Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/17/014526-da31-47c5-9a5c-9d86528da099/1/OY5Tm8xek0YkNE2IT2Ipk7HumqE.mft
File: OY5Tm8xek0YkNE2IT2Ipk7HumqE.mft (raw, json)
Hash identifier: nwlZ4MDyjtLs3p7MSv/yYfC6ZteHxVKT88eDPBRJ8Fw=
Subject key identifier: 57:DE:DE:F9:D9:C3:FB:DA:2F:FF:9C:12:05:AA:34:2D:5D:9B:23:6B
Authority key identifier: 39:8E:53:9B:CC:5E:93:46:24:34:4D:88:4F:62:29:93:B1:EE:9A:A1
Certificate issuer: /CN=398e539bcc5e934624344d884f622993b1ee9aa1
Certificate serial: 0194C4D1775184C6340362CEC6347BF44EB0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OY5Tm8xek0YkNE2IT2Ipk7HumqE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/17/014526-da31-47c5-9a5c-9d86528da099/1/OY5Tm8xek0YkNE2IT2Ipk7HumqE.mft
Manifest number: 027D
Signing time: Sun 02 Feb 2025 04:00:49 +0000
Manifest this update: Sun 02 Feb 2025 04:00:49 +0000
Manifest next update: Mon 03 Feb 2025 04:00:49 +0000
Files and hashes: 1: OY5Tm8xek0YkNE2IT2Ipk7HumqE.crl (hash: jDinCJI2N6BpG/YZZBfBQlWMcHV3W+hJRj6UtnTlF+A=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/17/014526-da31-47c5-9a5c-9d86528da099/1/OY5Tm8xek0YkNE2IT2Ipk7HumqE.crl
rsync://rpki.ripe.net/repository/DEFAULT/17/014526-da31-47c5-9a5c-9d86528da099/1/OY5Tm8xek0YkNE2IT2Ipk7HumqE.mft
rsync://rpki.ripe.net/repository/DEFAULT/OY5Tm8xek0YkNE2IT2Ipk7HumqE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 03 Feb 2025 00:00:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:c4:d1:77:51:84:c6:34:03:62:ce:c6:34:7b:f4:4e:b0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=398e539bcc5e934624344d884f622993b1ee9aa1
Validity
Not Before: Feb 2 04:00:49 2025 GMT
Not After : Feb 3 04:00:49 2025 GMT
Subject: CN=57dedef9d9c3fbda2fff9c1205aa342d5d9b236b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:bf:59:d8:78:aa:86:92:8e:74:95:f7:e1:6d:
dd:a9:5d:bb:7b:16:a1:75:3d:04:d9:ac:ce:78:a7:
d3:31:66:1c:54:e6:b5:54:a0:09:ac:1c:8d:75:64:
e6:f7:d4:17:c5:8e:2a:51:b3:5e:2b:03:7c:26:f4:
0f:73:72:26:cf:8b:7c:e7:f6:ee:e2:fb:3c:ce:eb:
f1:fe:31:37:54:09:a7:21:37:f2:a1:66:95:ed:99:
f4:a3:7c:70:98:7d:7d:0c:e4:24:79:f8:42:48:3f:
16:7e:e5:2a:8b:f9:c3:e3:2d:00:d6:71:1c:1a:8b:
db:8e:25:07:ae:69:e0:a1:05:f6:e4:ee:98:27:67:
4d:5f:52:72:a2:d5:2e:eb:87:cb:35:b9:cc:e5:ed:
f6:21:0d:c1:9f:3d:e1:72:fa:e6:38:1f:92:7e:9d:
16:6e:82:14:92:2f:62:34:53:5e:26:b1:f7:8f:5f:
13:2a:bd:f9:23:4e:3b:7a:61:73:ca:e1:84:e6:95:
4b:d9:17:c7:54:f9:3c:d1:03:d3:6e:78:29:87:26:
88:c0:da:0a:c4:f5:a8:27:7a:1b:9b:c5:1f:49:36:
61:d3:01:39:de:9a:a3:7b:d7:da:9c:93:9c:3c:f1:
a5:00:53:7d:a6:de:0c:a7:65:57:b5:9f:60:69:5b:
bd:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
57:DE:DE:F9:D9:C3:FB:DA:2F:FF:9C:12:05:AA:34:2D:5D:9B:23:6B
X509v3 Authority Key Identifier:
keyid:39:8E:53:9B:CC:5E:93:46:24:34:4D:88:4F:62:29:93:B1:EE:9A:A1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OY5Tm8xek0YkNE2IT2Ipk7HumqE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/17/014526-da31-47c5-9a5c-9d86528da099/1/OY5Tm8xek0YkNE2IT2Ipk7HumqE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/17/014526-da31-47c5-9a5c-9d86528da099/1/OY5Tm8xek0YkNE2IT2Ipk7HumqE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
70:f8:e6:1c:fa:38:0c:74:95:20:41:73:6a:e4:9b:9c:d5:d3:
06:1c:02:0d:77:08:18:e7:ee:a7:09:20:0e:71:d3:62:f3:4c:
4a:ec:bb:c9:00:a9:e3:92:be:2c:2b:15:55:bc:3f:38:3f:85:
8a:d5:b4:88:16:9a:44:52:4a:2c:6e:47:a7:3b:ae:13:80:09:
c9:52:58:19:ce:86:2c:67:93:e0:92:aa:7c:b8:ab:c7:6a:47:
4a:a9:64:c9:31:21:4a:d7:a2:e3:89:84:36:0e:4f:8c:83:fe:
36:f3:37:89:06:1d:3b:d8:fc:18:9c:be:9f:37:91:de:2f:ff:
16:d3:9b:73:60:4f:09:2b:ad:6a:7b:bc:bc:eb:3f:a8:2d:6c:
1b:6d:a4:45:e4:56:cd:1a:65:bb:f0:58:11:02:a2:d9:67:53:
74:4d:2b:41:c2:bc:0b:9d:c9:33:5a:db:78:4c:f6:f0:41:ab:
0c:d5:6a:69:e3:ea:6a:76:23:b7:52:b0:67:d6:88:f6:a2:46:
e4:f9:dc:49:83:7a:67:e3:1f:cb:fb:ad:98:46:ac:de:0d:67:
83:08:11:e7:e2:b5:1b:3a:65:65:b7:b5:bc:a1:ff:4b:fa:9d:
3b:ee:5b:0f:17:f6:82:a7:df:a7:c0:4a:c6:90:7d:49:61:16:
45:d7:de:45
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 2 06:02:35 2025 by rpki-client