Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4e/c63c8d-d7c7-4e8c-b876-ffedf0ad0be3/1/oIRWvGXLSxVanmtLMW3VFOBDG2k.mft
File: oIRWvGXLSxVanmtLMW3VFOBDG2k.mft (raw, json)
Hash identifier: 1JdpBE587wB3nwZrJvHkITRl2/BY/R8tAfljkeD3MyQ=
Subject key identifier: 01:F8:35:47:63:7F:F6:B9:4B:D5:4E:D8:6A:40:F2:C3:94:29:1F:E6
Authority key identifier: A0:84:56:BC:65:CB:4B:15:5A:9E:6B:4B:31:6D:D5:14:E0:43:1B:69
Certificate issuer: /CN=a08456bc65cb4b155a9e6b4b316dd514e0431b69
Certificate serial: 019684DAB4C480CA0BDBD2682D660B0521C0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/oIRWvGXLSxVanmtLMW3VFOBDG2k.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4e/c63c8d-d7c7-4e8c-b876-ffedf0ad0be3/1/oIRWvGXLSxVanmtLMW3VFOBDG2k.mft
Manifest number: 0DD5
Signing time: Wed 30 Apr 2025 04:00:47 +0000
Manifest this update: Wed 30 Apr 2025 04:00:47 +0000
Manifest next update: Thu 01 May 2025 04:00:47 +0000
Files and hashes: 1: oIRWvGXLSxVanmtLMW3VFOBDG2k.crl (hash: gJhRDFyb1HfYxOZBmuMFfrsUWJ8AOzzz1oBkOgnwJHY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4e/c63c8d-d7c7-4e8c-b876-ffedf0ad0be3/1/oIRWvGXLSxVanmtLMW3VFOBDG2k.crl
rsync://rpki.ripe.net/repository/DEFAULT/4e/c63c8d-d7c7-4e8c-b876-ffedf0ad0be3/1/oIRWvGXLSxVanmtLMW3VFOBDG2k.mft
rsync://rpki.ripe.net/repository/DEFAULT/oIRWvGXLSxVanmtLMW3VFOBDG2k.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 01 May 2025 00:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:84:da:b4:c4:80:ca:0b:db:d2:68:2d:66:0b:05:21:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a08456bc65cb4b155a9e6b4b316dd514e0431b69
Validity
Not Before: Apr 30 04:00:47 2025 GMT
Not After : May 1 04:00:47 2025 GMT
Subject: CN=01f83547637ff6b94bd54ed86a40f2c394291fe6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:5c:79:1a:37:70:ae:5b:67:2a:94:5f:b3:70:
c9:f1:69:a3:b6:4f:f8:d5:b1:c3:dd:6c:17:6d:b8:
2e:af:7a:e8:e5:aa:ba:90:0f:b1:b6:12:4f:4f:5f:
1d:ae:66:c6:21:64:5c:c7:47:4e:f7:0e:5d:19:ad:
bf:d3:a3:69:74:15:82:29:d8:ec:a4:2d:55:fb:56:
74:17:8d:6f:af:ac:9c:3b:c7:8a:c7:e4:ba:54:95:
0a:25:4e:d6:c7:f8:98:d3:ba:55:e7:c0:c1:1c:34:
e6:e2:00:91:9b:52:3d:cd:75:38:76:56:29:91:07:
ad:c7:9e:09:08:63:ea:8c:ba:b9:1e:13:39:e9:71:
42:df:2a:a1:30:20:7e:9d:41:d3:4d:df:16:07:c0:
57:90:8c:36:e9:b1:36:f7:54:05:7a:ee:f3:43:09:
48:82:5b:3a:df:ca:8d:df:06:48:49:0b:bb:b9:68:
85:4e:c2:3b:17:da:c9:de:74:29:cf:b6:30:55:c8:
90:2b:09:08:86:8a:f2:83:9d:37:d1:32:46:f9:f4:
9e:93:62:1c:13:6f:60:dc:06:01:99:67:d7:eb:51:
2a:a2:d9:15:99:50:80:d8:44:9f:5a:f2:cf:43:77:
55:91:1c:5f:98:17:e4:52:7d:c5:c7:7a:16:2f:47:
cb:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
01:F8:35:47:63:7F:F6:B9:4B:D5:4E:D8:6A:40:F2:C3:94:29:1F:E6
X509v3 Authority Key Identifier:
keyid:A0:84:56:BC:65:CB:4B:15:5A:9E:6B:4B:31:6D:D5:14:E0:43:1B:69
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/oIRWvGXLSxVanmtLMW3VFOBDG2k.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/c63c8d-d7c7-4e8c-b876-ffedf0ad0be3/1/oIRWvGXLSxVanmtLMW3VFOBDG2k.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/c63c8d-d7c7-4e8c-b876-ffedf0ad0be3/1/oIRWvGXLSxVanmtLMW3VFOBDG2k.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3f:7d:22:b2:07:6e:ef:80:9d:d7:ce:b9:af:bf:98:01:dc:90:
d0:ac:d3:7d:66:ed:9e:06:a9:f4:d3:bf:f2:5e:8a:e8:05:b9:
14:f4:9d:4e:96:17:41:61:4d:25:d7:80:48:b1:0c:c1:84:35:
51:77:f4:f2:db:48:5f:82:c9:fd:1d:c1:89:94:bb:46:bc:76:
6f:91:d3:4b:23:bf:ad:02:68:94:e5:45:ca:d1:08:a8:a2:df:
ee:eb:2e:4d:da:48:b4:61:e9:0e:7e:14:e8:83:71:17:a9:d0:
34:2d:4e:52:03:7a:64:aa:2b:0a:67:ec:52:ec:f2:3b:b9:d5:
0c:5d:60:02:bd:80:7d:50:bc:f4:61:c4:8d:bb:38:94:23:5d:
5b:00:a3:62:c2:cf:26:c9:7a:9b:3b:4e:bf:84:96:88:c0:fc:
99:78:4b:44:3a:ba:f6:58:7c:62:b0:e0:58:70:74:3e:ee:af:
49:73:36:cc:e0:f5:87:fd:1b:8e:b7:9d:77:ad:b3:93:28:0b:
51:33:00:af:90:3a:2b:bd:97:41:b1:8b:14:66:2f:c0:48:36:
7a:cf:6f:83:c4:1e:67:08:d9:40:f5:67:02:32:65:1f:9c:2d:
86:6b:e2:ac:b7:44:3f:13:e6:d6:2b:30:e7:4e:5f:60:5a:2e:
5c:53:f0:cf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 30 08:14:15 2025 by rpki-client