
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6d/483093-36db-4043-b6d6-762259ab9500/1/ovrHXzkOiAUoM33Qvc3HeTS43zw.mft
File: ovrHXzkOiAUoM33Qvc3HeTS43zw.mft (raw, json)
Hash identifier: EhepiAz99d8pOnnlrhyxVLZv+GOAukiCETz7z7A6iQ4=
Subject key identifier: 55:28:C5:61:FC:23:AE:8C:05:B2:9B:E1:0C:73:69:79:AE:99:00:90
Authority key identifier: A2:FA:C7:5F:39:0E:88:05:28:33:7D:D0:BD:CD:C7:79:34:B8:DF:3C
Certificate issuer: /CN=a2fac75f390e880528337dd0bdcdc77934b8df3c
Certificate serial: 01968BB7FFAEEC32FC6F51ADAE6E530B92B5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ovrHXzkOiAUoM33Qvc3HeTS43zw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6d/483093-36db-4043-b6d6-762259ab9500/1/ovrHXzkOiAUoM33Qvc3HeTS43zw.mft
Manifest number: 1518
Signing time: Thu 01 May 2025 12:00:13 +0000
Manifest this update: Thu 01 May 2025 12:00:13 +0000
Manifest next update: Fri 02 May 2025 12:00:13 +0000
Files and hashes: 1: ovrHXzkOiAUoM33Qvc3HeTS43zw.crl (hash: lQnbwXFcVmyCObaL3VEaTbMgwJS54nheh3rQI/94E9A=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6d/483093-36db-4043-b6d6-762259ab9500/1/ovrHXzkOiAUoM33Qvc3HeTS43zw.crl
rsync://rpki.ripe.net/repository/DEFAULT/6d/483093-36db-4043-b6d6-762259ab9500/1/ovrHXzkOiAUoM33Qvc3HeTS43zw.mft
rsync://rpki.ripe.net/repository/DEFAULT/ovrHXzkOiAUoM33Qvc3HeTS43zw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 02 May 2025 12:00:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:8b:b7:ff:ae:ec:32:fc:6f:51:ad:ae:6e:53:0b:92:b5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a2fac75f390e880528337dd0bdcdc77934b8df3c
Validity
Not Before: May 1 12:00:13 2025 GMT
Not After : May 2 12:00:13 2025 GMT
Subject: CN=5528c561fc23ae8c05b29be10c736979ae990090
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:a7:14:76:28:cb:55:72:d2:77:6b:58:26:5f:
e2:46:9e:4e:58:98:ea:68:db:34:84:58:4a:41:ec:
3a:0c:09:27:87:ba:22:87:cc:54:b7:63:03:95:b3:
c1:c3:77:98:b3:66:50:f0:aa:f1:1d:86:c5:89:47:
1f:50:e6:5c:3b:b9:81:04:6a:d1:8f:bc:41:a5:79:
6b:1e:92:88:76:81:2b:b4:5c:aa:39:2e:5e:42:0b:
7e:67:97:c0:c3:22:af:39:bf:3e:fa:f2:b1:e2:cf:
91:bd:e4:2e:7a:af:b4:8c:64:c6:7b:ae:21:5c:d6:
74:bb:ad:07:48:e4:cc:60:65:bd:a4:83:a8:6c:f1:
47:0c:c8:bd:53:f7:f8:35:a3:86:f4:03:19:86:3c:
34:b2:19:28:b6:7f:19:ba:26:fa:14:d9:0f:f9:7b:
d4:3c:e6:89:ef:91:41:ec:30:3c:54:b8:2e:c5:71:
e7:51:c6:88:41:4f:6f:32:e9:b5:6b:27:76:d0:35:
4a:3c:28:aa:e5:45:78:09:ae:b6:e4:c6:d7:52:06:
90:e7:54:38:d5:c2:62:90:11:fa:0a:32:18:18:1f:
25:d1:a9:ef:6d:43:b7:f5:24:d6:e8:ad:32:74:52:
35:62:7a:b9:7c:5d:3d:74:64:39:17:7e:97:64:aa:
e9:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
55:28:C5:61:FC:23:AE:8C:05:B2:9B:E1:0C:73:69:79:AE:99:00:90
X509v3 Authority Key Identifier:
keyid:A2:FA:C7:5F:39:0E:88:05:28:33:7D:D0:BD:CD:C7:79:34:B8:DF:3C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ovrHXzkOiAUoM33Qvc3HeTS43zw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6d/483093-36db-4043-b6d6-762259ab9500/1/ovrHXzkOiAUoM33Qvc3HeTS43zw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6d/483093-36db-4043-b6d6-762259ab9500/1/ovrHXzkOiAUoM33Qvc3HeTS43zw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
46:26:b7:76:f7:b0:b9:33:aa:88:49:e2:d7:6a:96:a3:9d:88:
d7:db:4f:57:24:1f:94:26:97:61:8e:63:57:c8:54:40:e9:26:
64:7a:e2:e8:ae:5e:0e:da:b7:c0:67:d4:6d:29:91:56:7d:d5:
09:fb:5e:d8:34:c2:09:73:a6:f5:35:c6:dd:cb:0f:58:d6:93:
a0:c1:54:a0:ce:37:48:9f:d8:4d:54:cd:1a:2e:ce:24:95:d1:
56:e2:bb:00:7e:1b:ca:75:a0:1a:50:96:b5:6f:37:3f:45:bb:
e7:9c:98:80:e9:e1:b8:29:ba:87:96:4f:10:2f:27:e8:27:e6:
d0:19:64:cd:fc:c8:d6:aa:bc:b8:32:15:40:34:e6:b4:64:6f:
32:c2:44:16:ac:ca:2d:91:45:3a:79:c6:4f:8a:e2:3b:fb:05:
4b:57:f8:d5:3d:b8:17:1f:e9:b1:fd:79:80:9d:9f:89:32:95:
c7:c3:5d:55:6e:24:d2:03:ad:71:9c:cf:ab:3f:bd:4a:b0:05:
0f:00:53:fa:0f:72:de:c2:28:a2:d2:cf:9b:e0:f6:0d:75:45:
8d:4a:bd:3a:3c:69:37:d2:5b:4e:7f:fe:b8:91:7e:30:3b:d1:
ed:0b:37:50:ff:75:00:7d:19:02:7c:8d:8a:b6:6c:05:43:4d:
3d:48:ad:90
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 1 20:10:31 2025 by rpki-client