Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5b/a388b6-43c6-4458-abf5-d3332f9044ec/1/oy2niZiHqsRJlYu5DrU1lRqXOgA.mft
File: oy2niZiHqsRJlYu5DrU1lRqXOgA.mft (raw, json)
Hash identifier: lCDTpxfGPrjdQbOwpZrHP0YRy584SvX0c35+F6DN/mY=
Subject key identifier: C2:C2:62:86:DC:AF:79:89:82:23:2A:33:51:66:95:1F:0A:EC:1E:BC
Authority key identifier: A3:2D:A7:89:98:87:AA:C4:49:95:8B:B9:0E:B5:35:95:1A:97:3A:00
Certificate issuer: /CN=a32da7899887aac449958bb90eb535951a973a00
Certificate serial: 0196AFFB88A0114F510E391DB52BF7D78199
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/oy2niZiHqsRJlYu5DrU1lRqXOgA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5b/a388b6-43c6-4458-abf5-d3332f9044ec/1/oy2niZiHqsRJlYu5DrU1lRqXOgA.mft
Manifest number: 0E2C
Signing time: Thu 08 May 2025 13:00:19 +0000
Manifest this update: Thu 08 May 2025 13:00:19 +0000
Manifest next update: Fri 09 May 2025 13:00:19 +0000
Files and hashes: 1: oy2niZiHqsRJlYu5DrU1lRqXOgA.crl (hash: YGjrWLQCeBBPo2wZTZ0zjaeyoDc28cvQO3FxXk/1ofc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5b/a388b6-43c6-4458-abf5-d3332f9044ec/1/oy2niZiHqsRJlYu5DrU1lRqXOgA.crl
rsync://rpki.ripe.net/repository/DEFAULT/5b/a388b6-43c6-4458-abf5-d3332f9044ec/1/oy2niZiHqsRJlYu5DrU1lRqXOgA.mft
rsync://rpki.ripe.net/repository/DEFAULT/oy2niZiHqsRJlYu5DrU1lRqXOgA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 09 May 2025 07:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:af:fb:88:a0:11:4f:51:0e:39:1d:b5:2b:f7:d7:81:99
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a32da7899887aac449958bb90eb535951a973a00
Validity
Not Before: May 8 13:00:19 2025 GMT
Not After : May 9 13:00:19 2025 GMT
Subject: CN=c2c26286dcaf798982232a335166951f0aec1ebc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:84:77:ee:8a:81:48:43:dd:e1:78:ac:5c:10:
25:3e:d1:ae:32:07:c3:e6:91:b5:2b:44:d3:84:f1:
91:34:d0:70:9c:4f:ef:5d:d6:df:2b:e1:f9:1e:3e:
a3:d9:01:cc:e7:42:8a:b3:c8:3f:1b:79:e6:ff:26:
99:6b:98:f7:ab:e6:61:5c:fd:49:06:8c:bd:12:dc:
d8:3c:e0:7d:a7:5a:ba:46:7a:92:16:b4:76:b6:31:
eb:12:bf:c5:21:da:1f:01:53:22:71:ae:c8:a6:4b:
89:76:d1:55:ad:71:1f:48:59:42:6e:48:02:16:4e:
95:06:66:4f:08:15:c6:a9:67:c5:a8:57:41:43:f2:
7b:41:c6:eb:8a:5e:b7:9d:ba:5d:2d:23:40:41:fb:
d7:2e:80:32:95:f5:14:ba:e4:e4:51:94:cb:cc:46:
82:f8:38:79:82:92:40:3d:69:0d:e8:90:a9:f1:69:
3f:64:f6:7e:4c:60:1d:6f:3e:2d:15:7a:df:75:6d:
9d:01:30:95:b9:be:ab:53:b7:2e:aa:2c:58:52:65:
e1:74:05:2a:bb:70:4d:4c:f9:28:c9:7f:2c:a8:ee:
32:14:9f:95:6d:3b:02:f4:8e:ba:ef:35:5f:fc:64:
bf:d9:48:0d:1b:a4:f9:da:b8:1a:1a:f1:e9:3e:79:
18:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C2:C2:62:86:DC:AF:79:89:82:23:2A:33:51:66:95:1F:0A:EC:1E:BC
X509v3 Authority Key Identifier:
keyid:A3:2D:A7:89:98:87:AA:C4:49:95:8B:B9:0E:B5:35:95:1A:97:3A:00
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/oy2niZiHqsRJlYu5DrU1lRqXOgA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/a388b6-43c6-4458-abf5-d3332f9044ec/1/oy2niZiHqsRJlYu5DrU1lRqXOgA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/a388b6-43c6-4458-abf5-d3332f9044ec/1/oy2niZiHqsRJlYu5DrU1lRqXOgA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
13:0f:85:e5:0b:42:e9:2d:a9:b5:e4:d6:15:03:5b:e3:de:6c:
81:68:99:8e:24:1f:6f:e1:23:ac:ce:dc:39:8c:bc:a0:12:20:
6a:cc:39:67:8e:14:ba:83:6e:ee:a6:3e:26:b3:7a:6e:b1:e8:
52:25:ac:4a:0c:ea:ef:6a:f9:7d:2c:b6:f2:97:9a:06:44:f4:
72:83:bd:dc:5c:57:42:08:8b:6f:2f:f2:97:5a:85:f6:32:ff:
17:d9:b3:8a:19:e2:c6:78:dd:b8:31:ff:c8:ab:f1:d3:8d:97:
45:62:e6:e4:58:8b:7f:5d:6a:15:58:f2:da:30:f1:ad:74:fe:
ce:f0:9a:2c:8a:96:9c:db:63:c3:4b:8b:55:b4:4e:71:38:a0:
57:9b:8c:21:0a:85:60:dc:b4:0d:d4:ea:f4:c7:f8:1a:cb:e1:
2d:39:3d:1f:15:42:0c:91:f4:d2:fa:ce:5e:04:66:f5:49:63:
46:11:95:69:0f:2a:56:7a:62:d9:2f:eb:18:4c:4c:25:e2:80:
e5:1e:26:e6:c4:d8:58:80:5d:4c:db:ac:bd:33:a6:a1:34:6e:
c0:d5:18:36:79:ff:10:4a:bd:23:fa:8f:0a:3c:56:04:b2:14:
a7:2e:b3:df:00:a7:9e:bb:8e:28:be:2c:c7:e8:cf:2e:e6:82:
5b:76:c3:f2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 8 15:29:07 2025 by rpki-client