Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/53/e2cc8b-8606-4f25-92d0-44371b1cc72f/1/oVJWhcluMm8grjcpwDD0T9FJmwU.mft
File: oVJWhcluMm8grjcpwDD0T9FJmwU.mft (raw, json)
Hash identifier: MdI6i1fTMONxABySQGxi8OOv/ZcX816YiMxf1UT+ibU=
Subject key identifier: 1A:1A:91:08:02:7C:69:F7:F3:5E:A9:57:59:2C:78:46:A5:B2:BA:06
Authority key identifier: A1:52:56:85:C9:6E:32:6F:20:AE:37:29:C0:30:F4:4F:D1:49:9B:05
Certificate issuer: /CN=a1525685c96e326f20ae3729c030f44fd1499b05
Certificate serial: 01964DEC56D195039DA511E86126AF1B75F8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/oVJWhcluMm8grjcpwDD0T9FJmwU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/53/e2cc8b-8606-4f25-92d0-44371b1cc72f/1/oVJWhcluMm8grjcpwDD0T9FJmwU.mft
Manifest number: 0706
Signing time: Sat 19 Apr 2025 12:00:56 +0000
Manifest this update: Sat 19 Apr 2025 12:00:56 +0000
Manifest next update: Sun 20 Apr 2025 12:00:56 +0000
Files and hashes: 1: oVJWhcluMm8grjcpwDD0T9FJmwU.crl (hash: ARG6OfvYrxDsBFNU/M4hRV+kCGm0PPuesX18XCClYhg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/53/e2cc8b-8606-4f25-92d0-44371b1cc72f/1/oVJWhcluMm8grjcpwDD0T9FJmwU.crl
rsync://rpki.ripe.net/repository/DEFAULT/53/e2cc8b-8606-4f25-92d0-44371b1cc72f/1/oVJWhcluMm8grjcpwDD0T9FJmwU.mft
rsync://rpki.ripe.net/repository/DEFAULT/oVJWhcluMm8grjcpwDD0T9FJmwU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 20 Apr 2025 12:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:4d:ec:56:d1:95:03:9d:a5:11:e8:61:26:af:1b:75:f8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a1525685c96e326f20ae3729c030f44fd1499b05
Validity
Not Before: Apr 19 12:00:56 2025 GMT
Not After : Apr 20 12:00:56 2025 GMT
Subject: CN=1a1a9108027c69f7f35ea957592c7846a5b2ba06
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:fe:70:4f:f5:22:53:86:61:c8:b5:ba:d2:8e:
37:42:01:d2:06:06:a4:18:0f:ef:a0:40:3a:8f:b5:
ff:82:f1:b8:94:4e:c2:bf:09:69:21:0f:e1:c6:eb:
52:d9:e8:6c:42:c4:2d:c8:7c:7c:b6:57:d1:1b:d1:
0f:64:08:e0:84:b4:92:42:86:40:76:c6:15:d6:ba:
e2:4c:22:01:a0:6f:d0:0f:1c:70:73:ea:d0:d5:f6:
c5:3b:b5:7a:66:38:2e:91:ce:14:5f:b9:b4:1b:ab:
4b:15:96:e9:67:a6:0e:09:9f:0e:33:34:43:d2:62:
3c:94:f8:3a:c9:8f:ac:59:0f:36:ab:ff:e1:e4:86:
26:f3:5f:bd:19:97:5f:e6:23:f0:dd:dc:90:05:8f:
49:fc:d4:33:97:97:90:7c:4a:b1:ea:cb:f6:9f:cd:
b5:49:1e:03:ad:63:6c:0d:1f:7a:29:ac:f8:bf:f8:
10:8d:5d:fc:c0:df:3a:7b:3f:b4:94:a2:5a:ac:48:
70:6e:80:f3:65:ac:b8:58:36:55:6c:c4:b7:06:67:
f2:5a:59:36:95:80:aa:d2:de:0e:82:3d:ee:dd:a7:
e0:33:7a:a0:82:5d:28:4f:49:10:24:22:dc:c1:1d:
05:c0:2d:f0:62:e9:4f:44:81:4e:f7:ed:a6:96:fc:
9b:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1A:1A:91:08:02:7C:69:F7:F3:5E:A9:57:59:2C:78:46:A5:B2:BA:06
X509v3 Authority Key Identifier:
keyid:A1:52:56:85:C9:6E:32:6F:20:AE:37:29:C0:30:F4:4F:D1:49:9B:05
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/oVJWhcluMm8grjcpwDD0T9FJmwU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/53/e2cc8b-8606-4f25-92d0-44371b1cc72f/1/oVJWhcluMm8grjcpwDD0T9FJmwU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/53/e2cc8b-8606-4f25-92d0-44371b1cc72f/1/oVJWhcluMm8grjcpwDD0T9FJmwU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0c:b2:7c:6b:72:db:ff:3b:62:c4:0f:30:9f:19:46:08:01:92:
b2:5a:3a:33:5c:bc:e7:bb:0e:0c:8e:26:80:48:16:47:5f:e0:
82:a2:a2:14:69:56:2c:8c:82:e9:ff:37:e6:8b:a4:f9:8a:c8:
9d:57:65:e9:fe:e1:8e:a8:b2:27:e2:ac:a4:b1:96:0e:f0:f6:
3c:82:51:e9:55:13:9f:df:21:a1:ab:92:a6:ff:9f:54:96:82:
fe:06:cc:92:93:53:e1:8a:a1:54:7f:27:ca:60:62:f9:b8:4d:
b3:8b:41:a6:73:e0:b6:71:e0:f4:74:e2:93:ef:66:59:6e:c1:
33:39:fd:aa:26:91:6a:b9:22:39:ec:49:f1:fe:38:c6:d5:60:
ea:87:cb:13:60:87:7c:61:1c:37:d7:9b:cb:b4:77:c2:2d:33:
9b:0b:02:8e:cb:fd:e7:a1:20:8d:bd:4d:cb:bf:e0:a6:48:3b:
ed:67:7d:b7:c0:e1:13:d8:71:9d:9f:2b:a5:5f:80:0f:18:02:
48:b2:02:bf:68:9a:51:b7:03:69:01:11:52:f3:0c:81:76:ab:
b4:eb:ad:c6:d3:00:00:1e:8e:c2:13:19:b8:ff:10:d9:48:52:
bf:ed:3e:7e:71:b9:55:2e:21:1a:00:4c:c7:e5:d0:de:ab:e3:
89:7f:22:6b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 19 18:00:03 2025 by rpki-client