Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/21/7d3a55-ccb7-4d0c-bd26-cff461e0df34/1/oyHD8vYVgRDoDpLioyIdaVwnp9g.mft
File: oyHD8vYVgRDoDpLioyIdaVwnp9g.mft (raw, json)
Hash identifier: FVwgCndUyyP5EGryaamT5fOMohd48BgDhaKBZK0ydBg=
Subject key identifier: 00:09:C2:66:AB:E6:13:58:A2:15:95:7C:D1:B8:C6:A2:9F:70:3C:8A
Authority key identifier: A3:21:C3:F2:F6:15:81:10:E8:0E:92:E2:A3:22:1D:69:5C:27:A7:D8
Certificate issuer: /CN=a321c3f2f6158110e80e92e2a3221d695c27a7d8
Certificate serial: 0196515AE867B5CFCF655F7379C6E8DE153F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/oyHD8vYVgRDoDpLioyIdaVwnp9g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/21/7d3a55-ccb7-4d0c-bd26-cff461e0df34/1/oyHD8vYVgRDoDpLioyIdaVwnp9g.mft
Manifest number: 0DA0
Signing time: Sun 20 Apr 2025 04:00:34 +0000
Manifest this update: Sun 20 Apr 2025 04:00:34 +0000
Manifest next update: Mon 21 Apr 2025 04:00:34 +0000
Files and hashes: 1: oyHD8vYVgRDoDpLioyIdaVwnp9g.crl (hash: UkfKmCQPBrNOa8+OXVHmW5kBMKIeI/pYkCynGC2ezT4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/21/7d3a55-ccb7-4d0c-bd26-cff461e0df34/1/oyHD8vYVgRDoDpLioyIdaVwnp9g.crl
rsync://rpki.ripe.net/repository/DEFAULT/21/7d3a55-ccb7-4d0c-bd26-cff461e0df34/1/oyHD8vYVgRDoDpLioyIdaVwnp9g.mft
rsync://rpki.ripe.net/repository/DEFAULT/oyHD8vYVgRDoDpLioyIdaVwnp9g.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 21 Apr 2025 04:00:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:51:5a:e8:67:b5:cf:cf:65:5f:73:79:c6:e8:de:15:3f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a321c3f2f6158110e80e92e2a3221d695c27a7d8
Validity
Not Before: Apr 20 04:00:34 2025 GMT
Not After : Apr 21 04:00:34 2025 GMT
Subject: CN=0009c266abe61358a215957cd1b8c6a29f703c8a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:0a:f6:50:3c:5b:38:8b:43:c7:6f:57:15:4f:
6b:5c:a2:a2:57:d0:d5:9e:9c:cd:19:81:1d:3c:00:
a7:ad:89:4a:57:fe:b3:f8:b9:fb:02:0b:ef:30:4b:
44:2e:34:e8:71:15:9c:73:64:5e:6a:9d:c1:3f:47:
f2:1f:a3:16:d0:d6:2a:3b:e2:3a:b5:05:ed:da:2e:
b2:55:0f:88:60:f1:32:0f:75:55:0e:aa:22:20:3a:
18:f5:12:6d:61:af:62:ce:64:67:48:b3:00:90:ab:
fa:81:f2:a5:70:f5:5f:c2:f0:05:38:84:6c:60:7b:
57:1b:48:b0:89:34:ad:20:cd:e6:00:46:f9:85:a2:
78:33:31:2e:e1:40:4c:cf:28:88:f6:08:42:b6:a5:
95:12:4d:0c:7f:de:db:0b:77:31:c3:b1:0c:63:65:
db:77:06:34:c7:c1:7a:c4:cb:16:32:af:06:06:4a:
ee:54:a4:dd:c9:c2:74:8f:28:d2:49:87:49:83:2b:
32:b9:3b:1c:43:a7:67:aa:11:96:2b:b4:03:6d:0a:
08:45:32:09:ed:5c:87:46:5a:7d:6c:35:be:ba:74:
fe:98:eb:be:78:20:79:8f:3c:18:63:8a:98:42:ba:
7e:d3:23:0f:d6:4e:50:31:fa:c5:f4:7e:48:d3:ee:
42:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
00:09:C2:66:AB:E6:13:58:A2:15:95:7C:D1:B8:C6:A2:9F:70:3C:8A
X509v3 Authority Key Identifier:
keyid:A3:21:C3:F2:F6:15:81:10:E8:0E:92:E2:A3:22:1D:69:5C:27:A7:D8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/oyHD8vYVgRDoDpLioyIdaVwnp9g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/21/7d3a55-ccb7-4d0c-bd26-cff461e0df34/1/oyHD8vYVgRDoDpLioyIdaVwnp9g.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/21/7d3a55-ccb7-4d0c-bd26-cff461e0df34/1/oyHD8vYVgRDoDpLioyIdaVwnp9g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8b:76:dd:1f:1c:da:83:19:25:ad:df:d2:0c:3c:74:70:9b:69:
f4:68:9d:55:95:e1:c7:60:fb:08:db:1f:bd:5e:35:a3:39:9b:
8c:41:7d:83:70:2e:d8:31:03:26:73:cd:77:21:86:14:80:98:
1c:2f:62:5a:4f:ed:8b:18:e5:cd:06:0e:25:d6:63:dd:1a:fd:
4f:c1:0a:0b:c9:21:ef:12:41:5b:58:3c:92:23:f3:97:48:8d:
55:93:89:29:91:cd:14:88:a1:cb:6c:38:47:1e:cc:27:d7:ce:
60:15:6f:31:ec:fc:47:9b:79:0b:90:f8:69:6d:5d:74:fb:37:
28:70:8e:3c:73:88:3e:e7:e3:b0:6d:9e:53:89:3a:bc:59:b8:
8c:42:df:8c:a5:75:7e:be:c4:ae:56:1d:c6:a1:fc:a5:4e:4e:
52:30:9a:a5:e8:62:87:2e:b7:b6:87:04:a3:64:3b:e8:a2:98:
f1:14:69:cd:45:a0:26:cb:2c:5f:ad:a9:82:5c:28:06:fe:ce:
25:43:21:d3:be:e0:cd:a1:ee:67:d5:8e:be:25:7e:8c:86:5e:
37:86:98:2c:4c:0b:ce:ad:12:99:c1:4c:d7:b9:b4:f7:e0:cb:
61:66:a4:a3:39:41:5c:98:b9:4f:23:ae:d3:df:17:13:b4:72:
f4:03:3f:83
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 20 13:20:42 2025 by rpki-client