Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/66/dffa9b-1d69-4869-9dc4-867d1d877140/1/oKhjHm5aesZtpPsWD9W0_Kk3iAU.mft
File: oKhjHm5aesZtpPsWD9W0_Kk3iAU.mft (raw, json)
Hash identifier: v84Dd5N226u1+xTjapaLfIdb8LOhmg/jXpRC7pCfqk4=
Subject key identifier: 5A:DD:7B:59:70:67:E4:6A:42:FF:6C:1A:FE:F4:33:73:14:7A:E1:89
Authority key identifier: A0:A8:63:1E:6E:5A:7A:C6:6D:A4:FB:16:0F:D5:B4:FC:A9:37:88:05
Certificate issuer: /CN=a0a8631e6e5a7ac66da4fb160fd5b4fca9378805
Certificate serial: 01967FEAF94089C55F9C93A1EEEAADD4C6E4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/oKhjHm5aesZtpPsWD9W0_Kk3iAU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/66/dffa9b-1d69-4869-9dc4-867d1d877140/1/oKhjHm5aesZtpPsWD9W0_Kk3iAU.mft
Manifest number: 151C
Signing time: Tue 29 Apr 2025 05:00:27 +0000
Manifest this update: Tue 29 Apr 2025 05:00:27 +0000
Manifest next update: Wed 30 Apr 2025 05:00:27 +0000
Files and hashes: 1: oKhjHm5aesZtpPsWD9W0_Kk3iAU.crl (hash: 7QfvY7/IXF8zNM+j1zdnCynI8VOSG0USjxpnnQ3daRs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/66/dffa9b-1d69-4869-9dc4-867d1d877140/1/oKhjHm5aesZtpPsWD9W0_Kk3iAU.crl
rsync://rpki.ripe.net/repository/DEFAULT/66/dffa9b-1d69-4869-9dc4-867d1d877140/1/oKhjHm5aesZtpPsWD9W0_Kk3iAU.mft
rsync://rpki.ripe.net/repository/DEFAULT/oKhjHm5aesZtpPsWD9W0_Kk3iAU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 30 Apr 2025 00:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:7f:ea:f9:40:89:c5:5f:9c:93:a1:ee:ea:ad:d4:c6:e4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a0a8631e6e5a7ac66da4fb160fd5b4fca9378805
Validity
Not Before: Apr 29 05:00:27 2025 GMT
Not After : Apr 30 05:00:27 2025 GMT
Subject: CN=5add7b597067e46a42ff6c1afef43373147ae189
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:90:5e:92:de:f0:5c:e2:ea:5c:dc:2e:2b:5d:
5d:72:5d:f1:03:75:ba:e9:5e:5e:bd:2a:25:60:5e:
a5:26:2f:22:54:ad:dc:a0:eb:17:af:53:29:b6:5b:
b6:68:5f:61:f0:65:e4:3c:21:cd:80:01:1e:ee:b1:
63:91:b7:44:48:70:25:9f:65:87:76:eb:f6:b1:af:
5f:7a:eb:35:05:71:38:83:61:ec:72:09:f2:e2:b6:
61:25:2b:e4:4f:00:f5:83:fe:c3:13:8a:d1:ec:0b:
90:89:db:7f:3d:d0:9c:89:cc:cd:b0:20:cf:20:e9:
ed:a7:5c:44:e1:81:ee:98:9d:f7:09:6b:28:ce:19:
d3:c9:4d:1d:b2:95:9f:c5:74:55:0d:eb:4c:8a:33:
f3:3e:11:93:d7:3c:3d:e6:44:af:9f:5c:cb:a6:27:
11:5c:44:95:33:50:c1:7e:88:33:3e:d9:81:37:1d:
1e:27:ee:23:6a:cb:1c:9d:69:00:bd:e3:ed:6b:c1:
20:6a:6f:b2:9d:ff:d1:64:7d:13:16:b1:05:dd:6c:
c0:0a:c2:05:fe:18:d1:7e:c3:80:cd:fb:f9:85:60:
67:a4:2b:3e:61:b9:a9:38:43:0f:66:6c:5e:4d:ab:
21:5d:38:f7:ef:53:1c:f6:f6:42:93:f1:20:23:76:
98:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5A:DD:7B:59:70:67:E4:6A:42:FF:6C:1A:FE:F4:33:73:14:7A:E1:89
X509v3 Authority Key Identifier:
keyid:A0:A8:63:1E:6E:5A:7A:C6:6D:A4:FB:16:0F:D5:B4:FC:A9:37:88:05
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/oKhjHm5aesZtpPsWD9W0_Kk3iAU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/66/dffa9b-1d69-4869-9dc4-867d1d877140/1/oKhjHm5aesZtpPsWD9W0_Kk3iAU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/66/dffa9b-1d69-4869-9dc4-867d1d877140/1/oKhjHm5aesZtpPsWD9W0_Kk3iAU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
86:74:52:92:5a:2e:33:93:4e:f3:59:a0:54:cf:f7:44:9f:85:
70:13:a6:f9:80:e6:98:2b:fc:72:fd:69:66:ec:7d:27:bd:26:
bd:d2:2f:7f:5d:f6:a0:8e:a3:5f:6e:8e:18:60:3f:49:5b:ff:
ea:77:d5:bc:25:97:e3:1c:96:2b:e8:ae:dd:e8:67:f6:ac:1d:
b0:09:28:ea:e3:44:5a:c6:80:91:f1:84:44:68:0f:69:84:ec:
89:bb:b3:8b:9c:f7:52:f5:16:50:a5:00:7e:fa:41:47:14:4f:
8a:13:82:14:bf:f4:78:4f:8e:6f:d6:c6:72:03:a0:d6:49:d6:
c6:bb:5d:cc:40:95:45:c0:c4:df:1a:83:c8:f5:49:c5:c9:7f:
ca:40:5e:3c:11:01:4b:20:a0:da:22:2c:82:8e:98:78:34:43:
63:02:9f:fa:29:41:c2:0b:b1:9d:a2:0c:87:38:d9:db:87:dc:
26:f8:30:a5:fd:65:f9:6e:1c:4f:22:5d:46:4a:ec:84:d4:64:
14:1a:fa:8d:88:1f:18:04:c1:89:c0:52:5c:a5:6a:4a:2a:13:
80:a1:7e:68:e5:41:85:11:bc:e2:95:c7:38:d6:e6:89:16:9a:
28:f0:85:78:1a:5d:28:00:47:11:a7:eb:ef:1d:c8:50:21:eb:
d5:4b:b8:9e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 29 07:16:55 2025 by rpki-client