Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cf/689d05-1b14-4f9b-8e7c-371ac7c654da/1/oYNGitFuaZjU23dpvvv6BuofE0I.mft
File: oYNGitFuaZjU23dpvvv6BuofE0I.mft (raw, json)
Hash identifier: BZv+ypOAubHneS7BTJoz84/YiDFsP4nJqGsY9m1m9uk=
Subject key identifier: 3F:FF:05:4F:84:31:0E:7E:52:06:9E:D5:1D:D6:28:DB:E3:4C:FA:2D
Authority key identifier: A1:83:46:8A:D1:6E:69:98:D4:DB:77:69:BE:FB:FA:06:EA:1F:13:42
Certificate issuer: /CN=a183468ad16e6998d4db7769befbfa06ea1f1342
Certificate serial: 01974779E6D4A965D50D6585AEB939A4DD2A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/oYNGitFuaZjU23dpvvv6BuofE0I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cf/689d05-1b14-4f9b-8e7c-371ac7c654da/1/oYNGitFuaZjU23dpvvv6BuofE0I.mft
Manifest number: 0EF7
Signing time: Fri 06 Jun 2025 23:01:00 +0000
Manifest this update: Fri 06 Jun 2025 23:01:00 +0000
Manifest next update: Sat 07 Jun 2025 23:01:00 +0000
Files and hashes: 1: oYNGitFuaZjU23dpvvv6BuofE0I.crl (hash: 6TpmBAaghnaNfRCWEGnZz2Tp5a1laA0nn64YVm3P19g=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cf/689d05-1b14-4f9b-8e7c-371ac7c654da/1/oYNGitFuaZjU23dpvvv6BuofE0I.crl
rsync://rpki.ripe.net/repository/DEFAULT/cf/689d05-1b14-4f9b-8e7c-371ac7c654da/1/oYNGitFuaZjU23dpvvv6BuofE0I.mft
rsync://rpki.ripe.net/repository/DEFAULT/oYNGitFuaZjU23dpvvv6BuofE0I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 07 Jun 2025 22:50:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:47:79:e6:d4:a9:65:d5:0d:65:85:ae:b9:39:a4:dd:2a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a183468ad16e6998d4db7769befbfa06ea1f1342
Validity
Not Before: Jun 6 23:01:00 2025 GMT
Not After : Jun 7 23:01:00 2025 GMT
Subject: CN=3fff054f84310e7e52069ed51dd628dbe34cfa2d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e0:4b:0e:3d:f4:d2:c4:da:19:1b:41:68:c7:d1:
7c:8b:ad:e2:07:37:db:36:23:31:38:39:05:d6:97:
1e:65:ed:b7:77:dc:3b:f6:00:d0:50:e1:7a:6a:f0:
92:12:e6:58:cd:fe:64:47:dd:af:26:f4:0a:36:eb:
40:3c:53:bb:41:65:35:4d:48:8b:1e:32:89:a4:6d:
31:63:3f:29:e6:62:d2:e5:f6:76:13:28:82:91:7a:
75:1b:18:bf:ee:74:9a:e9:bb:c4:e6:4f:cd:d2:98:
46:5a:19:ed:ea:31:ff:7a:55:26:99:1d:c9:fc:9a:
df:4b:b7:16:4d:31:b8:f6:52:69:3d:51:ba:7d:74:
76:20:c8:19:0f:7e:d9:f6:e3:3b:1a:50:30:88:d6:
01:f0:c9:fd:78:1b:f3:28:3b:be:f6:e3:3d:05:73:
04:14:7d:cb:13:f4:b1:9f:ab:60:34:39:8c:8e:3f:
79:51:9e:82:86:39:3b:ae:6f:ce:cc:46:3c:59:36:
19:d6:99:c4:d4:aa:d5:f8:71:a8:70:18:d1:eb:f2:
94:53:b4:c5:b2:9d:e7:6e:54:46:fd:45:d7:d7:de:
64:24:49:4a:82:d5:7c:32:b9:e7:46:64:99:77:4d:
1a:07:ef:ff:23:bc:7d:b2:ed:f4:ba:25:40:8e:e6:
7d:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3F:FF:05:4F:84:31:0E:7E:52:06:9E:D5:1D:D6:28:DB:E3:4C:FA:2D
X509v3 Authority Key Identifier:
keyid:A1:83:46:8A:D1:6E:69:98:D4:DB:77:69:BE:FB:FA:06:EA:1F:13:42
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/oYNGitFuaZjU23dpvvv6BuofE0I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cf/689d05-1b14-4f9b-8e7c-371ac7c654da/1/oYNGitFuaZjU23dpvvv6BuofE0I.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cf/689d05-1b14-4f9b-8e7c-371ac7c654da/1/oYNGitFuaZjU23dpvvv6BuofE0I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6f:bc:ce:ab:41:77:08:dc:96:c9:fb:da:91:b9:05:71:a5:4c:
d5:16:48:97:bb:9c:d1:72:1c:a5:74:ce:45:e5:ec:e3:a8:e4:
ce:77:1b:2c:4e:d1:67:0b:5a:85:67:e1:61:50:cb:45:8e:93:
4d:d4:a6:4d:8e:a9:d3:c6:5f:a8:d1:0a:c6:93:f0:b4:1b:4b:
b5:e8:71:71:99:49:17:59:27:7b:7e:9f:65:cd:1e:94:82:9d:
8b:07:a2:08:a3:1a:6d:f7:3b:9f:fe:a2:b5:96:17:a0:3a:15:
a7:6c:31:bc:10:ab:0a:b5:ed:a0:d2:90:d2:c8:ee:66:db:fa:
c5:ba:cf:0e:0f:e2:98:ef:83:bc:89:b7:f3:3f:ff:83:8d:60:
eb:cb:87:9b:bc:a3:0c:a4:54:93:8b:39:32:17:c8:2a:33:29:
19:12:49:d6:60:76:2a:92:68:7f:a7:4f:69:3a:21:44:d6:6d:
9a:60:37:3a:e5:cd:f5:5c:3d:af:c4:e1:25:0c:14:5b:12:31:
1f:fa:73:2a:cf:4f:94:46:86:07:72:ec:21:cc:df:d5:0c:d3:
30:c9:74:08:21:d0:e2:aa:89:08:14:1c:67:e1:34:39:ea:ce:
b6:27:74:e5:1e:99:ac:93:69:17:81:56:1b:c6:e8:d2:41:65:
81:40:48:44
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 03:26:21 2025 by rpki-client