Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/25/2094b0-5a57-4a36-b5fb-a5ff176d61d0/1/OFYFj7mk9--XizgCGuFSwk6_zkA.mft
File: OFYFj7mk9--XizgCGuFSwk6_zkA.mft (raw, json)
Hash identifier: 83Eday4/ZKdTlLww269C8kH7XnUwq5qysaHzXljmHM0=
Subject key identifier: 9D:66:A3:DF:16:5D:C1:AF:49:31:84:75:A0:48:5D:2D:D3:FB:8D:55
Authority key identifier: 38:56:05:8F:B9:A4:F7:EF:97:8B:38:02:1A:E1:52:C2:4E:BF:CE:40
Certificate issuer: /CN=3856058fb9a4f7ef978b38021ae152c24ebfce40
Certificate serial: 0196440D22DCB412F578085BC12492DC2937
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OFYFj7mk9--XizgCGuFSwk6_zkA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/25/2094b0-5a57-4a36-b5fb-a5ff176d61d0/1/OFYFj7mk9--XizgCGuFSwk6_zkA.mft
Manifest number: 01FB
Signing time: Thu 17 Apr 2025 14:00:33 +0000
Manifest this update: Thu 17 Apr 2025 14:00:33 +0000
Manifest next update: Fri 18 Apr 2025 14:00:33 +0000
Files and hashes: 1: OFYFj7mk9--XizgCGuFSwk6_zkA.crl (hash: 0jh+dYEWaW15ir6g5UIgF1mXQsdqWlMh5Q0bn50t6po=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/25/2094b0-5a57-4a36-b5fb-a5ff176d61d0/1/OFYFj7mk9--XizgCGuFSwk6_zkA.crl
rsync://rpki.ripe.net/repository/DEFAULT/25/2094b0-5a57-4a36-b5fb-a5ff176d61d0/1/OFYFj7mk9--XizgCGuFSwk6_zkA.mft
rsync://rpki.ripe.net/repository/DEFAULT/OFYFj7mk9--XizgCGuFSwk6_zkA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 18 Apr 2025 14:00:33 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:44:0d:22:dc:b4:12:f5:78:08:5b:c1:24:92:dc:29:37
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3856058fb9a4f7ef978b38021ae152c24ebfce40
Validity
Not Before: Apr 17 14:00:33 2025 GMT
Not After : Apr 18 14:00:33 2025 GMT
Subject: CN=9d66a3df165dc1af49318475a0485d2dd3fb8d55
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:1d:7a:fa:14:bc:bf:ba:f0:a5:2c:f3:66:4b:
70:ce:8a:a3:d1:ff:f0:e7:02:7e:ae:a8:42:ba:16:
51:13:e9:bf:9b:4f:6f:fe:c8:da:96:15:31:e6:f5:
ac:fc:f4:86:b6:9e:19:50:80:6a:36:c4:8b:f9:71:
65:71:83:80:c6:db:ba:2a:48:f8:cf:b1:77:17:84:
7f:44:ce:75:56:2b:5e:80:f9:56:af:fa:b0:3c:1f:
39:f1:c0:50:29:76:9f:97:df:89:4e:80:28:2e:10:
9b:8f:01:19:af:ff:79:ab:3b:e0:db:6e:76:5c:49:
6a:9c:ce:ba:53:e4:50:08:3e:bc:5a:04:73:3a:1c:
f9:b7:b8:ab:da:0a:a6:06:92:ff:1d:35:d6:07:1e:
28:7d:ef:0b:9d:91:11:b0:93:e4:b7:d7:6e:fc:17:
ba:04:57:4b:1c:96:ca:36:92:01:db:3d:d0:30:8b:
6a:f4:4b:70:ae:e1:c6:ec:22:9f:e2:8e:5c:73:93:
e8:1a:03:ca:8a:a1:a6:e4:35:35:50:90:2c:71:2f:
7a:78:71:aa:ea:a7:34:d8:c4:4b:74:9f:f9:12:5a:
24:d4:c4:81:58:11:99:45:2b:52:b9:e2:73:84:57:
70:f5:24:8b:b4:60:db:f7:cd:eb:e5:a7:a3:9f:87:
5f:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9D:66:A3:DF:16:5D:C1:AF:49:31:84:75:A0:48:5D:2D:D3:FB:8D:55
X509v3 Authority Key Identifier:
keyid:38:56:05:8F:B9:A4:F7:EF:97:8B:38:02:1A:E1:52:C2:4E:BF:CE:40
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OFYFj7mk9--XizgCGuFSwk6_zkA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/25/2094b0-5a57-4a36-b5fb-a5ff176d61d0/1/OFYFj7mk9--XizgCGuFSwk6_zkA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/25/2094b0-5a57-4a36-b5fb-a5ff176d61d0/1/OFYFj7mk9--XizgCGuFSwk6_zkA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
03:38:a8:8b:c7:a8:5b:44:e5:36:3c:2c:0b:69:27:17:38:b6:
ed:7c:f3:13:68:c8:99:a8:83:9a:55:44:23:82:43:6e:97:03:
1d:c3:81:c9:dc:e1:b8:93:3e:34:10:0f:36:0f:e4:1c:a7:5e:
1c:96:51:a5:92:93:3d:25:4c:72:d5:a4:95:0a:d8:f1:86:6b:
61:6c:6e:04:67:01:a6:a4:68:a9:50:64:95:0c:9a:4a:a4:aa:
4d:55:a3:c3:7b:ec:cc:43:6a:46:82:2e:50:d8:56:55:49:00:
48:e5:08:6d:29:ea:b0:f2:7b:58:25:bb:78:58:d6:d3:73:4f:
23:f9:d7:fa:27:38:9f:8a:eb:49:ff:f1:75:74:b7:72:f5:fc:
df:d5:1f:6d:c9:e1:41:03:f4:d2:15:29:62:11:ae:ac:23:85:
eb:12:31:df:bd:79:cb:89:d7:d1:32:4b:0d:b3:46:62:f7:11:
ab:0f:eb:81:29:df:04:c3:3f:ac:06:03:e7:82:96:bb:03:2d:
48:68:c4:c2:84:77:81:34:46:2e:9f:c2:1b:63:4e:79:ee:0a:
a7:d1:4c:f6:55:9a:5a:6f:78:88:1d:d0:e3:9d:6c:d2:93:30:
59:4d:17:7f:2f:19:75:bc:e5:9a:ea:87:6f:e4:3a:7d:53:10:
fb:a4:f2:ea
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 17 22:21:22 2025 by rpki-client