Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d3/37dce6-ffe5-476b-808a-0014bc855bf4/1/_OJ9ZKTOleCDEa-v9D5m0HP7IdE.mft
File: _OJ9ZKTOleCDEa-v9D5m0HP7IdE.mft (raw, json)
Hash identifier: +gliX8icyC84ukbiu72OoOJ7lZsj29pIjA9NADHKRDQ=
Subject key identifier: 98:37:A0:5C:52:07:42:4B:F3:0E:B3:81:48:59:26:3B:3A:50:F6:7D
Authority key identifier: FC:E2:7D:64:A4:CE:95:E0:83:11:AF:AF:F4:3E:66:D0:73:FB:21:D1
Certificate issuer: /CN=fce27d64a4ce95e08311afaff43e66d073fb21d1
Certificate serial: 01965537E64B7F88FC902004590069F702BB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_OJ9ZKTOleCDEa-v9D5m0HP7IdE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d3/37dce6-ffe5-476b-808a-0014bc855bf4/1/_OJ9ZKTOleCDEa-v9D5m0HP7IdE.mft
Manifest number: 0E78
Signing time: Sun 20 Apr 2025 22:00:48 +0000
Manifest this update: Sun 20 Apr 2025 22:00:48 +0000
Manifest next update: Mon 21 Apr 2025 22:00:48 +0000
Files and hashes: 1: _OJ9ZKTOleCDEa-v9D5m0HP7IdE.crl (hash: i2PFn5SZom/afss7IZZFmsWVEuPHFjC6Vch4JaezSME=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d3/37dce6-ffe5-476b-808a-0014bc855bf4/1/_OJ9ZKTOleCDEa-v9D5m0HP7IdE.crl
rsync://rpki.ripe.net/repository/DEFAULT/d3/37dce6-ffe5-476b-808a-0014bc855bf4/1/_OJ9ZKTOleCDEa-v9D5m0HP7IdE.mft
rsync://rpki.ripe.net/repository/DEFAULT/_OJ9ZKTOleCDEa-v9D5m0HP7IdE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 21 Apr 2025 22:00:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:55:37:e6:4b:7f:88:fc:90:20:04:59:00:69:f7:02:bb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fce27d64a4ce95e08311afaff43e66d073fb21d1
Validity
Not Before: Apr 20 22:00:48 2025 GMT
Not After : Apr 21 22:00:48 2025 GMT
Subject: CN=9837a05c5207424bf30eb3814859263b3a50f67d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:ce:33:98:59:d9:82:ea:82:2c:2e:53:30:f5:
09:5d:19:a5:6b:9b:de:18:e7:b4:3c:d5:a0:aa:fa:
26:b8:3f:19:a8:21:56:f6:15:e1:1e:e1:df:ba:f8:
7c:3b:89:07:24:c4:2b:ea:5d:2f:1c:4a:c7:0e:09:
4a:b4:99:04:f2:7d:37:77:60:d2:e9:54:1e:53:a3:
fb:85:e7:41:f4:a2:6d:27:f7:46:3b:f4:12:8c:82:
3e:08:c8:18:d7:71:70:72:44:a2:1b:bd:4b:74:57:
c9:e9:0f:00:3c:29:7a:f4:d5:e0:a1:da:59:42:09:
ab:d9:59:a9:7a:06:6c:e5:a7:0c:09:b6:e0:38:69:
5b:be:12:b6:eb:38:0e:38:95:40:c1:a9:b4:7c:d9:
2a:35:86:08:00:6c:6d:25:b4:14:b9:5a:34:98:0c:
94:7d:36:2e:de:8e:20:95:1b:3f:0e:b1:4b:20:4d:
54:af:5e:8d:f5:c4:de:1f:5f:20:ec:51:6f:61:bc:
aa:b7:1c:c6:d9:6a:02:24:1a:b8:80:71:fe:60:70:
46:7f:01:15:f4:95:0d:2f:a2:11:af:0d:58:07:e1:
53:7d:0e:53:22:95:a6:53:ed:94:de:85:be:5a:1f:
cf:9f:36:b9:b6:1d:87:69:32:dc:5e:f7:a5:c4:ba:
1b:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
98:37:A0:5C:52:07:42:4B:F3:0E:B3:81:48:59:26:3B:3A:50:F6:7D
X509v3 Authority Key Identifier:
keyid:FC:E2:7D:64:A4:CE:95:E0:83:11:AF:AF:F4:3E:66:D0:73:FB:21:D1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_OJ9ZKTOleCDEa-v9D5m0HP7IdE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/37dce6-ffe5-476b-808a-0014bc855bf4/1/_OJ9ZKTOleCDEa-v9D5m0HP7IdE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/37dce6-ffe5-476b-808a-0014bc855bf4/1/_OJ9ZKTOleCDEa-v9D5m0HP7IdE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3b:d5:57:fc:41:2b:d3:6b:db:4e:ac:de:0b:12:95:6e:65:e8:
c4:da:2c:f9:53:8a:98:05:a7:c2:98:43:b5:a9:c3:a6:cc:3a:
78:83:bf:10:07:6b:d5:f6:c7:04:8f:34:bc:ed:b2:71:17:29:
80:45:6d:ce:37:61:d3:ff:c9:e7:ec:f7:ad:3d:ed:b1:14:20:
ef:2c:99:c6:f9:48:7b:8e:c8:d9:99:d9:9d:19:13:dd:35:9d:
f7:58:3d:96:93:14:c6:0a:5f:02:41:ba:b9:49:80:c6:c7:66:
dc:06:4c:c5:53:b5:1f:21:e2:eb:b9:77:07:04:8d:84:78:33:
06:74:d7:52:74:55:e6:6f:97:e8:38:bf:e6:af:11:11:e7:93:
6f:07:8b:6e:88:2b:f1:be:60:44:e6:df:86:dd:1f:88:b2:80:
48:f7:fe:dc:cc:48:24:a7:c2:15:5c:bb:1f:55:c8:64:e9:af:
da:1a:7e:00:8a:e5:38:b0:3f:dc:6b:af:8d:a0:ac:28:39:ca:
08:d3:37:18:60:b6:5a:30:f7:76:01:c6:a2:c7:5c:52:06:c8:
ec:4c:09:c2:17:d9:9f:05:a5:b6:5b:3e:8b:2d:76:d8:b8:58:
fa:43:80:ab:16:c2:9c:4f:43:a9:0f:18:d4:4f:fe:f6:de:b0:
ad:83:04:ec
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 21 05:34:41 2025 by rpki-client