Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f5/bc19cc-0f53-4d10-af93-dc01a19b2856/1/otCM3GpDDvDaiCmRcla2rY0KNvk.mft
File: otCM3GpDDvDaiCmRcla2rY0KNvk.mft (raw, json)
Hash identifier: zDJxtbaeyNxWaXLiftK1uHh29V6Vic0Ba488e0qeZvU=
Subject key identifier: 91:05:1E:37:46:C7:44:AC:38:14:59:03:DC:FD:8D:D6:DC:6F:94:06
Authority key identifier: A2:D0:8C:DC:6A:43:0E:F0:DA:88:29:91:72:56:B6:AD:8D:0A:36:F9
Certificate issuer: /CN=a2d08cdc6a430ef0da8829917256b6ad8d0a36f9
Certificate serial: 01968F27E3D2DC9E6A3DA7378682778F49AC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/otCM3GpDDvDaiCmRcla2rY0KNvk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f5/bc19cc-0f53-4d10-af93-dc01a19b2856/1/otCM3GpDDvDaiCmRcla2rY0KNvk.mft
Manifest number: 073F
Signing time: Fri 02 May 2025 04:01:18 +0000
Manifest this update: Fri 02 May 2025 04:01:18 +0000
Manifest next update: Sat 03 May 2025 04:01:18 +0000
Files and hashes: 1: otCM3GpDDvDaiCmRcla2rY0KNvk.crl (hash: F++SRim1/BZwGZPu/uK/HJTTtS0zL3+P2xziXe7b9zg=)
2: uWHHQqBwsm-RgF6BGlPrCIiU5u8.roa (hash: c70DUe86Dscr+BOk1RbQf+gmFBszpSvbzYy8111R1f4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f5/bc19cc-0f53-4d10-af93-dc01a19b2856/1/otCM3GpDDvDaiCmRcla2rY0KNvk.crl
rsync://rpki.ripe.net/repository/DEFAULT/f5/bc19cc-0f53-4d10-af93-dc01a19b2856/1/otCM3GpDDvDaiCmRcla2rY0KNvk.mft
rsync://rpki.ripe.net/repository/DEFAULT/otCM3GpDDvDaiCmRcla2rY0KNvk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 03 May 2025 01:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:8f:27:e3:d2:dc:9e:6a:3d:a7:37:86:82:77:8f:49:ac
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a2d08cdc6a430ef0da8829917256b6ad8d0a36f9
Validity
Not Before: May 2 04:01:18 2025 GMT
Not After : May 3 04:01:18 2025 GMT
Subject: CN=91051e3746c744ac38145903dcfd8dd6dc6f9406
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:52:cf:59:d4:53:be:82:74:f0:8d:a3:25:4a:
00:80:fb:41:e4:a8:7a:55:9f:20:cf:d5:77:10:7d:
6b:bc:ef:2d:ac:89:9a:e3:fb:45:43:1b:f9:3c:f5:
13:5c:8e:47:51:e6:e7:d7:68:69:6f:bf:fb:36:c4:
08:a8:6a:e8:34:9c:60:da:2f:31:d7:93:41:fe:07:
9b:28:66:0d:11:84:00:d7:5e:e2:a4:79:ec:85:99:
fe:91:6d:3e:eb:e4:a1:14:14:ca:4e:8b:4a:35:31:
d8:26:f6:10:4d:63:c3:b6:9b:4d:5c:ee:dd:43:b2:
df:81:e9:63:9c:f1:68:20:f6:2a:d4:5c:16:a0:68:
8a:5f:3c:b3:c4:68:e5:72:89:53:41:11:d8:7c:2d:
d5:82:61:a0:cf:7a:7d:26:c9:52:55:90:75:21:a7:
9d:e1:78:41:31:a0:7f:3d:0b:f4:8c:42:d8:31:cc:
8c:63:10:dd:0d:0f:59:56:3a:43:10:6d:72:98:43:
10:36:02:95:a5:b0:c9:65:e9:0b:06:d9:44:a7:3c:
4e:fc:81:21:e8:5c:77:e4:56:d8:8f:01:0c:76:fd:
28:0d:e9:2b:09:75:79:2d:ca:7e:a1:06:15:d3:0c:
a4:4b:9a:ea:b9:c3:68:57:39:e4:2c:de:1e:9c:2b:
12:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
91:05:1E:37:46:C7:44:AC:38:14:59:03:DC:FD:8D:D6:DC:6F:94:06
X509v3 Authority Key Identifier:
keyid:A2:D0:8C:DC:6A:43:0E:F0:DA:88:29:91:72:56:B6:AD:8D:0A:36:F9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/otCM3GpDDvDaiCmRcla2rY0KNvk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/bc19cc-0f53-4d10-af93-dc01a19b2856/1/otCM3GpDDvDaiCmRcla2rY0KNvk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/bc19cc-0f53-4d10-af93-dc01a19b2856/1/otCM3GpDDvDaiCmRcla2rY0KNvk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7a:6e:6d:8d:34:5a:9d:18:43:11:1e:61:ab:dc:d1:f8:09:26:
50:df:9e:9c:5b:a2:11:2c:a3:d9:a4:ef:86:46:ab:8f:cf:e8:
8d:48:2a:b7:ed:b0:01:30:20:36:4c:39:e6:13:d2:e2:0e:76:
af:dc:a0:61:d4:50:99:c3:e2:fd:49:1e:68:89:81:87:b5:99:
6d:b5:88:11:29:83:11:3b:e5:38:77:9a:63:9d:a1:92:ab:33:
03:71:4d:52:95:00:9b:b6:44:8e:94:2f:30:37:e1:33:2b:dd:
4e:83:5d:f4:9d:98:e0:6c:4e:ba:f3:5d:4e:a4:d5:b4:fb:2e:
b2:1f:cf:75:11:15:fa:ef:0e:00:fc:0a:e6:74:ec:90:ad:1f:
59:da:b2:87:3e:92:86:89:51:62:fd:eb:6b:c5:6e:ce:1e:d8:
1b:da:d3:22:22:00:65:65:46:8b:19:2c:28:cf:6c:4b:f9:cb:
fc:2d:49:4f:21:40:b8:b1:5d:77:1c:15:2e:bb:c2:76:0f:45:
0f:4a:7c:d1:c3:93:a7:38:c1:e3:57:03:02:51:45:e6:eb:b0:
fe:be:41:12:f2:05:66:94:7d:7d:a6:17:98:15:d4:89:2d:26:
43:5e:21:5e:64:1e:2f:dc:1a:f9:1f:c3:2f:21:5b:a1:06:5f:
12:a7:17:0e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 2 12:05:30 2025 by rpki-client