Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/18/db3ad9-01ee-4a49-b7ea-79c41ac9b6f8/1/O9zRjzNMh6W1fdeH7DJ0NV-dWJQ.mft
File: O9zRjzNMh6W1fdeH7DJ0NV-dWJQ.mft (raw, json)
Hash identifier: e9UIFu0ttXsSW2mzGA5nei9LnjCfDehPWmGxH/x54nQ=
Subject key identifier: C4:8E:EE:8F:8B:D9:3E:6C:BE:AC:03:A4:72:A0:3A:EF:C7:25:7C:BA
Authority key identifier: 3B:DC:D1:8F:33:4C:87:A5:B5:7D:D7:87:EC:32:74:35:5F:9D:58:94
Certificate issuer: /CN=3bdcd18f334c87a5b57dd787ec3274355f9d5894
Certificate serial: 01962B298A44839E4832C43E5E3B45AEDABC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/O9zRjzNMh6W1fdeH7DJ0NV-dWJQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/18/db3ad9-01ee-4a49-b7ea-79c41ac9b6f8/1/O9zRjzNMh6W1fdeH7DJ0NV-dWJQ.mft
Manifest number: 14E4
Signing time: Sat 12 Apr 2025 18:01:04 +0000
Manifest this update: Sat 12 Apr 2025 18:01:04 +0000
Manifest next update: Sun 13 Apr 2025 18:01:04 +0000
Files and hashes: 1: O9zRjzNMh6W1fdeH7DJ0NV-dWJQ.crl (hash: m9Hgf3iig63uoXzk3MohT13tZIVBCZnjwkK2YW0bJ/Q=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/18/db3ad9-01ee-4a49-b7ea-79c41ac9b6f8/1/O9zRjzNMh6W1fdeH7DJ0NV-dWJQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/18/db3ad9-01ee-4a49-b7ea-79c41ac9b6f8/1/O9zRjzNMh6W1fdeH7DJ0NV-dWJQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/O9zRjzNMh6W1fdeH7DJ0NV-dWJQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 13 Apr 2025 18:01:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:2b:29:8a:44:83:9e:48:32:c4:3e:5e:3b:45:ae:da:bc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3bdcd18f334c87a5b57dd787ec3274355f9d5894
Validity
Not Before: Apr 12 18:01:04 2025 GMT
Not After : Apr 13 18:01:04 2025 GMT
Subject: CN=c48eee8f8bd93e6cbeac03a472a03aefc7257cba
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:86:2e:d1:70:b4:84:27:8c:29:2f:3e:12:bf:
cf:8e:40:4f:67:2d:6e:25:5c:a0:c5:34:fb:12:b2:
6d:ff:46:84:34:a0:7d:89:96:42:b5:3f:b3:4b:2d:
f7:bd:6f:aa:b6:eb:c7:03:76:91:a8:5d:44:bc:44:
e9:37:11:ea:b9:d3:6e:50:e4:c7:37:9e:bc:30:0d:
ca:9f:31:30:69:85:66:8b:ba:9a:ce:96:e8:73:8e:
e2:17:95:fc:a8:92:e7:1e:75:83:e6:94:1e:8f:3d:
ae:18:38:58:56:2d:84:a6:61:78:cd:10:9c:a3:d5:
c6:b0:1e:e4:36:d4:3b:59:2d:d6:56:21:2a:e7:15:
d5:ae:19:49:37:53:ad:08:52:79:3f:b9:4a:ff:9f:
84:d5:6d:03:8c:1e:80:40:39:3f:1c:9b:b3:5d:3e:
54:47:da:42:e1:8d:16:c3:15:dc:a2:68:b4:21:4c:
14:29:07:e0:7d:6a:07:dc:4d:eb:62:21:31:50:b1:
17:fc:88:ef:d2:3a:35:f0:83:76:df:98:c1:2f:df:
0e:12:00:f3:31:04:44:e2:a6:1b:1d:2e:dc:e7:bf:
63:df:c5:85:d0:d3:57:7d:a6:ec:42:ad:42:47:e6:
28:7e:74:90:1a:07:d2:d5:21:35:c2:0f:c8:26:5d:
b3:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C4:8E:EE:8F:8B:D9:3E:6C:BE:AC:03:A4:72:A0:3A:EF:C7:25:7C:BA
X509v3 Authority Key Identifier:
keyid:3B:DC:D1:8F:33:4C:87:A5:B5:7D:D7:87:EC:32:74:35:5F:9D:58:94
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/O9zRjzNMh6W1fdeH7DJ0NV-dWJQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/18/db3ad9-01ee-4a49-b7ea-79c41ac9b6f8/1/O9zRjzNMh6W1fdeH7DJ0NV-dWJQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/18/db3ad9-01ee-4a49-b7ea-79c41ac9b6f8/1/O9zRjzNMh6W1fdeH7DJ0NV-dWJQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
75:cf:76:7f:c1:a6:6e:bc:89:e6:e5:64:83:ec:5e:d4:70:01:
2a:e4:41:ef:a9:59:65:b3:6a:38:a1:89:83:ff:80:46:e5:74:
fe:15:c3:ac:b2:a8:cb:97:1e:ca:30:6c:b2:0f:0d:f4:01:b3:
9b:b7:82:55:12:18:f9:2e:48:a7:d3:a1:94:81:d4:c4:e4:4f:
4f:33:9a:1c:ec:fd:c9:1c:24:c9:f6:0e:c8:38:c4:ce:f5:80:
e6:bc:cf:5d:f6:03:34:08:83:21:57:db:90:51:b4:33:c1:e2:
8e:54:73:7d:e0:57:0a:81:38:78:22:1e:0b:71:a3:10:0b:a4:
3f:34:bb:e0:f7:72:5f:81:d5:08:6d:89:20:37:15:e8:ae:49:
6b:de:a2:4d:6b:3a:57:db:86:76:6c:55:40:d5:d1:81:1e:d1:
a1:77:5a:bf:60:ee:26:e4:cc:fe:9e:db:b6:78:c5:60:da:88:
54:ce:2d:32:39:58:5a:96:85:34:2b:96:99:c7:2f:dd:d7:59:
21:6d:04:8c:5d:32:9e:d8:24:b4:7f:5c:ed:c1:24:66:da:ef:
dc:b7:ac:06:c6:3e:3f:32:74:03:69:89:80:eb:f5:24:fb:15:
68:bd:36:66:5d:2f:ca:23:da:11:75:26:ff:e8:3b:71:3b:f5:
20:03:8c:46
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 13 02:48:08 2025 by rpki-client