Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dc/df9096-36c9-439a-a0a0-a3a100ef86de/1/oCN2bGLetRKXFVcI7MtCHIsEeAo.mft
File: oCN2bGLetRKXFVcI7MtCHIsEeAo.mft (raw, json)
Hash identifier: AfsQGfjIbrFip56yNgcJO2xSGIDdK2yAv38sMxAlRzs=
Subject key identifier: 54:B1:5C:5D:D0:95:3C:58:83:BA:2C:66:C3:DC:83:3D:6E:87:C6:32
Authority key identifier: A0:23:76:6C:62:DE:B5:12:97:15:57:08:EC:CB:42:1C:8B:04:78:0A
Certificate issuer: /CN=a023766c62deb51297155708eccb421c8b04780a
Certificate serial: 01965613EC68FADF2C40CEB14E429B9A050C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/oCN2bGLetRKXFVcI7MtCHIsEeAo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/dc/df9096-36c9-439a-a0a0-a3a100ef86de/1/oCN2bGLetRKXFVcI7MtCHIsEeAo.mft
Manifest number: 1250
Signing time: Mon 21 Apr 2025 02:01:08 +0000
Manifest this update: Mon 21 Apr 2025 02:01:08 +0000
Manifest next update: Tue 22 Apr 2025 02:01:08 +0000
Files and hashes: 1: CHrue45DLIyJD4ONNTGJ0TL9VsA.roa (hash: u/OfuNsymZa5oGvy4EyVltbtk9eDJK5E1jdXxm1UcXE=)
2: oCN2bGLetRKXFVcI7MtCHIsEeAo.crl (hash: Ga4tID57gCrl1fv/Fab4K4mKloI/VSlyzi94XyBYENg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/dc/df9096-36c9-439a-a0a0-a3a100ef86de/1/oCN2bGLetRKXFVcI7MtCHIsEeAo.crl
rsync://rpki.ripe.net/repository/DEFAULT/dc/df9096-36c9-439a-a0a0-a3a100ef86de/1/oCN2bGLetRKXFVcI7MtCHIsEeAo.mft
rsync://rpki.ripe.net/repository/DEFAULT/oCN2bGLetRKXFVcI7MtCHIsEeAo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 22 Apr 2025 01:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:56:13:ec:68:fa:df:2c:40:ce:b1:4e:42:9b:9a:05:0c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a023766c62deb51297155708eccb421c8b04780a
Validity
Not Before: Apr 21 02:01:08 2025 GMT
Not After : Apr 22 02:01:08 2025 GMT
Subject: CN=54b15c5dd0953c5883ba2c66c3dc833d6e87c632
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e0:70:77:ec:59:10:74:0d:2c:05:a1:ee:cd:cc:
76:8c:3c:34:69:02:6a:bc:03:a4:d1:f1:5e:0f:c2:
5b:71:39:6b:e3:09:25:02:e5:9c:e4:f6:87:3c:02:
e6:e9:ff:49:47:64:54:70:0a:a6:4c:a0:9b:91:ee:
f7:1d:27:e5:78:a5:b0:d3:f7:a7:c9:af:ad:47:20:
d6:63:56:bf:50:38:d1:4e:11:0f:a9:8f:ba:5b:29:
f5:46:63:7b:02:8f:3a:8a:a3:95:38:23:c6:0a:0a:
9e:ce:cb:08:26:84:97:3f:b4:f7:ee:9d:a3:18:f2:
2c:db:c6:cd:9b:5e:a5:4f:a3:ba:43:fb:3d:64:ac:
49:25:b5:bf:e3:17:45:0d:9a:1b:0e:4b:d3:e1:e4:
ce:30:2e:e8:13:2c:e9:33:54:82:5d:93:e6:21:36:
58:b1:8c:e7:29:d2:19:25:73:6c:e3:5f:01:ab:93:
b2:25:b0:3d:1f:b2:48:07:c6:cb:f2:a6:0d:df:9f:
a8:bf:b5:50:e0:f5:b8:3e:c8:e1:0f:00:96:f2:34:
c4:b2:bb:b9:6b:c1:3e:40:94:bd:34:39:24:28:a4:
c3:4e:01:03:4c:73:94:ed:8d:b5:41:33:95:cb:2a:
c4:8f:21:43:ff:66:ea:7e:27:42:31:6e:51:c5:06:
84:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
54:B1:5C:5D:D0:95:3C:58:83:BA:2C:66:C3:DC:83:3D:6E:87:C6:32
X509v3 Authority Key Identifier:
keyid:A0:23:76:6C:62:DE:B5:12:97:15:57:08:EC:CB:42:1C:8B:04:78:0A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/oCN2bGLetRKXFVcI7MtCHIsEeAo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dc/df9096-36c9-439a-a0a0-a3a100ef86de/1/oCN2bGLetRKXFVcI7MtCHIsEeAo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/dc/df9096-36c9-439a-a0a0-a3a100ef86de/1/oCN2bGLetRKXFVcI7MtCHIsEeAo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ac:8c:06:aa:bd:b1:9b:9f:c7:70:3c:26:0d:e3:88:26:07:37:
52:2f:73:2d:ff:09:6d:3b:8b:1b:35:b0:2a:bc:1f:9b:c6:9d:
2c:94:13:a6:b2:84:b9:e0:ef:ed:25:96:f1:dc:5c:13:53:78:
6a:89:7b:f6:d7:3b:09:16:98:de:44:6c:36:6a:1a:b0:c1:10:
1b:12:0f:76:99:1c:84:62:94:51:6c:6f:ad:41:e1:cd:de:52:
43:62:51:2c:2a:55:47:20:bd:a6:fb:37:89:b0:da:2a:9a:f3:
77:dd:2e:e9:f3:8e:aa:6a:1a:9c:a2:db:e5:a7:c5:d8:a4:cd:
2f:27:ae:03:f9:78:fe:de:0f:a5:1f:06:e8:11:b4:5e:c6:c4:
08:1c:44:ad:84:26:7e:69:f2:80:94:13:81:0b:10:6f:99:eb:
4c:95:9b:b4:50:7e:45:27:72:9a:7d:fc:63:f1:44:be:6e:a0:
5e:3f:1c:ca:60:47:f6:a4:35:cb:94:e8:b4:e0:44:6b:b5:a8:
67:3f:b4:51:ff:ac:14:1a:87:6d:62:ed:a1:aa:10:47:0b:d1:
1c:6b:4a:e0:77:6b:b1:b7:43:76:b7:05:0a:43:89:c6:46:6a:
7d:49:99:f9:ba:7f:dd:6e:c8:3a:3f:fe:55:f0:c0:5c:22:d0:
7d:78:51:cc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 21 04:06:39 2025 by rpki-client