Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6f/3fa411-af98-4af8-b5b8-50e22ab71f84/1/OeHApbBM1BmsHvkjvI1lcDIwYdo.mft
File: OeHApbBM1BmsHvkjvI1lcDIwYdo.mft (raw, json)
Hash identifier: XOeVVzG1SxWYBQVMvxnhUSAooIOKhOW897vkgKWTEc4=
Subject key identifier: B7:9B:0A:13:E7:4A:AC:AD:39:E7:62:4A:D3:05:16:41:50:4F:03:2C
Authority key identifier: 39:E1:C0:A5:B0:4C:D4:19:AC:1E:F9:23:BC:8D:65:70:32:30:61:DA
Certificate issuer: /CN=39e1c0a5b04cd419ac1ef923bc8d6570323061da
Certificate serial: 01967BD8342DFEAA135F2217ABA7175F2935
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OeHApbBM1BmsHvkjvI1lcDIwYdo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6f/3fa411-af98-4af8-b5b8-50e22ab71f84/1/OeHApbBM1BmsHvkjvI1lcDIwYdo.mft
Manifest number: 150D
Signing time: Mon 28 Apr 2025 10:01:28 +0000
Manifest this update: Mon 28 Apr 2025 10:01:28 +0000
Manifest next update: Tue 29 Apr 2025 10:01:28 +0000
Files and hashes: 1: OeHApbBM1BmsHvkjvI1lcDIwYdo.crl (hash: xTYdlfe5wRT+5bkr1DHwsgGdjyX0QBH9vMThKqSEszo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6f/3fa411-af98-4af8-b5b8-50e22ab71f84/1/OeHApbBM1BmsHvkjvI1lcDIwYdo.crl
rsync://rpki.ripe.net/repository/DEFAULT/6f/3fa411-af98-4af8-b5b8-50e22ab71f84/1/OeHApbBM1BmsHvkjvI1lcDIwYdo.mft
rsync://rpki.ripe.net/repository/DEFAULT/OeHApbBM1BmsHvkjvI1lcDIwYdo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 29 Apr 2025 10:01:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:7b:d8:34:2d:fe:aa:13:5f:22:17:ab:a7:17:5f:29:35
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=39e1c0a5b04cd419ac1ef923bc8d6570323061da
Validity
Not Before: Apr 28 10:01:28 2025 GMT
Not After : Apr 29 10:01:28 2025 GMT
Subject: CN=b79b0a13e74aacad39e7624ad3051641504f032c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e0:a3:c8:46:a4:96:79:3e:31:a0:b0:32:2a:7b:
ac:cd:91:8a:46:05:87:16:64:60:5d:9c:e3:ce:0a:
e5:48:a9:1b:64:4e:6c:c1:59:cb:f2:c9:a1:df:2c:
46:50:13:44:f9:59:7f:ff:22:a0:9a:b8:fd:91:5f:
5d:29:1e:20:fc:bb:f3:f9:e0:b5:49:df:b6:e0:79:
5b:f4:ba:38:2a:5f:a2:68:69:3e:eb:37:98:76:9c:
ba:33:58:7d:cb:92:43:ff:9b:cc:d5:41:9b:8c:80:
0d:22:6b:5f:55:8a:23:79:84:ce:9b:b2:7e:49:5c:
52:96:d9:26:c5:d2:9f:cc:e7:b8:11:4c:3a:59:ad:
d6:78:85:fb:8e:e2:ce:5b:fe:cd:39:68:9c:43:cd:
4f:38:42:9d:89:63:45:6d:6b:d5:e2:eb:7d:87:67:
79:3d:6b:26:88:a1:46:03:37:59:ca:e7:25:54:b8:
17:34:e8:04:3b:75:9a:cf:9e:4a:b9:6f:32:1e:10:
35:10:e1:32:71:87:4e:fa:f4:51:0a:dd:46:2e:54:
10:52:ed:23:b6:26:e0:8d:06:5e:d8:1f:bd:9f:f9:
e9:ca:07:58:8b:25:b9:d1:90:19:c5:51:ce:34:58:
23:29:3b:fd:e8:f5:d1:b5:13:14:59:11:a1:74:6a:
2a:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B7:9B:0A:13:E7:4A:AC:AD:39:E7:62:4A:D3:05:16:41:50:4F:03:2C
X509v3 Authority Key Identifier:
keyid:39:E1:C0:A5:B0:4C:D4:19:AC:1E:F9:23:BC:8D:65:70:32:30:61:DA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OeHApbBM1BmsHvkjvI1lcDIwYdo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6f/3fa411-af98-4af8-b5b8-50e22ab71f84/1/OeHApbBM1BmsHvkjvI1lcDIwYdo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6f/3fa411-af98-4af8-b5b8-50e22ab71f84/1/OeHApbBM1BmsHvkjvI1lcDIwYdo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
39:88:05:ba:95:91:18:66:e0:a5:f7:5b:90:4c:73:b9:e3:2d:
b3:75:84:00:1f:da:6f:da:86:0b:33:3d:5c:9a:2c:e9:91:ac:
ca:e5:9f:14:4f:5b:a1:c4:26:9e:3b:ee:ad:5c:3d:d0:c7:9d:
81:79:32:f8:bf:36:0b:f3:5b:f7:1a:17:5b:65:00:8c:25:4c:
2c:ab:a2:ac:26:b0:07:65:47:00:12:d7:58:57:71:93:6e:1a:
dd:11:aa:66:ba:97:9d:0a:4c:1a:85:75:5a:55:ac:90:67:ea:
17:68:b4:79:87:e1:55:15:3f:d2:c3:15:08:79:42:b0:01:36:
82:bc:e8:89:56:ce:4f:7f:a7:01:a8:2f:36:dd:b2:8f:ff:ca:
76:42:f8:3f:02:0b:bc:cf:a7:da:39:2c:b9:00:56:bf:3b:77:
2e:fb:f6:27:1a:d7:fd:a5:b5:04:0c:8a:6e:4c:7a:85:80:7c:
3f:56:9b:7b:20:00:9a:ed:75:00:ea:f3:8c:d7:d8:da:f1:07:
9a:62:ec:87:61:b0:45:91:c3:e2:aa:a3:f5:31:92:b3:df:f8:
62:16:9a:02:c9:78:46:49:cb:4a:88:e9:f0:45:fa:05:7f:b3:
ab:fb:42:76:a9:13:a2:57:d4:26:f9:81:c7:a5:9f:bd:66:d5:
1b:09:33:69
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 16:24:56 2025 by rpki-client