Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5c/100831-39f8-4bf3-be1a-4f5e265d1679/1/opYekZxsdKh1zuBhj-zF_WP5WVE.mft
File: opYekZxsdKh1zuBhj-zF_WP5WVE.mft (raw, json)
Hash identifier: rLQ7lfypiaFSzGkzTH9fwLIRA8dPEZ1ZlBo7hU6QLYQ=
Subject key identifier: 7D:FD:30:75:7E:10:6D:A8:96:D3:8A:9B:A6:D6:5F:7F:64:B0:54:E6
Authority key identifier: A2:96:1E:91:9C:6C:74:A8:75:CE:E0:61:8F:EC:C5:FD:63:F9:59:51
Certificate issuer: /CN=a2961e919c6c74a875cee0618fecc5fd63f95951
Certificate serial: 0196545BD782B85FE371488DC54577EB9EA7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/opYekZxsdKh1zuBhj-zF_WP5WVE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5c/100831-39f8-4bf3-be1a-4f5e265d1679/1/opYekZxsdKh1zuBhj-zF_WP5WVE.mft
Manifest number: 031A
Signing time: Sun 20 Apr 2025 18:00:27 +0000
Manifest this update: Sun 20 Apr 2025 18:00:27 +0000
Manifest next update: Mon 21 Apr 2025 18:00:27 +0000
Files and hashes: 1: opYekZxsdKh1zuBhj-zF_WP5WVE.crl (hash: daMwUDBUVwjBUTChstrQwBYyErLXgzrLHzSDqw3YuSk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5c/100831-39f8-4bf3-be1a-4f5e265d1679/1/opYekZxsdKh1zuBhj-zF_WP5WVE.crl
rsync://rpki.ripe.net/repository/DEFAULT/5c/100831-39f8-4bf3-be1a-4f5e265d1679/1/opYekZxsdKh1zuBhj-zF_WP5WVE.mft
rsync://rpki.ripe.net/repository/DEFAULT/opYekZxsdKh1zuBhj-zF_WP5WVE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 21 Apr 2025 18:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:54:5b:d7:82:b8:5f:e3:71:48:8d:c5:45:77:eb:9e:a7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a2961e919c6c74a875cee0618fecc5fd63f95951
Validity
Not Before: Apr 20 18:00:27 2025 GMT
Not After : Apr 21 18:00:27 2025 GMT
Subject: CN=7dfd30757e106da896d38a9ba6d65f7f64b054e6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:a8:60:31:e7:99:a5:a7:d4:c6:ce:c9:f7:fc:
46:c4:1a:cd:f9:fe:a7:da:8f:db:2a:20:d3:c0:53:
de:af:5b:47:c1:68:8c:d3:d7:cb:70:4b:0f:f5:f8:
15:ca:49:c6:be:68:41:8c:11:b8:74:56:e6:46:9b:
8e:7d:22:d4:b6:44:63:34:29:2d:88:d8:7b:65:b7:
08:39:b6:20:f4:28:a7:ca:42:af:7a:03:96:3d:b1:
33:c2:60:40:42:7a:4f:55:ff:0b:a2:94:96:7c:4f:
d5:42:58:2f:2d:8a:67:d2:84:8e:6e:04:d6:04:a9:
13:3f:75:ea:02:01:ed:b8:11:95:94:57:09:6a:ad:
35:13:de:08:a2:b6:f0:f6:0e:c7:92:0a:47:5b:35:
05:d2:8b:47:da:87:1d:43:52:c2:97:5e:61:a5:2a:
30:55:11:b6:65:ba:2e:e0:bd:31:5f:fa:ad:85:41:
10:fc:13:ea:b4:42:93:40:4c:85:3a:46:9f:b3:51:
6f:df:3f:d7:ab:49:54:42:43:1a:04:c9:43:5c:b7:
f0:b4:b8:e4:0a:e7:3c:3e:46:cf:3f:71:d6:33:3c:
b8:25:1f:08:96:cf:59:ad:e4:a8:c9:0e:9e:a6:41:
a9:f4:ec:6b:57:8b:f0:14:88:7a:c4:49:4d:3f:3e:
d5:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7D:FD:30:75:7E:10:6D:A8:96:D3:8A:9B:A6:D6:5F:7F:64:B0:54:E6
X509v3 Authority Key Identifier:
keyid:A2:96:1E:91:9C:6C:74:A8:75:CE:E0:61:8F:EC:C5:FD:63:F9:59:51
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/opYekZxsdKh1zuBhj-zF_WP5WVE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5c/100831-39f8-4bf3-be1a-4f5e265d1679/1/opYekZxsdKh1zuBhj-zF_WP5WVE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5c/100831-39f8-4bf3-be1a-4f5e265d1679/1/opYekZxsdKh1zuBhj-zF_WP5WVE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
94:52:94:a6:df:97:21:39:42:22:43:d1:a7:59:4d:f1:80:5f:
0c:5d:d5:cc:bd:66:cf:1a:00:ee:49:f9:cc:28:cd:57:cb:52:
40:ec:46:43:25:20:63:b6:89:48:a2:f5:e5:43:88:71:14:4a:
72:68:29:c5:af:a5:77:71:34:ef:83:16:ed:0d:fe:22:e0:27:
1c:c7:c0:f5:ca:f6:2b:4a:e4:f9:f3:b9:42:d6:32:2b:7f:bf:
d5:cd:52:3f:fc:c6:f3:da:3a:15:a1:6b:24:79:01:50:71:77:
2d:d0:fa:21:fc:5e:93:c3:fd:46:fe:dc:61:d2:15:8c:af:a3:
69:90:9b:27:17:1e:f7:dd:b4:fe:90:58:c4:d3:e3:47:8b:15:
9c:c9:90:15:5d:45:18:7e:3d:ac:e6:c5:09:8b:f1:83:4b:76:
6a:1c:a6:ec:29:df:f2:3f:1d:0b:1a:04:1d:22:5e:5d:f8:52:
c6:69:58:b8:82:1b:51:d1:e8:21:4e:aa:1c:f8:3b:23:dc:70:
55:40:1a:90:ed:95:c8:97:68:00:5c:7a:a8:67:ab:70:9e:65:
68:37:2e:7f:29:29:89:b0:36:2a:6a:c2:fb:71:84:b6:2e:ee:
9c:5a:b9:7c:27:59:44:cf:97:82:35:6f:94:3e:a5:00:29:05:
9e:67:0c:d8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 21 04:21:06 2025 by rpki-client