Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/22/f55df1-0ba6-430f-809d-6b035cee1981/1/oE_JgO38R54EauArEOVyRbuSyLc.mft
File: oE_JgO38R54EauArEOVyRbuSyLc.mft (raw, json)
Hash identifier: ZuwuV2qqLCAWIzh8NmFzoACaTMlGtBMKHRYDUEwkv9s=
Subject key identifier: CD:66:03:DC:99:8C:64:E3:5F:C0:1A:A5:6F:FB:4C:25:12:57:52:53
Authority key identifier: A0:4F:C9:80:ED:FC:47:9E:04:6A:E0:2B:10:E5:72:45:BB:92:C8:B7
Certificate issuer: /CN=a04fc980edfc479e046ae02b10e57245bb92c8b7
Certificate serial: 0196447B120193B396E7E951C77253B8B746
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/oE_JgO38R54EauArEOVyRbuSyLc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/22/f55df1-0ba6-430f-809d-6b035cee1981/1/oE_JgO38R54EauArEOVyRbuSyLc.mft
Manifest number: 04F6
Signing time: Thu 17 Apr 2025 16:00:38 +0000
Manifest this update: Thu 17 Apr 2025 16:00:38 +0000
Manifest next update: Fri 18 Apr 2025 16:00:38 +0000
Files and hashes: 1: oE_JgO38R54EauArEOVyRbuSyLc.crl (hash: zxbr/p0Y2UZepwftyTtA8JziY/2C/RDUH78kTdN7ugw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/22/f55df1-0ba6-430f-809d-6b035cee1981/1/oE_JgO38R54EauArEOVyRbuSyLc.crl
rsync://rpki.ripe.net/repository/DEFAULT/22/f55df1-0ba6-430f-809d-6b035cee1981/1/oE_JgO38R54EauArEOVyRbuSyLc.mft
rsync://rpki.ripe.net/repository/DEFAULT/oE_JgO38R54EauArEOVyRbuSyLc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 18 Apr 2025 16:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:44:7b:12:01:93:b3:96:e7:e9:51:c7:72:53:b8:b7:46
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a04fc980edfc479e046ae02b10e57245bb92c8b7
Validity
Not Before: Apr 17 16:00:38 2025 GMT
Not After : Apr 18 16:00:38 2025 GMT
Subject: CN=cd6603dc998c64e35fc01aa56ffb4c2512575253
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:98:40:a0:76:c6:67:4f:7c:e5:99:5b:8c:6c:
51:13:cd:7c:43:a1:e7:7a:f3:8d:0a:9a:0a:56:33:
9c:bd:2d:a1:a9:eb:8d:3c:f1:51:c7:6f:40:43:49:
18:46:34:45:13:57:b6:24:31:8f:44:7f:b8:e5:23:
e1:18:d7:d6:86:36:d8:b3:36:cc:1d:12:fb:1b:d5:
ed:90:30:72:d8:05:05:3b:5d:78:49:32:f2:a2:f0:
da:6e:81:c2:1a:d9:e6:1b:c4:86:4b:53:d8:9e:46:
09:1e:9a:80:db:fe:5a:28:f9:c9:b7:9e:9e:1c:fd:
95:58:e3:86:1c:ba:98:44:7a:c6:bf:ce:3f:5d:35:
9a:c4:92:fc:56:87:94:ef:ba:24:f3:cb:66:cb:5b:
34:c3:fa:76:be:2a:0e:bd:a1:7c:31:2e:75:b5:c3:
1d:33:d1:0b:a2:f1:85:92:16:c6:2e:b0:b2:1a:98:
7f:20:8d:6f:b0:8e:a6:cb:96:f9:b5:5a:65:96:f4:
e5:b2:96:6c:4e:34:71:8d:07:69:2e:f2:cb:7d:ac:
89:1a:8b:48:c9:13:9d:54:ed:f7:4b:42:c4:62:4d:
4e:f5:60:9b:fb:22:a6:6a:f4:72:ff:8d:1a:ae:2e:
41:5a:2a:25:ff:d5:95:38:7e:57:90:78:cf:4b:f6:
d6:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CD:66:03:DC:99:8C:64:E3:5F:C0:1A:A5:6F:FB:4C:25:12:57:52:53
X509v3 Authority Key Identifier:
keyid:A0:4F:C9:80:ED:FC:47:9E:04:6A:E0:2B:10:E5:72:45:BB:92:C8:B7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/oE_JgO38R54EauArEOVyRbuSyLc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/22/f55df1-0ba6-430f-809d-6b035cee1981/1/oE_JgO38R54EauArEOVyRbuSyLc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/22/f55df1-0ba6-430f-809d-6b035cee1981/1/oE_JgO38R54EauArEOVyRbuSyLc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
50:0d:d4:3b:e7:13:35:c9:d9:36:66:25:2e:f5:41:ec:9f:3e:
bf:3f:58:ea:26:f1:9b:9a:64:eb:10:2c:ae:df:f5:ec:c3:f5:
b3:34:30:53:83:19:6d:b5:09:3c:de:79:3a:6b:e1:63:66:bf:
b6:cb:f5:8e:98:23:36:a0:7a:54:35:5e:8e:ce:0f:9c:76:92:
09:12:00:95:f3:ca:e9:7d:68:22:54:69:ac:b6:8a:0a:e0:a7:
f5:14:21:83:5b:a6:2c:db:20:73:18:74:34:fa:ba:83:89:e3:
8e:ca:6c:04:6f:28:16:cc:61:ba:c0:da:3f:7b:85:0b:94:45:
70:b3:6d:d3:10:a0:7b:18:cf:ec:9b:3f:04:49:a7:40:e2:f9:
d1:6c:74:5a:7f:08:be:2a:35:1e:08:00:16:6c:fa:58:16:bd:
f1:ac:f0:41:74:91:71:ed:19:c0:a5:e6:50:a2:24:90:7d:6b:
d8:09:bb:08:3d:bb:88:e3:59:81:bd:6d:ae:64:45:3e:78:6d:
91:36:80:08:63:3d:b9:7f:0e:96:6b:39:cb:15:c1:de:9a:da:
a5:06:97:8e:32:22:e0:1d:5e:ee:9b:5d:57:c9:35:f9:70:ec:
a1:0e:a2:53:64:7c:fa:9b:50:b8:a4:d7:0c:9e:66:50:a9:ae:
6c:47:7a:76
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 17 23:28:39 2025 by rpki-client