Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1e/37bdb7-9b93-46ab-9a15-42a48dbc2521/1/OEiIXJcC6sHz0BJj5tPlREnuIVQ.mft
File: OEiIXJcC6sHz0BJj5tPlREnuIVQ.mft (raw, json)
Hash identifier: kUpllT34oaGTs71L6CyRwwemOkmkJqNDnmDmSYWoOhQ=
Subject key identifier: 5E:E3:D7:73:95:35:B8:B3:D7:FC:9B:21:FD:59:D4:33:24:B0:CF:CD
Authority key identifier: 38:48:88:5C:97:02:EA:C1:F3:D0:12:63:E6:D3:E5:44:49:EE:21:54
Certificate issuer: /CN=3848885c9702eac1f3d01263e6d3e54449ee2154
Certificate serial: 0196C49540F650E7A752AD20F6725C04BAC0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OEiIXJcC6sHz0BJj5tPlREnuIVQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1e/37bdb7-9b93-46ab-9a15-42a48dbc2521/1/OEiIXJcC6sHz0BJj5tPlREnuIVQ.mft
Manifest number: 0E9D
Signing time: Mon 12 May 2025 13:00:37 +0000
Manifest this update: Mon 12 May 2025 13:00:37 +0000
Manifest next update: Tue 13 May 2025 13:00:37 +0000
Files and hashes: 1: OEiIXJcC6sHz0BJj5tPlREnuIVQ.crl (hash: U6ZlmA6yBQi0oz9Fy4utOhvGsk7+z8XvxAvAQ+cBaX8=)
2: mVMhaZyReFl--kv_RJ_-OuFBGYU.roa (hash: IwLGaJq3OYCljCCB7S0knCQn4hKuFoxDOc6G4aTbSQA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1e/37bdb7-9b93-46ab-9a15-42a48dbc2521/1/OEiIXJcC6sHz0BJj5tPlREnuIVQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/1e/37bdb7-9b93-46ab-9a15-42a48dbc2521/1/OEiIXJcC6sHz0BJj5tPlREnuIVQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/OEiIXJcC6sHz0BJj5tPlREnuIVQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 13 May 2025 13:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:c4:95:40:f6:50:e7:a7:52:ad:20:f6:72:5c:04:ba:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3848885c9702eac1f3d01263e6d3e54449ee2154
Validity
Not Before: May 12 13:00:37 2025 GMT
Not After : May 13 13:00:37 2025 GMT
Subject: CN=5ee3d7739535b8b3d7fc9b21fd59d43324b0cfcd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:1c:b0:23:39:62:b5:41:8c:1e:33:4a:df:59:
c4:6a:54:eb:8d:68:4e:17:3b:8d:3e:26:b2:83:4f:
12:c3:21:41:02:b3:98:3d:01:99:d5:16:15:01:91:
5b:66:53:aa:0d:09:2b:cb:25:23:ff:7d:42:bc:8a:
32:f2:af:f0:72:a9:cf:8c:fd:e0:33:e6:0c:d1:bf:
1e:dc:05:8f:24:e0:2b:bd:67:18:80:bf:89:3c:c9:
69:ee:38:2a:c4:04:44:fc:c1:cd:dd:ce:68:25:35:
9d:6b:78:f4:c4:31:21:b7:73:d0:6d:8d:c1:19:ea:
62:b8:b2:80:e9:cc:75:e2:4c:99:35:79:27:af:3f:
b2:8d:27:c6:d2:93:df:57:98:d8:a7:36:bc:d5:61:
b4:25:15:cd:0a:ce:7d:84:18:f6:6d:8e:c5:83:70:
b7:00:cd:03:b1:2a:8d:b9:77:2a:18:17:20:3a:fa:
6e:09:6a:b3:ed:07:41:98:3d:91:92:45:3b:1c:4a:
61:9a:3c:85:bc:54:1e:78:ed:e1:38:16:8f:bf:55:
1a:72:a2:0e:f7:a1:84:7d:e8:86:81:f3:a6:85:b7:
42:22:0c:44:2f:61:6a:77:5b:93:36:55:35:41:75:
3e:e3:c0:9e:7f:06:4b:34:9d:89:e6:c1:99:49:05:
10:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5E:E3:D7:73:95:35:B8:B3:D7:FC:9B:21:FD:59:D4:33:24:B0:CF:CD
X509v3 Authority Key Identifier:
keyid:38:48:88:5C:97:02:EA:C1:F3:D0:12:63:E6:D3:E5:44:49:EE:21:54
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OEiIXJcC6sHz0BJj5tPlREnuIVQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/37bdb7-9b93-46ab-9a15-42a48dbc2521/1/OEiIXJcC6sHz0BJj5tPlREnuIVQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/37bdb7-9b93-46ab-9a15-42a48dbc2521/1/OEiIXJcC6sHz0BJj5tPlREnuIVQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
87:aa:c9:4b:52:ad:8e:1b:62:10:52:a2:35:e4:55:f7:e1:44:
f0:f5:30:2d:1b:72:7f:8f:92:34:a8:3c:21:92:04:42:ad:0d:
41:4f:fc:a7:b3:91:bf:f8:43:80:6c:a2:d1:ee:9a:1b:81:5b:
71:d5:f5:91:2d:c7:ab:5e:c8:6b:5d:2f:92:47:e1:5b:93:99:
98:1c:bc:af:6c:9c:ed:31:6c:f8:a4:06:3b:15:aa:09:d0:6a:
52:d1:f1:d9:7d:2f:05:dc:44:16:cb:c9:9a:a3:47:6d:a5:35:
96:08:23:10:12:f3:be:42:0e:a4:ed:2c:3f:15:9f:e8:ee:6e:
ff:8a:87:12:45:7f:2c:5f:c9:9c:d6:c1:ee:c1:00:df:b2:32:
2d:7e:a3:50:0e:1d:81:00:a1:43:68:27:ed:c2:e9:3e:4c:15:
5c:42:23:1a:79:06:0d:91:bd:6a:aa:74:1b:51:ed:51:29:32:
02:9e:7e:90:4a:48:2f:0b:2e:66:48:35:e3:84:76:38:9b:5a:
e1:b7:43:99:40:76:ab:8e:14:a8:44:ad:ad:24:1c:d4:f8:ca:
29:45:9d:3b:ca:3f:c6:86:ea:30:fc:74:42:9c:d9:e8:c8:5e:
f9:16:73:9f:27:a9:de:44:20:22:56:f3:e0:ca:41:7e:4f:1d:
15:bd:da:a8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 12 16:56:05 2025 by rpki-client