Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c1/9ba385-6c7c-4307-9946-a5cd8e22146b/1/Og6YCIquzFusI9Wg5intsMVT5y4.mft
File: Og6YCIquzFusI9Wg5intsMVT5y4.mft (raw, json)
Hash identifier: hUDIRyqla8pntupaEhVafbmo5+8pmSrZy2HSoJxKY7E=
Subject key identifier: 03:0A:D1:D4:83:29:1B:79:70:91:61:DF:C7:B5:BE:7D:F3:FC:68:D4
Authority key identifier: 3A:0E:98:08:8A:AE:CC:5B:AC:23:D5:A0:E6:29:ED:B0:C5:53:E7:2E
Certificate issuer: /CN=3a0e98088aaecc5bac23d5a0e629edb0c553e72e
Certificate serial: 019683915483012E76C588CBDB2D460927A5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Og6YCIquzFusI9Wg5intsMVT5y4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c1/9ba385-6c7c-4307-9946-a5cd8e22146b/1/Og6YCIquzFusI9Wg5intsMVT5y4.mft
Manifest number: 1132
Signing time: Tue 29 Apr 2025 22:01:01 +0000
Manifest this update: Tue 29 Apr 2025 22:01:01 +0000
Manifest next update: Wed 30 Apr 2025 22:01:01 +0000
Files and hashes: 1: Og6YCIquzFusI9Wg5intsMVT5y4.crl (hash: s8LLNZ8MQ8e7BDsqVsqX2if88rgLzvtiW7I6kgrYoYo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c1/9ba385-6c7c-4307-9946-a5cd8e22146b/1/Og6YCIquzFusI9Wg5intsMVT5y4.crl
rsync://rpki.ripe.net/repository/DEFAULT/c1/9ba385-6c7c-4307-9946-a5cd8e22146b/1/Og6YCIquzFusI9Wg5intsMVT5y4.mft
rsync://rpki.ripe.net/repository/DEFAULT/Og6YCIquzFusI9Wg5intsMVT5y4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 30 Apr 2025 15:02:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:83:91:54:83:01:2e:76:c5:88:cb:db:2d:46:09:27:a5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3a0e98088aaecc5bac23d5a0e629edb0c553e72e
Validity
Not Before: Apr 29 22:01:01 2025 GMT
Not After : Apr 30 22:01:01 2025 GMT
Subject: CN=030ad1d483291b79709161dfc7b5be7df3fc68d4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:29:d3:8d:a3:6d:c9:27:de:85:b6:84:fe:42:
1d:a8:24:df:e8:db:43:01:3c:e2:43:04:ff:bb:9e:
50:6f:d2:cb:ce:35:96:30:a7:7f:14:02:6c:5d:99:
53:9c:d6:d7:8f:4e:c3:bc:c3:ce:c5:6b:ef:82:00:
c8:8c:71:7f:2f:6d:27:94:f1:27:f7:3b:e7:ca:34:
4e:d5:46:1f:4f:4d:1f:a7:7b:fc:7c:57:c3:63:4d:
8e:28:9f:e1:20:d7:34:6c:01:1c:66:ea:e5:f7:1a:
ea:ad:57:0b:f3:c2:08:58:4d:20:85:f5:51:62:a9:
2f:a0:56:39:ff:44:66:d5:0c:e3:f7:a6:fc:9a:45:
65:72:00:6d:25:2c:17:fe:7d:79:9b:37:ee:9d:84:
62:5a:78:22:72:3b:bd:aa:07:82:f6:e0:24:a2:4f:
1f:0c:19:7d:9d:5b:09:9e:36:89:bf:73:20:be:01:
75:8a:6a:81:78:4f:40:60:52:30:ca:6f:a9:16:a8:
12:6f:7b:e5:75:35:a9:2e:94:62:71:23:32:13:9d:
02:77:8c:29:bb:19:78:12:b2:93:64:8e:98:fd:59:
2e:97:c1:47:af:74:2c:13:42:5f:38:97:61:cf:f5:
0d:16:35:e2:c0:73:73:c7:fe:23:d9:4f:31:10:18:
b8:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
03:0A:D1:D4:83:29:1B:79:70:91:61:DF:C7:B5:BE:7D:F3:FC:68:D4
X509v3 Authority Key Identifier:
keyid:3A:0E:98:08:8A:AE:CC:5B:AC:23:D5:A0:E6:29:ED:B0:C5:53:E7:2E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Og6YCIquzFusI9Wg5intsMVT5y4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c1/9ba385-6c7c-4307-9946-a5cd8e22146b/1/Og6YCIquzFusI9Wg5intsMVT5y4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c1/9ba385-6c7c-4307-9946-a5cd8e22146b/1/Og6YCIquzFusI9Wg5intsMVT5y4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
69:a4:e3:6b:07:96:c5:1a:e3:c1:24:3c:c7:c4:3f:c4:fb:58:
64:50:01:1e:e0:b9:48:4d:36:1e:31:5f:4e:73:21:c2:99:17:
0a:f8:4e:cd:40:60:61:dc:b2:33:de:fe:c9:90:85:1e:68:dd:
73:da:62:44:1f:27:d9:02:b1:5a:21:d0:2a:e3:dd:51:4d:7d:
2f:86:99:d4:eb:a3:a0:cc:56:fc:09:54:68:54:4f:53:6d:9b:
69:65:87:e7:3f:d8:8c:25:9c:02:5c:3b:63:8d:ce:95:26:8c:
38:8d:bb:4e:ad:30:18:b5:e1:6b:34:51:e7:cb:8d:52:32:7f:
f3:d3:aa:df:32:6e:4b:7f:77:0f:a4:64:36:c1:9e:57:c5:85:
0b:9e:38:ee:bc:f5:d8:9e:2f:72:62:5a:3b:e8:e0:d1:56:f1:
da:37:93:b4:cc:b3:de:7f:e1:8d:bd:23:ce:db:bd:04:17:d1:
21:f7:dc:75:c1:05:33:df:9f:87:d7:49:cb:52:ea:c2:9d:26:
02:94:8a:9d:2f:39:8c:05:8b:80:cf:15:de:33:d0:22:82:84:
72:71:1a:f2:9e:b5:18:cb:5c:03:19:0e:d1:a6:fc:5a:0b:5e:
8b:f4:74:9e:0f:f2:62:72:95:c3:df:78:f9:f6:56:38:49:8e:
95:47:f1:cc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 30 01:32:46 2025 by rpki-client