Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f8/465c51-78e4-4178-8585-72f21e646e8e/1/oRiq_bvKjU4AY8MRlfpsGUw5Q8s.mft
File: oRiq_bvKjU4AY8MRlfpsGUw5Q8s.mft (raw, json)
Hash identifier: AzyZX/gahr7o2YiN5nsy+zj6Z7XMHQqaTvzhBXjUWIA=
Subject key identifier: EB:65:0B:CD:8B:F2:D6:D1:28:7B:BA:34:08:D3:60:5D:EF:74:B8:61
Authority key identifier: A1:18:AA:FD:BB:CA:8D:4E:00:63:C3:11:95:FA:6C:19:4C:39:43:CB
Certificate issuer: /CN=a118aafdbbca8d4e0063c31195fa6c194c3943cb
Certificate serial: 01967755934E6746585D6F9DCAE215DC01FE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/oRiq_bvKjU4AY8MRlfpsGUw5Q8s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f8/465c51-78e4-4178-8585-72f21e646e8e/1/oRiq_bvKjU4AY8MRlfpsGUw5Q8s.mft
Manifest number: 042F
Signing time: Sun 27 Apr 2025 13:00:19 +0000
Manifest this update: Sun 27 Apr 2025 13:00:19 +0000
Manifest next update: Mon 28 Apr 2025 13:00:19 +0000
Files and hashes: 1: oRiq_bvKjU4AY8MRlfpsGUw5Q8s.crl (hash: KFku5EsicA2HQmnO8rhr7LOMymbotO9wuEeThiJB9bg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f8/465c51-78e4-4178-8585-72f21e646e8e/1/oRiq_bvKjU4AY8MRlfpsGUw5Q8s.crl
rsync://rpki.ripe.net/repository/DEFAULT/f8/465c51-78e4-4178-8585-72f21e646e8e/1/oRiq_bvKjU4AY8MRlfpsGUw5Q8s.mft
rsync://rpki.ripe.net/repository/DEFAULT/oRiq_bvKjU4AY8MRlfpsGUw5Q8s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Apr 2025 13:00:19 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:77:55:93:4e:67:46:58:5d:6f:9d:ca:e2:15:dc:01:fe
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a118aafdbbca8d4e0063c31195fa6c194c3943cb
Validity
Not Before: Apr 27 13:00:19 2025 GMT
Not After : Apr 28 13:00:19 2025 GMT
Subject: CN=eb650bcd8bf2d6d1287bba3408d3605def74b861
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:92:62:58:5c:da:4d:2e:d3:14:37:26:99:cc:
a2:26:db:b3:be:19:65:2a:44:b1:de:62:b9:2b:c8:
34:18:9d:d5:6c:9c:ee:d0:9d:ae:b0:25:b0:91:87:
b2:82:4a:0a:dc:c2:65:87:bf:98:6f:e2:d4:e2:07:
65:03:bf:f5:2c:49:da:a1:14:bf:42:3b:92:5f:cd:
d1:b4:cb:87:62:14:3e:eb:9e:59:e6:87:55:8f:b7:
3a:5e:51:da:54:7c:3a:2a:4b:d9:06:69:a6:9a:ca:
56:3c:d6:c7:18:a5:e7:28:e8:2a:50:f0:f0:ca:4d:
39:9f:c2:93:60:d1:72:1e:8c:f1:02:78:55:19:71:
04:a9:b0:a8:99:58:02:34:2d:17:f1:be:e5:62:77:
2b:e0:ea:db:93:2f:13:ec:3f:c2:3f:7c:09:42:91:
21:20:77:9a:05:36:b1:f8:2e:f9:71:db:99:f1:a5:
ae:40:ba:b3:d9:15:7e:36:f4:f7:9f:24:29:27:ff:
df:9e:a0:10:63:90:ad:57:24:56:2a:c3:e6:dd:80:
1b:d2:69:b5:53:09:52:b9:2b:bc:cb:b8:1a:63:48:
ca:20:1f:19:8c:eb:c3:da:d9:98:20:56:d7:45:3b:
ab:bc:a5:4c:d2:4f:72:68:8e:70:ea:2e:f0:b2:71:
3a:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EB:65:0B:CD:8B:F2:D6:D1:28:7B:BA:34:08:D3:60:5D:EF:74:B8:61
X509v3 Authority Key Identifier:
keyid:A1:18:AA:FD:BB:CA:8D:4E:00:63:C3:11:95:FA:6C:19:4C:39:43:CB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/oRiq_bvKjU4AY8MRlfpsGUw5Q8s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/465c51-78e4-4178-8585-72f21e646e8e/1/oRiq_bvKjU4AY8MRlfpsGUw5Q8s.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/465c51-78e4-4178-8585-72f21e646e8e/1/oRiq_bvKjU4AY8MRlfpsGUw5Q8s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
48:f9:d6:ea:77:52:2a:41:d3:a2:3a:ef:82:81:9f:3a:85:4b:
57:a5:29:17:5c:89:13:b8:ed:82:91:26:23:02:6c:1f:a0:a2:
d9:d7:25:f5:b7:4f:44:5a:7d:69:89:4c:15:bc:e4:12:99:05:
12:20:6c:6d:2c:dc:23:31:2d:84:5e:c9:3a:95:96:77:99:a9:
1a:a1:ab:58:3a:2c:74:da:2e:fe:19:51:4c:5d:e1:ea:1f:eb:
0c:fb:7a:de:20:99:04:86:5c:30:aa:56:77:3b:01:fe:47:d2:
a8:75:da:ab:ee:19:44:2b:31:0d:2e:c0:62:fa:f7:26:2c:ec:
75:8a:f3:84:f3:a9:aa:ff:f8:7d:d7:83:cc:9c:db:15:01:46:
4b:ef:be:05:f6:ff:ee:65:4c:55:e6:f0:54:77:07:4c:70:24:
5e:c3:6a:e8:34:8a:66:2f:83:e4:89:5b:cf:e6:f7:ff:30:45:
66:35:95:6b:dc:74:5f:d8:77:ac:70:ea:b4:d2:c8:5d:b1:2e:
a8:90:c8:4c:7c:80:89:c2:4a:51:ca:59:08:23:19:44:ba:66:
05:4d:80:80:6b:4d:70:8a:2f:12:27:f1:07:ef:c4:08:85:a0:
40:e8:20:e3:18:c5:f7:33:70:32:55:fb:f3:e7:49:83:7c:10:
8e:28:30:ef
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 22:11:12 2025 by rpki-client