Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f5/9f69d4-65ef-4d5e-9c2f-7998f4bdf21c/1/OWjuCx9Ay7E6iP3kwLEWgwTfLWs.mft
File: OWjuCx9Ay7E6iP3kwLEWgwTfLWs.mft (raw, json)
Hash identifier: m5mBy4YfcOibNYcSxdn/4j1x0sG6b3P6Nxb+/NEeZEg=
Subject key identifier: 2F:31:EE:96:BD:43:D5:C7:5F:C9:5B:34:19:D9:4A:5D:19:60:4D:92
Authority key identifier: 39:68:EE:0B:1F:40:CB:B1:3A:88:FD:E4:C0:B1:16:83:04:DF:2D:6B
Certificate issuer: /CN=3968ee0b1f40cbb13a88fde4c0b1168304df2d6b
Certificate serial: 01968391231E434EF7FEB0FC84CD4F5BBBFA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OWjuCx9Ay7E6iP3kwLEWgwTfLWs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f5/9f69d4-65ef-4d5e-9c2f-7998f4bdf21c/1/OWjuCx9Ay7E6iP3kwLEWgwTfLWs.mft
Manifest number: 14DF
Signing time: Tue 29 Apr 2025 22:00:49 +0000
Manifest this update: Tue 29 Apr 2025 22:00:49 +0000
Manifest next update: Wed 30 Apr 2025 22:00:49 +0000
Files and hashes: 1: OWjuCx9Ay7E6iP3kwLEWgwTfLWs.crl (hash: rDe/+g6IaswhzgNfgHNmLaWVWnli1OF1s0EjkfEm9mM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f5/9f69d4-65ef-4d5e-9c2f-7998f4bdf21c/1/OWjuCx9Ay7E6iP3kwLEWgwTfLWs.crl
rsync://rpki.ripe.net/repository/DEFAULT/f5/9f69d4-65ef-4d5e-9c2f-7998f4bdf21c/1/OWjuCx9Ay7E6iP3kwLEWgwTfLWs.mft
rsync://rpki.ripe.net/repository/DEFAULT/OWjuCx9Ay7E6iP3kwLEWgwTfLWs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 30 Apr 2025 22:00:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:83:91:23:1e:43:4e:f7:fe:b0:fc:84:cd:4f:5b:bb:fa
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3968ee0b1f40cbb13a88fde4c0b1168304df2d6b
Validity
Not Before: Apr 29 22:00:49 2025 GMT
Not After : Apr 30 22:00:49 2025 GMT
Subject: CN=2f31ee96bd43d5c75fc95b3419d94a5d19604d92
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:ca:a4:34:01:a3:4c:d7:e2:91:fc:e3:e3:e0:
05:b4:e3:08:74:af:07:9b:75:e9:a5:be:64:e4:c3:
10:8a:4c:9c:ae:4b:c6:0e:cd:76:ff:24:99:1c:9f:
52:03:06:20:ae:72:2a:19:a5:70:c5:ed:81:a1:57:
5a:99:e7:d7:bb:55:cf:b3:f0:42:18:29:08:f5:40:
68:98:a7:9f:4e:32:64:9a:a4:b4:3f:39:2d:e9:6a:
74:38:1d:7a:72:5e:32:79:4c:dd:fa:10:13:2f:72:
43:6e:e4:37:29:4c:35:32:a6:0f:2f:92:08:45:4c:
5d:b6:8e:4b:ae:ff:0a:9b:1c:a5:c6:70:4f:c0:c2:
eb:80:78:ff:05:99:d3:48:39:a4:60:64:3d:64:16:
2c:9d:48:52:33:b1:85:ef:50:f4:4b:2b:a7:28:a1:
0e:b3:a2:5e:5e:6b:32:47:e0:6d:8a:9a:7c:f0:73:
64:4a:50:57:ff:20:21:1d:bd:74:b6:c9:be:8d:2f:
7b:ef:26:26:cf:38:8b:c2:be:08:76:98:38:1f:51:
02:98:1b:8c:58:ff:d1:d9:d0:e9:b0:f3:f9:94:af:
a7:09:88:f2:d9:b1:4d:18:e9:ad:ae:60:0d:36:3a:
36:fa:92:cf:a6:c6:87:3c:0e:f5:62:2e:0d:72:05:
2e:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2F:31:EE:96:BD:43:D5:C7:5F:C9:5B:34:19:D9:4A:5D:19:60:4D:92
X509v3 Authority Key Identifier:
keyid:39:68:EE:0B:1F:40:CB:B1:3A:88:FD:E4:C0:B1:16:83:04:DF:2D:6B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OWjuCx9Ay7E6iP3kwLEWgwTfLWs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/9f69d4-65ef-4d5e-9c2f-7998f4bdf21c/1/OWjuCx9Ay7E6iP3kwLEWgwTfLWs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/9f69d4-65ef-4d5e-9c2f-7998f4bdf21c/1/OWjuCx9Ay7E6iP3kwLEWgwTfLWs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
10:a0:f9:37:1f:92:19:8b:1f:14:a6:a2:37:b8:7f:47:30:e9:
6e:c3:1b:27:13:94:dc:07:e3:08:94:c6:33:39:72:17:54:cc:
73:8d:b9:c8:e8:a7:4a:2a:31:e8:4e:48:e0:4e:c2:cd:33:9f:
a6:40:b1:78:22:33:81:24:f9:a9:29:8c:42:d8:d9:b6:95:09:
e6:b1:1c:a2:e6:34:9b:bc:6d:63:c3:8f:72:38:63:e9:c3:09:
e5:3a:0f:a1:1b:5b:30:dd:b8:be:22:71:b1:f2:e5:23:56:63:
ad:fa:af:4a:c2:40:26:1d:3e:9f:6d:5f:67:b9:a0:20:56:74:
7b:d8:62:98:ad:37:ab:0f:b0:89:a5:45:1a:f6:f2:61:73:9c:
57:9f:c7:45:84:a3:23:14:ce:7a:83:7a:a4:f0:e1:c3:f1:37:
e1:b5:be:02:f7:04:db:22:5f:34:62:88:b9:b2:5e:b4:1f:71:
4c:e9:0a:7e:fb:ec:db:0b:db:c3:de:4b:22:cf:d5:7d:69:02:
fc:a0:59:db:7e:db:b7:8d:d3:b0:9e:bc:4a:e2:a7:84:8e:f7:
cc:44:35:b4:a6:29:41:99:30:95:4a:88:18:1e:23:6f:3a:61:
a1:95:46:7c:90:d5:74:bc:b7:9b:e4:8b:2a:49:e8:3a:51:76:
e7:26:42:e1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 30 08:16:38 2025 by rpki-client