Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f5/9f69d4-65ef-4d5e-9c2f-7998f4bdf21c/1/OWjuCx9Ay7E6iP3kwLEWgwTfLWs.mft
File: OWjuCx9Ay7E6iP3kwLEWgwTfLWs.mft (raw, json)
Hash identifier: UH38QgHyt63clSABXDFKMddTOwr7+e49nK6TfxNCm6o=
Subject key identifier: FB:A7:A3:83:7C:18:D7:13:B9:AF:93:4C:73:67:1B:AB:70:94:23:1D
Authority key identifier: 39:68:EE:0B:1F:40:CB:B1:3A:88:FD:E4:C0:B1:16:83:04:DF:2D:6B
Certificate issuer: /CN=3968ee0b1f40cbb13a88fde4c0b1168304df2d6b
Certificate serial: 01964F6C8605EAB205CEAA321ACE2C3ADE72
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OWjuCx9Ay7E6iP3kwLEWgwTfLWs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f5/9f69d4-65ef-4d5e-9c2f-7998f4bdf21c/1/OWjuCx9Ay7E6iP3kwLEWgwTfLWs.mft
Manifest number: 14C4
Signing time: Sat 19 Apr 2025 19:00:34 +0000
Manifest this update: Sat 19 Apr 2025 19:00:34 +0000
Manifest next update: Sun 20 Apr 2025 19:00:34 +0000
Files and hashes: 1: OWjuCx9Ay7E6iP3kwLEWgwTfLWs.crl (hash: DCP8eLY2FCWLqrWJHkf3uscx9Sn+fHBpeCeJZf+voAM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f5/9f69d4-65ef-4d5e-9c2f-7998f4bdf21c/1/OWjuCx9Ay7E6iP3kwLEWgwTfLWs.crl
rsync://rpki.ripe.net/repository/DEFAULT/f5/9f69d4-65ef-4d5e-9c2f-7998f4bdf21c/1/OWjuCx9Ay7E6iP3kwLEWgwTfLWs.mft
rsync://rpki.ripe.net/repository/DEFAULT/OWjuCx9Ay7E6iP3kwLEWgwTfLWs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 20 Apr 2025 19:00:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:4f:6c:86:05:ea:b2:05:ce:aa:32:1a:ce:2c:3a:de:72
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3968ee0b1f40cbb13a88fde4c0b1168304df2d6b
Validity
Not Before: Apr 19 19:00:34 2025 GMT
Not After : Apr 20 19:00:34 2025 GMT
Subject: CN=fba7a3837c18d713b9af934c73671bab7094231d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:33:41:5f:91:06:ec:6b:5c:bb:4b:87:ac:a0:
40:f8:8d:e3:55:3a:8c:d7:5e:8c:21:8b:7f:72:b4:
aa:ed:ae:d0:38:48:f2:03:38:2f:ea:20:d0:31:70:
9d:f9:2a:d2:9e:cc:2c:d2:79:f4:05:bd:e3:79:43:
b1:c2:84:4f:5f:d9:82:5a:48:ef:1f:66:da:40:40:
7a:83:03:e7:3a:f3:b5:d7:cf:b6:89:f3:a8:41:a6:
c0:a4:41:41:d2:49:f3:2b:23:76:db:43:83:fd:6d:
cc:4e:43:80:5c:ff:76:1f:e0:57:06:59:43:8c:28:
53:47:17:30:42:03:71:8d:4d:3d:a4:77:57:42:a7:
4e:50:c1:bf:50:39:d3:7f:f0:84:fc:43:6d:50:32:
63:1e:04:dd:5a:ff:28:0e:b0:70:a4:db:4d:fb:5a:
06:26:b7:02:a2:5d:f9:72:a2:c4:9c:3e:4d:57:b5:
1a:2f:fa:43:3c:f8:c5:1a:03:2b:ad:50:66:71:e3:
9c:3d:ca:a4:a1:c0:e8:1f:4d:2a:b4:eb:41:d7:7b:
1a:eb:a9:08:f7:24:57:17:6a:81:07:5e:d6:0a:a4:
88:20:38:3a:e1:10:2e:2a:42:93:38:22:ac:35:db:
67:35:f7:80:1b:1e:95:15:68:f3:84:f4:18:0e:64:
88:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FB:A7:A3:83:7C:18:D7:13:B9:AF:93:4C:73:67:1B:AB:70:94:23:1D
X509v3 Authority Key Identifier:
keyid:39:68:EE:0B:1F:40:CB:B1:3A:88:FD:E4:C0:B1:16:83:04:DF:2D:6B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OWjuCx9Ay7E6iP3kwLEWgwTfLWs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/9f69d4-65ef-4d5e-9c2f-7998f4bdf21c/1/OWjuCx9Ay7E6iP3kwLEWgwTfLWs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/9f69d4-65ef-4d5e-9c2f-7998f4bdf21c/1/OWjuCx9Ay7E6iP3kwLEWgwTfLWs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
11:2a:91:81:ea:ee:0c:38:cb:d4:23:9a:3c:5a:28:13:43:b8:
32:31:87:77:e1:73:4b:40:b9:90:1d:9e:34:8e:48:14:e1:85:
7a:7e:d9:3a:d1:68:00:78:44:0d:d2:41:66:e9:93:74:0f:32:
35:14:f6:64:6b:c1:cf:3b:53:4f:9d:ad:4b:c8:ed:b1:62:0f:
67:eb:cb:31:de:4e:0e:96:38:2e:63:72:fc:8c:17:c9:bc:21:
ee:98:ed:74:d3:36:a3:03:1a:28:2f:99:7f:3e:3c:b6:5b:0f:
0d:89:03:7c:a2:f7:b5:45:1e:c4:c7:3c:a5:51:db:b3:98:da:
e3:da:ce:67:8e:00:23:f1:15:18:34:8e:9f:82:66:7f:06:74:
62:83:36:35:4b:8b:2b:b4:21:cb:39:ec:ea:8d:1c:bf:51:41:
76:7a:9d:26:6a:1f:fe:c3:10:f9:af:5e:9e:93:c5:20:7c:6a:
fc:79:25:c0:61:74:3e:41:89:4f:9d:d8:97:ad:bd:85:3f:09:
b0:40:55:54:67:4d:1a:ea:63:a2:6c:99:63:d2:a3:e5:97:82:
05:30:94:18:8f:94:4f:98:e0:ae:e2:89:c8:08:ff:28:1d:f8:
ac:68:dd:86:b7:9c:69:a4:be:e2:c0:a8:e0:e8:05:65:61:2d:
a2:55:65:ed
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 20 04:19:16 2025 by rpki-client