Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ef/1a3d98-c14f-4d06-a466-d985394e3c10/1/OLx5TF-6rGMqf_tD2xT3Oc1TssQ.mft
File: OLx5TF-6rGMqf_tD2xT3Oc1TssQ.mft (raw, json)
Hash identifier: frfyXomRGOaBK14Bpmmz5AJGscgA64iNRPg30rjeUVo=
Subject key identifier: D2:7A:CD:5D:5D:03:DF:73:B2:80:E7:B4:FF:FF:F3:3E:EC:65:2C:DD
Authority key identifier: 38:BC:79:4C:5F:BA:AC:63:2A:7F:FB:43:DB:14:F7:39:CD:53:B2:C4
Certificate issuer: /CN=38bc794c5fbaac632a7ffb43db14f739cd53b2c4
Certificate serial: 01966028F08799CAFD49EECFD658A5817782
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OLx5TF-6rGMqf_tD2xT3Oc1TssQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ef/1a3d98-c14f-4d06-a466-d985394e3c10/1/OLx5TF-6rGMqf_tD2xT3Oc1TssQ.mft
Manifest number: 0150
Signing time: Wed 23 Apr 2025 01:00:17 +0000
Manifest this update: Wed 23 Apr 2025 01:00:17 +0000
Manifest next update: Thu 24 Apr 2025 01:00:17 +0000
Files and hashes: 1: OLx5TF-6rGMqf_tD2xT3Oc1TssQ.crl (hash: VBQZiVwXhAVuL9TRmuZIZd4s5DWumqFvFN1TzDL5RYo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ef/1a3d98-c14f-4d06-a466-d985394e3c10/1/OLx5TF-6rGMqf_tD2xT3Oc1TssQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/ef/1a3d98-c14f-4d06-a466-d985394e3c10/1/OLx5TF-6rGMqf_tD2xT3Oc1TssQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/OLx5TF-6rGMqf_tD2xT3Oc1TssQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 23 Apr 2025 23:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:60:28:f0:87:99:ca:fd:49:ee:cf:d6:58:a5:81:77:82
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=38bc794c5fbaac632a7ffb43db14f739cd53b2c4
Validity
Not Before: Apr 23 01:00:17 2025 GMT
Not After : Apr 24 01:00:17 2025 GMT
Subject: CN=d27acd5d5d03df73b280e7b4fffff33eec652cdd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:3e:bc:c3:21:0b:12:cd:6d:c0:1d:a9:a1:7c:
67:7a:43:18:4d:99:96:88:b0:64:30:7c:40:f6:9c:
56:4e:0b:7c:e9:79:d1:6e:0a:a2:e6:08:16:17:d9:
46:70:f7:cf:8e:aa:0d:df:4e:ef:f8:3f:f5:96:77:
95:b0:c2:51:3d:0a:d4:9e:fc:ba:cf:df:02:d5:92:
85:e5:9f:ec:a2:64:31:b5:88:ae:c6:7e:5e:d3:4c:
22:8c:f6:0c:e7:0e:09:96:7c:c8:63:5f:1b:64:aa:
79:d0:fb:7a:49:65:f2:d7:41:d6:99:16:fb:c0:b5:
74:b3:5c:97:7d:55:3e:d4:d2:05:49:90:60:78:11:
04:cb:ee:6c:e8:85:b3:70:50:1b:76:22:9d:ea:ca:
23:e9:72:7f:16:f4:9c:d4:ec:c7:69:d9:18:6e:5c:
ca:dd:26:b7:b6:d7:f4:dc:f6:70:f9:d8:16:ca:7a:
ff:be:7a:e3:c5:85:87:76:7a:c9:4c:a3:4a:ae:db:
3a:10:b9:61:ae:7c:9e:22:15:a5:00:00:17:cd:14:
d5:99:bd:97:b5:f4:a9:6e:d5:0b:45:4b:30:33:1b:
b9:cc:2a:4c:46:74:a5:72:44:6d:8b:34:ac:8b:62:
70:f8:7a:f4:57:03:53:0b:71:81:b3:57:3c:82:aa:
02:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D2:7A:CD:5D:5D:03:DF:73:B2:80:E7:B4:FF:FF:F3:3E:EC:65:2C:DD
X509v3 Authority Key Identifier:
keyid:38:BC:79:4C:5F:BA:AC:63:2A:7F:FB:43:DB:14:F7:39:CD:53:B2:C4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OLx5TF-6rGMqf_tD2xT3Oc1TssQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ef/1a3d98-c14f-4d06-a466-d985394e3c10/1/OLx5TF-6rGMqf_tD2xT3Oc1TssQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ef/1a3d98-c14f-4d06-a466-d985394e3c10/1/OLx5TF-6rGMqf_tD2xT3Oc1TssQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7a:73:62:b8:b6:3c:70:26:eb:7b:fd:7c:bf:36:92:47:59:86:
7d:c9:b2:40:13:14:5c:d7:8a:c2:c9:cf:6f:65:b3:ea:08:82:
03:3c:ba:6e:6a:fb:c1:20:b1:4a:1a:3f:7e:ee:e2:b0:eb:3a:
43:a7:1d:ea:d1:58:a9:66:e4:78:74:27:4d:c5:39:9c:75:c2:
d1:4e:94:83:62:19:ca:49:96:f3:d9:5f:09:84:de:67:ae:5c:
1a:20:a6:68:a0:94:40:37:7f:0d:c0:d7:23:bd:5b:ec:05:b8:
5b:ae:de:2b:40:42:80:2c:1f:67:df:e5:47:43:8f:cf:15:44:
29:c5:e5:12:93:13:46:44:c3:32:31:60:b5:06:0f:b6:68:7d:
61:6f:a2:d1:64:d9:26:2c:54:75:06:f5:86:b6:76:81:c2:be:
89:b6:a0:cb:80:21:57:6b:f3:ea:90:cc:a5:09:f5:0b:aa:4f:
47:a0:dd:e8:cc:e6:c9:8d:15:8f:e8:d1:40:bc:67:25:eb:64:
12:cd:0d:3e:78:4e:9b:fe:19:23:ca:81:2c:87:f7:9d:8d:d3:
24:54:45:3a:29:07:46:91:57:e8:8d:7d:ba:01:9b:51:d4:85:
0a:3d:2d:bb:8f:51:29:d3:d0:61:e3:60:53:fa:6a:1f:55:e4:
4f:1d:f9:ca
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 23 03:46:32 2025 by rpki-client