Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6c/9ad081-da5a-42a4-a430-1e67170dfbba/1/OlVdhNzX3bZAaRuUDHygl3KIocQ.mft
File: OlVdhNzX3bZAaRuUDHygl3KIocQ.mft (raw, json)
Hash identifier: 5CmMLmTGJVd2gTugw2ejpMJHniA5zi9qd4d31oVrcWs=
Subject key identifier: 9C:CA:FD:1D:52:C7:5A:6D:E1:FD:E1:17:FB:6D:5A:82:4D:34:2D:BD
Authority key identifier: 3A:55:5D:84:DC:D7:DD:B6:40:69:1B:94:0C:7C:A0:97:72:88:A1:C4
Certificate issuer: /CN=3a555d84dcd7ddb640691b940c7ca0977288a1c4
Certificate serial: 019677FB517F835C35450DD28423300AE83F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OlVdhNzX3bZAaRuUDHygl3KIocQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6c/9ad081-da5a-42a4-a430-1e67170dfbba/1/OlVdhNzX3bZAaRuUDHygl3KIocQ.mft
Manifest number: 082E
Signing time: Sun 27 Apr 2025 16:01:21 +0000
Manifest this update: Sun 27 Apr 2025 16:01:21 +0000
Manifest next update: Mon 28 Apr 2025 16:01:21 +0000
Files and hashes: 1: OlVdhNzX3bZAaRuUDHygl3KIocQ.crl (hash: 8TIMHGx/MAbASmli+nb5iF+0z3FyMoNyRUj+eGeVyjw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6c/9ad081-da5a-42a4-a430-1e67170dfbba/1/OlVdhNzX3bZAaRuUDHygl3KIocQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/6c/9ad081-da5a-42a4-a430-1e67170dfbba/1/OlVdhNzX3bZAaRuUDHygl3KIocQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/OlVdhNzX3bZAaRuUDHygl3KIocQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Apr 2025 14:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:77:fb:51:7f:83:5c:35:45:0d:d2:84:23:30:0a:e8:3f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3a555d84dcd7ddb640691b940c7ca0977288a1c4
Validity
Not Before: Apr 27 16:01:21 2025 GMT
Not After : Apr 28 16:01:21 2025 GMT
Subject: CN=9ccafd1d52c75a6de1fde117fb6d5a824d342dbd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e7:1c:09:bf:0d:c4:8b:1b:e8:f9:60:c8:9c:8a:
87:9f:db:01:e9:11:0f:ba:b1:99:eb:a4:e8:d1:66:
fa:3a:ce:77:f7:4d:7c:db:03:47:c4:6f:99:2b:c3:
9c:57:05:ae:a3:df:45:8e:c8:75:ad:9c:68:ce:25:
8c:05:ea:c1:c5:d1:dc:8e:ab:90:32:5a:ee:7e:14:
b6:fd:83:3c:a0:6e:70:ae:c2:0c:18:08:c8:93:e2:
46:6f:d3:9c:db:8c:1b:aa:8c:4b:a9:cc:b1:40:70:
8d:d8:7d:69:08:e0:d5:1a:ba:28:2e:25:f5:29:ca:
41:b1:d0:26:81:0b:59:1d:09:d8:8b:cc:9b:04:e6:
ea:01:b7:fb:0b:c5:63:98:20:58:6c:27:bf:d9:82:
51:b9:de:67:7a:b7:76:ee:04:b0:5f:01:86:41:4d:
c2:14:be:b6:f1:7e:1a:a5:e1:34:52:aa:81:89:b2:
1b:6a:dd:59:a5:7d:6d:68:be:b1:a2:8b:bd:69:22:
1a:a0:a9:5b:0b:58:69:ba:a2:07:f0:70:ed:9a:63:
be:d9:7c:8d:19:98:24:0b:f1:92:b6:26:d1:f3:d1:
ac:2f:60:63:b0:ca:2f:83:b6:05:d4:5c:cf:16:64:
37:70:3e:79:4d:66:43:23:ba:0d:bf:28:4b:76:db:
34:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9C:CA:FD:1D:52:C7:5A:6D:E1:FD:E1:17:FB:6D:5A:82:4D:34:2D:BD
X509v3 Authority Key Identifier:
keyid:3A:55:5D:84:DC:D7:DD:B6:40:69:1B:94:0C:7C:A0:97:72:88:A1:C4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OlVdhNzX3bZAaRuUDHygl3KIocQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6c/9ad081-da5a-42a4-a430-1e67170dfbba/1/OlVdhNzX3bZAaRuUDHygl3KIocQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6c/9ad081-da5a-42a4-a430-1e67170dfbba/1/OlVdhNzX3bZAaRuUDHygl3KIocQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8d:01:7e:e9:25:9e:d5:d8:f7:9f:ba:7c:22:83:a9:82:18:68:
08:cb:5f:39:51:cd:07:4a:9f:86:99:dd:1d:6b:b2:36:2f:02:
81:6e:7b:19:a4:5e:91:cf:c8:6b:30:8c:2f:8b:48:bb:c0:36:
27:b9:c5:1c:57:7d:79:a2:bc:dd:25:f8:e0:d9:fc:37:9f:7b:
08:01:59:f1:6f:26:33:de:29:cf:a1:07:87:3a:e8:44:31:ad:
11:56:bc:de:ad:b1:bc:b6:e0:59:f2:8d:7a:f6:79:8d:58:c8:
8f:d8:e1:2a:a5:53:20:28:22:5e:c7:21:c6:60:2d:93:04:17:
93:ce:4b:76:ce:71:70:6a:82:85:6e:15:1a:98:08:c0:06:b4:
77:94:28:13:6e:44:77:24:c4:8e:36:20:25:6a:ba:69:39:f0:
b0:27:91:6f:d9:73:6f:4f:a5:b3:d7:39:7e:14:84:85:76:dd:
72:24:8b:b1:ea:79:e1:d8:d0:e4:02:55:e9:72:00:21:8c:5d:
0c:44:cb:5a:b5:2a:9b:33:c6:f6:8d:33:3b:be:00:bf:3a:98:
22:83:1d:53:e9:df:93:10:1a:b2:99:30:10:87:43:b5:e0:df:
e2:1f:04:7a:d9:f0:bd:ff:23:de:52:99:e0:a3:13:f5:6c:2d:
bd:99:60:7d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 21:32:29 2025 by rpki-client