Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/47/505755-c4ab-4905-8b48-bbd1ad53da43/1/OTdAGaVNS94j8NooolIVDVy0c60.mft
File: OTdAGaVNS94j8NooolIVDVy0c60.mft (raw, json)
Hash identifier: 3XXqIHvPo1CZeMXFaQGN+R0MO1sSGEHqXlpGa1l1h4Y=
Subject key identifier: EC:3A:AD:76:1F:BA:32:91:7B:3A:CF:AB:8C:83:DF:E5:C4:05:A6:54
Authority key identifier: 39:37:40:19:A5:4D:4B:DE:23:F0:DA:28:A2:52:15:0D:5C:B4:73:AD
Certificate issuer: /CN=39374019a54d4bde23f0da28a252150d5cb473ad
Certificate serial: 01968691D6372FCD5D93B9C320101DFB559F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OTdAGaVNS94j8NooolIVDVy0c60.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/47/505755-c4ab-4905-8b48-bbd1ad53da43/1/OTdAGaVNS94j8NooolIVDVy0c60.mft
Manifest number: 0DBC
Signing time: Wed 30 Apr 2025 12:00:26 +0000
Manifest this update: Wed 30 Apr 2025 12:00:26 +0000
Manifest next update: Thu 01 May 2025 12:00:26 +0000
Files and hashes: 1: OTdAGaVNS94j8NooolIVDVy0c60.crl (hash: f538yAh8BlS8JX5sN96rp8B91gi1zn+cBJBKurXbV9Y=)
2: ma10kWI1PiUmBnjZZdsu20JVWcE.roa (hash: jNRh+1s+kkx04U4sH3v3rSIpTBgL5T0X08vSRFsU6Qk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/47/505755-c4ab-4905-8b48-bbd1ad53da43/1/OTdAGaVNS94j8NooolIVDVy0c60.crl
rsync://rpki.ripe.net/repository/DEFAULT/47/505755-c4ab-4905-8b48-bbd1ad53da43/1/OTdAGaVNS94j8NooolIVDVy0c60.mft
rsync://rpki.ripe.net/repository/DEFAULT/OTdAGaVNS94j8NooolIVDVy0c60.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 01 May 2025 12:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:86:91:d6:37:2f:cd:5d:93:b9:c3:20:10:1d:fb:55:9f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=39374019a54d4bde23f0da28a252150d5cb473ad
Validity
Not Before: Apr 30 12:00:26 2025 GMT
Not After : May 1 12:00:26 2025 GMT
Subject: CN=ec3aad761fba32917b3acfab8c83dfe5c405a654
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:89:f6:2b:36:f2:da:12:ef:c2:94:22:b3:86:f6:
12:67:30:c8:3a:48:80:ea:61:37:8a:37:c0:38:53:
3c:2c:b2:d1:d1:43:8a:d9:1b:bd:63:e4:72:4d:a4:
ac:db:9b:3c:95:9c:0b:97:e7:c9:7e:e7:9b:44:0a:
7a:52:6b:4b:3d:1f:1a:ef:8b:81:94:40:9b:23:04:
d3:ad:ba:72:42:e6:28:5f:cf:1d:6a:e2:e2:3e:7c:
f8:c9:e9:03:61:7f:14:b7:da:e4:37:33:19:31:83:
cf:a4:cb:1f:82:96:85:cf:94:b5:0a:56:fc:a0:e3:
14:6d:85:55:20:57:be:3f:26:94:6c:36:2c:03:23:
27:b6:c3:0a:bf:5c:0e:10:3b:cc:9a:8d:ff:fc:de:
93:e0:21:bc:20:1b:66:e5:e0:0a:11:21:7e:45:59:
10:f2:df:e7:45:31:17:7c:18:a4:e3:79:05:67:27:
ce:d8:7d:97:13:f0:c1:de:eb:c0:45:4d:8e:a8:a7:
11:18:59:d3:6f:c5:a4:11:61:36:03:4c:67:4a:b6:
7a:22:85:8b:0e:9e:c9:1e:e3:f6:e7:70:48:a9:79:
e0:c1:1a:57:56:8e:25:87:2e:d3:16:91:96:54:0d:
71:9f:5a:dd:ae:59:75:2a:f9:1d:0a:68:58:bd:a8:
b4:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EC:3A:AD:76:1F:BA:32:91:7B:3A:CF:AB:8C:83:DF:E5:C4:05:A6:54
X509v3 Authority Key Identifier:
keyid:39:37:40:19:A5:4D:4B:DE:23:F0:DA:28:A2:52:15:0D:5C:B4:73:AD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OTdAGaVNS94j8NooolIVDVy0c60.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/47/505755-c4ab-4905-8b48-bbd1ad53da43/1/OTdAGaVNS94j8NooolIVDVy0c60.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/47/505755-c4ab-4905-8b48-bbd1ad53da43/1/OTdAGaVNS94j8NooolIVDVy0c60.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1d:c4:c4:15:f3:20:a4:1d:97:7a:2f:b1:ff:e1:10:df:f3:24:
28:ff:78:a1:cd:0d:f3:4b:24:26:35:d1:3e:d0:a7:00:ad:1a:
83:e5:6a:68:e6:89:9a:17:a1:60:02:b8:bf:6e:de:3d:09:96:
08:15:fb:6a:54:e7:f8:31:39:dd:f8:59:7d:93:6a:0d:3b:a7:
17:cb:6e:b6:64:a8:63:29:d4:ca:33:49:72:84:a5:b8:4e:61:
3a:f8:4d:d2:cb:86:31:39:e1:c9:3d:96:a0:14:9d:7d:5f:4d:
f2:24:07:79:8e:4e:db:1a:e2:2b:b6:91:e7:9c:6e:a5:c1:1e:
59:8e:bf:de:c8:97:b6:af:0d:1f:4f:04:c8:27:7f:e6:73:0f:
16:a7:e4:66:94:3c:24:3c:92:64:58:7a:00:68:6d:70:56:84:
9e:f3:57:5b:f3:bb:5c:e4:f6:b0:62:cc:2b:3f:81:9f:97:94:
a6:b3:42:2b:dd:c0:18:47:7c:ee:7f:c4:51:ea:e7:3c:8f:a4:
1b:2d:97:ac:fb:40:1d:7a:07:16:64:22:57:93:1d:cc:cf:10:
09:12:98:03:fd:62:eb:c7:0e:2b:f2:10:77:71:1d:1c:4a:72:
d2:d6:d3:bd:31:87:36:8c:d6:46:31:3f:71:e6:d6:7c:40:24:
ea:61:08:55
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 30 18:13:32 2025 by rpki-client