Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c1/7971ed-5842-4e5b-b828-272cc92cc60b/1/oUYsqczoyP_R-dfefH6QXG6JPPw.mft
File: oUYsqczoyP_R-dfefH6QXG6JPPw.mft (raw, json)
Hash identifier: N6DNwoZSp9oHOm4TKQrTONI1JIjV2rmcrPJA0W6Nqss=
Subject key identifier: DA:FC:DD:41:51:AA:A7:35:1E:B0:29:F9:4E:35:01:E5:70:38:5E:A0
Authority key identifier: A1:46:2C:A9:CC:E8:C8:FF:D1:F9:D7:DE:7C:7E:90:5C:6E:89:3C:FC
Certificate issuer: /CN=a1462ca9cce8c8ffd1f9d7de7c7e905c6e893cfc
Certificate serial: 019677FB02E17FFFC8D78C776EEAAA67A282
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/oUYsqczoyP_R-dfefH6QXG6JPPw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c1/7971ed-5842-4e5b-b828-272cc92cc60b/1/oUYsqczoyP_R-dfefH6QXG6JPPw.mft
Manifest number: 150C
Signing time: Sun 27 Apr 2025 16:01:01 +0000
Manifest this update: Sun 27 Apr 2025 16:01:01 +0000
Manifest next update: Mon 28 Apr 2025 16:01:01 +0000
Files and hashes: 1: oUYsqczoyP_R-dfefH6QXG6JPPw.crl (hash: UW5SmqvWbr569G0IaNyu4VtOXLAFZ3NdFcnujKepe14=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c1/7971ed-5842-4e5b-b828-272cc92cc60b/1/oUYsqczoyP_R-dfefH6QXG6JPPw.crl
rsync://rpki.ripe.net/repository/DEFAULT/c1/7971ed-5842-4e5b-b828-272cc92cc60b/1/oUYsqczoyP_R-dfefH6QXG6JPPw.mft
rsync://rpki.ripe.net/repository/DEFAULT/oUYsqczoyP_R-dfefH6QXG6JPPw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Apr 2025 14:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:77:fb:02:e1:7f:ff:c8:d7:8c:77:6e:ea:aa:67:a2:82
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a1462ca9cce8c8ffd1f9d7de7c7e905c6e893cfc
Validity
Not Before: Apr 27 16:01:01 2025 GMT
Not After : Apr 28 16:01:01 2025 GMT
Subject: CN=dafcdd4151aaa7351eb029f94e3501e570385ea0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:f6:a1:a7:21:74:ad:c8:24:7d:b1:90:69:04:
c6:be:b5:8a:5c:01:c7:76:ec:a4:a5:72:6f:bf:36:
6a:0c:ef:6a:65:68:3d:da:a9:dc:32:cc:9d:5e:ac:
5b:67:ad:96:20:7c:62:f1:46:93:94:cf:c9:fe:10:
c9:6e:09:d7:d0:16:a8:3c:41:b5:75:c1:6a:06:bf:
c8:9c:de:e0:f5:89:e4:fc:35:35:cd:da:d1:df:e0:
e9:e0:b8:b6:9f:e9:86:d5:80:85:d5:ab:de:98:94:
11:59:3d:f1:07:ff:dc:2d:c9:56:ca:08:91:28:4d:
48:9e:79:06:66:e0:33:56:92:f2:59:e3:b4:fd:c9:
2f:9d:6f:9d:17:c5:7c:fa:89:9a:54:08:3e:19:6f:
59:9e:79:ff:98:d2:f4:c6:b4:f5:be:74:c2:44:cf:
06:d5:a7:6a:18:4b:b3:10:5b:4e:ce:de:d1:37:4f:
a9:88:3b:e3:23:91:0e:17:08:09:0a:06:94:2d:2a:
e7:42:47:98:df:d4:ce:66:74:c5:1d:25:fe:84:30:
34:25:37:61:b4:56:0b:34:dc:63:e7:e9:35:9b:0b:
ff:d5:be:a4:92:8a:cf:c2:3d:32:19:8a:e9:cb:49:
e3:b4:fa:bb:db:0e:c9:21:6d:a9:2b:33:6f:c1:9d:
0d:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DA:FC:DD:41:51:AA:A7:35:1E:B0:29:F9:4E:35:01:E5:70:38:5E:A0
X509v3 Authority Key Identifier:
keyid:A1:46:2C:A9:CC:E8:C8:FF:D1:F9:D7:DE:7C:7E:90:5C:6E:89:3C:FC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/oUYsqczoyP_R-dfefH6QXG6JPPw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c1/7971ed-5842-4e5b-b828-272cc92cc60b/1/oUYsqczoyP_R-dfefH6QXG6JPPw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c1/7971ed-5842-4e5b-b828-272cc92cc60b/1/oUYsqczoyP_R-dfefH6QXG6JPPw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b3:0c:7f:2f:54:80:f0:bb:1f:1a:48:34:53:82:b5:d7:cc:0a:
f8:e7:84:df:cc:d2:36:f7:32:7e:22:12:f6:f0:0f:c4:b8:e4:
a6:d8:f3:ad:f8:80:4a:85:a2:5c:ab:b1:9c:53:48:b5:c8:7a:
da:ac:80:35:f4:e5:39:d6:ed:95:d5:2a:f3:04:0b:1e:6c:04:
2e:1f:d5:4d:7c:f1:38:6b:7c:68:99:46:b7:46:71:f8:61:e4:
ac:64:85:31:52:3e:f9:cb:ad:4e:3b:f7:b9:b2:55:63:dc:72:
93:3c:15:f4:9c:0f:7d:98:6e:be:6c:8c:e9:a1:d3:b1:5a:85:
e3:a8:f6:dc:3f:54:68:1e:db:30:a7:6a:aa:44:98:04:5c:99:
01:89:69:c6:80:44:f7:b7:59:5e:08:7b:71:82:c8:aa:21:6c:
e8:bb:b6:46:a3:d3:c0:75:df:32:09:1b:ff:11:fe:56:c8:37:
6d:b2:7a:84:11:1e:0b:05:d3:47:72:eb:29:df:21:a1:93:d2:
d9:4e:a3:d2:42:5b:90:8b:c6:e4:55:60:db:61:09:01:c8:48:
d1:e9:39:90:9c:0b:3c:ad:98:69:f4:e0:44:ae:cb:ed:e3:07:
b6:74:14:52:0b:5b:5b:85:4f:ee:80:6b:07:b6:1c:a8:70:48:
2f:12:53:3c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 23:00:06 2025 by rpki-client