
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/69/11d198-854f-4883-ab90-ca41b33b883a/1/oWhu-kcXfglRrIjFZNj4hQvuxdA.mft
File: oWhu-kcXfglRrIjFZNj4hQvuxdA.mft (raw, json)
Hash identifier: P/9fp3qzVzia1k6sf64Baj95ZKUl5pXNeOhjZvHWYfg=
Subject key identifier: 38:C9:2D:99:68:9A:1A:92:EC:23:FC:21:08:32:C9:FF:63:55:2E:4C
Authority key identifier: A1:68:6E:FA:47:17:7E:09:51:AC:88:C5:64:D8:F8:85:0B:EE:C5:D0
Certificate issuer: /CN=a1686efa47177e0951ac88c564d8f8850beec5d0
Certificate serial: 01968BEF7B749F46853E4DB2EB3B0614FF94
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/oWhu-kcXfglRrIjFZNj4hQvuxdA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/69/11d198-854f-4883-ab90-ca41b33b883a/1/oWhu-kcXfglRrIjFZNj4hQvuxdA.mft
Manifest number: 0BAA
Signing time: Thu 01 May 2025 13:00:49 +0000
Manifest this update: Thu 01 May 2025 13:00:49 +0000
Manifest next update: Fri 02 May 2025 13:00:49 +0000
Files and hashes: 1: oWhu-kcXfglRrIjFZNj4hQvuxdA.crl (hash: wiIkBuUKE5G3NyXaarqb9XoyK2pNN0U6xKKKYyMrTRw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/69/11d198-854f-4883-ab90-ca41b33b883a/1/oWhu-kcXfglRrIjFZNj4hQvuxdA.crl
rsync://rpki.ripe.net/repository/DEFAULT/69/11d198-854f-4883-ab90-ca41b33b883a/1/oWhu-kcXfglRrIjFZNj4hQvuxdA.mft
rsync://rpki.ripe.net/repository/DEFAULT/oWhu-kcXfglRrIjFZNj4hQvuxdA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 02 May 2025 13:00:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:8b:ef:7b:74:9f:46:85:3e:4d:b2:eb:3b:06:14:ff:94
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a1686efa47177e0951ac88c564d8f8850beec5d0
Validity
Not Before: May 1 13:00:49 2025 GMT
Not After : May 2 13:00:49 2025 GMT
Subject: CN=38c92d99689a1a92ec23fc210832c9ff63552e4c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:fa:6e:01:c8:3b:6e:89:75:d7:e1:92:03:bb:
2f:f4:d9:fb:94:19:1d:70:e1:73:0a:71:a3:08:50:
d7:20:b2:7f:39:de:4e:ee:af:b5:1e:22:8c:4c:d6:
eb:bc:47:95:21:5b:c2:e4:38:3e:d8:e0:bb:13:7e:
91:01:55:1a:aa:2e:0a:2a:dd:34:37:fe:f2:59:0d:
ae:ab:fa:71:e6:30:55:ee:c7:46:5e:65:85:67:24:
25:ef:c7:07:85:b1:06:c4:63:1e:a8:57:b0:4b:72:
d1:4a:c1:88:f3:66:aa:8c:e7:52:8c:1b:39:46:1e:
fd:9f:0f:7c:56:a7:23:4c:c4:70:6d:68:41:a0:10:
ae:1b:fd:d1:e7:a6:d3:0e:16:51:f2:94:1d:16:7f:
c5:b6:ec:9e:d0:b9:68:28:74:63:17:f4:88:b7:db:
fd:3e:3e:a8:75:8d:7b:1a:15:79:8d:25:4b:74:94:
ea:5c:21:27:20:f6:03:f2:49:60:9c:d2:ee:d3:ee:
81:e3:7e:e4:6d:be:53:6e:8f:81:19:48:c2:b6:03:
fb:95:3e:c8:8a:85:dd:f2:f5:90:f6:01:e6:7b:a3:
9b:2d:11:f6:aa:23:dd:97:e4:56:01:75:b6:30:9d:
64:2a:ea:67:33:f1:86:77:0c:2a:0f:23:7a:6b:f7:
6f:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
38:C9:2D:99:68:9A:1A:92:EC:23:FC:21:08:32:C9:FF:63:55:2E:4C
X509v3 Authority Key Identifier:
keyid:A1:68:6E:FA:47:17:7E:09:51:AC:88:C5:64:D8:F8:85:0B:EE:C5:D0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/oWhu-kcXfglRrIjFZNj4hQvuxdA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/69/11d198-854f-4883-ab90-ca41b33b883a/1/oWhu-kcXfglRrIjFZNj4hQvuxdA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/69/11d198-854f-4883-ab90-ca41b33b883a/1/oWhu-kcXfglRrIjFZNj4hQvuxdA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6a:ee:71:c9:9e:de:5e:91:8d:88:04:fd:9d:f6:9c:54:31:ec:
5b:1f:0e:8d:97:94:c2:28:8c:0d:2e:55:13:28:c1:a0:32:15:
98:6d:7d:34:fb:81:a4:96:29:a8:b5:4c:56:24:80:71:9c:61:
e5:1c:55:bd:e4:92:12:c1:13:e9:18:ed:03:28:c0:5e:b2:58:
ad:b3:47:b5:f9:71:6a:35:a0:43:6f:e1:8e:ec:90:79:55:c0:
19:62:73:bf:87:b8:34:c6:99:f5:c2:56:35:18:60:db:08:22:
0b:d4:17:fe:9d:71:30:6a:e3:7a:a6:51:56:32:b6:29:0c:22:
35:8b:41:da:b5:22:6a:61:2b:34:bf:d4:8e:af:41:84:6f:f9:
d6:99:e3:e8:17:33:39:13:97:01:cc:91:18:97:62:a0:14:8c:
2f:fd:fe:be:f5:4e:45:8e:63:a7:31:c7:cd:e1:c2:66:e6:d3:
76:b6:8e:af:08:30:f0:87:9d:51:56:cd:a8:cb:af:32:0b:a1:
cd:d1:8d:5e:2e:75:45:3a:61:79:0a:c0:8b:d9:ab:82:b2:4e:
53:ae:2c:fb:e8:b2:21:15:d5:f5:b4:63:14:80:96:aa:d2:0f:
2f:a3:ed:fd:40:f4:d8:6c:ec:9c:74:bd:40:b7:85:64:bc:93:
fb:e8:2b:6b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 1 21:03:42 2025 by rpki-client