Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/eb/d5958c-14ca-41d5-8d42-dc1fab439e30/1/OoLcXHHOpyxlsCahJnifOIZXC6Y.mft
File: OoLcXHHOpyxlsCahJnifOIZXC6Y.mft (raw, json)
Hash identifier: JONGzPDbdzkZ3lB7MpZe/311qeBgBqccfl6DViPShus=
Subject key identifier: 06:16:79:8C:BD:74:34:A7:0B:34:2E:9B:62:4A:08:25:8E:C9:E4:5C
Authority key identifier: 3A:82:DC:5C:71:CE:A7:2C:65:B0:26:A1:26:78:9F:38:86:57:0B:A6
Certificate issuer: /CN=3a82dc5c71cea72c65b026a126789f3886570ba6
Certificate serial: 01967FB4E7D88CBFA5890CFB341DC11C4048
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OoLcXHHOpyxlsCahJnifOIZXC6Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/eb/d5958c-14ca-41d5-8d42-dc1fab439e30/1/OoLcXHHOpyxlsCahJnifOIZXC6Y.mft
Manifest number: 1511
Signing time: Tue 29 Apr 2025 04:01:24 +0000
Manifest this update: Tue 29 Apr 2025 04:01:24 +0000
Manifest next update: Wed 30 Apr 2025 04:01:24 +0000
Files and hashes: 1: OoLcXHHOpyxlsCahJnifOIZXC6Y.crl (hash: GXzf6mka0XxLVe+nZMwXWSFKARoAKCk9ai393+rCBhI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/eb/d5958c-14ca-41d5-8d42-dc1fab439e30/1/OoLcXHHOpyxlsCahJnifOIZXC6Y.crl
rsync://rpki.ripe.net/repository/DEFAULT/eb/d5958c-14ca-41d5-8d42-dc1fab439e30/1/OoLcXHHOpyxlsCahJnifOIZXC6Y.mft
rsync://rpki.ripe.net/repository/DEFAULT/OoLcXHHOpyxlsCahJnifOIZXC6Y.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 30 Apr 2025 04:01:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:7f:b4:e7:d8:8c:bf:a5:89:0c:fb:34:1d:c1:1c:40:48
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3a82dc5c71cea72c65b026a126789f3886570ba6
Validity
Not Before: Apr 29 04:01:24 2025 GMT
Not After : Apr 30 04:01:24 2025 GMT
Subject: CN=0616798cbd7434a70b342e9b624a08258ec9e45c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:21:fa:22:3f:3a:11:dd:ce:72:f0:e8:79:71:
aa:b6:d7:73:dd:9b:50:f8:b6:0d:8a:57:cd:4d:cc:
00:86:c2:20:a0:2c:21:70:18:6e:4e:df:12:21:91:
b8:82:26:f3:e1:66:c3:92:9c:12:be:5c:96:02:4c:
b3:ff:8a:90:97:ed:5a:f3:90:31:d4:89:33:a9:b3:
b8:54:07:fb:29:08:cf:c4:8e:7e:e6:3e:72:91:b8:
fc:50:0b:0f:49:4b:15:bb:f2:56:98:db:52:fa:ee:
d7:1a:7e:ba:ef:59:6d:db:ea:35:f9:48:08:7e:3d:
7a:84:63:dc:c3:38:00:85:90:9d:67:68:bc:df:ed:
28:1e:d5:6d:a3:93:6a:d6:dd:3c:50:6d:7a:df:e4:
17:13:10:a1:e0:e7:87:24:15:f3:86:83:10:e4:ef:
60:db:78:e7:00:8c:b5:61:d3:e9:b9:63:bd:08:86:
a9:1c:0f:65:37:01:ca:51:91:7a:3d:e4:23:18:b0:
18:81:2a:5a:0c:b6:60:95:59:6d:86:e8:c3:32:04:
f2:39:dc:02:56:2d:0c:e5:aa:8f:cf:bf:db:00:3c:
20:4a:37:b1:ec:2f:25:84:ef:0a:3a:49:15:e8:14:
d3:29:c1:2e:75:9e:fe:9d:f4:ef:a1:ae:de:ba:79:
11:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
06:16:79:8C:BD:74:34:A7:0B:34:2E:9B:62:4A:08:25:8E:C9:E4:5C
X509v3 Authority Key Identifier:
keyid:3A:82:DC:5C:71:CE:A7:2C:65:B0:26:A1:26:78:9F:38:86:57:0B:A6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OoLcXHHOpyxlsCahJnifOIZXC6Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/d5958c-14ca-41d5-8d42-dc1fab439e30/1/OoLcXHHOpyxlsCahJnifOIZXC6Y.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/d5958c-14ca-41d5-8d42-dc1fab439e30/1/OoLcXHHOpyxlsCahJnifOIZXC6Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8c:78:b3:76:e7:fe:9c:b4:94:8c:0f:e4:d9:30:55:f6:1c:e3:
c9:9a:3a:a7:e9:b5:a8:79:81:bb:fc:44:50:8f:37:8d:92:7e:
6c:19:7d:43:99:26:5a:31:f9:b1:67:ca:fd:7e:12:c6:5b:ce:
d1:de:8a:75:a4:27:34:a6:a0:0e:ff:48:2f:e4:14:77:d0:24:
93:20:a0:c4:4d:4c:d5:ba:d7:10:9d:dd:59:5f:3c:40:31:13:
66:8e:85:b0:5e:e4:d7:db:42:20:69:6a:cf:d7:55:89:61:d7:
ce:bf:7e:5a:5e:3d:81:c7:2a:0d:bd:55:da:80:e3:c6:13:17:
a8:31:0a:e5:af:c2:48:45:a5:65:59:38:a1:6a:db:e9:e0:6a:
58:c9:1e:ea:9a:9b:8b:4b:20:1f:6f:2a:5a:cb:6e:fd:e5:96:
64:b7:46:44:c4:16:c0:5b:d8:39:8c:a0:bb:f9:a4:56:d9:fa:
b3:3e:ae:71:59:8f:2b:27:b0:1e:46:16:c7:27:1e:2e:fa:0c:
63:5d:91:39:9f:eb:be:2f:eb:92:df:0c:62:7c:db:7b:5e:f1:
32:2a:c6:d7:ca:00:d5:c4:0c:75:3d:48:42:ba:88:87:b5:05:
19:47:2a:92:49:19:87:36:b4:fc:ef:f6:7d:6b:58:22:e4:27:
b6:26:d4:94
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 29 15:09:53 2025 by rpki-client