Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ac/7dbf36-2485-4935-a0c7-ef91d8b5b081/1/OtEfbBeesxQqSO5ksulM3p3TYXM.mft
File: OtEfbBeesxQqSO5ksulM3p3TYXM.mft (raw, json)
Hash identifier: OUJ5NFIVBuzQeBNoSejJ9lPdiTDiHn8SBlvo/2AhTK8=
Subject key identifier: 20:61:B9:3E:79:E8:2D:99:E0:60:8E:D1:30:42:3E:66:AA:83:AF:27
Authority key identifier: 3A:D1:1F:6C:17:9E:B3:14:2A:48:EE:64:B2:E9:4C:DE:9D:D3:61:73
Certificate issuer: /CN=3ad11f6c179eb3142a48ee64b2e94cde9dd36173
Certificate serial: 01967BA02610C6A90148DC1F77F96F773A8F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OtEfbBeesxQqSO5ksulM3p3TYXM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ac/7dbf36-2485-4935-a0c7-ef91d8b5b081/1/OtEfbBeesxQqSO5ksulM3p3TYXM.mft
Manifest number: 1512
Signing time: Mon 28 Apr 2025 09:00:15 +0000
Manifest this update: Mon 28 Apr 2025 09:00:15 +0000
Manifest next update: Tue 29 Apr 2025 09:00:15 +0000
Files and hashes: 1: OtEfbBeesxQqSO5ksulM3p3TYXM.crl (hash: CQENYpM9GQ4ogbkEbXJKnC7SAVrOvLnz41wQQIdgdKc=)
2: UcqTmJ89l8NUNjKYfDLMA156xvg.roa (hash: vHYUpfnZxXjHkU7oFNbi+l4QCTaNKF/HLN9VYPGDanA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ac/7dbf36-2485-4935-a0c7-ef91d8b5b081/1/OtEfbBeesxQqSO5ksulM3p3TYXM.crl
rsync://rpki.ripe.net/repository/DEFAULT/ac/7dbf36-2485-4935-a0c7-ef91d8b5b081/1/OtEfbBeesxQqSO5ksulM3p3TYXM.mft
rsync://rpki.ripe.net/repository/DEFAULT/OtEfbBeesxQqSO5ksulM3p3TYXM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 29 Apr 2025 08:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:7b:a0:26:10:c6:a9:01:48:dc:1f:77:f9:6f:77:3a:8f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3ad11f6c179eb3142a48ee64b2e94cde9dd36173
Validity
Not Before: Apr 28 09:00:15 2025 GMT
Not After : Apr 29 09:00:15 2025 GMT
Subject: CN=2061b93e79e82d99e0608ed130423e66aa83af27
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:43:92:eb:75:f7:2e:cd:7f:87:5c:88:6d:9a:
e2:b4:ee:01:8f:3e:22:a3:4e:18:44:a4:51:e6:45:
f8:bb:1e:fc:2c:55:56:49:96:2d:bb:8c:dc:50:31:
01:ac:c1:ad:18:4d:39:ff:c9:e7:b2:a2:a1:18:be:
87:9e:cc:3e:24:b2:a5:0a:90:b3:3a:a6:e7:f7:4f:
06:28:34:47:47:d8:c9:2c:d0:65:7a:c6:4c:a2:4b:
14:a4:bf:f5:70:00:08:84:79:e5:21:ff:4c:80:d8:
65:88:e9:7a:50:b6:cf:c8:ad:2d:0b:8f:81:d4:1f:
cd:06:81:68:2d:94:58:ac:39:8d:24:8f:7a:d5:1b:
18:42:87:20:d8:31:91:71:15:df:9b:11:1c:c1:00:
6c:6a:aa:5e:3a:c2:50:f1:41:a0:e6:38:54:df:9a:
f9:a1:52:dd:a4:b6:d1:fe:66:d8:85:49:2f:84:2d:
8d:5f:96:8c:93:6d:14:bc:6b:43:23:3a:c7:f6:68:
2e:e2:9a:8f:0d:4c:63:a3:0c:8b:de:52:8b:e8:aa:
a3:b5:86:30:9b:69:5f:f9:fc:e1:e6:15:f0:73:c3:
21:e1:cc:bc:56:e4:78:61:5b:73:27:cf:32:c1:4e:
73:23:1b:20:69:2d:ba:0b:0d:ef:f3:ee:9f:b5:21:
98:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
20:61:B9:3E:79:E8:2D:99:E0:60:8E:D1:30:42:3E:66:AA:83:AF:27
X509v3 Authority Key Identifier:
keyid:3A:D1:1F:6C:17:9E:B3:14:2A:48:EE:64:B2:E9:4C:DE:9D:D3:61:73
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OtEfbBeesxQqSO5ksulM3p3TYXM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/7dbf36-2485-4935-a0c7-ef91d8b5b081/1/OtEfbBeesxQqSO5ksulM3p3TYXM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/7dbf36-2485-4935-a0c7-ef91d8b5b081/1/OtEfbBeesxQqSO5ksulM3p3TYXM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0e:2a:d1:9b:a5:93:3b:c0:a6:2e:f0:ce:5b:c6:ff:09:05:0e:
dd:45:a9:53:12:4b:5b:fa:8f:dd:9a:ac:b2:12:e9:6c:25:d8:
e1:a2:d1:f8:b6:b9:f8:23:10:92:71:0c:43:2d:67:50:a6:dd:
0c:47:75:24:0b:2e:9e:e9:dc:e7:18:2b:0a:c9:f8:47:d5:75:
34:8a:22:3c:97:c1:c8:36:eb:b6:0e:3b:50:f3:a6:67:2b:f3:
ef:b9:c4:49:31:c0:d1:4d:42:ce:58:fc:26:bc:2a:8a:b1:16:
ab:b1:91:0a:ec:ff:a7:80:e8:1d:9e:81:e2:7c:bc:9b:b3:b2:
7d:33:06:ca:1f:9a:48:20:6b:66:4e:e5:e9:6a:94:91:4e:f0:
2e:44:79:82:f4:47:7a:f2:19:fd:3d:0c:05:e8:28:77:b1:20:
0f:58:f9:03:00:68:84:e7:5c:f8:86:3f:91:b7:f1:cb:3a:87:
69:8d:a8:59:c4:8b:99:e2:bd:0c:d2:53:66:3e:4c:42:ea:f7:
3c:c9:c5:11:70:4b:a5:6e:1e:3c:18:70:88:74:b8:10:da:14:
77:c9:f3:0f:6f:56:1b:81:99:7c:cf:6c:66:38:b8:14:ff:b7:
25:80:9a:d6:26:07:99:75:23:f3:f7:0e:a6:5a:53:5e:30:bc:
94:bc:d8:ec
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 11:52:10 2025 by rpki-client