Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/82/b80a7c-ba06-40c2-9e88-85082cd95431/1/OUE-iXxaK1FqQWDTwbevOtWeFCQ.mft
File: OUE-iXxaK1FqQWDTwbevOtWeFCQ.mft (raw, json)
Hash identifier: aPz7glcb7ECAqv6kB0vd4B9bJuSGXIrPt/87Lc1x3gQ=
Subject key identifier: E2:DD:B9:C3:76:B4:11:F2:14:3C:05:95:7B:1D:59:54:C4:10:36:62
Authority key identifier: 39:41:3E:89:7C:5A:2B:51:6A:41:60:D3:C1:B7:AF:3A:D5:9E:14:24
Certificate issuer: /CN=39413e897c5a2b516a4160d3c1b7af3ad59e1424
Certificate serial: 019655A5EDAAE928A510498D0DBFEFEB1872
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OUE-iXxaK1FqQWDTwbevOtWeFCQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/82/b80a7c-ba06-40c2-9e88-85082cd95431/1/OUE-iXxaK1FqQWDTwbevOtWeFCQ.mft
Manifest number: 03F8
Signing time: Mon 21 Apr 2025 00:00:59 +0000
Manifest this update: Mon 21 Apr 2025 00:00:59 +0000
Manifest next update: Tue 22 Apr 2025 00:00:59 +0000
Files and hashes: 1: OUE-iXxaK1FqQWDTwbevOtWeFCQ.crl (hash: LyaR9kXs1j+QFWY5U6Ew+yas3e7BxdKOO8dKjmU0ILo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/82/b80a7c-ba06-40c2-9e88-85082cd95431/1/OUE-iXxaK1FqQWDTwbevOtWeFCQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/82/b80a7c-ba06-40c2-9e88-85082cd95431/1/OUE-iXxaK1FqQWDTwbevOtWeFCQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/OUE-iXxaK1FqQWDTwbevOtWeFCQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 22 Apr 2025 00:00:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:55:a5:ed:aa:e9:28:a5:10:49:8d:0d:bf:ef:eb:18:72
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=39413e897c5a2b516a4160d3c1b7af3ad59e1424
Validity
Not Before: Apr 21 00:00:59 2025 GMT
Not After : Apr 22 00:00:59 2025 GMT
Subject: CN=e2ddb9c376b411f2143c05957b1d5954c4103662
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:e4:c3:c3:23:ef:08:9b:d2:5d:4c:da:98:2b:
52:ac:ce:e2:8c:7c:0c:c4:eb:0c:05:f9:07:bb:e7:
ba:75:11:0e:ce:30:77:a4:23:79:2f:02:71:fe:0c:
26:f7:2f:b8:98:63:82:10:56:4d:67:a8:84:37:9e:
d1:d3:c2:5c:cd:e3:7c:9e:2a:fb:c8:39:c7:8f:9e:
d8:1b:f7:cd:fa:2c:54:fb:5f:e9:5a:9d:67:9d:96:
01:05:2e:db:fc:96:a2:43:5b:14:c1:2f:a8:7d:82:
6e:9c:d8:a7:dd:ed:6d:d6:28:58:63:0a:c5:2b:0b:
a8:94:97:25:82:46:86:03:90:2e:1c:25:b4:15:b9:
39:36:3e:e6:1c:34:01:83:2f:d3:df:44:03:c3:f2:
8a:e3:b5:0b:05:1e:ba:d4:fb:89:99:e5:f0:fa:5c:
75:24:b5:28:e3:f9:2e:14:35:62:ab:ab:28:4e:20:
87:01:89:fa:72:79:24:a6:99:c7:41:a0:c4:03:ed:
be:06:4c:c5:4a:1c:6f:94:d0:bf:25:cd:a3:86:14:
3d:c2:29:07:f8:46:c7:b0:7e:37:a7:81:ab:f9:e8:
91:88:6e:1f:b5:d0:96:b5:33:4d:dd:6f:46:05:6b:
e2:3c:76:d4:18:f8:52:bf:25:b1:75:64:f8:0c:7b:
22:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E2:DD:B9:C3:76:B4:11:F2:14:3C:05:95:7B:1D:59:54:C4:10:36:62
X509v3 Authority Key Identifier:
keyid:39:41:3E:89:7C:5A:2B:51:6A:41:60:D3:C1:B7:AF:3A:D5:9E:14:24
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OUE-iXxaK1FqQWDTwbevOtWeFCQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/82/b80a7c-ba06-40c2-9e88-85082cd95431/1/OUE-iXxaK1FqQWDTwbevOtWeFCQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/82/b80a7c-ba06-40c2-9e88-85082cd95431/1/OUE-iXxaK1FqQWDTwbevOtWeFCQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ad:b8:26:f4:9f:ac:46:2a:94:c6:80:1d:cb:f9:2e:7a:e7:c0:
fa:f6:4a:ce:3d:e8:6c:7d:0e:8b:b8:35:cc:d8:10:5d:ce:5c:
b4:73:d3:b1:f9:5b:e1:d4:4d:45:06:44:6f:5e:27:b1:72:b8:
b1:29:9c:65:8d:6e:37:da:3e:23:2a:32:9d:32:0f:44:14:aa:
49:31:80:21:f9:34:b5:5b:5e:2a:41:24:70:9c:97:11:a0:1f:
e1:dd:ce:b8:fa:ed:93:b5:9d:42:ac:c2:22:9f:e8:79:8c:1d:
c3:5f:48:51:1b:e1:7a:51:81:03:15:6f:85:8e:56:cc:07:be:
1f:c7:eb:d4:dc:39:fb:9c:36:b1:2a:9c:5f:8f:5c:44:a8:d2:
39:29:1a:ef:9e:1f:4c:c9:17:23:7f:9f:81:de:00:83:9f:68:
de:37:8b:57:4a:17:eb:8b:64:d0:01:df:e0:89:bc:10:0a:e8:
28:50:ea:ca:1e:6c:70:a0:db:47:fe:ff:d1:d3:27:b2:8c:64:
df:7d:f0:3e:a8:3a:9a:9e:af:a0:28:34:72:10:ba:24:8f:60:
96:4f:25:65:57:08:1e:c3:92:f3:05:1e:63:80:f1:68:31:6d:
c9:85:75:72:93:56:d3:6e:85:27:eb:33:46:fc:2a:5d:ac:ec:
cd:35:47:43
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 21 02:48:02 2025 by rpki-client