba:20:94:
f2:3f:24:75:f2:bf:5a:cc:77:72:c2:d6:2e:d3:61:
93:e4:b9:c5:63:3d:89:db:c3:d6:54:b3:3b:02:e1:
5f:86:a2:03:47:44:ae:e6:66:87:7b:c0:34:69:55:
9d:cb:f5:4e:ca:d8:e0:06:52:3e:29:ae:14:e4:cb:
e8:c6:30:c3:d4:4e:95:5b:ea:6e:8b:59:74:44:84:
e2:df:af:f5:ba:b3:bb:1c:95:73:52:f4:af:0d:8a:
9d:b6:bb:71:12:0b:57:db:2e:fc:77:4c:11:c4:4b:
04:56:3e:e6:71:22:df:06:27:fd:4c:56:bf:78:2c:
9a:e9:6c:ee:72:c3:09:34:62:5a:5a:17:e8:cf:f3:
2d:22:de:5a:0e:0a:20:c4:de:42:02:73:32:d7:56:
25:b4:df:25:bd:4a:cb:68:8a:6f:14:f0:27:62:94:
de:0f:80:b3:1e:bf:15:4a:c5:0d:b9:df:00:90:18:
78:8a:a8:44:39:13:fa:81:3d:9d:b9:6a:bc:90:24:
0b:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D6:F4:89:E1:25:CB:63:B0:4B:5F:59:1D:68:C0:F4:46:27:B1:4F:16
X509v3 Authority Key Identifier:
keyid:A1:83:46:8A:D1:6E:69:98:D4:DB:77:69:BE:FB:FA:06:EA:1F:13:42
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/oYNGitFuaZjU23dpvvv6BuofE0I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cf/689d05-1b14-4f9b-8e7c-371ac7c654da/1/oYNGitFuaZjU23dpvvv6BuofE0I.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cf/689d05-1b14-4f9b-8e7c-371ac7c654da/1/oYNGitFuaZjU23dpvvv6BuofE0I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
52:64:a5:e4:35:28:50:fa:4e:7e:24:4b:cb:83:97:d4:65:ce:
f4:75:65:d6:61:48:cd:de:73:c9:ad:d0:be:f1:8a:ab:4f:26:
58:0b:41:1c:bb:0f:0a:ee:d8:b5:d0:26:01:39:f3:66:60:85:
80:7b:bb:77:fb:f9:19:49:44:2c:ad:de:64:be:c6:e2:e6:b3:
d0:f0:ce:2c:10:9c:03:02:fd:91:02:af:7e:9e:b1:39:a9:b4:
05:b0:f9:f4:dc:4d:93:6b:a1:e7:85:5d:d6:51:c9:c1:2c:2b:
a4:aa:56:6b:0e:43:59:76:3f:92:71:17:69:ec:3e:cd:3c:89:
d9:e2:8f:a7:5a:75:15:2f:a1:8d:ef:4d:23:f3:a8:2c:a2:65:
99:e0:03:89:b1:24:91:b5:ed:96:4a:a2:69:64:b2:bc:cf:64:
d4:44:88:22:1c:a9:e6:fe:37:a4:0f:e3:5f:62:2d:83:b3:7a:
a1:85:0e:61:c6:ac:21:5c:6b:9d:ba:a2:19:bf:1f:15:f6:29:
75:13:37:a2:a8:8a:ec:d7:3b:2c:d4:e2:af:5b:b9:f5:66:ec:
00:12:fe:7b:71:67:ec:98:bf:b3:9c:c2:40:ac:c7:b6:26:22:
72:d2:09:95:25:c0:49:f4:bf:3d:ac:58:67:16:73:dc:d5:57:
1e:df:e0:ce
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 22 13:02:58 2025 by rpki-client