Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/eb/ea76fe-6119-4de0-bf4b-4b1af414fd00/1/oVJEYml6J_56uUtqypBnkx2SEC8.mft
File: oVJEYml6J_56uUtqypBnkx2SEC8.mft (raw, json)
Hash identifier: s9yn9BhghxKvPHZEj5ebBnX5Oh159u2QpXAgPMPoLJ4=
Subject key identifier: 1A:D2:51:48:94:4B:5F:85:21:AF:05:70:DD:0B:12:0C:A4:1E:B2:58
Authority key identifier: A1:52:44:62:69:7A:27:FE:7A:B9:4B:6A:CA:90:67:93:1D:92:10:2F
Certificate issuer: /CN=a1524462697a27fe7ab94b6aca9067931d92102f
Certificate serial: 019655388CE6D1CE5662E952C5A26AD711AF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/oVJEYml6J_56uUtqypBnkx2SEC8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/eb/ea76fe-6119-4de0-bf4b-4b1af414fd00/1/oVJEYml6J_56uUtqypBnkx2SEC8.mft
Manifest number: 14FB
Signing time: Sun 20 Apr 2025 22:01:31 +0000
Manifest this update: Sun 20 Apr 2025 22:01:31 +0000
Manifest next update: Mon 21 Apr 2025 22:01:31 +0000
Files and hashes: 1: oVJEYml6J_56uUtqypBnkx2SEC8.crl (hash: wgvY3uWdQBzRsGyT65x155o8bmOq8ezIB1JSCkSzbXU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/eb/ea76fe-6119-4de0-bf4b-4b1af414fd00/1/oVJEYml6J_56uUtqypBnkx2SEC8.crl
rsync://rpki.ripe.net/repository/DEFAULT/eb/ea76fe-6119-4de0-bf4b-4b1af414fd00/1/oVJEYml6J_56uUtqypBnkx2SEC8.mft
rsync://rpki.ripe.net/repository/DEFAULT/oVJEYml6J_56uUtqypBnkx2SEC8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 21 Apr 2025 22:01:31 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:55:38:8c:e6:d1:ce:56:62:e9:52:c5:a2:6a:d7:11:af
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a1524462697a27fe7ab94b6aca9067931d92102f
Validity
Not Before: Apr 20 22:01:31 2025 GMT
Not After : Apr 21 22:01:31 2025 GMT
Subject: CN=1ad25148944b5f8521af0570dd0b120ca41eb258
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:45:3b:d4:49:65:a3:61:a5:9c:10:ed:cc:d7:
dd:ea:bf:f4:cc:ba:48:a1:e7:99:7a:70:7c:2f:2b:
30:fb:38:db:09:43:21:5c:c5:27:ce:72:45:73:dc:
29:7b:9e:c7:61:73:8b:62:ae:24:b4:1d:df:19:69:
42:5d:cd:d8:3e:8e:cc:bf:47:15:a0:28:d8:e0:82:
46:21:67:e7:a5:19:f0:8c:c6:98:92:f1:4e:88:11:
ba:71:24:18:c4:f3:7a:c2:dc:81:1f:e2:e6:33:fc:
02:76:33:ab:eb:67:6a:e5:d4:b0:7b:3e:34:99:d0:
55:5d:6a:c7:c9:0b:0a:6b:91:3b:2d:b9:8d:4f:a1:
01:b5:03:12:f8:44:6c:f2:e8:0d:de:3f:88:7c:0c:
82:16:c3:f2:ef:5b:9b:68:ad:1d:47:7a:c5:b2:e7:
a2:70:5e:eb:3f:ec:c8:ab:0a:05:27:8d:a3:51:b5:
99:08:ab:0b:13:00:1a:54:63:4a:eb:46:53:48:8f:
5b:d3:da:b5:82:39:90:1c:2b:c9:cd:1e:9a:1e:9e:
7f:a3:7a:ca:a5:2d:22:23:cf:89:5c:ee:d9:e9:98:
b3:01:b4:f8:01:46:ef:2e:6a:ad:de:da:c4:c1:3a:
d3:af:77:97:c1:55:58:53:09:62:dc:70:d5:70:67:
49:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1A:D2:51:48:94:4B:5F:85:21:AF:05:70:DD:0B:12:0C:A4:1E:B2:58
X509v3 Authority Key Identifier:
keyid:A1:52:44:62:69:7A:27:FE:7A:B9:4B:6A:CA:90:67:93:1D:92:10:2F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/oVJEYml6J_56uUtqypBnkx2SEC8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/ea76fe-6119-4de0-bf4b-4b1af414fd00/1/oVJEYml6J_56uUtqypBnkx2SEC8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/ea76fe-6119-4de0-bf4b-4b1af414fd00/1/oVJEYml6J_56uUtqypBnkx2SEC8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
34:0a:31:08:bd:58:63:35:f8:49:d1:51:7c:e1:74:c0:dd:b8:
e1:2e:be:bf:75:16:6f:ba:80:f7:58:a9:b4:91:f5:c5:fb:82:
bb:08:3f:69:68:4d:ce:aa:83:fc:cf:81:7b:5f:ee:7c:4c:5b:
2f:a9:10:7c:52:91:02:06:47:c8:0f:26:7b:ac:2b:33:87:42:
63:4e:59:19:89:e3:50:a6:0d:17:5a:47:b4:1c:e6:90:73:85:
e5:54:39:be:0b:2c:d7:cd:3d:12:90:98:bf:8a:1a:5e:34:42:
43:25:f8:77:d8:27:71:4d:de:c4:5e:2c:ea:e4:e3:fa:e6:c7:
54:1d:70:a7:7e:e3:b1:5a:41:b0:72:b9:dc:c8:58:22:73:d3:
a3:81:d1:28:1e:d9:f0:ca:01:26:6d:9d:ac:fa:8a:96:b1:fe:
3b:2a:b9:7d:98:69:d9:51:bd:a4:c9:ce:5a:5d:5b:4d:aa:69:
10:40:af:8b:8e:17:35:9d:af:93:e6:c2:3e:3c:bb:87:a8:9a:
db:8f:d2:0c:ed:ca:20:13:d1:69:ab:60:fe:e7:40:ac:92:e6:
1f:97:e7:97:4b:c5:f0:1b:9c:00:2e:84:3e:a6:9f:f9:4b:c4:
d8:a3:e9:9f:37:ec:b0:d6:9a:e8:73:7c:d0:62:80:79:3d:48:
2b:8b:08:46
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 21 04:04:58 2025 by rpki-client