Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fd/abbcc9-f832-4b5b-bc22-25781e116782/1/oJD-k_R_g4ea4suDVIjNn31pm8A.mft
File: oJD-k_R_g4ea4suDVIjNn31pm8A.mft (raw, json)
Hash identifier: 7ZvBomL9ShZfrp0UuXEqWA8K6jPyAo9bp1TI6akA1XU=
Subject key identifier: CF:C2:45:C7:88:6D:A6:E0:BE:E4:FA:5D:B5:79:12:F7:C5:01:C5:8E
Authority key identifier: A0:90:FE:93:F4:7F:83:87:9A:E2:CB:83:54:88:CD:9F:7D:69:9B:C0
Certificate issuer: /CN=a090fe93f47f83879ae2cb835488cd9f7d699bc0
Certificate serial: 01976D3E80C4DB4184DD51DE351585C6F07C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/oJD-k_R_g4ea4suDVIjNn31pm8A.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fd/abbcc9-f832-4b5b-bc22-25781e116782/1/oJD-k_R_g4ea4suDVIjNn31pm8A.mft
Manifest number: 158D
Signing time: Sat 14 Jun 2025 07:01:42 +0000
Manifest this update: Sat 14 Jun 2025 07:01:42 +0000
Manifest next update: Sun 15 Jun 2025 07:01:42 +0000
Files and hashes: 1: oJD-k_R_g4ea4suDVIjNn31pm8A.crl (hash: S8qPGep2DRJSisivbDgk4/p/FMzUmPWQf62E07AAw4U=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fd/abbcc9-f832-4b5b-bc22-25781e116782/1/oJD-k_R_g4ea4suDVIjNn31pm8A.crl
rsync://rpki.ripe.net/repository/DEFAULT/fd/abbcc9-f832-4b5b-bc22-25781e116782/1/oJD-k_R_g4ea4suDVIjNn31pm8A.mft
rsync://rpki.ripe.net/repository/DEFAULT/oJD-k_R_g4ea4suDVIjNn31pm8A.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 15 Jun 2025 01:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:6d:3e:80:c4:db:41:84:dd:51:de:35:15:85:c6:f0:7c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a090fe93f47f83879ae2cb835488cd9f7d699bc0
Validity
Not Before: Jun 14 07:01:42 2025 GMT
Not After : Jun 15 07:01:42 2025 GMT
Subject: CN=cfc245c7886da6e0bee4fa5db57912f7c501c58e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:02:d1:24:61:19:e2:84:10:ca:2e:96:f1:30:
73:5a:bf:6b:2f:e4:da:45:a4:fb:ae:f6:51:d1:d5:
f3:62:53:89:24:13:60:21:bf:af:34:40:45:c4:e1:
66:1a:76:d8:66:a4:74:ba:58:c7:81:54:7b:5d:73:
62:dc:7f:54:b0:72:82:53:34:94:75:4d:b1:67:f4:
74:68:68:25:27:37:9c:ca:62:ec:75:98:da:45:20:
a7:15:64:5e:03:2c:85:50:15:66:c9:2b:f9:82:04:
0c:47:92:5f:1c:9b:3c:74:75:95:9b:a1:d8:88:48:
96:a4:af:6a:26:b4:de:61:7b:eb:41:bd:a2:4d:ac:
74:c6:a3:58:da:1f:c1:23:b0:9f:8e:6f:a4:e2:47:
40:3b:10:5a:3d:74:66:15:3c:c7:6f:3f:d9:bd:7f:
7f:91:14:f2:51:72:e5:98:d1:21:bd:f2:73:f6:8b:
05:d2:2c:1e:06:f2:67:9f:76:22:50:92:03:a1:8f:
58:56:79:98:45:13:f9:f6:78:ab:4b:6c:f4:67:da:
f1:37:5c:48:89:9f:3c:ab:e4:d0:e8:7c:33:49:43:
f4:16:9b:50:58:d3:17:9f:f7:48:ce:30:05:18:c1:
6f:9f:8d:26:15:c2:60:af:d0:09:29:3c:cb:c9:dc:
e9:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CF:C2:45:C7:88:6D:A6:E0:BE:E4:FA:5D:B5:79:12:F7:C5:01:C5:8E
X509v3 Authority Key Identifier:
keyid:A0:90:FE:93:F4:7F:83:87:9A:E2:CB:83:54:88:CD:9F:7D:69:9B:C0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/oJD-k_R_g4ea4suDVIjNn31pm8A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/abbcc9-f832-4b5b-bc22-25781e116782/1/oJD-k_R_g4ea4suDVIjNn31pm8A.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/abbcc9-f832-4b5b-bc22-25781e116782/1/oJD-k_R_g4ea4suDVIjNn31pm8A.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
19:2c:be:97:cc:b5:4c:2c:0b:8f:d9:48:37:7e:5b:8b:df:7f:
f0:39:eb:bf:32:19:a7:c7:e7:c4:24:90:25:1d:85:3f:a5:bd:
6b:da:a3:aa:8f:37:28:e0:d1:ae:3a:ae:c4:95:06:c6:75:6e:
e2:5f:46:79:8a:9a:9e:4c:69:d7:d4:d4:6f:82:9a:f8:63:69:
c8:5a:53:10:2b:65:60:cc:f1:c0:97:66:3a:02:72:43:42:69:
ba:12:32:9c:60:38:4c:27:77:a4:c2:39:6d:dd:c0:8f:48:bc:
9b:ec:16:8c:f9:86:ac:7a:e6:ca:e3:50:61:1d:df:f5:97:1e:
3c:89:6f:09:f4:cd:86:03:d6:14:02:22:c4:0f:d7:f9:51:5b:
27:e7:97:8e:0d:52:05:21:ae:63:f8:31:db:a7:07:89:4a:63:
8c:6f:e9:bf:da:e3:07:63:e5:72:97:03:55:34:8d:5f:43:02:
b5:21:11:e0:95:a0:9c:b7:78:fb:ea:36:a3:a8:d6:47:0c:0c:
04:11:90:71:f6:c6:9a:ad:a9:05:cd:02:1e:4d:65:6f:92:9c:
7d:13:cd:e5:0d:00:73:15:f8:f8:31:38:03:b5:2a:a9:94:39:
4e:55:ba:90:7a:71:06:27:c0:c4:10:d0:f0:52:ce:a9:f2:48:
4c:7d:2d:96
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 14 13:02:02 2025 by rpki-client