
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a7/6b5064-8d5e-4c94-b5bd-050204532286/1/ORl1rVfOt2WtlIvl60w4LcdIRMA.mft
File: ORl1rVfOt2WtlIvl60w4LcdIRMA.mft (raw, json)
Hash identifier: gXydJKCHprgbQVW6qmWtUHbRU7TscIYntk41wDDsCa4=
Subject key identifier: D3:22:46:F5:A9:95:5A:30:15:C3:16:B1:70:F2:C1:B7:F4:6F:AB:79
Authority key identifier: 39:19:75:AD:57:CE:B7:65:AD:94:8B:E5:EB:4C:38:2D:C7:48:44:C0
Certificate issuer: /CN=391975ad57ceb765ad948be5eb4c382dc74844c0
Certificate serial: 01964A7CD967B60A9766D4AFE741A5CCBD2F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ORl1rVfOt2WtlIvl60w4LcdIRMA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a7/6b5064-8d5e-4c94-b5bd-050204532286/1/ORl1rVfOt2WtlIvl60w4LcdIRMA.mft
Manifest number: 14F9
Signing time: Fri 18 Apr 2025 20:00:18 +0000
Manifest this update: Fri 18 Apr 2025 20:00:18 +0000
Manifest next update: Sat 19 Apr 2025 20:00:18 +0000
Files and hashes: 1: ORl1rVfOt2WtlIvl60w4LcdIRMA.crl (hash: 5Tn9tzjCMeVZZGLR9dbJ30ceNiVsEmBDW4IPA4Fw30I=)
2: o3nfz0qPyoHeZ7QZgpyfuh3VEII.roa (hash: Z7vtFpZz5Q9L6wA4avMeuFaOqLOX0o+KOJVRi4dDip4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a7/6b5064-8d5e-4c94-b5bd-050204532286/1/ORl1rVfOt2WtlIvl60w4LcdIRMA.crl
rsync://rpki.ripe.net/repository/DEFAULT/a7/6b5064-8d5e-4c94-b5bd-050204532286/1/ORl1rVfOt2WtlIvl60w4LcdIRMA.mft
rsync://rpki.ripe.net/repository/DEFAULT/ORl1rVfOt2WtlIvl60w4LcdIRMA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 19 Apr 2025 19:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:4a:7c:d9:67:b6:0a:97:66:d4:af:e7:41:a5:cc:bd:2f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=391975ad57ceb765ad948be5eb4c382dc74844c0
Validity
Not Before: Apr 18 20:00:18 2025 GMT
Not After : Apr 19 20:00:18 2025 GMT
Subject: CN=d32246f5a9955a3015c316b170f2c1b7f46fab79
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:ce:26:a9:b4:04:24:17:68:c2:a1:b3:91:84:
19:cf:7e:76:31:ae:c6:04:e4:45:eb:dd:64:4f:89:
ad:d8:b4:c0:9d:a9:94:74:9f:16:2c:da:e7:0b:82:
6e:6b:7d:9f:37:36:3f:ad:f6:2e:a5:13:ab:34:29:
b4:e5:4b:ea:da:49:ce:e0:42:d1:11:6d:25:43:e2:
4a:fd:26:a9:d8:46:2a:dc:d2:0e:4f:ad:da:13:62:
29:3b:2b:37:e8:91:ec:cd:16:38:27:a4:59:e7:f4:
e9:7b:e5:4c:54:cc:28:4e:59:28:73:f9:58:87:93:
6d:b8:23:dd:a1:17:24:44:99:74:0a:28:f0:60:b7:
08:09:06:a6:8d:9f:a9:f8:a0:ab:51:00:76:36:1b:
24:b5:1f:d2:a5:df:66:e2:d4:79:a0:0d:f2:ea:28:
38:09:f2:15:81:b0:4a:7c:1c:b9:3d:f2:95:3d:bc:
94:d3:2b:1a:9a:0d:8d:dc:46:a1:8f:aa:94:87:52:
c0:50:85:68:82:41:37:cb:66:88:3f:1f:a4:d4:7d:
50:73:7d:79:16:77:c6:27:8c:6d:6c:d9:69:12:62:
2c:79:c1:a6:51:4b:26:ed:e9:60:3c:b5:f8:ec:53:
ed:c5:a4:37:a2:59:21:c8:a7:1c:81:40:07:51:59:
50:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D3:22:46:F5:A9:95:5A:30:15:C3:16:B1:70:F2:C1:B7:F4:6F:AB:79
X509v3 Authority Key Identifier:
keyid:39:19:75:AD:57:CE:B7:65:AD:94:8B:E5:EB:4C:38:2D:C7:48:44:C0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ORl1rVfOt2WtlIvl60w4LcdIRMA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/6b5064-8d5e-4c94-b5bd-050204532286/1/ORl1rVfOt2WtlIvl60w4LcdIRMA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/6b5064-8d5e-4c94-b5bd-050204532286/1/ORl1rVfOt2WtlIvl60w4LcdIRMA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0b:53:13:66:e4:e2:7b:f0:e1:27:a5:10:e2:89:68:51:5a:86:
02:24:6d:44:d4:c4:c1:6b:ea:ed:d6:d5:ca:c4:1d:79:27:86:
c2:68:16:e4:da:8f:33:de:99:22:f9:77:6a:9a:cc:95:5d:f1:
a9:7a:e0:70:01:7f:ae:39:34:13:58:7b:ee:8c:14:69:aa:b4:
d9:22:15:b9:1c:48:d5:00:1e:5d:f6:5a:e9:c0:3d:0c:18:c4:
4e:c5:d1:6d:96:97:e9:eb:55:d0:8c:da:03:b9:ab:9c:5c:16:
c7:61:de:71:02:d8:ab:59:2d:d5:89:6b:fd:43:dc:97:11:0a:
67:ef:18:20:85:11:fd:e4:ec:0e:f1:f4:e5:31:d7:5b:69:32:
e2:78:b3:a3:40:30:e5:8d:0b:d3:79:29:62:19:b6:8a:46:59:
87:b3:d3:4d:de:56:d1:de:b6:3f:a3:32:f2:e7:72:36:fa:1a:
57:a3:75:da:8f:98:ef:6c:e6:68:27:09:96:83:3d:3f:ab:3f:
71:23:53:67:09:ed:83:b4:f9:59:63:4a:9c:66:32:0d:dd:0a:
94:26:4b:67:8b:87:fe:b1:f2:e9:b6:00:ee:3b:c0:0e:8d:37:
58:e3:08:3e:77:28:12:41:04:5f:69:24:29:b1:06:11:53:b6:
ee:0f:95:db
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 19 02:01:02 2025 by rpki-client