
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/49/ba0b0e-7cea-4b9a-9b6d-0c0292167f95/1/Ou5vE-TaDy5DIqGnWqfn189xekI.mft
File: Ou5vE-TaDy5DIqGnWqfn189xekI.mft (raw, json)
Hash identifier: GUws6HIitMt1GvlCEkyBYp3wCKCBfCntiJRa7tZcEWQ=
Subject key identifier: 72:C0:FC:9D:D7:EF:AC:91:58:23:09:FB:EA:D4:DD:34:43:C2:A1:EF
Authority key identifier: 3A:EE:6F:13:E4:DA:0F:2E:43:22:A1:A7:5A:A7:E7:D7:CF:71:7A:42
Certificate issuer: /CN=3aee6f13e4da0f2e4322a1a75aa7e7d7cf717a42
Certificate serial: 019698CEDEDD50F643A1581E90981BDF9319
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Ou5vE-TaDy5DIqGnWqfn189xekI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/49/ba0b0e-7cea-4b9a-9b6d-0c0292167f95/1/Ou5vE-TaDy5DIqGnWqfn189xekI.mft
Manifest number: 151F
Signing time: Sun 04 May 2025 01:00:16 +0000
Manifest this update: Sun 04 May 2025 01:00:16 +0000
Manifest next update: Mon 05 May 2025 01:00:16 +0000
Files and hashes: 1: Ou5vE-TaDy5DIqGnWqfn189xekI.crl (hash: tgIVeI1jHs0rKjX0kTSVb6wSNWmOwRJMi+45vW6azs4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/49/ba0b0e-7cea-4b9a-9b6d-0c0292167f95/1/Ou5vE-TaDy5DIqGnWqfn189xekI.crl
rsync://rpki.ripe.net/repository/DEFAULT/49/ba0b0e-7cea-4b9a-9b6d-0c0292167f95/1/Ou5vE-TaDy5DIqGnWqfn189xekI.mft
rsync://rpki.ripe.net/repository/DEFAULT/Ou5vE-TaDy5DIqGnWqfn189xekI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 04 May 2025 19:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:98:ce:de:dd:50:f6:43:a1:58:1e:90:98:1b:df:93:19
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3aee6f13e4da0f2e4322a1a75aa7e7d7cf717a42
Validity
Not Before: May 4 01:00:16 2025 GMT
Not After : May 5 01:00:16 2025 GMT
Subject: CN=72c0fc9dd7efac91582309fbead4dd3443c2a1ef
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:91:f5:1c:b9:63:ec:32:38:1c:b4:5f:7c:f6:16:
f0:0b:f5:15:ec:3b:7a:9b:83:a3:1a:df:46:9a:b4:
f7:b4:c8:e1:92:da:73:cc:94:1a:7b:f3:bb:db:c6:
11:2f:65:2a:05:41:29:f0:d7:91:bc:88:c7:76:26:
c8:c9:75:60:53:69:83:fb:e3:56:d3:29:4b:8b:de:
4f:74:d2:8c:0b:2e:07:5a:b7:26:f2:50:78:0e:28:
e8:94:93:8c:dc:79:b3:c9:e7:c1:e3:2b:f2:41:fc:
d5:73:b0:04:aa:bc:a7:28:59:f2:6b:d6:f4:66:37:
7b:ad:77:b0:a9:78:40:5b:64:2c:f2:8e:ae:2b:1e:
33:32:82:56:ca:38:ff:c6:8e:fe:82:b3:1e:8a:d1:
a8:b7:96:c6:04:e9:40:c0:e1:80:47:38:d2:a0:b4:
af:79:ea:e4:36:5b:e5:94:fe:77:d0:4d:76:a7:8b:
d3:a1:6f:bb:d6:74:82:a0:59:76:de:48:1a:32:5a:
34:21:d4:be:d7:47:5d:14:c7:18:da:5f:4f:50:af:
16:4b:0e:05:ec:8c:a2:9b:71:4b:dd:6e:e7:c7:4c:
68:d6:bf:4a:53:59:dd:e7:79:0e:f8:c9:85:d7:9c:
4f:25:72:e0:b1:27:68:79:54:36:d3:8c:3e:7e:85:
19:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
72:C0:FC:9D:D7:EF:AC:91:58:23:09:FB:EA:D4:DD:34:43:C2:A1:EF
X509v3 Authority Key Identifier:
keyid:3A:EE:6F:13:E4:DA:0F:2E:43:22:A1:A7:5A:A7:E7:D7:CF:71:7A:42
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Ou5vE-TaDy5DIqGnWqfn189xekI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/49/ba0b0e-7cea-4b9a-9b6d-0c0292167f95/1/Ou5vE-TaDy5DIqGnWqfn189xekI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/49/ba0b0e-7cea-4b9a-9b6d-0c0292167f95/1/Ou5vE-TaDy5DIqGnWqfn189xekI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8a:f4:60:1f:0d:be:2e:0e:6c:c4:83:ed:70:39:93:59:b2:ae:
61:21:57:4f:35:84:cc:82:32:ee:96:77:32:93:09:9c:fd:2a:
77:c3:c7:28:17:54:30:29:1d:fd:dc:e9:d2:ce:58:b3:25:d8:
8d:3b:d6:78:8b:4f:61:25:5a:cc:7d:9d:ae:e6:f7:ef:28:95:
dc:ab:8b:60:16:13:7e:e6:b2:77:51:57:00:24:0a:d7:86:71:
8e:2c:61:5c:a4:f1:ed:49:33:21:24:ea:6b:30:e3:1c:58:fa:
33:0f:2f:d4:a2:c9:8f:53:98:a2:44:3e:14:86:ad:ff:f0:d7:
0c:a8:27:dd:30:59:cb:09:8d:c0:75:5e:f2:6d:8d:ec:56:d1:
0a:f1:26:1a:5d:50:62:c5:55:56:82:51:b7:4c:02:53:5c:15:
51:e8:42:d1:de:61:0c:25:c9:95:e2:55:3b:29:ef:32:56:47:
d2:71:ac:05:88:a7:dc:a6:0f:aa:68:55:20:a9:99:77:2d:4a:
24:d5:4a:da:f9:71:da:1a:dc:9d:31:5a:f8:50:19:d7:39:47:
46:25:b6:a3:7a:5a:67:c4:05:dc:7e:0e:64:3c:82:4a:14:2a:
a9:c5:3c:e5:a4:2c:d0:15:ef:50:51:ad:1c:1c:42:aa:fc:92:
54:a7:07:cd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 4 04:37:30 2025 by rpki-client