Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7d/6c9722-2608-44af-8c79-66b2f99c0b45/1/oMWM0HH3gLesNAwBROsE-1DMu_E.mft
File: oMWM0HH3gLesNAwBROsE-1DMu_E.mft (raw, json)
Hash identifier: bL2XLCEH43Dutvix1yj5812QQcmHM5F8Ih5PxK7CVF4=
Subject key identifier: CA:EB:00:75:11:ED:F0:A0:30:D1:47:92:9B:0F:C7:64:4E:0D:2B:F5
Authority key identifier: A0:C5:8C:D0:71:F7:80:B7:AC:34:0C:01:44:EB:04:FB:50:CC:BB:F1
Certificate issuer: /CN=a0c58cd071f780b7ac340c0144eb04fb50ccbbf1
Certificate serial: 0196488F00198DEED722E8939F90171717D1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/oMWM0HH3gLesNAwBROsE-1DMu_E.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7d/6c9722-2608-44af-8c79-66b2f99c0b45/1/oMWM0HH3gLesNAwBROsE-1DMu_E.mft
Manifest number: 14E8
Signing time: Fri 18 Apr 2025 11:00:53 +0000
Manifest this update: Fri 18 Apr 2025 11:00:53 +0000
Manifest next update: Sat 19 Apr 2025 11:00:53 +0000
Files and hashes: 1: oMWM0HH3gLesNAwBROsE-1DMu_E.crl (hash: pD0b25e8pYMhJd0aUeo/PgdqOfF9E31zG2qe8REEkqM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7d/6c9722-2608-44af-8c79-66b2f99c0b45/1/oMWM0HH3gLesNAwBROsE-1DMu_E.crl
rsync://rpki.ripe.net/repository/DEFAULT/7d/6c9722-2608-44af-8c79-66b2f99c0b45/1/oMWM0HH3gLesNAwBROsE-1DMu_E.mft
rsync://rpki.ripe.net/repository/DEFAULT/oMWM0HH3gLesNAwBROsE-1DMu_E.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 19 Apr 2025 10:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:48:8f:00:19:8d:ee:d7:22:e8:93:9f:90:17:17:17:d1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a0c58cd071f780b7ac340c0144eb04fb50ccbbf1
Validity
Not Before: Apr 18 11:00:53 2025 GMT
Not After : Apr 19 11:00:53 2025 GMT
Subject: CN=caeb007511edf0a030d147929b0fc7644e0d2bf5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f2:ae:65:66:80:f1:0b:0b:a2:4f:60:16:72:67:
85:ff:5e:f0:1a:38:e7:d7:70:c5:3d:f6:e8:ae:d8:
6f:ed:e8:1c:43:18:42:f4:e9:e4:a6:a2:ea:b8:e3:
b8:c4:c8:e8:92:f3:01:40:51:de:d6:42:da:56:e5:
d8:6e:0c:f2:ce:1e:54:97:f9:40:3a:37:a5:8d:01:
2a:66:c4:78:9e:32:d1:47:00:28:b1:83:e5:a3:bc:
23:68:9c:9c:fa:ff:ed:93:d3:9b:ba:f7:5d:06:20:
e6:f0:95:00:7b:fc:bc:bc:83:23:2a:0f:45:02:2a:
8c:4d:44:08:15:9a:fe:a1:22:54:cc:cc:0f:ab:79:
a8:95:c4:ca:97:bc:69:81:64:37:bd:be:51:80:31:
f6:c2:a7:55:be:aa:b0:71:06:41:24:87:d8:f8:6b:
1b:39:a3:e0:ee:16:53:e0:2a:1c:d2:1a:9e:90:e5:
27:46:20:ed:9f:2f:64:1b:64:6c:18:ee:bf:a0:d9:
f0:74:4b:4c:3e:55:2a:18:4c:fb:75:81:fc:84:09:
b4:74:60:f5:cd:01:74:f1:00:74:95:6d:1c:69:91:
0d:46:26:68:fa:dd:8a:42:66:12:be:f5:bf:a7:7c:
52:7e:20:b3:82:56:85:da:e5:4f:b9:bb:d5:33:9c:
53:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CA:EB:00:75:11:ED:F0:A0:30:D1:47:92:9B:0F:C7:64:4E:0D:2B:F5
X509v3 Authority Key Identifier:
keyid:A0:C5:8C:D0:71:F7:80:B7:AC:34:0C:01:44:EB:04:FB:50:CC:BB:F1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/oMWM0HH3gLesNAwBROsE-1DMu_E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7d/6c9722-2608-44af-8c79-66b2f99c0b45/1/oMWM0HH3gLesNAwBROsE-1DMu_E.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7d/6c9722-2608-44af-8c79-66b2f99c0b45/1/oMWM0HH3gLesNAwBROsE-1DMu_E.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6b:07:4b:13:3c:52:ee:ca:e7:d4:29:07:f0:82:cf:55:6d:6a:
0a:21:a2:b2:20:9e:c6:44:81:d5:83:21:c1:cd:22:2e:c3:79:
ad:73:d9:2c:6a:b5:1c:d4:20:70:ab:45:72:64:f6:fb:e6:46:
7c:ef:1a:3c:65:01:70:d2:af:d2:0c:58:30:ce:f5:87:09:e9:
c6:60:2a:f2:7c:f9:92:16:93:77:96:74:52:6f:4a:a8:56:35:
09:0f:d3:90:7e:d5:7e:1c:b6:95:f3:42:c6:68:0a:a0:20:a3:
08:20:e1:6c:d9:6d:9a:22:40:03:c0:1b:84:a5:72:f6:7b:6e:
49:76:5d:c4:7b:7c:7a:5d:ae:7f:4c:33:cd:a8:bf:5e:7c:71:
91:85:7d:83:da:0e:34:2c:e8:71:f6:dc:24:bb:d1:88:df:a1:
32:45:56:6b:b7:51:cd:41:2c:fe:1e:5c:de:09:b1:0a:77:ca:
b8:8c:ca:e2:e1:ae:c8:8c:c7:a0:b1:5c:8f:52:cf:94:0a:45:
e4:19:7c:57:ab:de:66:34:a0:b5:46:e0:93:f3:60:65:78:e1:
c8:1b:46:ed:d9:4e:24:4b:85:fa:24:6f:f8:73:bf:f1:fc:e6:
28:77:a9:e9:8e:61:98:ab:45:b0:97:8d:11:ec:20:4e:6e:cc:
a7:41:e0:54
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 18 19:17:11 2025 by rpki-client