Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e6/fa2af0-a7e8-4610-907c-c93cc4775d46/1/OTcwcAC5Mz-IAAo1vztbj-OMFt4.mft
File: OTcwcAC5Mz-IAAo1vztbj-OMFt4.mft (raw, json)
Hash identifier: FzsgfKvnd8R3PG2zNKUBHqOeeEhKkOnxfpRS1TbW7DQ=
Subject key identifier: CE:34:D3:8B:A6:CA:05:1E:E8:9F:5B:B1:8F:7F:E3:FB:F8:14:1E:E0
Authority key identifier: 39:37:30:70:00:B9:33:3F:88:00:0A:35:BF:3B:5B:8F:E3:8C:16:DE
Certificate issuer: /CN=3937307000b9333f88000a35bf3b5b8fe38c16de
Certificate serial: 01967A1FC8FD359F6046E875387007E2AD00
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OTcwcAC5Mz-IAAo1vztbj-OMFt4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e6/fa2af0-a7e8-4610-907c-c93cc4775d46/1/OTcwcAC5Mz-IAAo1vztbj-OMFt4.mft
Manifest number: 02D5
Signing time: Mon 28 Apr 2025 02:00:25 +0000
Manifest this update: Mon 28 Apr 2025 02:00:25 +0000
Manifest next update: Tue 29 Apr 2025 02:00:25 +0000
Files and hashes: 1: OTcwcAC5Mz-IAAo1vztbj-OMFt4.crl (hash: NZ49LqeB+ct7U717J8m0IKrVomCU3LGBcY56nyZbadA=)
2: XzMnx3Q6lXV5BFC3Ulnea3IgALE.roa (hash: MHnaHZdpDHAywK5Gif3w+d5y+x0GzsWCN2jIZcL+Afc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e6/fa2af0-a7e8-4610-907c-c93cc4775d46/1/OTcwcAC5Mz-IAAo1vztbj-OMFt4.crl
rsync://rpki.ripe.net/repository/DEFAULT/e6/fa2af0-a7e8-4610-907c-c93cc4775d46/1/OTcwcAC5Mz-IAAo1vztbj-OMFt4.mft
rsync://rpki.ripe.net/repository/DEFAULT/OTcwcAC5Mz-IAAo1vztbj-OMFt4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 29 Apr 2025 02:00:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:7a:1f:c8:fd:35:9f:60:46:e8:75:38:70:07:e2:ad:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3937307000b9333f88000a35bf3b5b8fe38c16de
Validity
Not Before: Apr 28 02:00:25 2025 GMT
Not After : Apr 29 02:00:25 2025 GMT
Subject: CN=ce34d38ba6ca051ee89f5bb18f7fe3fbf8141ee0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:27:f9:4e:c1:e2:38:a1:4e:c2:56:67:79:67:
06:2a:04:2a:f8:d3:d8:b9:49:12:8a:fc:24:04:55:
97:19:9e:d1:53:7e:eb:cd:4e:51:32:d8:9d:2f:09:
f1:4c:84:5f:3d:47:87:ec:2d:47:ad:76:c6:3a:4c:
dd:b7:6b:78:40:0f:9a:8e:ba:97:79:cc:27:ba:0f:
0a:7e:d8:e7:f4:21:9e:da:a4:0e:29:a5:c5:1d:97:
23:71:7f:75:65:a6:ad:5d:65:2f:27:dc:13:b8:75:
64:46:5b:b9:ee:10:87:5c:d6:d8:41:3e:a2:9d:a6:
26:2d:b3:bc:b2:2c:18:83:a5:61:81:51:13:22:d9:
74:28:9f:af:a9:4c:8b:b2:79:98:b5:4f:25:3d:d9:
c3:43:d0:64:20:67:55:6c:34:d1:93:e9:51:be:7c:
bb:d2:32:1a:de:ce:76:d0:8f:1e:6c:ad:8d:b5:b3:
f5:c2:15:97:72:81:d3:bf:fb:45:f3:19:2d:96:38:
cb:71:06:eb:4a:24:c2:28:81:3f:b3:f8:b3:a7:eb:
c8:ad:ae:21:f3:60:9f:d8:9e:42:8b:23:33:bb:2b:
51:3e:3d:49:5c:28:9a:a7:b5:0f:fb:bf:76:88:2c:
ef:fd:b1:16:ed:14:ef:3f:be:29:5b:29:6e:31:8f:
fc:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CE:34:D3:8B:A6:CA:05:1E:E8:9F:5B:B1:8F:7F:E3:FB:F8:14:1E:E0
X509v3 Authority Key Identifier:
keyid:39:37:30:70:00:B9:33:3F:88:00:0A:35:BF:3B:5B:8F:E3:8C:16:DE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OTcwcAC5Mz-IAAo1vztbj-OMFt4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/fa2af0-a7e8-4610-907c-c93cc4775d46/1/OTcwcAC5Mz-IAAo1vztbj-OMFt4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/fa2af0-a7e8-4610-907c-c93cc4775d46/1/OTcwcAC5Mz-IAAo1vztbj-OMFt4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6c:97:6d:01:fd:70:12:29:75:f2:02:16:bb:d7:b4:b1:28:7c:
93:d5:a1:88:bd:31:31:49:45:5f:07:b6:6e:3f:b0:a0:c5:b6:
f8:ed:d1:37:b6:71:a8:ba:4a:78:64:d1:c1:09:41:41:c1:de:
8c:e1:35:a0:2a:1c:6a:15:a2:3e:c4:9a:55:1f:66:d1:91:6c:
42:d1:d2:de:f2:be:c8:77:a8:4f:fe:f3:48:50:5c:c8:e0:15:
c7:2a:b7:af:4d:ee:91:ca:e7:f6:d6:ed:2e:48:e9:2f:f4:aa:
32:c2:37:2d:3c:b8:8a:ee:a1:f3:a7:7e:77:4a:d5:74:e9:c3:
87:4e:c4:55:f0:f2:ce:87:04:55:b8:ad:68:80:b5:03:e3:26:
1c:40:ad:c9:81:a1:11:ea:ca:92:94:1d:e0:59:d6:83:1d:21:
1a:f4:95:3d:f7:32:7a:14:7d:e7:83:d7:52:27:b8:d3:85:0e:
b4:78:20:cd:07:40:4b:5e:53:53:8b:68:5a:cd:07:a9:83:28:
ff:f8:83:23:6a:a2:17:c9:f9:28:84:04:06:ec:f7:cc:9d:35:
30:9f:d9:d3:e5:5e:9e:c4:3e:c8:62:5d:ee:d2:b4:0d:8b:06:
05:76:e3:21:e4:ce:ab:bb:18:cb:8b:c0:c6:59:47:8b:23:3d:
1c:e4:1e:61
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 13:18:26 2025 by rpki-client