Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cd/5e8e04-e6ea-4d59-b2f7-df0a6dc282a0/1/O5pBDtUm-GwybZG2KApEGhbAxnY.mft
File: O5pBDtUm-GwybZG2KApEGhbAxnY.mft (raw, json)
Hash identifier: EjtFOOIHzt8LRwZM2myw9QMHh8vV+Vhk4IU0L6WoOjo=
Subject key identifier: 62:84:7D:11:F4:98:DC:5D:4A:77:C2:E7:F4:B2:62:AB:C7:C1:2B:01
Authority key identifier: 3B:9A:41:0E:D5:26:F8:6C:32:6D:91:B6:28:0A:44:1A:16:C0:C6:76
Certificate issuer: /CN=3b9a410ed526f86c326d91b6280a441a16c0c676
Certificate serial: 0196BDEE4E130C635D9A3B2D6FB9BE06F0B1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/O5pBDtUm-GwybZG2KApEGhbAxnY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cd/5e8e04-e6ea-4d59-b2f7-df0a6dc282a0/1/O5pBDtUm-GwybZG2KApEGhbAxnY.mft
Manifest number: 069E
Signing time: Sun 11 May 2025 06:00:33 +0000
Manifest this update: Sun 11 May 2025 06:00:33 +0000
Manifest next update: Mon 12 May 2025 06:00:33 +0000
Files and hashes: 1: O5pBDtUm-GwybZG2KApEGhbAxnY.crl (hash: z7oqt/jcE0DGwL47geNsv3jMamiL2MaDI/O3w14z/OA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cd/5e8e04-e6ea-4d59-b2f7-df0a6dc282a0/1/O5pBDtUm-GwybZG2KApEGhbAxnY.crl
rsync://rpki.ripe.net/repository/DEFAULT/cd/5e8e04-e6ea-4d59-b2f7-df0a6dc282a0/1/O5pBDtUm-GwybZG2KApEGhbAxnY.mft
rsync://rpki.ripe.net/repository/DEFAULT/O5pBDtUm-GwybZG2KApEGhbAxnY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 12 May 2025 06:00:33 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:bd:ee:4e:13:0c:63:5d:9a:3b:2d:6f:b9:be:06:f0:b1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3b9a410ed526f86c326d91b6280a441a16c0c676
Validity
Not Before: May 11 06:00:33 2025 GMT
Not After : May 12 06:00:33 2025 GMT
Subject: CN=62847d11f498dc5d4a77c2e7f4b262abc7c12b01
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:fb:12:5b:6f:37:1f:bd:9c:6e:43:bc:f6:de:a0:
17:4c:ba:fa:62:09:76:e4:27:d0:28:4e:34:8c:2b:
be:1f:c5:da:84:1c:46:5d:df:a7:b4:37:73:99:00:
d3:dc:c3:c2:b9:15:22:7d:1d:61:c3:4b:f8:55:55:
26:a9:98:f3:9e:09:fc:30:f9:3c:c9:c4:5b:b9:46:
bd:25:5f:ac:67:32:8e:14:ca:e4:56:ea:b5:aa:f3:
17:7a:b7:3a:f5:eb:41:b8:30:62:46:ac:d4:80:d5:
2c:b3:79:29:c9:89:f4:f4:a4:a4:43:47:b4:6b:a6:
c3:a5:c9:cc:35:1e:31:f9:e5:c2:36:80:f4:02:c6:
9a:d2:3a:e8:ea:fd:b7:28:c1:b3:6c:ae:61:40:bf:
c0:f1:01:da:ab:52:9e:ee:1c:76:ed:c4:5d:a4:c1:
4d:27:f9:81:d4:40:72:9a:c2:01:af:27:fc:80:33:
fb:cc:26:28:2f:26:cc:6d:19:f5:18:0c:99:f1:77:
9e:a5:7f:9d:17:d1:44:ce:ad:0f:70:70:87:a2:7a:
79:14:e1:b6:f9:2d:46:de:0b:d4:07:90:63:2c:e4:
a8:6b:08:50:c1:0a:7a:09:7b:a3:e7:80:02:9f:97:
e9:e1:2e:9d:21:3f:58:92:5a:5f:12:f9:aa:5a:e6:
bf:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
62:84:7D:11:F4:98:DC:5D:4A:77:C2:E7:F4:B2:62:AB:C7:C1:2B:01
X509v3 Authority Key Identifier:
keyid:3B:9A:41:0E:D5:26:F8:6C:32:6D:91:B6:28:0A:44:1A:16:C0:C6:76
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/O5pBDtUm-GwybZG2KApEGhbAxnY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/5e8e04-e6ea-4d59-b2f7-df0a6dc282a0/1/O5pBDtUm-GwybZG2KApEGhbAxnY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/5e8e04-e6ea-4d59-b2f7-df0a6dc282a0/1/O5pBDtUm-GwybZG2KApEGhbAxnY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
11:3f:c8:58:3f:1f:ac:57:1e:e0:b5:a5:a9:de:b1:95:ff:b5:
db:d5:8c:a5:4c:a4:8c:6e:b5:04:37:aa:2d:0d:f2:63:0c:28:
97:fd:2e:bd:b6:9f:e4:ba:76:67:55:65:6e:cf:48:02:95:fb:
3f:f9:49:12:d7:c8:98:b2:44:85:6d:75:22:2b:46:c4:af:9b:
83:3a:3c:a5:2c:55:77:b3:a0:39:19:6d:b3:76:b6:89:ad:41:
62:a8:a5:24:3d:45:4c:4e:c2:b7:2d:38:d0:30:73:e0:9e:d8:
3d:df:e5:4b:1c:32:6a:b7:3d:9a:d7:28:b9:a7:9c:2c:c4:86:
a3:1d:c3:8e:7a:12:ce:7e:0e:6c:cb:cb:20:e3:fc:cd:84:86:
6a:3e:21:12:ec:b8:aa:2e:8b:f8:8c:1d:b9:48:3e:60:c7:b7:
76:a9:86:47:eb:b0:bf:3d:3b:6f:ed:e3:ba:62:ac:8f:2e:7b:
3a:e1:b8:6c:86:18:b9:34:17:e9:d3:1b:86:5e:f4:3a:7a:b2:
4a:bd:d0:70:3e:f1:18:64:d5:a8:17:aa:b2:57:76:3e:98:97:
d3:82:67:ee:99:74:32:b9:ff:fd:ae:c2:d1:30:7d:89:cf:13:
b0:61:e1:c9:f0:b1:4a:93:2f:d2:2c:49:2a:9f:f6:41:ba:53:
78:d2:99:27
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 11 10:08:30 2025 by rpki-client