Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/17/014526-da31-47c5-9a5c-9d86528da099/1/OY5Tm8xek0YkNE2IT2Ipk7HumqE.mft
File: OY5Tm8xek0YkNE2IT2Ipk7HumqE.mft (raw, json)
Hash identifier: hZz44Oij/pLJCiLVJfxtJBKnyp5C6JDIrmrJwmLE8W0=
Subject key identifier: D5:FD:76:36:2D:99:C7:F1:7F:16:F9:A7:B9:F6:15:8B:30:8F:8A:02
Authority key identifier: 39:8E:53:9B:CC:5E:93:46:24:34:4D:88:4F:62:29:93:B1:EE:9A:A1
Certificate issuer: /CN=398e539bcc5e934624344d884f622993b1ee9aa1
Certificate serial: 019680FDC740B101F6138E92C8ED5E3E1B23
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OY5Tm8xek0YkNE2IT2Ipk7HumqE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/17/014526-da31-47c5-9a5c-9d86528da099/1/OY5Tm8xek0YkNE2IT2Ipk7HumqE.mft
Manifest number: 0363
Signing time: Tue 29 Apr 2025 10:00:37 +0000
Manifest this update: Tue 29 Apr 2025 10:00:37 +0000
Manifest next update: Wed 30 Apr 2025 10:00:37 +0000
Files and hashes: 1: OY5Tm8xek0YkNE2IT2Ipk7HumqE.crl (hash: t0TmvEIV005NfFsQ52Gjhlp7cchKCS6Pl30OqNdSoTQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/17/014526-da31-47c5-9a5c-9d86528da099/1/OY5Tm8xek0YkNE2IT2Ipk7HumqE.crl
rsync://rpki.ripe.net/repository/DEFAULT/17/014526-da31-47c5-9a5c-9d86528da099/1/OY5Tm8xek0YkNE2IT2Ipk7HumqE.mft
rsync://rpki.ripe.net/repository/DEFAULT/OY5Tm8xek0YkNE2IT2Ipk7HumqE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 30 Apr 2025 10:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:80:fd:c7:40:b1:01:f6:13:8e:92:c8:ed:5e:3e:1b:23
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=398e539bcc5e934624344d884f622993b1ee9aa1
Validity
Not Before: Apr 29 10:00:37 2025 GMT
Not After : Apr 30 10:00:37 2025 GMT
Subject: CN=d5fd76362d99c7f17f16f9a7b9f6158b308f8a02
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:a8:cc:83:26:f1:c7:61:e3:2d:37:0d:11:bf:
fb:e7:ae:dc:76:fb:fc:4f:d7:a9:4c:25:cf:f5:9c:
e4:49:54:9f:45:05:8f:30:6e:86:1a:23:4c:92:27:
df:e5:5c:06:1a:f1:f2:f8:e0:79:ef:32:ee:99:6c:
1b:67:3b:7a:a0:56:0c:fa:d6:24:86:cf:91:a7:e1:
e5:56:0a:01:f9:60:0d:fa:ec:1a:e9:99:cd:7d:d6:
5d:33:52:7f:b8:11:9f:e7:fb:e3:ff:a7:9f:d3:e1:
d0:b7:e6:e9:42:0d:0f:19:e6:c5:b4:ad:3d:44:a6:
6b:c9:a3:c6:f6:a3:05:2e:cf:d8:47:56:7b:fe:0c:
4a:9f:01:80:5c:5f:dc:f5:a7:49:26:36:9f:38:02:
cd:c7:0a:7a:5b:62:88:84:8f:57:91:94:e8:30:c0:
3c:25:de:f8:a1:a9:b8:67:81:4d:35:60:d2:7f:85:
8c:90:66:c7:14:7d:ae:c6:09:21:cb:92:7c:a1:09:
21:b0:19:56:ed:6d:62:75:5d:35:75:53:4c:9a:5b:
76:fb:2c:cb:7f:4c:20:04:eb:dd:19:54:99:a1:1c:
c8:ec:a0:09:dc:36:9e:69:8a:6e:ee:96:11:a1:19:
2a:98:97:e2:19:bd:b1:4c:5b:09:5c:04:8e:9b:62:
39:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D5:FD:76:36:2D:99:C7:F1:7F:16:F9:A7:B9:F6:15:8B:30:8F:8A:02
X509v3 Authority Key Identifier:
keyid:39:8E:53:9B:CC:5E:93:46:24:34:4D:88:4F:62:29:93:B1:EE:9A:A1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OY5Tm8xek0YkNE2IT2Ipk7HumqE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/17/014526-da31-47c5-9a5c-9d86528da099/1/OY5Tm8xek0YkNE2IT2Ipk7HumqE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/17/014526-da31-47c5-9a5c-9d86528da099/1/OY5Tm8xek0YkNE2IT2Ipk7HumqE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
17:8d:7a:eb:48:db:ee:07:36:0c:d5:43:7d:51:50:bd:8b:a5:
ab:6e:08:b1:e6:bd:a0:74:2a:61:ee:56:30:ae:48:87:44:73:
0e:73:07:e1:75:8e:a0:03:e1:81:76:65:a2:79:1a:c0:ba:f1:
c7:ec:60:33:1a:1d:b4:d0:38:df:d9:d0:58:e0:5a:3c:10:d2:
1e:20:a2:f0:77:6d:82:b9:42:6a:d2:c2:ba:bf:f4:36:4d:66:
73:10:f4:8a:59:48:17:c5:d2:5e:34:6c:e0:00:74:06:70:94:
78:42:b3:18:af:c4:46:a6:c7:30:ac:a0:a5:88:95:e1:74:ea:
df:1b:8d:b2:a4:b1:30:29:3d:3d:e4:f1:db:90:43:19:7d:b3:
dd:a1:09:58:27:7a:44:6e:fe:b9:9f:b6:a9:dd:ee:92:f9:aa:
ca:ad:14:1f:3f:36:80:81:be:1f:2a:a2:3c:1c:ba:5c:54:c8:
5c:da:64:34:8f:d6:76:97:3c:6f:73:f7:a0:f1:e3:6b:e5:45:
3e:93:73:6b:1e:f4:b1:7d:fc:11:60:05:28:9a:5f:d0:c0:fd:
88:10:e0:66:f2:70:5a:08:d6:cc:8a:d2:37:6f:45:a3:3e:97:
27:da:e2:09:a8:56:c9:f5:dd:b8:00:24:31:1d:b1:58:70:3b:
8e:40:36:8d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 29 19:54:36 2025 by rpki-client