Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/31/6ebc1c-42ab-4559-84b1-f6ad9330c4b0/1/OtL3zCdTMJgzAxuolGSagM_7E-g.mft
File: OtL3zCdTMJgzAxuolGSagM_7E-g.mft (raw, json)
Hash identifier: 0HhylZhRk+X2pMrWdtAC6KHrqbsOaeRSTHj6YI6CFf8=
Subject key identifier: 18:73:A6:9A:22:60:8D:2A:ED:1C:09:C7:7A:60:8A:9D:54:F3:54:C1
Authority key identifier: 3A:D2:F7:CC:27:53:30:98:33:03:1B:A8:94:64:9A:80:CF:FB:13:E8
Certificate issuer: /CN=3ad2f7cc2753309833031ba894649a80cffb13e8
Certificate serial: 019684DA49711937417940ED15A26641B74D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OtL3zCdTMJgzAxuolGSagM_7E-g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/31/6ebc1c-42ab-4559-84b1-f6ad9330c4b0/1/OtL3zCdTMJgzAxuolGSagM_7E-g.mft
Manifest number: 1516
Signing time: Wed 30 Apr 2025 04:00:20 +0000
Manifest this update: Wed 30 Apr 2025 04:00:20 +0000
Manifest next update: Thu 01 May 2025 04:00:20 +0000
Files and hashes: 1: OtL3zCdTMJgzAxuolGSagM_7E-g.crl (hash: tKjMB8vuKMvT0JCHCktCIfRUgWmBr0ub2eyK/94EMd8=)
2: u1VOczY0GtYqmMxkx1bvtbbyBno.roa (hash: ZYoGR8269MdLBwkunDrMw1B9ylh+XJUv3tEqHGtF+N8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/31/6ebc1c-42ab-4559-84b1-f6ad9330c4b0/1/OtL3zCdTMJgzAxuolGSagM_7E-g.crl
rsync://rpki.ripe.net/repository/DEFAULT/31/6ebc1c-42ab-4559-84b1-f6ad9330c4b0/1/OtL3zCdTMJgzAxuolGSagM_7E-g.mft
rsync://rpki.ripe.net/repository/DEFAULT/OtL3zCdTMJgzAxuolGSagM_7E-g.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 01 May 2025 00:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:84:da:49:71:19:37:41:79:40:ed:15:a2:66:41:b7:4d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3ad2f7cc2753309833031ba894649a80cffb13e8
Validity
Not Before: Apr 30 04:00:20 2025 GMT
Not After : May 1 04:00:20 2025 GMT
Subject: CN=1873a69a22608d2aed1c09c77a608a9d54f354c1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:3b:15:29:25:f3:7f:e3:8b:61:9c:84:a5:50:
3f:79:fb:58:0b:a1:be:dc:78:1f:8c:37:d5:1e:e5:
57:5b:7e:ff:77:e6:81:56:71:f0:07:a3:24:6d:6c:
21:ac:c8:f7:a5:07:fa:48:b1:dd:8b:82:be:51:48:
bf:e4:9e:ff:d5:1d:d4:d0:cc:08:bc:38:1b:49:47:
38:b3:e3:ad:57:81:82:42:63:6e:a8:59:a4:d4:e9:
70:2e:ef:f0:3a:26:2c:99:f7:8c:af:fe:c5:06:c5:
38:32:93:14:51:0b:07:d5:11:b9:71:e1:9e:60:2f:
0e:0a:a0:83:8a:c7:c3:f2:fc:8f:bc:e0:36:36:4f:
77:a9:c7:02:7d:86:62:b4:69:9f:f8:22:0f:84:e2:
83:0b:f7:6f:1b:96:91:bf:18:8b:57:3e:d7:f7:46:
4e:91:5f:c9:ba:2f:31:bc:be:13:c9:b8:92:ec:01:
7a:7b:80:a9:7a:22:09:ee:66:8b:9c:ba:e7:62:9d:
2c:b2:0c:36:b4:54:1b:6b:e1:49:1b:1c:9e:a6:cc:
8a:bf:92:3c:ba:1e:49:58:e0:13:88:74:dd:06:14:
39:07:e9:9c:e3:bf:d5:95:a5:6c:1e:33:bb:87:a5:
40:4c:46:c6:d6:6b:8b:0f:b2:0d:38:e3:76:fc:12:
60:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
18:73:A6:9A:22:60:8D:2A:ED:1C:09:C7:7A:60:8A:9D:54:F3:54:C1
X509v3 Authority Key Identifier:
keyid:3A:D2:F7:CC:27:53:30:98:33:03:1B:A8:94:64:9A:80:CF:FB:13:E8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OtL3zCdTMJgzAxuolGSagM_7E-g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/31/6ebc1c-42ab-4559-84b1-f6ad9330c4b0/1/OtL3zCdTMJgzAxuolGSagM_7E-g.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/31/6ebc1c-42ab-4559-84b1-f6ad9330c4b0/1/OtL3zCdTMJgzAxuolGSagM_7E-g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2d:8b:72:b0:51:aa:50:51:96:6d:42:f7:71:8f:81:45:ef:17:
49:0f:0c:18:53:72:44:67:ed:1e:f9:c0:15:3a:f5:8a:14:59:
a2:20:94:d3:7c:fc:48:27:7b:96:94:f7:ac:a7:d5:7b:62:4c:
be:16:c3:15:8a:55:4d:0b:f4:5d:9a:12:29:d8:9a:86:c7:5c:
5e:78:ab:97:b6:7c:1f:ee:9f:81:a8:8e:27:b8:19:6d:a8:c2:
8d:a3:d5:c0:57:ee:6b:0e:89:7d:c1:50:92:88:5a:2d:30:19:
3e:4f:b5:28:d3:2d:ee:a5:62:0a:38:85:d9:f5:cd:5a:00:f5:
ba:20:f2:0d:99:1e:fc:94:57:30:3a:2d:8b:8d:38:a3:b4:8b:
96:6c:09:95:6d:e6:14:93:47:ab:5c:6e:40:e8:34:da:a8:ab:
97:94:c1:83:e0:84:8f:71:e6:e8:ac:6e:e7:51:4e:a4:e2:89:
b5:03:0b:89:4f:76:8a:59:63:20:dd:3b:f3:af:76:16:cc:e5:
06:11:8b:02:d1:cb:ae:3c:3e:e5:eb:56:25:68:80:60:d2:b9:
07:05:f0:51:b6:ec:dd:12:99:54:ce:b3:71:f0:fd:ca:fa:30:
32:34:2d:62:dd:97:ea:34:56:eb:72:be:41:5e:1a:3d:c4:b6:
39:5a:4d:e6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 30 07:38:09 2025 by rpki-client