Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fa/8af1cd-5021-463b-99a3-04e4a84a74ac/1/OPJMluat5giBDDDZoTB8xpr5_00.mft
File: OPJMluat5giBDDDZoTB8xpr5_00.mft (raw, json)
Hash identifier: BNRk7zqDwuwDk+u+emyL0qW/jJ8xW/DEyKdTDeZZ8b8=
Subject key identifier: F5:3A:63:FC:49:89:9F:70:BB:A6:3F:34:82:0C:E6:17:A8:BC:D9:4D
Authority key identifier: 38:F2:4C:96:E6:AD:E6:08:81:0C:30:D9:A1:30:7C:C6:9A:F9:FF:4D
Certificate issuer: /CN=38f24c96e6ade608810c30d9a1307cc69af9ff4d
Certificate serial: 019684DAA11CC732F2E5DCBC20F924756C44
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OPJMluat5giBDDDZoTB8xpr5_00.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fa/8af1cd-5021-463b-99a3-04e4a84a74ac/1/OPJMluat5giBDDDZoTB8xpr5_00.mft
Manifest number: 0BCC
Signing time: Wed 30 Apr 2025 04:00:42 +0000
Manifest this update: Wed 30 Apr 2025 04:00:42 +0000
Manifest next update: Thu 01 May 2025 04:00:42 +0000
Files and hashes: 1: OPJMluat5giBDDDZoTB8xpr5_00.crl (hash: JbAJ28MtolnePfWQIcz3F8hfXkrd5qsfKwl+L2hQBe4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fa/8af1cd-5021-463b-99a3-04e4a84a74ac/1/OPJMluat5giBDDDZoTB8xpr5_00.crl
rsync://rpki.ripe.net/repository/DEFAULT/fa/8af1cd-5021-463b-99a3-04e4a84a74ac/1/OPJMluat5giBDDDZoTB8xpr5_00.mft
rsync://rpki.ripe.net/repository/DEFAULT/OPJMluat5giBDDDZoTB8xpr5_00.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 01 May 2025 00:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:84:da:a1:1c:c7:32:f2:e5:dc:bc:20:f9:24:75:6c:44
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=38f24c96e6ade608810c30d9a1307cc69af9ff4d
Validity
Not Before: Apr 30 04:00:42 2025 GMT
Not After : May 1 04:00:42 2025 GMT
Subject: CN=f53a63fc49899f70bba63f34820ce617a8bcd94d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:da:fa:16:c9:10:23:d2:18:86:fc:3e:a2:d5:54:
e8:f8:f2:ae:8b:fa:42:69:c3:0b:2e:26:7f:cd:74:
9c:af:1b:5a:c6:34:f8:f2:33:de:30:18:47:91:a6:
cf:29:11:d4:88:1c:dd:e0:72:7f:38:06:36:01:4d:
b1:4a:83:d4:5f:83:16:ec:f0:fc:d2:8e:50:7c:dd:
ec:eb:d0:72:af:a4:a5:f6:b9:3c:04:c3:31:b6:96:
42:be:84:79:a9:d9:33:a5:56:e6:c1:a6:73:f0:c1:
b3:3d:89:09:d5:e2:0e:0f:bf:8e:87:97:dc:13:24:
16:63:43:55:2d:75:09:10:cb:e8:a8:a9:a8:43:4d:
06:06:1e:14:54:7f:ff:39:35:97:7f:d6:1a:5d:8a:
3c:b8:8f:45:8d:07:e8:d2:3c:7b:15:e3:34:de:46:
65:b8:79:0d:da:4e:d2:8d:86:33:8a:4b:cd:94:a9:
c1:6b:b5:64:13:5f:65:7f:61:a4:9d:e8:04:46:56:
c0:71:b3:10:10:8e:22:0e:7b:b3:33:88:c8:ea:7f:
40:95:45:22:7a:e7:bc:6d:e6:a0:c3:c0:b6:45:31:
a7:87:4a:32:f2:b9:d0:00:47:1b:50:e8:07:2b:76:
73:ab:7e:4f:32:6b:ac:85:2b:1f:cd:6f:ad:78:13:
83:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F5:3A:63:FC:49:89:9F:70:BB:A6:3F:34:82:0C:E6:17:A8:BC:D9:4D
X509v3 Authority Key Identifier:
keyid:38:F2:4C:96:E6:AD:E6:08:81:0C:30:D9:A1:30:7C:C6:9A:F9:FF:4D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OPJMluat5giBDDDZoTB8xpr5_00.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/8af1cd-5021-463b-99a3-04e4a84a74ac/1/OPJMluat5giBDDDZoTB8xpr5_00.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/8af1cd-5021-463b-99a3-04e4a84a74ac/1/OPJMluat5giBDDDZoTB8xpr5_00.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
09:42:d0:0e:86:83:35:cf:c2:8d:d6:33:17:26:37:20:72:cf:
48:6f:ed:f6:bb:45:ac:e3:c3:37:75:e2:40:64:fd:65:7c:3a:
f8:9e:b5:2a:99:84:27:15:5e:f5:fe:ef:9b:2e:87:a3:3a:e8:
7f:82:bb:c8:20:37:ea:7a:9f:7c:c5:06:c9:b7:1a:10:d4:75:
9f:14:fa:81:1d:65:c1:30:e8:4f:07:b3:72:99:ef:1d:5a:bc:
5a:22:2a:44:13:4e:56:5e:39:b4:a0:48:9a:4a:3e:1b:1c:da:
73:90:d3:f0:74:cf:83:08:94:81:84:00:23:5c:aa:1a:d1:4c:
07:8e:7c:88:99:50:28:c7:a6:f8:97:d7:cb:8e:7a:9d:25:b2:
d4:c6:b6:97:2a:eb:36:50:48:44:fe:00:eb:09:ab:03:dd:44:
c6:e9:58:db:3b:c0:ee:5a:bf:19:5e:46:38:e8:12:99:49:9b:
15:0f:a3:92:ff:86:b0:13:99:a1:ff:b5:5a:36:fb:6b:b5:27:
e1:81:d1:18:ca:9e:96:35:17:76:6a:30:d8:7c:b5:e6:33:e8:
9c:f1:cd:c3:cf:c4:69:14:83:1f:53:e6:f9:b9:80:00:1a:2e:
d8:e6:fc:b1:b7:ab:67:f2:01:a6:d6:2c:a5:78:49:8a:5d:52:
85:36:9b:04
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 30 10:47:35 2025 by rpki-client