Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1e/e75e41-a828-4dc5-8ed3-9fc36411accc/1/OTn5K4Jc4RCQPDHVIrD1DK_XSm8.mft
File: OTn5K4Jc4RCQPDHVIrD1DK_XSm8.mft (raw, json)
Hash identifier: CY+NqSyXEGKZGcnfZuyTGR8AI8WaGgjNjxWonO+62Lk=
Subject key identifier: 94:E5:93:89:9B:91:6B:66:43:7E:37:79:9B:C4:BB:09:62:BC:6A:BF
Authority key identifier: 39:39:F9:2B:82:5C:E1:10:90:3C:31:D5:22:B0:F5:0C:AF:D7:4A:6F
Certificate issuer: /CN=3939f92b825ce110903c31d522b0f50cafd74a6f
Certificate serial: 01967755A13A38ABF4966057FC6F8F4AE850
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OTn5K4Jc4RCQPDHVIrD1DK_XSm8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1e/e75e41-a828-4dc5-8ed3-9fc36411accc/1/OTn5K4Jc4RCQPDHVIrD1DK_XSm8.mft
Manifest number: 04CB
Signing time: Sun 27 Apr 2025 13:00:22 +0000
Manifest this update: Sun 27 Apr 2025 13:00:22 +0000
Manifest next update: Mon 28 Apr 2025 13:00:22 +0000
Files and hashes: 1: OTn5K4Jc4RCQPDHVIrD1DK_XSm8.crl (hash: wdmcgB4ugKDmSoJWY0sw7eWJD3biEF+a5rdN34DT8U8=)
2: YKP2-mUbLqVt8YjjDalCzO3YP4U.roa (hash: Yz1Fy2JsuM7B/qCN027yJ5VSafRq6NaaRWcEtGjJrwo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1e/e75e41-a828-4dc5-8ed3-9fc36411accc/1/OTn5K4Jc4RCQPDHVIrD1DK_XSm8.crl
rsync://rpki.ripe.net/repository/DEFAULT/1e/e75e41-a828-4dc5-8ed3-9fc36411accc/1/OTn5K4Jc4RCQPDHVIrD1DK_XSm8.mft
rsync://rpki.ripe.net/repository/DEFAULT/OTn5K4Jc4RCQPDHVIrD1DK_XSm8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Apr 2025 13:00:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:77:55:a1:3a:38:ab:f4:96:60:57:fc:6f:8f:4a:e8:50
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3939f92b825ce110903c31d522b0f50cafd74a6f
Validity
Not Before: Apr 27 13:00:22 2025 GMT
Not After : Apr 28 13:00:22 2025 GMT
Subject: CN=94e593899b916b66437e37799bc4bb0962bc6abf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:4f:d6:8b:03:a0:6a:bf:d3:34:25:d5:24:4d:
e4:35:9f:5b:14:f7:db:9b:a6:68:d1:f0:a7:b1:a9:
32:51:6a:11:69:5f:98:f9:5e:42:49:da:21:ac:a8:
fc:98:ae:58:10:77:41:cf:e3:44:35:6b:39:da:69:
ab:bd:ba:17:54:62:1b:d8:13:ee:ea:4e:e0:ee:ba:
59:ab:24:72:1c:9a:62:50:0f:5f:78:be:68:d8:df:
b9:f2:32:e6:5e:44:9d:fb:46:15:7e:1f:98:96:34:
d6:dd:b1:d5:20:d0:71:36:6b:c4:5e:c8:cc:6e:12:
c4:b3:47:b2:79:05:a5:79:99:87:f9:aa:c9:f8:94:
66:a0:db:79:eb:87:f2:3f:82:e1:ea:40:bf:70:d6:
8e:ba:8d:14:d6:08:cf:92:66:b4:df:e0:02:f6:ce:
75:73:35:f4:f4:87:bd:88:be:d7:ce:1d:44:99:13:
c3:a9:df:4a:5d:e2:8f:93:79:bb:cb:41:74:e4:d6:
4b:77:b1:72:01:a8:0a:59:c0:17:a0:b0:c1:4a:b1:
31:e5:af:1e:24:09:1d:6a:1f:33:41:ee:f8:fd:e4:
69:50:68:16:58:0a:a0:a8:4c:48:a7:b1:22:5f:5c:
c1:60:05:3b:2c:fd:55:2b:26:20:73:3a:0e:02:f6:
e3:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
94:E5:93:89:9B:91:6B:66:43:7E:37:79:9B:C4:BB:09:62:BC:6A:BF
X509v3 Authority Key Identifier:
keyid:39:39:F9:2B:82:5C:E1:10:90:3C:31:D5:22:B0:F5:0C:AF:D7:4A:6F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OTn5K4Jc4RCQPDHVIrD1DK_XSm8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/e75e41-a828-4dc5-8ed3-9fc36411accc/1/OTn5K4Jc4RCQPDHVIrD1DK_XSm8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/e75e41-a828-4dc5-8ed3-9fc36411accc/1/OTn5K4Jc4RCQPDHVIrD1DK_XSm8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
85:0a:38:45:04:74:17:85:2e:9d:59:c1:62:c4:74:b4:a3:97:
ac:40:2a:14:bf:2a:f9:39:93:94:c7:c3:21:00:6f:f7:9f:3a:
ea:4e:51:ea:ed:f9:51:1b:14:a4:7e:c4:22:eb:18:ca:03:23:
bf:0d:f7:93:5d:14:2c:6b:77:f5:41:22:8e:01:9b:24:82:81:
c1:f7:78:79:9b:4b:1c:94:3b:3a:59:04:43:bd:13:72:f9:7b:
f9:ce:6f:9d:11:f5:27:e0:4e:8c:a6:4a:17:ca:84:29:40:36:
68:18:a4:67:90:4f:72:e3:07:0b:f0:5f:d8:70:a5:60:ac:6e:
30:7b:ac:5e:72:e6:12:31:bf:23:12:ff:5e:b0:ce:23:79:36:
34:45:45:46:4f:74:ed:b0:ca:f9:29:b7:39:a8:9c:5d:7b:a9:
00:8d:a8:37:d0:28:27:c3:4b:af:3c:6c:3f:49:9d:ce:3d:0a:
12:d4:7c:6e:51:2f:93:4d:dd:76:65:97:19:a9:0b:ee:0c:54:
2b:c8:ec:1d:ca:39:3b:40:0c:c4:34:12:4d:8e:71:d9:8d:49:
ed:71:bc:5e:1d:4b:96:e1:27:c3:23:96:8c:8e:3f:d9:e8:a3:
b1:81:fd:b3:f1:1d:03:70:e2:d5:51:0b:c5:02:fa:dc:b0:dc:
a8:e0:15:70
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 20:30:46 2025 by rpki-client