Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d1/d24305-c551-450d-b697-9ac2d536f12d/1/oGqOPGol1GOfOUWtFszF6Yo6kqY.mft
File: oGqOPGol1GOfOUWtFszF6Yo6kqY.mft (raw, json)
Hash identifier: lKr5NveUpMcpCT4wfoz8g/rbxZ2a10IuQpv9dPAtF2Q=
Subject key identifier: 20:94:74:D1:0A:8E:E1:BC:0C:8C:86:AD:F2:56:E5:19:B6:16:CE:13
Authority key identifier: A0:6A:8E:3C:6A:25:D4:63:9F:39:45:AD:16:CC:C5:E9:8A:3A:92:A6
Certificate issuer: /CN=a06a8e3c6a25d4639f3945ad16ccc5e98a3a92a6
Certificate serial: 0195903D688D1B071EEEC4543BB00B1B4A41
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/oGqOPGol1GOfOUWtFszF6Yo6kqY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d1/d24305-c551-450d-b697-9ac2d536f12d/1/oGqOPGol1GOfOUWtFszF6Yo6kqY.mft
Manifest number: 1496
Signing time: Thu 13 Mar 2025 16:01:38 +0000
Manifest this update: Thu 13 Mar 2025 16:01:38 +0000
Manifest next update: Fri 14 Mar 2025 16:01:38 +0000
Files and hashes: 1: oGqOPGol1GOfOUWtFszF6Yo6kqY.crl (hash: GWC0GIdRrb9viScRpDKOiEQaOTuNsGJALs3JK1D8Mdk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d1/d24305-c551-450d-b697-9ac2d536f12d/1/oGqOPGol1GOfOUWtFszF6Yo6kqY.crl
rsync://rpki.ripe.net/repository/DEFAULT/d1/d24305-c551-450d-b697-9ac2d536f12d/1/oGqOPGol1GOfOUWtFszF6Yo6kqY.mft
rsync://rpki.ripe.net/repository/DEFAULT/oGqOPGol1GOfOUWtFszF6Yo6kqY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 14 Mar 2025 09:00:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:90:3d:68:8d:1b:07:1e:ee:c4:54:3b:b0:0b:1b:4a:41
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a06a8e3c6a25d4639f3945ad16ccc5e98a3a92a6
Validity
Not Before: Mar 13 16:01:38 2025 GMT
Not After : Mar 14 16:01:38 2025 GMT
Subject: CN=209474d10a8ee1bc0c8c86adf256e519b616ce13
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:2f:d8:a1:f8:a4:af:1c:df:e3:de:bb:59:7d:
47:d3:0d:2b:f3:7d:8f:90:69:15:df:54:1a:6a:45:
3a:01:e9:6c:14:fe:a9:fe:b0:f7:42:3c:34:85:ff:
33:0e:74:dc:ec:bd:fd:2f:2a:52:e9:2e:4f:31:0e:
68:ce:5b:a3:ac:70:a6:0b:a7:77:72:dd:d3:41:91:
13:94:72:5e:cf:d7:cd:68:8a:5d:3b:72:2e:86:2d:
91:52:a1:3a:19:95:2b:3e:b4:68:83:0f:e8:90:20:
7c:d1:c0:80:f2:f8:8e:5c:a0:36:40:14:0f:b4:db:
62:c2:c4:a1:96:d9:62:82:f4:f4:c6:01:a0:33:b2:
b9:90:16:25:2b:cc:4e:f0:f4:d6:9c:ed:88:e5:39:
fd:fc:d4:67:75:c2:9b:63:e3:ba:18:fc:b5:7b:4e:
39:ca:12:a3:55:8f:15:25:f2:c2:95:bd:61:e6:65:
aa:67:77:87:c4:46:2c:75:3e:9c:d2:12:5b:9b:d0:
fd:c1:9b:11:a5:e4:b9:85:17:e2:09:22:a4:ce:76:
f9:08:70:27:74:1a:26:c4:45:14:51:f7:2e:45:c1:
d2:4a:c4:54:02:ce:65:5f:0b:34:3c:1c:31:2b:be:
fb:be:fb:8b:e0:57:10:9b:e2:59:e3:88:cb:29:f8:
d7:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
20:94:74:D1:0A:8E:E1:BC:0C:8C:86:AD:F2:56:E5:19:B6:16:CE:13
X509v3 Authority Key Identifier:
keyid:A0:6A:8E:3C:6A:25:D4:63:9F:39:45:AD:16:CC:C5:E9:8A:3A:92:A6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/oGqOPGol1GOfOUWtFszF6Yo6kqY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d1/d24305-c551-450d-b697-9ac2d536f12d/1/oGqOPGol1GOfOUWtFszF6Yo6kqY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d1/d24305-c551-450d-b697-9ac2d536f12d/1/oGqOPGol1GOfOUWtFszF6Yo6kqY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1f:e9:95:0d:3f:37:e4:8e:6b:64:e9:ab:08:6b:22:2f:0c:17:
49:36:b8:6a:39:ab:83:89:d9:0c:4a:99:1b:10:48:49:af:73:
49:67:27:d3:2a:04:5e:15:85:ff:d0:f9:dd:15:99:42:18:84:
12:d2:f3:4b:7e:98:9a:31:38:96:b5:13:65:ce:6c:97:98:cb:
1d:d3:23:f6:5e:d0:26:e7:ab:56:45:ec:ce:f3:bf:69:ab:67:
b2:3e:24:0d:00:dd:f7:6f:95:98:76:00:c5:85:0d:6e:e4:35:
90:d1:0b:0b:16:a7:dd:d8:d9:a0:4d:b9:9d:61:4c:ec:74:ab:
fc:54:41:6a:d8:68:de:80:57:e3:08:71:07:d4:39:9a:d9:14:
fb:b9:00:9d:4f:20:16:48:d8:e1:78:74:75:82:d6:3b:8e:5a:
34:8d:27:50:7a:3e:23:99:fa:51:ad:ed:d9:52:74:c1:3f:ab:
6e:d6:bf:d5:ba:ac:8d:31:a8:4d:74:dc:ae:a9:9c:ea:03:0b:
cc:0e:2b:81:da:67:8c:57:6d:aa:48:9b:b7:b3:8f:cd:3b:82:
f2:19:76:64:b8:a7:76:fe:08:35:27:84:9e:1b:fa:49:31:00:
11:45:a1:8a:df:b5:8b:68:7d:d5:ca:d8:08:ac:52:6a:75:5b:
10:22:19:5a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 13 19:50:10 2025 by rpki-client