Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/55/c3b68d-bc5e-4a42-b1b6-dfe41088cc03/1/o9KLNY1BezfsyLKRv5nBUVvOj3I.mft
File: o9KLNY1BezfsyLKRv5nBUVvOj3I.mft (raw, json)
Hash identifier: y2PQVQBnbT7yQiMy90Ud1aZeNy1Ui03RQxzZFW8ugrQ=
Subject key identifier: 01:75:63:72:9F:BA:A6:F8:09:A0:63:02:E3:20:92:08:2F:85:95:72
Authority key identifier: A3:D2:8B:35:8D:41:7B:37:EC:C8:B2:91:BF:99:C1:51:5B:CE:8F:72
Certificate issuer: /CN=a3d28b358d417b37ecc8b291bf99c1515bce8f72
Certificate serial: 01963C1CBF92587198D7294A44F5388184D1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/o9KLNY1BezfsyLKRv5nBUVvOj3I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/55/c3b68d-bc5e-4a42-b1b6-dfe41088cc03/1/o9KLNY1BezfsyLKRv5nBUVvOj3I.mft
Manifest number: 106F
Signing time: Wed 16 Apr 2025 01:00:39 +0000
Manifest this update: Wed 16 Apr 2025 01:00:39 +0000
Manifest next update: Thu 17 Apr 2025 01:00:39 +0000
Files and hashes: 1: o9KLNY1BezfsyLKRv5nBUVvOj3I.crl (hash: hyevwRCG9ZXauJOeuLgYYV92O+LiqV3lBdlAYpsCZNg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/55/c3b68d-bc5e-4a42-b1b6-dfe41088cc03/1/o9KLNY1BezfsyLKRv5nBUVvOj3I.crl
rsync://rpki.ripe.net/repository/DEFAULT/55/c3b68d-bc5e-4a42-b1b6-dfe41088cc03/1/o9KLNY1BezfsyLKRv5nBUVvOj3I.mft
rsync://rpki.ripe.net/repository/DEFAULT/o9KLNY1BezfsyLKRv5nBUVvOj3I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 17 Apr 2025 00:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:3c:1c:bf:92:58:71:98:d7:29:4a:44:f5:38:81:84:d1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a3d28b358d417b37ecc8b291bf99c1515bce8f72
Validity
Not Before: Apr 16 01:00:39 2025 GMT
Not After : Apr 17 01:00:39 2025 GMT
Subject: CN=017563729fbaa6f809a06302e32092082f859572
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:06:48:4b:e0:1b:1d:30:f4:38:3c:e2:b4:e7:
3a:a0:d1:3c:0f:fd:d4:78:19:5d:5f:50:5c:81:81:
6f:9a:bd:b6:18:b0:c5:37:f0:af:40:e5:ad:fd:4a:
98:30:5a:b5:41:23:8e:86:64:46:6e:76:7f:4a:19:
b9:5d:4c:18:4e:6b:9d:66:79:5d:a6:d7:60:4a:6a:
b0:2c:92:a8:54:89:e4:bc:9c:bf:e8:65:ce:36:96:
06:74:74:24:4f:90:6f:e2:4b:d9:d4:6c:88:0c:93:
a7:e7:0c:4f:ec:0f:4f:9e:df:cd:9f:2f:a9:2a:99:
73:69:27:e7:7d:87:77:c7:5d:96:fb:d9:60:0d:f7:
76:01:9b:7c:9b:1d:ee:f5:6a:25:7d:e9:42:2e:a5:
6c:8c:d4:ee:59:d3:ed:04:14:52:69:a5:55:d0:4b:
fa:2a:4d:65:d2:87:f9:29:3e:f7:ee:de:fb:44:8b:
ff:8f:ba:be:36:4b:60:84:cc:f8:1f:be:26:21:d5:
44:b1:a9:27:1b:43:93:dd:d6:54:e0:5f:d9:d2:24:
66:d1:cc:ca:26:f3:db:71:e1:84:86:be:dd:c9:59:
a7:ee:82:1c:f7:58:81:1b:4e:61:3a:ea:41:46:23:
45:d5:96:5c:2a:98:2f:fe:0e:07:7a:5f:e5:27:44:
47:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
01:75:63:72:9F:BA:A6:F8:09:A0:63:02:E3:20:92:08:2F:85:95:72
X509v3 Authority Key Identifier:
keyid:A3:D2:8B:35:8D:41:7B:37:EC:C8:B2:91:BF:99:C1:51:5B:CE:8F:72
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/o9KLNY1BezfsyLKRv5nBUVvOj3I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/55/c3b68d-bc5e-4a42-b1b6-dfe41088cc03/1/o9KLNY1BezfsyLKRv5nBUVvOj3I.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/55/c3b68d-bc5e-4a42-b1b6-dfe41088cc03/1/o9KLNY1BezfsyLKRv5nBUVvOj3I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ae:f9:1d:48:af:a1:98:f0:f1:3b:b2:2b:32:7e:c4:be:2f:b8:
f8:ca:0f:e2:04:d5:f5:64:65:44:e9:83:f8:91:ff:ef:b4:9d:
87:a8:cb:8b:00:ad:e2:ea:f7:fb:fc:f9:ce:05:c8:ce:16:14:
ca:b5:34:57:23:a5:a1:e5:02:d0:c7:d9:f3:26:75:0b:d9:94:
48:03:f8:d2:7f:00:bc:65:ac:f7:87:7b:cd:81:6c:73:de:3e:
40:89:72:2a:04:ca:3c:ef:09:89:0e:4a:70:d3:fc:8f:6e:b6:
ce:74:85:62:19:0e:22:c6:0c:56:79:2a:f8:05:bb:21:1e:7f:
7d:41:18:37:34:80:6b:0e:54:fe:f7:ad:2e:e6:5b:b7:1f:34:
1a:6d:19:bb:eb:a8:d7:00:fa:0b:0d:84:9d:77:64:ad:9a:ab:
e3:26:9f:04:7c:2c:0e:86:27:b2:a1:03:b4:81:8e:50:08:62:
d6:2e:6c:2b:ee:25:f2:88:36:fd:c4:2a:e9:07:28:be:d4:90:
6f:54:e6:bb:da:9e:97:e5:62:c1:42:5d:b0:d6:71:47:0f:69:
19:f9:b6:7b:38:cd:2c:7a:ee:d1:94:51:47:e1:a1:d8:04:cc:
8c:b0:45:c1:36:45:7e:04:3c:f2:ee:8b:a6:3b:84:b1:8f:41:
75:d5:d4:a1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 16 07:47:26 2025 by rpki-client