Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/42/818e10-409b-451a-82b7-e5c1c62cfe37/1/OTipB3cqWf31n2L5rZC-UCFxlG4.mft
File: OTipB3cqWf31n2L5rZC-UCFxlG4.mft (raw, json)
Hash identifier: 1o2CQNPSFgC+ZSDDL2PVke3YVBXAW9uWet67YRnHHpc=
Subject key identifier: A0:A1:4B:17:3A:3E:BA:D3:C1:D2:9D:BB:BF:62:AD:1A:5D:B9:4F:A0
Authority key identifier: 39:38:A9:07:77:2A:59:FD:F5:9F:62:F9:AD:90:BE:50:21:71:94:6E
Certificate issuer: /CN=3938a907772a59fdf59f62f9ad90be502171946e
Certificate serial: 0196741E58855D6D91B50DE83F8CDDDB120C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OTipB3cqWf31n2L5rZC-UCFxlG4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/42/818e10-409b-451a-82b7-e5c1c62cfe37/1/OTipB3cqWf31n2L5rZC-UCFxlG4.mft
Manifest number: 0865
Signing time: Sat 26 Apr 2025 22:01:07 +0000
Manifest this update: Sat 26 Apr 2025 22:01:07 +0000
Manifest next update: Sun 27 Apr 2025 22:01:07 +0000
Files and hashes: 1: OTipB3cqWf31n2L5rZC-UCFxlG4.crl (hash: tkMMZDurPFdxPiWhm5ib8GOox9ggz62YFPuhL04lJt0=)
2: R2rdc7iEL-QEpfpveQ8XLi794UY.roa (hash: NOUYuQT3ToD/1aYOE1fR2p8arsC0PmHYqq5MEGhXZLs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/42/818e10-409b-451a-82b7-e5c1c62cfe37/1/OTipB3cqWf31n2L5rZC-UCFxlG4.crl
rsync://rpki.ripe.net/repository/DEFAULT/42/818e10-409b-451a-82b7-e5c1c62cfe37/1/OTipB3cqWf31n2L5rZC-UCFxlG4.mft
rsync://rpki.ripe.net/repository/DEFAULT/OTipB3cqWf31n2L5rZC-UCFxlG4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Apr 2025 20:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:74:1e:58:85:5d:6d:91:b5:0d:e8:3f:8c:dd:db:12:0c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3938a907772a59fdf59f62f9ad90be502171946e
Validity
Not Before: Apr 26 22:01:07 2025 GMT
Not After : Apr 27 22:01:07 2025 GMT
Subject: CN=a0a14b173a3ebad3c1d29dbbbf62ad1a5db94fa0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:77:e0:1c:b0:cd:7e:c5:8b:d2:bf:08:e9:9a:
e2:0f:ff:00:70:bf:d1:4c:d4:2b:df:07:2e:b9:07:
8d:1c:37:b9:f2:40:10:df:d0:40:0a:ba:93:5a:18:
3b:90:c3:a1:0e:70:64:99:2c:3d:7f:8f:98:ae:79:
93:27:86:09:f6:a6:39:19:3c:a2:59:9b:c8:fd:c7:
35:94:c6:cc:42:8a:cb:c5:9c:c5:52:46:93:75:fc:
15:bb:82:8b:60:f7:f6:7d:26:6c:5d:ee:f2:0f:1c:
f0:1f:78:60:9d:f1:58:f6:4a:60:d8:a7:39:59:fb:
1f:02:45:a3:7a:0f:fe:17:08:9f:43:55:e1:49:0b:
5f:01:80:b3:0d:f9:16:55:fe:b9:3c:49:3c:c7:21:
4c:22:43:64:e7:a5:99:08:a8:39:2a:5a:92:42:6e:
87:da:69:db:5b:3a:f0:9d:7f:48:b5:ff:d9:6d:07:
77:f4:a4:e6:62:66:33:e4:b4:56:87:d6:09:cb:b7:
af:21:63:54:45:a4:68:ea:b1:7c:1c:18:8d:74:6a:
34:db:67:23:34:ca:78:86:33:08:ab:aa:d8:29:c5:
c7:15:2e:6e:cf:4a:5b:5b:0d:ab:72:86:c0:3a:27:
c3:96:70:c4:7e:f9:c3:57:9e:a0:ef:84:11:ef:79:
29:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A0:A1:4B:17:3A:3E:BA:D3:C1:D2:9D:BB:BF:62:AD:1A:5D:B9:4F:A0
X509v3 Authority Key Identifier:
keyid:39:38:A9:07:77:2A:59:FD:F5:9F:62:F9:AD:90:BE:50:21:71:94:6E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OTipB3cqWf31n2L5rZC-UCFxlG4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/42/818e10-409b-451a-82b7-e5c1c62cfe37/1/OTipB3cqWf31n2L5rZC-UCFxlG4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/42/818e10-409b-451a-82b7-e5c1c62cfe37/1/OTipB3cqWf31n2L5rZC-UCFxlG4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
c4:24:84:3c:52:c2:36:5c:8a:c0:a9:78:f0:27:f4:d1:5b:19:
6b:a8:b6:c5:43:e9:8e:2f:61:72:c1:3e:7a:40:c4:5d:bc:a1:
69:87:f6:b5:d9:07:02:60:dd:2a:a7:8a:31:79:15:cb:ea:88:
a3:31:bc:46:c7:59:1b:94:06:82:7d:0b:b3:73:a6:2a:cf:8e:
6f:cf:ec:f0:29:7d:83:be:10:ac:0a:9a:c9:a8:df:09:d2:69:
4e:ae:0f:90:79:6d:b3:32:9a:c8:da:6a:97:6c:79:89:b6:62:
07:d8:a3:15:57:d9:82:57:8d:5f:71:fd:98:e9:c8:96:24:7a:
cc:6a:9e:3a:14:77:1f:86:68:30:61:bf:1f:7a:0e:d9:95:bf:
61:ef:fe:36:76:08:f1:cb:ed:44:ff:da:3c:0e:f3:5a:1a:ba:
49:4f:8c:9c:4d:59:73:ca:54:9f:3d:45:1c:e1:c5:bb:b2:ca:
cb:0f:21:2f:1a:d3:8e:3f:c2:0a:50:e9:de:2b:bc:37:c7:46:
a7:7f:bc:b0:a8:47:6b:c2:97:b0:dd:74:d8:37:bd:99:9d:36:
15:1d:50:1f:07:1c:dd:51:41:3c:b9:7f:57:55:28:5b:de:d2:
01:58:f7:5a:75:a3:8c:cc:e5:20:fe:d3:10:9e:7c:31:7d:a3:
64:ad:0b:63
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 05:40:41 2025 by rpki-client