Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bc/8c2fae-bd49-4bf7-baa7-809a2d7ff348/1/oiPRU0TAKlUeY_gxxgT4Db7EuhA.mft
File: oiPRU0TAKlUeY_gxxgT4Db7EuhA.mft (raw, json)
Hash identifier: 0UNCYH9iJQXFbFcq65Eh9HMx7tM5Do42b2Kaq0BLGJw=
Subject key identifier: A1:A0:E0:31:5E:56:94:9B:F0:2B:1C:8B:DE:97:6F:6F:2F:12:63:DA
Authority key identifier: A2:23:D1:53:44:C0:2A:55:1E:63:F8:31:C6:04:F8:0D:BE:C4:BA:10
Certificate issuer: /CN=a223d15344c02a551e63f831c604f80dbec4ba10
Certificate serial: 0196AA30E7FA10172275C9C3BF1491C9DFB6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/oiPRU0TAKlUeY_gxxgT4Db7EuhA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bc/8c2fae-bd49-4bf7-baa7-809a2d7ff348/1/oiPRU0TAKlUeY_gxxgT4Db7EuhA.mft
Manifest number: 097F
Signing time: Wed 07 May 2025 10:00:53 +0000
Manifest this update: Wed 07 May 2025 10:00:53 +0000
Manifest next update: Thu 08 May 2025 10:00:53 +0000
Files and hashes: 1: oiPRU0TAKlUeY_gxxgT4Db7EuhA.crl (hash: 6CvWPdbB1CWh72TXzvv3Ia0D+vBZlS5XPwO8XY4fbq8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bc/8c2fae-bd49-4bf7-baa7-809a2d7ff348/1/oiPRU0TAKlUeY_gxxgT4Db7EuhA.crl
rsync://rpki.ripe.net/repository/DEFAULT/bc/8c2fae-bd49-4bf7-baa7-809a2d7ff348/1/oiPRU0TAKlUeY_gxxgT4Db7EuhA.mft
rsync://rpki.ripe.net/repository/DEFAULT/oiPRU0TAKlUeY_gxxgT4Db7EuhA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 08 May 2025 10:00:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:aa:30:e7:fa:10:17:22:75:c9:c3:bf:14:91:c9:df:b6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a223d15344c02a551e63f831c604f80dbec4ba10
Validity
Not Before: May 7 10:00:53 2025 GMT
Not After : May 8 10:00:53 2025 GMT
Subject: CN=a1a0e0315e56949bf02b1c8bde976f6f2f1263da
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:1e:3f:be:71:f4:99:ec:05:87:ca:80:e0:8d:
09:f1:69:1d:fb:57:d6:b6:af:29:c8:80:5f:88:04:
b4:10:9b:bd:64:a4:0b:61:58:96:08:ed:30:8d:12:
da:fe:b3:d9:e1:e0:51:8f:a2:7b:fe:ad:1c:bc:4d:
0c:48:65:b6:0b:fd:30:e4:b3:7e:3f:17:13:7f:04:
18:fc:89:37:c2:a2:6f:e1:28:a3:2c:b7:2a:9b:1e:
88:76:cf:da:2b:dc:1f:ae:3d:33:09:4a:d1:88:b2:
7c:a0:06:4a:73:17:0d:ac:ed:4c:e6:d0:28:89:7b:
9f:c4:cd:ec:fb:9c:fc:f6:cc:0e:1e:e9:3a:5a:2e:
a9:95:65:a1:82:51:89:ab:fd:fb:14:da:d2:12:74:
63:45:47:20:ad:ea:73:3f:2c:52:40:8e:5d:51:07:
9e:b0:c6:08:1d:2c:be:da:0e:4c:d5:1c:af:0f:7b:
9b:44:1c:6d:c6:8f:0a:36:c8:d1:da:a0:ac:3e:11:
f0:47:57:e4:69:1a:04:ac:3d:c6:80:d0:ef:7d:15:
7e:a4:10:ac:3c:e3:f6:d6:fb:02:7f:1f:86:6f:b8:
a9:b8:d9:91:ce:01:a1:ca:40:69:3a:4b:19:cf:c7:
68:e1:69:03:38:f3:a6:46:e7:5b:dc:f6:a4:06:c0:
63:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A1:A0:E0:31:5E:56:94:9B:F0:2B:1C:8B:DE:97:6F:6F:2F:12:63:DA
X509v3 Authority Key Identifier:
keyid:A2:23:D1:53:44:C0:2A:55:1E:63:F8:31:C6:04:F8:0D:BE:C4:BA:10
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/oiPRU0TAKlUeY_gxxgT4Db7EuhA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/8c2fae-bd49-4bf7-baa7-809a2d7ff348/1/oiPRU0TAKlUeY_gxxgT4Db7EuhA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/8c2fae-bd49-4bf7-baa7-809a2d7ff348/1/oiPRU0TAKlUeY_gxxgT4Db7EuhA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
42:1a:1c:ab:ef:5f:62:61:04:cc:49:23:d1:13:f5:07:20:af:
24:1c:94:b5:f7:c8:b7:95:45:32:4a:31:de:ef:53:c4:bb:65:
0c:d8:b6:70:d3:28:9d:41:66:96:d5:da:f5:b5:90:fe:75:7d:
57:68:e9:b4:7f:e1:32:79:1f:e1:c1:fa:fc:d0:89:86:ef:a4:
6a:b0:29:1b:68:69:93:44:7e:1e:65:93:e8:ed:04:67:ff:8c:
4e:89:5a:72:32:a2:9b:dd:d2:9e:32:ee:0c:5b:a8:01:af:0f:
7e:c9:c6:88:95:55:81:1e:8a:a1:b5:28:96:57:f5:f9:70:fc:
c1:7f:d7:5d:54:8c:1e:35:aa:a5:b9:06:aa:90:0b:4a:e8:b3:
7d:dd:f7:e5:ed:11:d5:34:50:a8:6a:97:4c:3e:29:4b:a2:5c:
95:62:52:10:20:5e:6c:db:9b:02:9d:08:9b:35:d9:ca:40:6e:
44:ca:81:cb:cd:11:4c:93:c8:84:f2:98:71:e1:0b:6e:95:51:
2e:65:54:23:14:62:43:1c:96:de:aa:4d:9b:4b:53:f0:95:29:
52:34:92:6b:33:39:a7:14:bc:21:e7:e6:19:4d:25:0e:01:a6:
25:f4:24:91:b2:ba:e4:28:d7:d5:cc:e1:0d:e3:d6:d0:21:44:
cf:40:c0:a1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 7 19:00:13 2025 by rpki-client