Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/06/afd99f-df55-4e97-886a-a9775aa8d812/1/Os5p2XnZoNxneVEGweVayhVHCH8.mft
File: Os5p2XnZoNxneVEGweVayhVHCH8.mft (raw, json)
Hash identifier: hGXseAdI2QkpSMlkt261YESzx62HODNZJUpC4CIEts4=
Subject key identifier: 60:D7:6F:E1:D7:57:72:B4:62:1B:07:DE:F8:25:E2:D8:61:28:17:1C
Authority key identifier: 3A:CE:69:D9:79:D9:A0:DC:67:79:51:06:C1:E5:5A:CA:15:47:08:7F
Certificate issuer: /CN=3ace69d979d9a0dc67795106c1e55aca1547087f
Certificate serial: 0196CBA9E9A1083E450D427BC7CDB22D289D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Os5p2XnZoNxneVEGweVayhVHCH8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/06/afd99f-df55-4e97-886a-a9775aa8d812/1/Os5p2XnZoNxneVEGweVayhVHCH8.mft
Manifest number: 1535
Signing time: Tue 13 May 2025 22:00:32 +0000
Manifest this update: Tue 13 May 2025 22:00:32 +0000
Manifest next update: Wed 14 May 2025 22:00:32 +0000
Files and hashes: 1: Os5p2XnZoNxneVEGweVayhVHCH8.crl (hash: HC//2onMfsT41Y4Oy+6xD9I0dKIH3YfqcfVPTBuTr04=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/06/afd99f-df55-4e97-886a-a9775aa8d812/1/Os5p2XnZoNxneVEGweVayhVHCH8.crl
rsync://rpki.ripe.net/repository/DEFAULT/06/afd99f-df55-4e97-886a-a9775aa8d812/1/Os5p2XnZoNxneVEGweVayhVHCH8.mft
rsync://rpki.ripe.net/repository/DEFAULT/Os5p2XnZoNxneVEGweVayhVHCH8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 14 May 2025 22:00:32 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:cb:a9:e9:a1:08:3e:45:0d:42:7b:c7:cd:b2:2d:28:9d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3ace69d979d9a0dc67795106c1e55aca1547087f
Validity
Not Before: May 13 22:00:32 2025 GMT
Not After : May 14 22:00:32 2025 GMT
Subject: CN=60d76fe1d75772b4621b07def825e2d86128171c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:a2:ae:4a:8a:f3:a2:40:e4:14:d7:0b:52:9e:
fc:0c:68:7a:e0:dd:81:48:dc:b1:af:e8:45:a7:1b:
8e:a4:f8:b8:e8:8d:31:2a:5c:2e:00:8d:e6:eb:67:
2c:27:a3:57:4f:d7:0f:6e:8b:68:02:0a:76:a4:eb:
2c:b3:e6:71:6e:2e:1e:d7:85:7a:5e:98:a3:be:a5:
cd:f5:2c:62:ec:c5:3e:af:ed:95:67:85:5d:e7:7e:
fe:ac:ef:d4:97:5f:13:b2:28:58:76:1c:e3:c6:14:
26:dd:3b:76:57:34:2e:a1:d6:38:b3:51:dd:f1:8c:
2f:e7:31:94:6e:74:51:6c:0c:95:6e:d3:e6:d3:a0:
c2:0e:19:87:c4:e7:05:cb:99:55:7d:64:c6:8f:45:
d1:a2:46:22:75:59:7d:9a:8b:74:b9:14:b8:04:55:
41:3c:65:71:03:18:4f:5d:a6:75:c2:c1:a6:65:c7:
51:0f:81:de:17:de:45:79:d4:7c:1c:43:3d:26:a1:
db:1d:b4:1e:9d:5f:c5:4b:98:ff:20:fb:ea:a7:3a:
9e:e0:84:3f:7a:a6:60:f3:5f:e4:ff:eb:45:bf:bc:
98:80:c4:a5:5d:d7:26:1c:51:1e:0f:25:bd:55:51:
64:9e:e2:b9:90:05:63:db:d7:8e:aa:0f:4d:37:6d:
01:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
60:D7:6F:E1:D7:57:72:B4:62:1B:07:DE:F8:25:E2:D8:61:28:17:1C
X509v3 Authority Key Identifier:
keyid:3A:CE:69:D9:79:D9:A0:DC:67:79:51:06:C1:E5:5A:CA:15:47:08:7F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Os5p2XnZoNxneVEGweVayhVHCH8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/06/afd99f-df55-4e97-886a-a9775aa8d812/1/Os5p2XnZoNxneVEGweVayhVHCH8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/06/afd99f-df55-4e97-886a-a9775aa8d812/1/Os5p2XnZoNxneVEGweVayhVHCH8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1c:65:a7:fc:29:87:76:20:12:79:a2:0c:82:10:bd:b4:af:99:
9f:a2:5c:fd:5b:c6:45:a5:b9:18:06:59:ea:cd:ea:ae:a8:e7:
b5:23:6f:0e:3f:b9:6e:a3:10:fc:0d:5d:3d:ca:15:34:2d:a9:
f3:e6:36:fc:3e:14:07:96:1c:a2:16:98:e7:7b:f0:29:71:c5:
78:cb:58:cb:50:32:21:d1:98:a4:d5:a6:25:fc:28:43:9e:2e:
ab:82:6a:c1:21:32:df:a2:17:a4:f8:cc:6a:ab:b5:23:e1:58:
b9:e0:04:74:69:01:45:ab:d5:c6:aa:8c:a8:5b:bb:eb:cd:38:
54:b1:2a:f1:ab:31:f0:f2:a4:c5:6e:24:79:2c:d9:92:da:b2:
5a:be:3a:cf:55:56:24:95:df:51:72:e0:ec:2c:bf:83:09:4b:
9f:3d:30:60:32:03:83:1a:48:9d:63:73:e3:b6:e3:1b:3b:4a:
97:27:9c:69:7e:62:3e:a2:46:ab:c9:60:0e:09:10:06:d3:3f:
70:16:9d:70:e2:68:5a:66:8e:ad:08:50:02:0f:2f:29:f3:e0:
20:89:5b:e7:09:09:0d:21:8c:b1:b7:63:e1:8a:be:ed:3f:c9:
53:42:1f:bd:0f:43:30:ec:17:a0:f2:a2:3c:0f:be:06:82:a1:
69:99:80:40
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 14 06:00:39 2025 by rpki-client