Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8a/af2f8f-1212-4943-bd0c-d86ab2fe7648/1/OX2fPb_DZTMuKCvRdqaAdURtHRs.mft
File: OX2fPb_DZTMuKCvRdqaAdURtHRs.mft (raw, json)
Hash identifier: 5Xb9UErEtPJ8bmZM+jVwjji7XTMhcsUNlFVvPe2j9ok=
Subject key identifier: E1:60:B1:33:1A:F2:BA:43:15:D9:40:24:07:21:3C:A2:B3:A0:9F:45
Authority key identifier: 39:7D:9F:3D:BF:C3:65:33:2E:28:2B:D1:76:A6:80:75:44:6D:1D:1B
Certificate issuer: /CN=397d9f3dbfc365332e282bd176a68075446d1d1b
Certificate serial: 0196759E4773EFFD0A859992306C8781E292
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OX2fPb_DZTMuKCvRdqaAdURtHRs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8a/af2f8f-1212-4943-bd0c-d86ab2fe7648/1/OX2fPb_DZTMuKCvRdqaAdURtHRs.mft
Manifest number: 0F33
Signing time: Sun 27 Apr 2025 05:00:29 +0000
Manifest this update: Sun 27 Apr 2025 05:00:29 +0000
Manifest next update: Mon 28 Apr 2025 05:00:29 +0000
Files and hashes: 1: OX2fPb_DZTMuKCvRdqaAdURtHRs.crl (hash: y333m4kcFYp+q7pL4A2adXDymNeFqsMddvth/5gBEns=)
2: PKmiIVXi-5ieWf281G2v09ZDGMA.roa (hash: 6UbdjRvfhwNfGfOQcI0HpEZ2pxwE+yP96jeW3uJG9VU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8a/af2f8f-1212-4943-bd0c-d86ab2fe7648/1/OX2fPb_DZTMuKCvRdqaAdURtHRs.crl
rsync://rpki.ripe.net/repository/DEFAULT/8a/af2f8f-1212-4943-bd0c-d86ab2fe7648/1/OX2fPb_DZTMuKCvRdqaAdURtHRs.mft
rsync://rpki.ripe.net/repository/DEFAULT/OX2fPb_DZTMuKCvRdqaAdURtHRs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Apr 2025 05:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:75:9e:47:73:ef:fd:0a:85:99:92:30:6c:87:81:e2:92
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=397d9f3dbfc365332e282bd176a68075446d1d1b
Validity
Not Before: Apr 27 05:00:29 2025 GMT
Not After : Apr 28 05:00:29 2025 GMT
Subject: CN=e160b1331af2ba4315d9402407213ca2b3a09f45
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:96:ad:c1:75:a2:d2:73:2d:68:2f:78:e3:12:
07:12:13:06:b6:fd:8d:99:bc:06:ff:93:d0:43:01:
2e:7e:9c:56:2f:e8:ff:58:32:8c:37:a2:d8:83:28:
a8:08:ad:83:e4:6a:0e:28:ee:97:b1:3d:e5:8c:51:
92:33:0e:6a:a7:e4:75:0f:0f:4d:1d:ef:fb:26:17:
10:ce:63:ce:25:44:a6:22:5a:c4:92:0a:4c:0a:43:
10:3a:f5:45:23:42:c4:51:8b:f1:90:c0:b9:56:38:
a7:94:80:cd:3a:1a:c9:5f:c5:00:d6:48:d0:e4:d3:
f4:ce:6e:b3:fd:4b:c9:59:32:19:85:d8:bf:9d:96:
63:5e:2b:d8:c6:91:db:1c:07:00:89:ac:b1:ee:5f:
8b:2b:01:fe:30:1e:26:bd:a0:32:4d:f8:b3:52:f1:
8e:76:b3:8e:3a:5e:6b:12:2a:44:5d:d6:a6:62:47:
65:58:24:5e:ce:52:dc:fe:c4:73:4d:f4:ab:20:ba:
e4:f6:37:c6:bf:e1:83:59:85:6a:a4:c8:52:ee:f7:
c9:a1:ec:47:a2:05:a4:a5:6d:91:8e:08:ed:91:0d:
2f:07:a0:3d:5d:b5:71:52:e0:48:6a:fe:33:82:90:
6b:76:d4:f5:46:a3:d9:61:fb:32:d6:11:8c:3f:62:
c4:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E1:60:B1:33:1A:F2:BA:43:15:D9:40:24:07:21:3C:A2:B3:A0:9F:45
X509v3 Authority Key Identifier:
keyid:39:7D:9F:3D:BF:C3:65:33:2E:28:2B:D1:76:A6:80:75:44:6D:1D:1B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OX2fPb_DZTMuKCvRdqaAdURtHRs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/af2f8f-1212-4943-bd0c-d86ab2fe7648/1/OX2fPb_DZTMuKCvRdqaAdURtHRs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/af2f8f-1212-4943-bd0c-d86ab2fe7648/1/OX2fPb_DZTMuKCvRdqaAdURtHRs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7d:92:24:76:ab:21:31:a8:01:8d:a3:a8:ff:8e:7d:5f:4e:59:
8d:4b:86:8d:d8:d9:67:bc:85:37:9b:e6:56:c8:e2:96:b4:41:
37:b1:a2:4c:5f:d0:07:f8:0d:a8:b3:95:4f:ee:75:ce:1e:ed:
1b:33:30:2b:52:3b:f1:f4:3e:32:e3:3e:65:0a:20:f4:f0:10:
c8:b9:d7:84:56:20:c5:f5:0c:2b:e0:eb:27:bd:49:ca:68:24:
55:1b:4c:b5:9b:6b:42:e0:cf:ce:69:3b:c8:ea:8e:23:8a:c4:
84:c2:6a:94:b7:55:b4:1d:ad:59:29:16:3b:ec:31:a6:ad:c7:
ef:8d:6a:7a:14:4a:88:fb:0b:24:d1:11:c0:55:90:c4:eb:13:
6a:75:5b:9d:36:f4:c4:db:88:37:92:7a:2d:bc:74:6a:b9:0e:
84:b3:b8:62:38:ca:08:5b:41:1d:6e:eb:8f:fc:b4:08:da:7e:
6a:50:3e:7a:cd:10:05:42:b0:c4:12:e9:bf:2b:76:94:25:e2:
79:86:31:03:7c:95:8b:e1:c6:1b:ca:8c:67:50:73:3c:ac:51:
48:76:21:7a:2e:e7:63:f1:09:df:f7:9a:b5:fd:3b:4d:38:e6:
78:03:7c:b6:ea:31:a5:b7:53:9b:99:97:b6:6b:66:46:05:50:
21:17:43:0f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 10:32:55 2025 by rpki-client