Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/17/a764ce-12ae-41b5-81b6-02aba5d1b3a4/1/oBdGz2u9yL1WZvMGgRvf_SFrGqY.mft
File: oBdGz2u9yL1WZvMGgRvf_SFrGqY.mft (raw, json)
Hash identifier: wRPC4CzvLexCxf3QfRVvHiSHa8pSQ+w3ufxYW7s5CBg=
Subject key identifier: 21:F3:6C:17:17:40:EC:33:69:6B:80:C2:F7:60:9D:61:E9:7A:CA:5A
Authority key identifier: A0:17:46:CF:6B:BD:C8:BD:56:66:F3:06:81:1B:DF:FD:21:6B:1A:A6
Certificate issuer: /CN=a01746cf6bbdc8bd5666f306811bdffd216b1aa6
Certificate serial: 019676E840EDC84996FEB419BF56C98D54B1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/oBdGz2u9yL1WZvMGgRvf_SFrGqY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/17/a764ce-12ae-41b5-81b6-02aba5d1b3a4/1/oBdGz2u9yL1WZvMGgRvf_SFrGqY.mft
Manifest number: 150E
Signing time: Sun 27 Apr 2025 11:00:54 +0000
Manifest this update: Sun 27 Apr 2025 11:00:54 +0000
Manifest next update: Mon 28 Apr 2025 11:00:54 +0000
Files and hashes: 1: oBdGz2u9yL1WZvMGgRvf_SFrGqY.crl (hash: MVbHgfKFhOE9jPLZAP20X/m0DibfU9IUO/8VBzr4DFU=)
2: sociFAoZ9Fk3G3CziQXuWjc_tPc.roa (hash: udf9UdObLF2TzxfJDP0XmSNS06eQxn4HxbhQF0p8yZs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/17/a764ce-12ae-41b5-81b6-02aba5d1b3a4/1/oBdGz2u9yL1WZvMGgRvf_SFrGqY.crl
rsync://rpki.ripe.net/repository/DEFAULT/17/a764ce-12ae-41b5-81b6-02aba5d1b3a4/1/oBdGz2u9yL1WZvMGgRvf_SFrGqY.mft
rsync://rpki.ripe.net/repository/DEFAULT/oBdGz2u9yL1WZvMGgRvf_SFrGqY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Apr 2025 07:29:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:76:e8:40:ed:c8:49:96:fe:b4:19:bf:56:c9:8d:54:b1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a01746cf6bbdc8bd5666f306811bdffd216b1aa6
Validity
Not Before: Apr 27 11:00:54 2025 GMT
Not After : Apr 28 11:00:54 2025 GMT
Subject: CN=21f36c171740ec33696b80c2f7609d61e97aca5a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:c8:c5:68:58:9f:5f:32:a6:9a:a0:2b:2b:33:
16:d9:bd:22:61:46:90:b0:c5:b3:50:13:c7:5e:32:
73:3f:d3:79:75:91:0c:ee:4f:c6:64:f4:cf:84:ff:
d3:97:66:51:48:d8:61:fb:d5:04:c4:11:c5:93:a5:
2f:81:bb:82:25:41:a6:e9:65:87:3b:1f:15:1b:b9:
33:5f:99:9c:af:6b:3d:13:61:c7:52:eb:1c:ec:ff:
8c:92:e1:09:d6:b8:53:51:f6:9b:90:21:64:79:ed:
80:98:77:c0:1e:76:2a:c4:05:ba:11:6d:9e:1b:48:
67:96:b6:64:de:6b:7a:f9:b6:28:77:9d:75:8e:4b:
fb:2b:a3:15:71:4a:39:ca:5a:8d:b9:53:3e:52:c2:
0a:0b:f6:47:30:63:c7:4f:c9:ba:b8:49:71:1b:5d:
18:9b:54:8f:46:83:fa:5f:2f:24:0b:e3:57:dc:c2:
ca:47:ff:38:51:93:81:7c:fc:c3:03:2d:62:f6:05:
38:1a:f5:8f:4b:76:f9:dd:9c:a7:c1:d3:f3:84:0e:
0e:dc:b7:cc:02:6a:6d:f6:9f:14:d1:19:4e:eb:17:
38:a0:27:06:9b:30:1d:fd:89:03:88:82:b1:ce:4a:
77:96:a1:b4:0f:fb:b4:0d:b4:a4:60:2a:9c:1b:2e:
14:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
21:F3:6C:17:17:40:EC:33:69:6B:80:C2:F7:60:9D:61:E9:7A:CA:5A
X509v3 Authority Key Identifier:
keyid:A0:17:46:CF:6B:BD:C8:BD:56:66:F3:06:81:1B:DF:FD:21:6B:1A:A6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/oBdGz2u9yL1WZvMGgRvf_SFrGqY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/17/a764ce-12ae-41b5-81b6-02aba5d1b3a4/1/oBdGz2u9yL1WZvMGgRvf_SFrGqY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/17/a764ce-12ae-41b5-81b6-02aba5d1b3a4/1/oBdGz2u9yL1WZvMGgRvf_SFrGqY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
d7:1f:2e:45:30:42:ee:b3:85:aa:11:6c:6c:1d:c9:76:0b:fb:
90:4d:77:0b:e8:36:36:12:0a:5f:77:29:46:23:43:7f:28:e7:
ea:d1:58:98:59:b8:9f:e8:f7:fc:fd:bc:42:65:6a:be:0f:bb:
dd:ef:b3:d0:7e:40:73:a3:5f:51:0b:3b:52:b6:98:7c:30:95:
63:39:67:32:57:16:b9:bc:f5:4a:ee:f2:bf:f5:90:ed:d4:27:
7e:33:9e:b3:22:f0:e0:67:2f:8b:18:e3:f2:b0:98:1f:f9:01:
6c:46:1e:7c:7c:2f:11:76:6f:3c:e6:ee:fb:e6:4c:93:e6:15:
92:34:3f:8d:81:e0:21:39:e3:be:76:61:b2:19:cb:79:f4:8f:
bb:72:13:5a:f8:ea:51:ed:f9:3d:8d:fe:b2:63:93:03:fa:c2:
8f:c7:44:19:ba:d3:58:f5:d5:97:36:2b:6e:c6:0d:f7:e8:71:
3e:57:b3:42:e7:a0:f6:b0:93:19:ad:01:32:a5:ee:19:ca:e6:
49:8a:10:ad:30:48:79:a2:4b:fe:a1:cc:0f:8b:f9:ee:35:44:
e2:9b:05:64:f7:80:f8:5b:20:62:12:ab:67:3d:cd:04:37:d4:
1b:2b:46:1d:84:62:90:57:57:9f:71:39:8d:ae:10:db:6c:d5:
49:bf:f1:74
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 18:12:16 2025 by rpki-client