
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7b/20119f-2d27-4c1b-badc-41e4cdcfbd5a/1/oU6-xYG-93sycD2LRtMnjBkaKz0.mft
File: oU6-xYG-93sycD2LRtMnjBkaKz0.mft (raw, json)
Hash identifier: sCfi67PSVIHs1dD5kbLNzsv3HljEKIxcpBk/VwM7vuU=
Subject key identifier: 15:A0:17:78:CE:74:FD:42:EC:28:CB:8D:60:BB:92:C1:95:1C:41:A6
Authority key identifier: A1:4E:BE:C5:81:BE:F7:7B:32:70:3D:8B:46:D3:27:8C:19:1A:2B:3D
Certificate issuer: /CN=a14ebec581bef77b32703d8b46d3278c191a2b3d
Certificate serial: 01969039F8EFA154E70F93C38AC9449C68AC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/oU6-xYG-93sycD2LRtMnjBkaKz0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7b/20119f-2d27-4c1b-badc-41e4cdcfbd5a/1/oU6-xYG-93sycD2LRtMnjBkaKz0.mft
Manifest number: 1518
Signing time: Fri 02 May 2025 09:00:40 +0000
Manifest this update: Fri 02 May 2025 09:00:40 +0000
Manifest next update: Sat 03 May 2025 09:00:40 +0000
Files and hashes: 1: oU6-xYG-93sycD2LRtMnjBkaKz0.crl (hash: V1JRZ26ZhzWhu7jc/l58RynyHetrGCmWxY8XvWF2lcs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7b/20119f-2d27-4c1b-badc-41e4cdcfbd5a/1/oU6-xYG-93sycD2LRtMnjBkaKz0.crl
rsync://rpki.ripe.net/repository/DEFAULT/7b/20119f-2d27-4c1b-badc-41e4cdcfbd5a/1/oU6-xYG-93sycD2LRtMnjBkaKz0.mft
rsync://rpki.ripe.net/repository/DEFAULT/oU6-xYG-93sycD2LRtMnjBkaKz0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 03 May 2025 01:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:90:39:f8:ef:a1:54:e7:0f:93:c3:8a:c9:44:9c:68:ac
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a14ebec581bef77b32703d8b46d3278c191a2b3d
Validity
Not Before: May 2 09:00:40 2025 GMT
Not After : May 3 09:00:40 2025 GMT
Subject: CN=15a01778ce74fd42ec28cb8d60bb92c1951c41a6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:44:19:35:9b:9f:b4:c2:3b:cd:d9:c1:3d:71:
b5:fb:5c:3d:40:82:2e:5a:5d:a9:b9:bc:01:a5:32:
24:a7:92:e9:94:b6:dc:79:80:da:37:a5:bd:af:1b:
0d:95:ae:c1:9d:d1:53:de:c2:89:d7:fc:03:be:d0:
d4:57:c8:33:d2:8e:62:db:d9:f7:81:47:1d:26:a9:
14:54:3c:32:46:0b:47:27:cf:6d:98:48:e8:6a:dd:
e9:4f:2f:42:72:37:47:8f:92:6e:83:de:f2:9a:8a:
dc:17:ec:71:20:1e:1b:e7:16:6e:36:09:1a:26:19:
62:b2:67:89:19:b4:84:21:b0:b3:53:68:ca:e1:75:
c9:cc:e7:a6:b4:3f:59:32:cc:96:8f:4a:48:78:80:
7e:2f:fa:3e:28:93:98:f5:2e:a4:a7:62:33:3a:9a:
65:2b:32:bf:c0:27:c7:c9:8a:b5:e6:ee:09:e4:a2:
8d:7a:f1:d0:8f:a1:68:0d:98:66:ed:0c:d0:10:a7:
93:7d:6b:f6:dd:f7:cd:23:76:d5:7f:27:fa:d9:4d:
18:37:cb:c2:03:1f:0b:d8:48:9a:76:96:84:90:9d:
9b:db:0b:64:ce:ff:60:03:bf:ee:33:b2:5c:ef:37:
2c:75:9a:d8:da:43:50:37:fc:26:92:c2:f0:e6:ed:
27:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
15:A0:17:78:CE:74:FD:42:EC:28:CB:8D:60:BB:92:C1:95:1C:41:A6
X509v3 Authority Key Identifier:
keyid:A1:4E:BE:C5:81:BE:F7:7B:32:70:3D:8B:46:D3:27:8C:19:1A:2B:3D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/oU6-xYG-93sycD2LRtMnjBkaKz0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/20119f-2d27-4c1b-badc-41e4cdcfbd5a/1/oU6-xYG-93sycD2LRtMnjBkaKz0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/20119f-2d27-4c1b-badc-41e4cdcfbd5a/1/oU6-xYG-93sycD2LRtMnjBkaKz0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
28:93:df:10:8f:91:00:9e:e7:ef:fd:4e:5c:e5:a8:16:3e:d6:
40:fb:bd:46:9f:8a:ee:44:4f:1e:38:43:d5:98:6f:44:59:8a:
4d:d7:8a:5c:85:39:5d:9f:cb:5d:0a:8b:36:cd:8a:bd:63:f9:
7c:99:f5:cc:06:ec:19:ef:82:95:58:09:85:66:37:2a:a6:67:
cb:16:bf:a5:50:ad:8f:92:cf:5a:52:d1:f0:94:36:e0:1f:03:
99:72:88:9d:ee:50:d6:b7:b2:f4:02:73:77:ea:ba:ca:a0:6a:
c2:b9:e3:ad:70:c6:00:f6:bf:84:24:86:e0:dd:d3:74:5c:84:
fc:4e:83:4f:4f:57:70:41:64:97:ca:8b:3c:e2:ea:40:d7:23:
b5:f5:55:95:d6:62:50:f5:a8:63:42:73:d0:3b:1b:1b:37:ee:
17:a5:72:39:70:c3:1b:9b:27:8a:02:bf:3a:f8:f1:66:54:25:
51:a1:56:a9:36:e7:9d:70:a7:21:a4:e3:d5:87:91:5c:d7:14:
f4:2e:8d:d4:1a:2a:1d:f8:f4:cf:00:e2:ce:37:48:bb:d4:63:
b3:ef:33:8d:b2:89:50:d7:be:96:cc:87:0a:ed:fc:1c:42:b5:
12:af:eb:44:96:3b:ae:27:2f:4e:ce:dc:f6:4b:09:83:41:fb:
71:90:0e:af
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 2 12:01:40 2025 by rpki-client