Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ad/f4ce89-8a16-4af5-b57c-2846eaadde67/1/ODQP9mmjrcnWaWE1yNcfbfXqwns.mft
File: ODQP9mmjrcnWaWE1yNcfbfXqwns.mft (raw, json)
Hash identifier: FQxtR74/Zs0gknKhxGoOnLqQLKxvwOKMzzCYFgrhzmY=
Subject key identifier: AA:39:60:1B:97:E9:C6:6B:DF:2C:3F:6D:56:C4:51:7E:52:99:62:12
Authority key identifier: 38:34:0F:F6:69:A3:AD:C9:D6:69:61:35:C8:D7:1F:6D:F5:EA:C2:7B
Certificate issuer: /CN=38340ff669a3adc9d6696135c8d71f6df5eac27b
Certificate serial: 019611A0F60A25C780723C1A652C98828529
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ODQP9mmjrcnWaWE1yNcfbfXqwns.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ad/f4ce89-8a16-4af5-b57c-2846eaadde67/1/ODQP9mmjrcnWaWE1yNcfbfXqwns.mft
Manifest number: 0880
Signing time: Mon 07 Apr 2025 19:01:23 +0000
Manifest this update: Mon 07 Apr 2025 19:01:23 +0000
Manifest next update: Tue 08 Apr 2025 19:01:23 +0000
Files and hashes: 1: ODQP9mmjrcnWaWE1yNcfbfXqwns.crl (hash: WvPs2C0dxZgohvRJXFZspD3c5I0aePU3pjii29vK/VM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ad/f4ce89-8a16-4af5-b57c-2846eaadde67/1/ODQP9mmjrcnWaWE1yNcfbfXqwns.crl
rsync://rpki.ripe.net/repository/DEFAULT/ad/f4ce89-8a16-4af5-b57c-2846eaadde67/1/ODQP9mmjrcnWaWE1yNcfbfXqwns.mft
rsync://rpki.ripe.net/repository/DEFAULT/ODQP9mmjrcnWaWE1yNcfbfXqwns.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 08 Apr 2025 14:28:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:11:a0:f6:0a:25:c7:80:72:3c:1a:65:2c:98:82:85:29
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=38340ff669a3adc9d6696135c8d71f6df5eac27b
Validity
Not Before: Apr 7 19:01:23 2025 GMT
Not After : Apr 8 19:01:23 2025 GMT
Subject: CN=aa39601b97e9c66bdf2c3f6d56c4517e52996212
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:29:e2:68:4f:26:9b:81:98:8f:28:ae:c7:9b:
62:6f:84:e5:bf:2f:f4:c6:a0:c3:a7:81:8f:6b:00:
03:fd:60:ce:08:7c:ff:e6:cb:9f:24:e6:e1:e3:18:
c4:73:dc:42:92:f5:bc:21:74:df:d5:0d:2b:a6:ac:
ed:f3:54:7d:39:fd:80:84:9e:38:32:3a:60:41:4b:
44:80:6e:81:f8:e9:87:c1:79:f4:51:57:46:76:eb:
f8:a4:34:77:21:f5:c3:f0:c8:4c:21:f4:58:25:fc:
0c:08:c9:d5:1c:e1:66:a3:8e:54:32:7e:1b:8a:18:
b9:03:c4:34:62:6e:2e:ca:09:b9:44:5a:d7:3b:3c:
d2:c6:a4:12:d3:1d:f2:69:5c:1f:7c:06:34:7c:7e:
06:88:ac:a3:db:a5:df:73:6d:f1:61:fb:0c:b9:fe:
18:85:82:2e:37:08:f8:4b:50:9b:34:1a:12:9b:98:
0e:5d:eb:32:e8:70:c8:a9:92:ca:c3:47:4b:5d:ca:
24:26:64:ae:be:7b:68:df:d0:d3:b1:fa:15:08:4d:
52:9b:93:94:fa:66:dd:03:23:07:5c:9a:04:08:2d:
6f:1b:34:f5:ec:f3:69:72:ef:62:1e:7c:ff:cc:03:
99:8c:4a:03:a8:74:a5:7c:f1:00:00:18:70:7b:5a:
f1:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AA:39:60:1B:97:E9:C6:6B:DF:2C:3F:6D:56:C4:51:7E:52:99:62:12
X509v3 Authority Key Identifier:
keyid:38:34:0F:F6:69:A3:AD:C9:D6:69:61:35:C8:D7:1F:6D:F5:EA:C2:7B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ODQP9mmjrcnWaWE1yNcfbfXqwns.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ad/f4ce89-8a16-4af5-b57c-2846eaadde67/1/ODQP9mmjrcnWaWE1yNcfbfXqwns.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ad/f4ce89-8a16-4af5-b57c-2846eaadde67/1/ODQP9mmjrcnWaWE1yNcfbfXqwns.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
08:8e:e1:4b:c1:c0:42:d1:8d:15:ba:d1:e6:b0:5f:6a:ed:26:
13:96:da:ec:57:f8:06:4c:64:fb:74:fb:e6:85:80:b2:3d:ee:
1d:03:75:bd:85:7b:c8:6b:32:3b:8f:8c:f5:4b:ed:c6:5d:4a:
6c:19:e7:5d:97:02:45:80:01:df:d5:49:96:66:0f:51:90:fe:
c9:10:35:4f:b0:f0:06:77:41:17:3f:26:eb:77:1e:83:87:e9:
30:e3:32:47:ab:cb:39:95:f4:c2:9e:29:c1:5d:f7:0e:4d:f5:
90:c3:be:e0:f4:ba:fd:30:f1:57:5f:12:fb:38:cd:85:fb:d6:
aa:30:80:51:05:2a:85:a6:0c:3e:3c:bb:06:f0:99:86:d0:f2:
e1:17:8d:07:76:7a:10:ef:b0:cb:34:72:fc:68:b9:40:63:6d:
19:6c:03:af:c4:67:be:ef:d8:fb:41:8c:32:ab:00:e4:55:94:
55:80:40:3a:19:9c:54:4c:6a:0d:a7:59:06:e6:cf:64:15:4f:
b8:c1:16:cf:d2:dc:d1:0e:9b:7b:b7:d8:de:2a:53:93:83:00:
3e:5b:6b:5e:80:51:bd:05:53:12:5e:97:c6:3f:33:b8:2f:17:
4b:f3:21:2f:9a:e0:7e:f6:06:c9:9d:67:ac:c2:bc:26:5d:82:
22:24:ef:29
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 8 00:12:54 2025 by rpki-client