Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/73/a2eb5a-0962-45bc-a637-f0104ddf2811/1/Ot_UipdyDNhUAp3bJmxR-R8HZw0.mft
File: Ot_UipdyDNhUAp3bJmxR-R8HZw0.mft (raw, json)
Hash identifier: gaa1eNVLoMA548fNpr0V5Zb10pAHVnyr1JBYBIHRa/w=
Subject key identifier: 7B:73:07:02:1C:A3:5A:55:A0:56:8C:5C:74:BD:46:33:3C:B4:7C:16
Authority key identifier: 3A:DF:D4:8A:97:72:0C:D8:54:02:9D:DB:26:6C:51:F9:1F:07:67:0D
Certificate issuer: /CN=3adfd48a97720cd854029ddb266c51f91f07670d
Certificate serial: 0196764319C097BDC50E9B13B22B8AB3BC3C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Ot_UipdyDNhUAp3bJmxR-R8HZw0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/73/a2eb5a-0962-45bc-a637-f0104ddf2811/1/Ot_UipdyDNhUAp3bJmxR-R8HZw0.mft
Manifest number: 0B0F
Signing time: Sun 27 Apr 2025 08:00:31 +0000
Manifest this update: Sun 27 Apr 2025 08:00:31 +0000
Manifest next update: Mon 28 Apr 2025 08:00:31 +0000
Files and hashes: 1: Ot_UipdyDNhUAp3bJmxR-R8HZw0.crl (hash: NuD9bSj5hQbUh1eMrVJSgekfodfw9yRY6knI+u2h45E=)
2: vm_KzfoiY4cVzVJi9fJVQUcZlJs.roa (hash: lyBGyAokiSjopS7O45WDbuUZk8SIrQSCpnYKsmtEQ5s=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/73/a2eb5a-0962-45bc-a637-f0104ddf2811/1/Ot_UipdyDNhUAp3bJmxR-R8HZw0.crl
rsync://rpki.ripe.net/repository/DEFAULT/73/a2eb5a-0962-45bc-a637-f0104ddf2811/1/Ot_UipdyDNhUAp3bJmxR-R8HZw0.mft
rsync://rpki.ripe.net/repository/DEFAULT/Ot_UipdyDNhUAp3bJmxR-R8HZw0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Apr 2025 05:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:76:43:19:c0:97:bd:c5:0e:9b:13:b2:2b:8a:b3:bc:3c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3adfd48a97720cd854029ddb266c51f91f07670d
Validity
Not Before: Apr 27 08:00:31 2025 GMT
Not After : Apr 28 08:00:31 2025 GMT
Subject: CN=7b7307021ca35a55a0568c5c74bd46333cb47c16
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:b7:2b:23:9e:7e:57:42:a2:b1:c8:fe:46:f4:
4a:7e:f1:53:54:3e:c8:5b:0a:ee:ba:89:12:16:c1:
4c:87:c1:c7:9d:aa:8e:74:95:a5:bf:ba:0b:ce:40:
0e:29:a2:48:64:f4:64:31:c4:d1:0c:41:44:91:9b:
8a:47:df:cb:82:c0:af:26:a1:86:7d:91:16:71:dc:
d8:eb:a2:55:3d:df:e7:fb:de:fc:24:f0:c3:97:ea:
5b:42:45:03:12:55:89:2e:4a:83:82:f9:96:2c:6f:
4f:39:59:c4:6f:16:0c:06:85:f6:a5:c1:8a:da:5e:
57:9b:cf:fa:71:39:6c:a4:00:b9:84:46:21:f7:2a:
03:6f:39:70:58:60:d2:a8:de:99:9c:3e:7a:3d:53:
13:3d:29:a5:e0:6f:d1:8c:64:3d:eb:1d:a6:a4:cb:
30:0c:53:50:e9:7b:94:52:ba:6e:50:0b:67:4d:09:
b8:fb:25:c7:61:55:fa:40:70:bc:67:ee:7d:f7:c0:
b6:e8:29:61:93:f8:13:e2:90:1f:dc:88:ad:74:3f:
c3:c2:d8:be:ed:10:0c:10:bd:cd:fe:da:66:c6:de:
08:13:37:13:5d:ab:56:11:8f:86:f1:31:18:4a:19:
14:57:e6:95:8f:5d:3a:fe:f5:e2:2b:ef:b0:49:a1:
a7:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7B:73:07:02:1C:A3:5A:55:A0:56:8C:5C:74:BD:46:33:3C:B4:7C:16
X509v3 Authority Key Identifier:
keyid:3A:DF:D4:8A:97:72:0C:D8:54:02:9D:DB:26:6C:51:F9:1F:07:67:0D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Ot_UipdyDNhUAp3bJmxR-R8HZw0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/73/a2eb5a-0962-45bc-a637-f0104ddf2811/1/Ot_UipdyDNhUAp3bJmxR-R8HZw0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/73/a2eb5a-0962-45bc-a637-f0104ddf2811/1/Ot_UipdyDNhUAp3bJmxR-R8HZw0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3a:b3:f8:ab:fa:6d:8f:18:24:10:1a:73:ff:30:8d:fe:4f:c2:
c4:e2:c3:e9:4b:e6:1f:1a:d8:cd:4c:11:6d:3e:c5:8f:f3:19:
f4:f9:81:5b:a1:46:b1:d7:e3:f6:75:5f:ac:3e:27:de:63:f8:
b8:8c:98:f7:74:ed:76:e6:45:3f:23:2a:83:e2:ab:d7:3c:a1:
67:b2:bd:a4:ed:49:d2:78:76:1b:3b:15:fa:94:6a:0a:d6:c3:
ca:83:90:67:93:3c:69:cc:0d:3c:5d:1d:0c:b8:2a:28:54:83:
a4:44:7d:37:eb:c5:7e:7e:1f:a2:88:13:48:c1:4c:8a:06:a9:
a0:05:65:62:f3:e7:84:87:ad:13:01:3f:e2:d7:e1:5e:93:03:
ca:83:28:0c:f5:ca:1d:05:ae:99:02:ae:6a:6f:b8:b8:1a:ab:
6a:c3:84:c2:75:2d:57:01:e6:1c:15:fd:48:c7:e4:e9:e0:48:
b0:28:70:e7:66:62:cd:8e:36:fd:d6:99:d7:e2:5d:9c:b0:bd:
e6:7a:4c:f6:bf:97:43:3c:4f:e4:24:9d:36:40:43:a9:db:04:
83:16:ef:59:bd:ea:c5:05:c1:21:4c:1a:3b:f5:f9:d1:9d:88:
2d:3a:c0:ce:9e:d6:c1:f3:ff:b7:6d:e2:19:f4:74:17:d7:7f:
74:a7:bd:2e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 11:49:18 2025 by rpki-client