Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b4/272d46-0821-4c93-a3d3-4adc0a679f84/1/OtyOotHlv55F8F2VQFb4yQR6NgU.mft
File: OtyOotHlv55F8F2VQFb4yQR6NgU.mft (raw, json)
Hash identifier: bNrPDz3xG7hoLhItHXyGCumQL6xgMIGezMaPgstUoK0=
Subject key identifier: 58:B4:DC:6E:08:F8:45:84:F1:10:B5:0F:4A:FD:DF:72:17:20:43:A4
Authority key identifier: 3A:DC:8E:A2:D1:E5:BF:9E:45:F0:5D:95:40:56:F8:C9:04:7A:36:05
Certificate issuer: /CN=3adc8ea2d1e5bf9e45f05d954056f8c9047a3605
Certificate serial: 0196802237864F09FB23A1A696EE307B36B1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OtyOotHlv55F8F2VQFb4yQR6NgU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b4/272d46-0821-4c93-a3d3-4adc0a679f84/1/OtyOotHlv55F8F2VQFb4yQR6NgU.mft
Manifest number: 1510
Signing time: Tue 29 Apr 2025 06:00:48 +0000
Manifest this update: Tue 29 Apr 2025 06:00:48 +0000
Manifest next update: Wed 30 Apr 2025 06:00:48 +0000
Files and hashes: 1: OtyOotHlv55F8F2VQFb4yQR6NgU.crl (hash: SdmAWiZ2wEZyaIl9IOC4o+ddD6eZkb2scVfmw/aAd4s=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b4/272d46-0821-4c93-a3d3-4adc0a679f84/1/OtyOotHlv55F8F2VQFb4yQR6NgU.crl
rsync://rpki.ripe.net/repository/DEFAULT/b4/272d46-0821-4c93-a3d3-4adc0a679f84/1/OtyOotHlv55F8F2VQFb4yQR6NgU.mft
rsync://rpki.ripe.net/repository/DEFAULT/OtyOotHlv55F8F2VQFb4yQR6NgU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 30 Apr 2025 06:00:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:80:22:37:86:4f:09:fb:23:a1:a6:96:ee:30:7b:36:b1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3adc8ea2d1e5bf9e45f05d954056f8c9047a3605
Validity
Not Before: Apr 29 06:00:48 2025 GMT
Not After : Apr 30 06:00:48 2025 GMT
Subject: CN=58b4dc6e08f84584f110b50f4afddf72172043a4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:4a:85:3f:af:d9:eb:48:c5:31:4b:4c:d3:d8:
26:46:c5:45:9d:79:7e:63:4a:f2:6c:dc:4d:08:fc:
80:7c:66:26:7d:9f:08:86:fa:f6:d6:d4:7e:9f:a0:
d2:14:e2:6c:88:2c:b4:40:26:f6:01:09:77:3c:e8:
c9:29:3b:81:b7:0e:2a:30:85:7a:50:b7:5c:b4:18:
e3:22:57:e0:07:6a:06:82:90:87:5a:50:6a:b8:35:
24:f8:a9:c9:d2:67:c6:f4:57:7f:d4:ed:bc:07:25:
89:91:26:9a:56:ed:0e:11:88:d8:49:9e:a2:ea:1c:
24:b0:a5:d4:ca:d5:ef:97:38:d7:46:71:02:8c:30:
33:1b:44:ae:7b:8d:e3:de:ae:33:34:29:03:72:2c:
50:cf:4f:bd:70:82:e7:ea:f9:ac:4a:7f:33:3c:75:
e3:ce:c2:ea:72:be:ff:8d:75:1b:f0:28:84:4a:11:
46:22:6c:2a:a8:50:15:eb:8d:ac:50:ba:1a:a8:16:
89:b3:57:94:c0:f6:8e:45:ea:c1:0d:27:cf:d1:0c:
13:57:ca:70:0c:51:48:44:5c:f3:33:67:f4:56:17:
1f:e9:52:e1:17:aa:0f:81:8f:e7:da:1e:4f:07:4a:
b4:c7:42:20:e5:02:42:06:7f:ab:af:71:b5:5c:eb:
d7:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
58:B4:DC:6E:08:F8:45:84:F1:10:B5:0F:4A:FD:DF:72:17:20:43:A4
X509v3 Authority Key Identifier:
keyid:3A:DC:8E:A2:D1:E5:BF:9E:45:F0:5D:95:40:56:F8:C9:04:7A:36:05
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OtyOotHlv55F8F2VQFb4yQR6NgU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/272d46-0821-4c93-a3d3-4adc0a679f84/1/OtyOotHlv55F8F2VQFb4yQR6NgU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/272d46-0821-4c93-a3d3-4adc0a679f84/1/OtyOotHlv55F8F2VQFb4yQR6NgU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
12:e3:96:7c:0a:43:fe:8d:f2:b9:04:f0:3c:2b:a9:70:8d:48:
79:76:4d:e6:54:ac:05:48:e5:08:75:84:d9:fe:1c:70:b1:10:
bf:20:c0:16:f1:2a:aa:82:64:df:1b:70:75:44:47:65:d9:b5:
cd:6d:fc:3c:f1:70:32:ca:7c:66:ff:8b:51:4a:54:d0:83:fb:
ca:d2:d4:0c:e2:ba:4e:72:71:0a:6c:0d:50:3e:7f:b3:b7:35:
f0:59:c8:7e:b7:76:b8:11:c2:63:70:46:10:29:d0:44:45:ac:
bd:8c:33:d0:f5:13:d2:68:57:57:54:fc:50:82:31:72:23:df:
2f:1a:d8:a2:63:d0:9b:27:a4:ac:3e:66:fb:d7:20:3a:91:70:
21:e5:c7:fb:86:e8:2e:fc:d1:ff:1f:1f:43:6a:1e:52:cb:cf:
74:d7:94:03:4a:27:2d:b0:a9:ea:0f:83:52:b9:b3:54:c2:0d:
17:31:6d:56:b7:db:1b:ef:0e:51:da:82:b8:03:17:5f:19:42:
5f:81:a4:eb:9d:03:b3:54:49:51:a5:44:a4:d5:ba:9c:2b:9e:
6e:f1:9a:ba:c5:c3:a5:c0:36:56:23:d2:36:f5:45:11:12:b3:
25:4a:e8:b0:fd:9c:73:ac:c1:90:81:ee:14:92:c3:2e:fe:cc:
6d:0d:2d:b9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 29 13:18:11 2025 by rpki-client