Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/94/96595e-e36a-4051-8453-8fcd53d431d5/1/OM0kYRn4VtiXOodwvsOf_EejydY.mft
File: OM0kYRn4VtiXOodwvsOf_EejydY.mft (raw, json)
Hash identifier: HXnGPG8wKcQutVr49k3DoSERxHQUUvUkSSEdS1dh04k=
Subject key identifier: DF:D1:BA:28:0F:B5:4A:C7:FF:50:45:2C:D7:90:F7:14:47:C2:3C:F8
Authority key identifier: 38:CD:24:61:19:F8:56:D8:97:3A:87:70:BE:C3:9F:FC:47:A3:C9:D6
Certificate issuer: /CN=38cd246119f856d8973a8770bec39ffc47a3c9d6
Certificate serial: 01969115713E6FAF3711EF210A7E11E5FB98
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OM0kYRn4VtiXOodwvsOf_EejydY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/94/96595e-e36a-4051-8453-8fcd53d431d5/1/OM0kYRn4VtiXOodwvsOf_EejydY.mft
Manifest number: 151A
Signing time: Fri 02 May 2025 13:00:23 +0000
Manifest this update: Fri 02 May 2025 13:00:23 +0000
Manifest next update: Sat 03 May 2025 13:00:23 +0000
Files and hashes: 1: OM0kYRn4VtiXOodwvsOf_EejydY.crl (hash: h0AU26xVxscYWYo4XXji1fHCAHm4H71hTjEFSJ/MBr0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/94/96595e-e36a-4051-8453-8fcd53d431d5/1/OM0kYRn4VtiXOodwvsOf_EejydY.crl
rsync://rpki.ripe.net/repository/DEFAULT/94/96595e-e36a-4051-8453-8fcd53d431d5/1/OM0kYRn4VtiXOodwvsOf_EejydY.mft
rsync://rpki.ripe.net/repository/DEFAULT/OM0kYRn4VtiXOodwvsOf_EejydY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 03 May 2025 10:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:91:15:71:3e:6f:af:37:11:ef:21:0a:7e:11:e5:fb:98
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=38cd246119f856d8973a8770bec39ffc47a3c9d6
Validity
Not Before: May 2 13:00:23 2025 GMT
Not After : May 3 13:00:23 2025 GMT
Subject: CN=dfd1ba280fb54ac7ff50452cd790f71447c23cf8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:c7:85:0f:50:85:44:44:63:6d:63:52:7e:4e:
84:45:2f:9d:52:b5:f7:09:e5:10:af:55:8a:ca:08:
b6:bf:23:ff:94:e3:57:3d:42:6c:ca:63:ea:e2:f7:
4b:8c:29:e9:e5:e0:88:99:35:fd:1f:2e:cc:3a:19:
e2:28:42:ca:1e:4e:25:9f:9a:aa:da:e8:b0:af:21:
e8:b2:7a:6b:d3:ef:6a:43:bf:19:63:5c:84:44:e8:
85:b0:c3:8d:a5:d8:4f:c6:40:72:15:fc:9b:a0:9b:
64:e8:5a:93:a9:c5:6a:3c:92:72:55:dc:ee:9d:3b:
d0:17:0c:72:bb:00:8a:75:db:b2:c9:83:c4:2e:37:
58:12:7b:d9:d4:e0:2b:d5:8a:d6:9b:b7:bb:fe:f4:
e6:a9:b4:6d:1e:0e:d2:21:41:df:15:00:54:3f:d5:
f2:77:f0:14:d0:0c:b1:68:40:40:f5:b9:cd:80:a9:
7c:15:8a:7b:84:13:73:27:2b:2a:fa:c5:c7:31:ad:
1f:b1:c0:84:e5:e2:2c:07:6b:36:5c:f2:d6:ec:cc:
cb:ff:5f:19:d5:9a:ff:33:ae:45:3d:b1:e2:39:0c:
c9:d6:d5:1e:3b:74:14:1e:5d:27:f3:68:e5:f9:8a:
71:b1:aa:f6:31:23:b0:10:99:c3:85:01:a2:aa:38:
b7:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DF:D1:BA:28:0F:B5:4A:C7:FF:50:45:2C:D7:90:F7:14:47:C2:3C:F8
X509v3 Authority Key Identifier:
keyid:38:CD:24:61:19:F8:56:D8:97:3A:87:70:BE:C3:9F:FC:47:A3:C9:D6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OM0kYRn4VtiXOodwvsOf_EejydY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/94/96595e-e36a-4051-8453-8fcd53d431d5/1/OM0kYRn4VtiXOodwvsOf_EejydY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/94/96595e-e36a-4051-8453-8fcd53d431d5/1/OM0kYRn4VtiXOodwvsOf_EejydY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
96:7c:68:96:eb:0d:d2:e3:48:ed:94:ba:d2:45:7a:84:55:e4:
a7:cb:fe:58:f1:a5:b7:12:e2:3a:31:f3:ae:40:d4:d8:42:52:
cd:a8:29:0a:59:e3:f0:ff:e2:a8:62:ab:f4:96:75:fe:c2:3f:
c3:b4:ef:4b:3f:2e:b7:49:d7:6b:12:ad:d8:c6:08:8a:23:25:
9b:1a:01:0f:e9:36:3c:8b:5b:d5:2b:54:83:17:eb:9e:d4:3a:
6a:e5:6c:4f:53:80:5b:51:65:06:c2:8f:ec:7a:1e:88:e1:c6:
b1:38:87:03:a0:a7:c1:83:72:9c:21:e5:c1:2b:ad:1f:74:6a:
d9:97:1d:e6:48:07:c7:20:02:72:c0:18:65:24:76:49:8b:ec:
8d:b3:ed:96:88:b9:34:65:3a:62:f5:4d:ef:9d:ac:9f:f2:e2:
01:e8:e3:08:5f:d6:92:a0:5b:2c:33:63:7e:e7:7a:5f:28:59:
74:0d:83:a3:d0:8c:b2:99:e1:82:28:cf:a8:96:f7:f0:18:f0:
39:2b:82:4a:fa:48:7a:7e:e7:f2:2b:8b:2f:91:51:ac:ec:b6:
eb:0e:97:03:ae:0d:5b:89:cd:fb:64:4d:ea:b2:3f:98:d5:c4:
27:d0:2a:29:20:88:cc:65:c2:f2:81:1f:a6:7d:db:34:f1:35:
a2:d9:a6:bd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 2 15:43:04 2025 by rpki-client