Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7e/800709-3dd2-4c3f-8e69-5b1eaac67030/1/oVKeqYh_ni_mqUWpfUgha8FqS0E.mft
File: oVKeqYh_ni_mqUWpfUgha8FqS0E.mft (raw, json)
Hash identifier: iGRbQcoc0Ox5kVcr8/5uCsCFJ3sUPeMxDX4NtPpMx9o=
Subject key identifier: C9:D0:AE:BA:AC:24:DF:71:30:6E:A4:A4:74:BC:75:F5:4A:F0:AA:03
Authority key identifier: A1:52:9E:A9:88:7F:9E:2F:E6:A9:45:A9:7D:48:21:6B:C1:6A:4B:41
Certificate issuer: /CN=a1529ea9887f9e2fe6a945a97d48216bc16a4b41
Certificate serial: 0196895BC98016866B1B9C3B5C209DF4CD0E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/oVKeqYh_ni_mqUWpfUgha8FqS0E.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7e/800709-3dd2-4c3f-8e69-5b1eaac67030/1/oVKeqYh_ni_mqUWpfUgha8FqS0E.mft
Manifest number: 1006
Signing time: Thu 01 May 2025 01:00:15 +0000
Manifest this update: Thu 01 May 2025 01:00:15 +0000
Manifest next update: Fri 02 May 2025 01:00:15 +0000
Files and hashes: 1: oVKeqYh_ni_mqUWpfUgha8FqS0E.crl (hash: T1EWzf2GETmrqcBiMrEdXTzYIwW6s84l6GqAMEfLr6g=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7e/800709-3dd2-4c3f-8e69-5b1eaac67030/1/oVKeqYh_ni_mqUWpfUgha8FqS0E.crl
rsync://rpki.ripe.net/repository/DEFAULT/7e/800709-3dd2-4c3f-8e69-5b1eaac67030/1/oVKeqYh_ni_mqUWpfUgha8FqS0E.mft
rsync://rpki.ripe.net/repository/DEFAULT/oVKeqYh_ni_mqUWpfUgha8FqS0E.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 01 May 2025 21:27:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:89:5b:c9:80:16:86:6b:1b:9c:3b:5c:20:9d:f4:cd:0e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a1529ea9887f9e2fe6a945a97d48216bc16a4b41
Validity
Not Before: May 1 01:00:15 2025 GMT
Not After : May 2 01:00:15 2025 GMT
Subject: CN=c9d0aebaac24df71306ea4a474bc75f54af0aa03
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:d7:9c:ab:39:cb:57:75:99:f8:99:aa:96:59:
a9:d6:2e:bf:bf:b8:d1:75:2c:0e:ba:88:f0:37:a9:
da:35:33:5c:8e:5c:0b:10:b0:ba:7e:2e:82:81:6c:
a4:4d:2e:a7:5f:60:3e:16:bc:49:f9:a2:c8:64:ae:
c2:34:07:38:6c:d2:84:35:6d:a4:75:42:10:d0:65:
f2:c3:ee:f4:86:eb:0c:cd:82:9d:87:3d:e2:a4:c8:
d7:e0:0a:6a:cc:45:52:6b:a4:cc:c3:08:0d:12:aa:
0f:f1:35:d5:46:40:e1:c5:1b:ac:1f:86:db:dc:1d:
45:44:cd:9f:26:bf:b0:b4:c3:f7:ed:db:be:9e:1a:
71:74:f3:ea:28:63:7f:a7:01:c5:ea:ba:48:0d:6a:
e9:ad:c0:b5:83:a0:c9:cc:d7:71:b5:2d:53:96:c9:
5c:78:4f:7e:46:29:09:d3:98:88:bd:c4:57:12:7c:
35:66:76:0e:02:43:83:7c:cc:f3:a8:57:93:e7:94:
9f:f9:0c:92:6f:62:13:9e:c2:e5:20:5b:e8:d6:88:
24:3a:be:62:b7:9d:12:77:13:0d:03:f1:92:0b:fe:
9a:6f:82:17:e8:78:f3:4b:4f:9a:b9:84:c3:c0:05:
be:22:34:b6:32:cb:22:47:10:42:53:eb:ac:32:cf:
cb:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C9:D0:AE:BA:AC:24:DF:71:30:6E:A4:A4:74:BC:75:F5:4A:F0:AA:03
X509v3 Authority Key Identifier:
keyid:A1:52:9E:A9:88:7F:9E:2F:E6:A9:45:A9:7D:48:21:6B:C1:6A:4B:41
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/oVKeqYh_ni_mqUWpfUgha8FqS0E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7e/800709-3dd2-4c3f-8e69-5b1eaac67030/1/oVKeqYh_ni_mqUWpfUgha8FqS0E.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7e/800709-3dd2-4c3f-8e69-5b1eaac67030/1/oVKeqYh_ni_mqUWpfUgha8FqS0E.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b1:23:d0:f5:81:72:2b:6f:5a:8d:ab:5f:67:d0:6c:1e:0d:69:
6e:1a:4e:ad:95:10:22:ad:4a:97:96:51:a4:9c:2b:b6:53:91:
16:f3:98:28:45:5d:87:da:56:48:1c:c7:6e:b5:1a:a9:02:89:
fc:72:ee:0e:77:84:14:92:eb:c6:0b:bb:81:c2:64:00:49:fa:
18:4c:ec:66:22:40:7f:cb:e3:e3:3a:6d:17:96:04:cb:bb:9d:
b8:0d:68:d4:83:89:78:8d:c5:59:f6:11:22:ab:c3:00:79:5b:
df:02:10:f0:d2:91:ed:a3:29:f4:a2:e8:7d:82:92:ce:64:4d:
93:f7:fe:54:49:c3:03:5d:2f:f3:49:06:7f:ea:60:6d:11:f7:
7d:33:24:9a:aa:e1:ba:ee:8d:03:00:80:62:33:3b:84:02:d5:
c4:c1:e9:ee:e0:a3:ac:7b:7f:1e:b8:ac:47:36:9b:85:b1:f3:
7d:83:de:d1:05:df:83:7d:6b:36:67:cc:f4:de:e6:57:f1:46:
32:57:ee:5c:da:7f:8c:88:b7:ba:1b:22:6b:f7:ae:96:34:cc:
fc:a7:c0:6c:4b:3d:96:4c:8c:1b:6c:04:d2:b7:35:ec:78:35:
8c:c6:6c:db:92:fb:fa:ca:79:ac:b1:06:73:00:77:02:68:be:
46:92:a2:43
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 1 07:03:58 2025 by rpki-client