Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/18/6ca5b6-c423-4b54-9655-7c5964990397/1/oDavImaRg7om8jl2Uw40mzRlGWg.mft
File: oDavImaRg7om8jl2Uw40mzRlGWg.mft (raw, json)
Hash identifier: yeZhqTk8VfKmrBpoS4f9eZUeXaqN/mpo6AVkEKPLkZo=
Subject key identifier: 3D:2F:98:0E:DB:CF:AE:39:B8:F8:D2:0D:5A:6D:84:2A:09:3F:5E:CA
Authority key identifier: A0:36:AF:22:66:91:83:BA:26:F2:39:76:53:0E:34:9B:34:65:19:68
Certificate issuer: /CN=a036af22669183ba26f23976530e349b34651968
Certificate serial: 01967BD7047876BE67A1F6B07323AF8CDBAC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/oDavImaRg7om8jl2Uw40mzRlGWg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/18/6ca5b6-c423-4b54-9655-7c5964990397/1/oDavImaRg7om8jl2Uw40mzRlGWg.mft
Manifest number: 151B
Signing time: Mon 28 Apr 2025 10:00:10 +0000
Manifest this update: Mon 28 Apr 2025 10:00:10 +0000
Manifest next update: Tue 29 Apr 2025 10:00:10 +0000
Files and hashes: 1: oDavImaRg7om8jl2Uw40mzRlGWg.crl (hash: RqUHGV9X26/XfDDbgvav6sELNk0l2XrliDo/fnZpcPo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/18/6ca5b6-c423-4b54-9655-7c5964990397/1/oDavImaRg7om8jl2Uw40mzRlGWg.crl
rsync://rpki.ripe.net/repository/DEFAULT/18/6ca5b6-c423-4b54-9655-7c5964990397/1/oDavImaRg7om8jl2Uw40mzRlGWg.mft
rsync://rpki.ripe.net/repository/DEFAULT/oDavImaRg7om8jl2Uw40mzRlGWg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 29 Apr 2025 10:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:7b:d7:04:78:76:be:67:a1:f6:b0:73:23:af:8c:db:ac
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a036af22669183ba26f23976530e349b34651968
Validity
Not Before: Apr 28 10:00:10 2025 GMT
Not After : Apr 29 10:00:10 2025 GMT
Subject: CN=3d2f980edbcfae39b8f8d20d5a6d842a093f5eca
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:a0:43:23:45:cb:16:59:fa:8f:df:bb:db:72:
37:a2:39:c9:92:62:d1:b9:ee:43:59:f9:1d:f5:25:
33:0a:40:3c:ae:45:79:80:57:be:17:03:af:9c:40:
88:a1:97:36:1f:16:63:e5:f5:76:c1:9e:7b:52:16:
58:5a:12:6f:77:0d:4f:16:90:81:00:63:d6:de:34:
94:37:a7:55:62:99:3c:7b:5b:18:e0:a4:54:39:fe:
3c:57:90:7c:a4:25:1d:3c:00:b9:69:31:25:83:9d:
9a:1a:48:50:41:1e:37:c5:0e:7e:24:0f:fa:ba:7b:
b4:16:95:79:be:14:57:e5:42:8e:eb:d8:bd:ea:da:
fa:0d:4f:a8:ed:1f:0f:50:34:15:4a:b0:e9:c3:01:
a1:c6:e5:ab:ec:27:72:21:49:95:4e:6a:ec:51:b1:
73:1a:95:e0:0b:2e:5d:20:fa:a8:0a:31:70:da:0d:
ba:17:65:4c:5f:d2:0a:b3:34:9c:4f:60:0c:74:fd:
a0:b8:5e:00:3a:ee:96:54:cc:7d:b2:aa:93:35:5f:
1d:3b:c2:59:27:6c:77:fb:9c:3b:32:0f:ae:b9:b4:
4b:5d:7e:43:8c:6b:bc:ff:b8:c0:90:48:02:89:26:
77:6f:f6:02:53:80:cc:3e:1c:4c:fe:be:af:8b:d5:
c0:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3D:2F:98:0E:DB:CF:AE:39:B8:F8:D2:0D:5A:6D:84:2A:09:3F:5E:CA
X509v3 Authority Key Identifier:
keyid:A0:36:AF:22:66:91:83:BA:26:F2:39:76:53:0E:34:9B:34:65:19:68
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/oDavImaRg7om8jl2Uw40mzRlGWg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/18/6ca5b6-c423-4b54-9655-7c5964990397/1/oDavImaRg7om8jl2Uw40mzRlGWg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/18/6ca5b6-c423-4b54-9655-7c5964990397/1/oDavImaRg7om8jl2Uw40mzRlGWg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2f:34:f4:7f:fb:7c:b7:57:3a:87:fc:ea:19:1b:39:20:27:ba:
47:2b:26:72:c7:2f:bd:7e:39:c9:e9:0b:1a:e6:1e:34:a5:12:
2a:c6:a8:14:68:43:4b:30:4c:96:c3:17:b2:cf:21:c9:44:d9:
c5:7d:8b:2e:44:4a:33:54:f0:e1:47:82:29:54:ed:aa:fc:c8:
8e:c3:39:d7:ed:14:b7:4f:9c:b9:5b:ac:19:15:81:9a:01:e9:
5c:4d:73:c9:7a:f6:5d:76:fd:08:c6:69:10:fb:8e:18:28:cf:
e7:03:47:2f:a3:41:b2:24:45:f0:8f:c4:ed:05:5d:40:ca:c7:
a0:2a:0a:a0:d3:f5:e6:1c:fc:2e:d5:bf:c7:8e:f7:ef:77:e0:
5a:ce:25:82:fc:c6:c3:fe:6e:5a:ef:be:75:c2:42:ba:b6:49:
c9:77:32:13:bb:27:b5:92:cc:5c:28:77:bd:f5:3c:d1:c4:cf:
d5:50:3e:00:92:24:74:c5:b1:b1:52:8b:96:3b:25:cc:ee:e9:
ab:04:d0:b8:5d:c8:db:f4:30:be:e7:84:25:06:db:57:92:1f:
fc:ad:d5:47:64:64:08:90:19:d1:58:ef:b0:25:7d:da:9c:f2:
4b:76:c2:a2:a1:b5:55:de:0e:eb:6c:85:a0:fe:35:4f:fd:bc:
d5:28:30:21
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 16:11:00 2025 by rpki-client