Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fc/213983-fcd5-42d5-8f15-d498aab4eb2a/1/oDXttQZCEUQxra7YvFBeaFWcrUo.mft
File: oDXttQZCEUQxra7YvFBeaFWcrUo.mft (raw, json)
Hash identifier: TEEZZ5aN8z46EDCI28YDKaaDX6AirY6+kTugOthgJ2o=
Subject key identifier: F6:B5:93:38:EC:A2:14:2E:08:56:0F:0F:2A:1D:3D:C7:B1:9C:B0:19
Authority key identifier: A0:35:ED:B5:06:42:11:44:31:AD:AE:D8:BC:50:5E:68:55:9C:AD:4A
Certificate issuer: /CN=a035edb50642114431adaed8bc505e68559cad4a
Certificate serial: 019683C7D60A21D09E025401DFD2567ED97F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/oDXttQZCEUQxra7YvFBeaFWcrUo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fc/213983-fcd5-42d5-8f15-d498aab4eb2a/1/oDXttQZCEUQxra7YvFBeaFWcrUo.mft
Manifest number: 0225
Signing time: Tue 29 Apr 2025 23:00:33 +0000
Manifest this update: Tue 29 Apr 2025 23:00:33 +0000
Manifest next update: Wed 30 Apr 2025 23:00:33 +0000
Files and hashes: 1: oDXttQZCEUQxra7YvFBeaFWcrUo.crl (hash: 74DeghaT0inJr4+IHPg3Zh52NbTWhNwChH5mZVLPScM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fc/213983-fcd5-42d5-8f15-d498aab4eb2a/1/oDXttQZCEUQxra7YvFBeaFWcrUo.crl
rsync://rpki.ripe.net/repository/DEFAULT/fc/213983-fcd5-42d5-8f15-d498aab4eb2a/1/oDXttQZCEUQxra7YvFBeaFWcrUo.mft
rsync://rpki.ripe.net/repository/DEFAULT/oDXttQZCEUQxra7YvFBeaFWcrUo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 30 Apr 2025 15:02:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:83:c7:d6:0a:21:d0:9e:02:54:01:df:d2:56:7e:d9:7f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a035edb50642114431adaed8bc505e68559cad4a
Validity
Not Before: Apr 29 23:00:33 2025 GMT
Not After : Apr 30 23:00:33 2025 GMT
Subject: CN=f6b59338eca2142e08560f0f2a1d3dc7b19cb019
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:4c:20:3e:46:ba:f6:d4:6a:ba:45:c3:d1:7a:
b0:ea:7e:04:b1:1f:35:9d:c9:c5:21:78:f2:41:09:
c0:74:6c:9b:cf:10:1f:bd:3b:25:d2:bc:47:0d:1d:
34:c3:59:41:f9:d8:ae:5e:ef:3d:ee:a7:91:0d:34:
cf:50:eb:43:8f:85:bf:57:47:98:b8:0f:08:8e:03:
71:b8:e8:4d:73:14:ab:40:dd:9b:97:4b:6a:b3:79:
03:05:a8:f3:fc:1a:01:4b:6e:e5:4f:3e:8a:8a:77:
ac:99:b7:16:c0:14:c9:0a:ce:29:12:ff:3f:4d:09:
d1:03:90:3f:f9:93:b2:79:fa:b2:ab:29:2c:a2:84:
80:6b:80:98:d7:01:23:75:c2:02:73:6d:6e:12:c1:
80:ac:d0:2f:70:cf:5f:77:31:86:6f:9c:49:ff:0a:
8f:22:2e:95:9d:e9:ce:b5:42:0c:2c:4a:06:4b:9d:
bd:91:5a:7f:34:6c:70:ca:48:9c:4e:7b:b9:34:70:
d6:0c:71:32:38:bc:03:90:f8:4f:b7:1a:25:02:14:
1e:27:9a:e8:79:c7:f7:f1:0c:3a:67:8e:b0:07:7b:
8e:a9:92:4d:33:38:02:4f:92:34:cc:a6:82:4d:c9:
cf:96:df:05:58:54:a3:00:86:e0:88:8c:f0:11:ce:
24:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F6:B5:93:38:EC:A2:14:2E:08:56:0F:0F:2A:1D:3D:C7:B1:9C:B0:19
X509v3 Authority Key Identifier:
keyid:A0:35:ED:B5:06:42:11:44:31:AD:AE:D8:BC:50:5E:68:55:9C:AD:4A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/oDXttQZCEUQxra7YvFBeaFWcrUo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/213983-fcd5-42d5-8f15-d498aab4eb2a/1/oDXttQZCEUQxra7YvFBeaFWcrUo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/213983-fcd5-42d5-8f15-d498aab4eb2a/1/oDXttQZCEUQxra7YvFBeaFWcrUo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
24:da:70:36:36:46:71:dc:7c:2d:b5:0e:e4:4c:96:f0:34:9f:
72:98:40:d7:01:70:87:b9:6c:46:56:4d:32:19:44:c6:27:ac:
ce:1e:c0:aa:72:2e:c4:9d:ba:d2:46:5a:e3:f6:3a:77:9f:89:
b9:f6:fa:81:13:c3:29:f3:44:16:ba:c7:d6:88:4a:79:23:bf:
bb:06:1d:88:75:24:44:d4:ae:66:dc:ef:28:ba:f7:d4:05:9c:
f8:0b:f9:74:66:bc:5f:76:53:9e:be:7b:ce:7d:0a:c3:99:3d:
1e:ea:bf:e0:a4:cb:17:45:ab:f7:b3:7e:c9:05:8d:90:41:2b:
5a:73:b3:b3:85:7a:b5:21:20:3e:a7:23:b3:c8:87:22:57:b7:
60:b7:96:12:55:63:50:40:dc:8d:d1:16:7f:7f:a8:94:ec:c4:
48:10:1f:15:cf:0a:cd:8a:45:c3:bb:99:24:34:61:00:27:73:
35:04:e1:15:24:25:c4:71:6a:70:cc:a1:6a:cd:06:3e:31:fe:
05:e6:c0:2c:e4:e5:08:ea:d4:db:2c:98:9d:8e:79:43:de:77:
34:4a:72:ac:35:44:62:cc:18:c4:3a:4d:76:ec:8b:86:6f:53:
57:4a:d1:82:23:f3:e8:55:7e:38:de:7a:fe:6a:5f:1b:0c:82:
1e:fd:40:02
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 30 01:35:25 2025 by rpki-client