Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/18/db3ad9-01ee-4a49-b7ea-79c41ac9b6f8/1/O9zRjzNMh6W1fdeH7DJ0NV-dWJQ.mft
File: O9zRjzNMh6W1fdeH7DJ0NV-dWJQ.mft (raw, json)
Hash identifier: hiL4L1KZnPo101pIxWEiHjf9GiTbkOtM4wurvOLqPLg=
Subject key identifier: 2A:79:15:17:2F:E7:16:C1:9C:EB:9A:80:A5:2C:61:2B:E5:7E:AB:E3
Authority key identifier: 3B:DC:D1:8F:33:4C:87:A5:B5:7D:D7:87:EC:32:74:35:5F:9D:58:94
Certificate issuer: /CN=3bdcd18f334c87a5b57dd787ec3274355f9d5894
Certificate serial: 0196C1CAEE1EEFB151EF1AB29A3E8A05969F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/O9zRjzNMh6W1fdeH7DJ0NV-dWJQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/18/db3ad9-01ee-4a49-b7ea-79c41ac9b6f8/1/O9zRjzNMh6W1fdeH7DJ0NV-dWJQ.mft
Manifest number: 1532
Signing time: Mon 12 May 2025 00:00:24 +0000
Manifest this update: Mon 12 May 2025 00:00:24 +0000
Manifest next update: Tue 13 May 2025 00:00:24 +0000
Files and hashes: 1: O9zRjzNMh6W1fdeH7DJ0NV-dWJQ.crl (hash: g/qyJL62N7MrCpOHGY1grUWBJ2fxTAuj9aFEF8tik9s=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/18/db3ad9-01ee-4a49-b7ea-79c41ac9b6f8/1/O9zRjzNMh6W1fdeH7DJ0NV-dWJQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/18/db3ad9-01ee-4a49-b7ea-79c41ac9b6f8/1/O9zRjzNMh6W1fdeH7DJ0NV-dWJQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/O9zRjzNMh6W1fdeH7DJ0NV-dWJQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 13 May 2025 00:00:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:c1:ca:ee:1e:ef:b1:51:ef:1a:b2:9a:3e:8a:05:96:9f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3bdcd18f334c87a5b57dd787ec3274355f9d5894
Validity
Not Before: May 12 00:00:24 2025 GMT
Not After : May 13 00:00:24 2025 GMT
Subject: CN=2a7915172fe716c19ceb9a80a52c612be57eabe3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:14:7c:4b:ea:f1:7f:01:90:2f:0a:eb:2b:55:
3f:15:10:05:73:0a:ec:bb:79:64:58:01:f2:0b:ad:
cd:35:0e:4c:d0:e8:15:36:e4:f9:2a:6d:c1:5b:14:
a4:4c:5f:de:4e:cf:97:d6:8b:a5:e4:d9:e8:2b:20:
52:3c:18:5e:82:c8:13:4a:c9:00:35:fe:e8:80:8d:
7a:fc:0b:89:7f:0c:88:55:b7:5b:2d:75:4e:21:ce:
63:30:a5:91:ef:96:9f:ee:6e:de:4a:19:71:b6:7a:
0b:5d:76:04:cc:bc:53:fd:9c:79:15:04:63:2e:2e:
dd:60:78:d0:11:99:82:06:52:a8:75:3d:1d:dc:1f:
40:9e:9d:df:36:89:d9:73:6d:d1:3e:25:09:80:58:
23:ee:2a:b2:b7:62:22:c7:d6:d5:77:b5:99:68:7b:
30:e2:d1:1e:73:bf:23:55:b1:8f:64:7a:30:02:bb:
87:b1:35:80:59:93:48:e1:1f:f3:2a:34:1d:b9:ea:
e6:de:f8:a6:77:1f:46:ae:d1:5b:62:1c:d7:1f:81:
60:55:f0:d6:f5:99:a1:df:e8:14:f4:bd:17:0a:19:
4f:de:dd:af:18:eb:df:73:6c:87:eb:89:80:71:af:
90:e9:50:c5:10:8d:58:8d:2a:0a:4e:bb:c3:59:54:
be:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2A:79:15:17:2F:E7:16:C1:9C:EB:9A:80:A5:2C:61:2B:E5:7E:AB:E3
X509v3 Authority Key Identifier:
keyid:3B:DC:D1:8F:33:4C:87:A5:B5:7D:D7:87:EC:32:74:35:5F:9D:58:94
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/O9zRjzNMh6W1fdeH7DJ0NV-dWJQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/18/db3ad9-01ee-4a49-b7ea-79c41ac9b6f8/1/O9zRjzNMh6W1fdeH7DJ0NV-dWJQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/18/db3ad9-01ee-4a49-b7ea-79c41ac9b6f8/1/O9zRjzNMh6W1fdeH7DJ0NV-dWJQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0c:a9:9a:28:04:61:7a:b0:61:13:72:f5:82:a6:e5:55:bf:9b:
f2:de:44:de:27:cb:2b:b3:a8:16:42:1d:7f:80:9a:9f:e9:c8:
55:46:27:37:5d:1a:88:7b:4f:d8:05:3b:43:04:f2:17:ab:60:
67:07:45:56:77:cb:fb:f8:14:db:bf:93:94:74:20:05:a2:f2:
1d:e8:c8:6a:f1:fc:a1:8c:82:57:d2:57:3c:56:9c:ba:c9:11:
e6:7c:33:41:b2:9d:46:4e:ff:98:63:eb:30:9f:c7:bf:55:fe:
5d:f5:5b:fd:6f:ca:4f:a8:b9:d5:bd:e6:29:04:ae:d2:1f:3d:
fc:90:45:47:94:d4:ff:80:60:24:03:60:7e:25:18:8e:70:ab:
92:84:2d:c4:02:a7:a3:0f:aa:d8:e1:30:2f:0e:f5:c2:2d:d1:
b8:85:f3:de:46:6a:98:4c:8e:98:d5:9f:26:f1:64:4a:1d:93:
df:0f:bb:8b:81:4f:a2:ab:8a:ee:23:c3:72:1d:e3:20:b5:15:
29:37:e6:c3:6c:d0:be:35:cf:ae:10:fe:2c:18:4e:bf:13:3b:
77:35:53:4b:f0:f9:c6:a4:90:d3:7e:d8:13:db:5b:4c:b9:c5:
a9:36:91:41:03:78:a3:c4:1f:90:5a:a2:87:bb:f8:81:a9:f5:
0a:de:b3:24
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 12 07:50:24 2025 by rpki-client