Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ef/1a3d98-c14f-4d06-a466-d985394e3c10/1/OLx5TF-6rGMqf_tD2xT3Oc1TssQ.mft
File: OLx5TF-6rGMqf_tD2xT3Oc1TssQ.mft (raw, json)
Hash identifier: cxfyrFx0J0WtGlaQqO9iwEHPgOJfSlA69uNvVlajIVY=
Subject key identifier: 93:44:A1:F0:01:6F:4A:19:C8:20:5A:99:DA:8E:FF:35:54:C1:8F:9F
Authority key identifier: 38:BC:79:4C:5F:BA:AC:63:2A:7F:FB:43:DB:14:F7:39:CD:53:B2:C4
Certificate issuer: /CN=38bc794c5fbaac632a7ffb43db14f739cd53b2c4
Certificate serial: 019688B76C96D39FF2B11165936E1762A214
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OLx5TF-6rGMqf_tD2xT3Oc1TssQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ef/1a3d98-c14f-4d06-a466-d985394e3c10/1/OLx5TF-6rGMqf_tD2xT3Oc1TssQ.mft
Manifest number: 0165
Signing time: Wed 30 Apr 2025 22:00:44 +0000
Manifest this update: Wed 30 Apr 2025 22:00:44 +0000
Manifest next update: Thu 01 May 2025 22:00:44 +0000
Files and hashes: 1: OLx5TF-6rGMqf_tD2xT3Oc1TssQ.crl (hash: AfJwNglNzlC2zX1CvzdQdvS+zhqDYsxiRLAFlzw26lw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ef/1a3d98-c14f-4d06-a466-d985394e3c10/1/OLx5TF-6rGMqf_tD2xT3Oc1TssQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/ef/1a3d98-c14f-4d06-a466-d985394e3c10/1/OLx5TF-6rGMqf_tD2xT3Oc1TssQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/OLx5TF-6rGMqf_tD2xT3Oc1TssQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 01 May 2025 21:27:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:88:b7:6c:96:d3:9f:f2:b1:11:65:93:6e:17:62:a2:14
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=38bc794c5fbaac632a7ffb43db14f739cd53b2c4
Validity
Not Before: Apr 30 22:00:44 2025 GMT
Not After : May 1 22:00:44 2025 GMT
Subject: CN=9344a1f0016f4a19c8205a99da8eff3554c18f9f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:25:e8:c0:42:77:71:53:1d:ed:67:12:4a:9d:
73:05:b5:ed:ee:3f:24:17:8b:a8:d4:4c:82:59:3f:
c4:24:a9:94:05:fa:1f:36:26:d8:64:0c:3f:17:c0:
4b:5d:8b:5c:6c:31:c0:00:0f:43:a6:16:23:cd:b6:
3d:7b:94:90:a0:e9:25:25:f8:fb:05:49:dc:16:50:
59:6c:fe:1e:c9:3e:ee:af:9a:74:cf:6e:36:47:b0:
7d:67:35:75:08:5a:95:d0:e1:31:43:15:58:1e:e6:
dc:e3:73:2c:aa:28:80:2c:ce:75:37:7f:33:be:d5:
b3:57:db:0a:fb:eb:b0:69:eb:48:69:fa:4e:49:7c:
f5:02:d2:c6:57:84:0e:95:18:dd:51:b6:01:aa:01:
17:80:c7:f9:34:c6:9f:db:57:da:05:9a:9d:5f:1f:
52:ba:a3:50:67:54:11:c3:2d:37:04:f7:8f:08:9d:
9d:12:69:87:ac:ec:c7:78:f7:5a:6e:23:20:a3:bb:
cf:e8:1b:b7:52:4b:19:8e:04:68:02:ab:1b:cd:42:
0f:64:3c:99:c0:09:10:cd:81:1d:4b:a9:7d:4a:34:
93:a5:5a:4e:24:cb:ca:8c:e6:45:15:34:0e:0e:94:
46:c3:89:80:a5:73:3d:78:48:64:82:51:32:a6:e6:
8a:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
93:44:A1:F0:01:6F:4A:19:C8:20:5A:99:DA:8E:FF:35:54:C1:8F:9F
X509v3 Authority Key Identifier:
keyid:38:BC:79:4C:5F:BA:AC:63:2A:7F:FB:43:DB:14:F7:39:CD:53:B2:C4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OLx5TF-6rGMqf_tD2xT3Oc1TssQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ef/1a3d98-c14f-4d06-a466-d985394e3c10/1/OLx5TF-6rGMqf_tD2xT3Oc1TssQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ef/1a3d98-c14f-4d06-a466-d985394e3c10/1/OLx5TF-6rGMqf_tD2xT3Oc1TssQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
69:9f:ab:be:95:be:2b:55:bb:27:77:13:d6:f8:4e:0e:70:40:
a7:e6:43:ce:bf:2d:42:88:1f:26:fb:dd:a3:3b:15:71:e4:67:
f7:35:12:b3:d2:ca:a1:10:2b:e3:c4:f1:5b:1d:16:f3:3c:dd:
7d:db:5d:07:2c:ff:21:7c:e1:4a:53:aa:25:91:2c:e4:b9:d7:
b8:10:c2:6a:67:bd:4e:63:db:da:e5:84:d0:67:74:fa:75:cf:
e7:2b:60:55:eb:40:1d:03:df:7c:20:60:63:3b:80:36:0a:cc:
89:3c:41:c4:de:12:d0:56:f2:03:04:c2:1f:18:fd:68:d6:40:
bd:6d:6b:e8:9c:31:ba:38:f8:8a:b2:c3:f9:79:d0:7a:5c:69:
6c:e7:2b:ae:8d:73:8d:a6:52:1b:07:ec:6b:a4:ad:6c:b7:5b:
ab:09:29:cf:b2:0f:0a:5a:dc:91:f5:26:0d:37:4f:c7:0c:4f:
8d:e8:62:6d:1e:b2:c1:78:3b:39:37:28:cd:1c:7d:f1:e4:62:
94:a1:52:4c:a4:0e:b5:8a:d3:2b:fa:24:07:96:cc:09:04:25:
ba:46:70:72:ad:88:11:80:fd:64:b7:c5:97:6a:25:6a:3e:fe:
92:75:a3:cc:4b:7a:0e:28:a4:54:ad:d3:c7:4c:85:99:bf:25:
46:5e:0d:2b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 1 03:55:47 2025 by rpki-client