Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a1/adfd45-a188-466c-8383-9a262ff4626c/1/p1OwvT1iQYAynSGj7NzKGy--3m0.mft
File: p1OwvT1iQYAynSGj7NzKGy--3m0.mft (raw, json)
Hash identifier: dpDkD/71vTgzosJchLET9lFPCCNiAYbLZjRclRBkod4=
Subject key identifier: 0E:43:6E:A6:55:15:03:D3:0B:8E:AB:D5:82:A0:36:9B:F5:7B:A8:2F
Authority key identifier: A7:53:B0:BD:3D:62:41:80:32:9D:21:A3:EC:DC:CA:1B:2F:BE:DE:6D
Certificate issuer: /CN=a753b0bd3d624180329d21a3ecdcca1b2fbede6d
Certificate serial: 019651C8EF9567EDFEA2F474B29E0219B644
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/p1OwvT1iQYAynSGj7NzKGy--3m0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a1/adfd45-a188-466c-8383-9a262ff4626c/1/p1OwvT1iQYAynSGj7NzKGy--3m0.mft
Manifest number: 14F9
Signing time: Sun 20 Apr 2025 06:00:44 +0000
Manifest this update: Sun 20 Apr 2025 06:00:44 +0000
Manifest next update: Mon 21 Apr 2025 06:00:44 +0000
Files and hashes: 1: p1OwvT1iQYAynSGj7NzKGy--3m0.crl (hash: xewAi/3LkKIRBvqjAoXXrQxBaFo7/opQb4y9JTYPqPc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a1/adfd45-a188-466c-8383-9a262ff4626c/1/p1OwvT1iQYAynSGj7NzKGy--3m0.crl
rsync://rpki.ripe.net/repository/DEFAULT/a1/adfd45-a188-466c-8383-9a262ff4626c/1/p1OwvT1iQYAynSGj7NzKGy--3m0.mft
rsync://rpki.ripe.net/repository/DEFAULT/p1OwvT1iQYAynSGj7NzKGy--3m0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 21 Apr 2025 06:00:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:51:c8:ef:95:67:ed:fe:a2:f4:74:b2:9e:02:19:b6:44
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a753b0bd3d624180329d21a3ecdcca1b2fbede6d
Validity
Not Before: Apr 20 06:00:44 2025 GMT
Not After : Apr 21 06:00:44 2025 GMT
Subject: CN=0e436ea6551503d30b8eabd582a0369bf57ba82f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:bb:8d:4f:86:74:e3:38:c6:b5:0e:aa:9e:65:
23:3e:db:f2:69:f1:cf:b6:4c:f8:d6:b2:42:19:9a:
40:be:68:03:bc:2f:10:a9:37:0f:2e:f1:f4:a7:cb:
82:73:a6:69:c4:00:19:f4:73:8b:6e:ac:86:96:64:
26:b4:67:90:47:df:2c:89:9d:02:e9:6e:2a:cd:6c:
74:b2:d7:4a:3b:e3:0a:45:74:34:a7:02:48:4c:0a:
06:f7:8a:bd:dd:b6:e3:9e:9e:07:a2:b1:4e:12:13:
d3:71:76:bf:2e:ac:9c:6e:ae:00:66:56:ea:9e:66:
b6:df:52:0c:53:73:2a:c4:96:cf:d1:68:bc:b1:3d:
58:45:e0:d9:9d:07:b9:83:ba:2b:10:bd:13:1a:2e:
0a:e3:1f:8d:c5:11:30:8c:d9:3c:26:00:1e:de:9c:
99:69:a6:1b:e0:4c:64:10:0d:50:35:93:d0:f9:08:
af:ed:f1:ba:cd:55:c7:3e:0b:6a:2f:b2:65:28:56:
3e:98:c4:0e:29:36:6a:17:59:c0:1a:52:54:ba:86:
63:26:20:20:63:1a:d4:f0:e7:17:6f:c9:5e:ef:8b:
61:31:52:a7:be:91:06:42:bf:ea:4e:c9:4c:39:07:
60:0b:08:4c:57:06:f5:1c:15:a8:fb:c3:b1:8b:70:
db:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0E:43:6E:A6:55:15:03:D3:0B:8E:AB:D5:82:A0:36:9B:F5:7B:A8:2F
X509v3 Authority Key Identifier:
keyid:A7:53:B0:BD:3D:62:41:80:32:9D:21:A3:EC:DC:CA:1B:2F:BE:DE:6D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/p1OwvT1iQYAynSGj7NzKGy--3m0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a1/adfd45-a188-466c-8383-9a262ff4626c/1/p1OwvT1iQYAynSGj7NzKGy--3m0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a1/adfd45-a188-466c-8383-9a262ff4626c/1/p1OwvT1iQYAynSGj7NzKGy--3m0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9d:65:72:1f:07:b8:89:75:2a:ca:e9:6f:4e:37:0c:ee:bb:56:
b7:86:ed:84:49:9c:08:6c:4d:ba:58:0e:ae:c7:0d:74:2e:7d:
13:af:c4:53:f6:22:bf:ed:33:80:de:cb:b1:1d:e1:24:20:ca:
b1:e6:58:78:17:1f:82:45:ca:2f:ea:50:a7:d8:13:58:d0:b7:
0c:48:19:f9:0b:23:8b:f3:da:95:3f:fa:77:f1:e2:73:6e:c3:
cb:07:2f:02:a4:53:48:60:1f:27:5c:c6:56:fa:3b:7e:6c:a6:
5d:68:21:fb:88:d0:10:c5:b1:63:ba:0b:8a:4d:09:bc:3e:de:
07:87:85:4c:4f:d7:70:6b:1b:d6:5e:c7:f3:ff:97:83:45:8c:
ae:ec:ad:7f:f7:66:4d:08:ae:0c:da:c4:d8:ae:62:c5:52:34:
0b:75:c4:4f:65:18:a7:18:20:b5:60:f3:d1:71:08:3d:2f:f8:
6c:db:d0:a8:e1:98:2f:79:dc:bc:fd:3a:ff:0b:2b:81:32:70:
03:ad:9f:41:b4:e4:ed:4a:62:d0:78:13:63:ab:fb:0d:3b:ae:
a8:da:ab:4f:38:b6:60:b6:5a:a9:9e:df:2e:72:dc:cf:0b:6e:
a2:5a:3d:82:47:b9:4f:9a:a5:43:7b:68:c0:74:0e:70:2b:ad:
c9:cc:93:7a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 20 14:01:34 2025 by rpki-client