Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e3/f756cf-0628-4f72-a117-bbe073bf6a64/1/OWN43jPRC4yw-AhitkkaTenP_N8.mft
File: OWN43jPRC4yw-AhitkkaTenP_N8.mft (raw, json)
Hash identifier: KHiS349gPMRa/MDmN20nGaBHyu17Mv0HajopACHMz+w=
Subject key identifier: 4C:3D:DB:37:61:69:96:E8:22:7D:F5:07:C4:99:FD:DD:E0:6F:B7:CF
Authority key identifier: 39:63:78:DE:33:D1:0B:8C:B0:F8:08:62:B6:49:1A:4D:E9:CF:FC:DF
Certificate issuer: /CN=396378de33d10b8cb0f80862b6491a4de9cffcdf
Certificate serial: 019654255E1BA5F1B8EB36B45DD285445413
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OWN43jPRC4yw-AhitkkaTenP_N8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e3/f756cf-0628-4f72-a117-bbe073bf6a64/1/OWN43jPRC4yw-AhitkkaTenP_N8.mft
Manifest number: 0482
Signing time: Sun 20 Apr 2025 17:00:57 +0000
Manifest this update: Sun 20 Apr 2025 17:00:57 +0000
Manifest next update: Mon 21 Apr 2025 17:00:57 +0000
Files and hashes: 1: OWN43jPRC4yw-AhitkkaTenP_N8.crl (hash: 1qb90AhfLEpqM4k6Xo6u/ZlR27ad0T/QyojvHobfJ2Y=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e3/f756cf-0628-4f72-a117-bbe073bf6a64/1/OWN43jPRC4yw-AhitkkaTenP_N8.crl
rsync://rpki.ripe.net/repository/DEFAULT/e3/f756cf-0628-4f72-a117-bbe073bf6a64/1/OWN43jPRC4yw-AhitkkaTenP_N8.mft
rsync://rpki.ripe.net/repository/DEFAULT/OWN43jPRC4yw-AhitkkaTenP_N8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 21 Apr 2025 17:00:57 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:54:25:5e:1b:a5:f1:b8:eb:36:b4:5d:d2:85:44:54:13
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=396378de33d10b8cb0f80862b6491a4de9cffcdf
Validity
Not Before: Apr 20 17:00:57 2025 GMT
Not After : Apr 21 17:00:57 2025 GMT
Subject: CN=4c3ddb37616996e8227df507c499fddde06fb7cf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:c5:46:99:c4:c7:86:c8:f8:8b:ce:d9:de:65:
90:5f:ac:82:68:4f:2a:61:b5:4f:b6:9c:da:ee:3c:
23:d1:46:06:34:e8:88:12:bf:cc:33:a7:ff:bd:91:
af:7b:26:cf:0f:04:2e:be:43:5c:57:96:98:6a:8e:
b0:cf:ea:71:24:6f:5c:77:64:81:bf:65:df:03:ad:
b0:72:49:7c:05:8a:a5:3a:09:d6:c2:f4:08:21:05:
9c:34:19:5e:2d:a3:37:71:7e:af:c6:00:98:7c:8e:
54:a9:26:80:69:73:e2:23:0d:d9:93:dd:f6:4b:69:
5a:de:da:19:08:a0:1e:45:c1:ee:7f:1a:d9:3b:b1:
70:0d:3b:46:78:31:35:f3:91:2b:cf:f4:f9:29:07:
26:0f:a5:1c:b7:26:3b:b7:21:56:90:17:65:97:6d:
1a:0e:3b:7c:e2:94:28:24:dd:3c:76:e8:cf:d8:c8:
df:5a:94:ec:c5:e2:5b:de:b7:cc:b3:70:fc:38:98:
f7:ef:e0:1f:e6:1e:78:8f:a4:db:08:13:bf:23:ad:
36:58:54:65:e1:15:4f:c0:b0:29:2b:5d:ff:3f:01:
3c:9b:58:56:37:52:17:67:7a:22:c6:a7:3e:7a:73:
9e:52:f8:60:cc:5d:05:1f:79:8d:cd:81:6a:0e:50:
94:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4C:3D:DB:37:61:69:96:E8:22:7D:F5:07:C4:99:FD:DD:E0:6F:B7:CF
X509v3 Authority Key Identifier:
keyid:39:63:78:DE:33:D1:0B:8C:B0:F8:08:62:B6:49:1A:4D:E9:CF:FC:DF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OWN43jPRC4yw-AhitkkaTenP_N8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e3/f756cf-0628-4f72-a117-bbe073bf6a64/1/OWN43jPRC4yw-AhitkkaTenP_N8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e3/f756cf-0628-4f72-a117-bbe073bf6a64/1/OWN43jPRC4yw-AhitkkaTenP_N8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
c7:56:f9:94:88:9b:9d:9b:a7:ba:79:31:0e:bb:a1:a3:eb:de:
f2:4e:24:8f:8e:ad:61:e1:f4:58:2b:43:19:d4:6c:8d:4c:c6:
9f:51:58:c4:3e:fc:2c:28:a4:3d:9f:c1:c0:09:a5:1b:7d:49:
51:11:7e:7e:8c:2d:22:1d:7d:dc:19:26:74:5a:b3:ed:77:23:
2a:3d:e6:7d:d5:23:6d:da:95:01:92:47:07:50:b4:e1:3e:f3:
af:bf:23:bc:8c:29:bd:1c:b1:34:08:5f:4d:62:c7:61:31:31:
6e:71:be:fe:1a:1f:a8:db:4c:2c:8c:41:b7:d6:61:17:8b:20:
8c:8d:d0:99:15:af:c2:cd:cc:d1:95:ff:db:ff:b2:4c:5f:5b:
70:b2:70:a9:fc:36:9d:b0:95:d7:77:34:58:41:67:26:77:71:
b8:68:a7:29:f9:23:aa:81:5c:2b:1c:ab:1c:ce:91:be:75:0d:
fb:65:6a:48:31:74:74:c7:4f:5a:2b:77:9f:dc:83:31:0a:46:
5d:6e:63:7a:5d:f2:c1:9e:8c:20:e7:fd:2c:d5:f1:9b:55:d6:
12:a1:65:e0:d6:81:33:17:7e:3c:f3:ee:33:2a:2a:bc:35:60:
0b:69:24:9e:a9:00:d1:e2:c1:89:4b:8c:50:84:f8:ae:54:ca:
3f:18:4c:2f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 21 02:45:21 2025 by rpki-client