Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2d/80eb21-af20-48eb-a2dc-6210eab05b70/1/OJwTxrPB3GsiFQNaZC8e-5sA3fU.mft
File: OJwTxrPB3GsiFQNaZC8e-5sA3fU.mft (raw, json)
Hash identifier: EXl4tvtn8jhxumcD/v8BqvQg3EN/I+VXQ/dNDpfwAP0=
Subject key identifier: 5D:3A:96:02:5B:7B:5B:66:1B:9D:D9:23:53:FB:F1:A4:28:C7:E5:91
Authority key identifier: 38:9C:13:C6:B3:C1:DC:6B:22:15:03:5A:64:2F:1E:FB:9B:00:DD:F5
Certificate issuer: /CN=389c13c6b3c1dc6b2215035a642f1efb9b00ddf5
Certificate serial: 0196BE9326020825E789C6825CF649E81C01
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OJwTxrPB3GsiFQNaZC8e-5sA3fU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2d/80eb21-af20-48eb-a2dc-6210eab05b70/1/OJwTxrPB3GsiFQNaZC8e-5sA3fU.mft
Manifest number: 0C47
Signing time: Sun 11 May 2025 09:00:36 +0000
Manifest this update: Sun 11 May 2025 09:00:36 +0000
Manifest next update: Mon 12 May 2025 09:00:36 +0000
Files and hashes: 1: OJwTxrPB3GsiFQNaZC8e-5sA3fU.crl (hash: drGnIkFeiZEyDSVKXt+XSPESd2SKp7ZuGRexcHefC+M=)
2: Pq3PJBDygUjjz_TTAnDa5kWUA6s.roa (hash: wl7p1VcPhHxXGT78nGLW8yRi9KyIJcca4JW840Jj2X0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2d/80eb21-af20-48eb-a2dc-6210eab05b70/1/OJwTxrPB3GsiFQNaZC8e-5sA3fU.crl
rsync://rpki.ripe.net/repository/DEFAULT/2d/80eb21-af20-48eb-a2dc-6210eab05b70/1/OJwTxrPB3GsiFQNaZC8e-5sA3fU.mft
rsync://rpki.ripe.net/repository/DEFAULT/OJwTxrPB3GsiFQNaZC8e-5sA3fU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 12 May 2025 07:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:be:93:26:02:08:25:e7:89:c6:82:5c:f6:49:e8:1c:01
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=389c13c6b3c1dc6b2215035a642f1efb9b00ddf5
Validity
Not Before: May 11 09:00:36 2025 GMT
Not After : May 12 09:00:36 2025 GMT
Subject: CN=5d3a96025b7b5b661b9dd92353fbf1a428c7e591
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:3a:84:9b:9e:20:03:a0:ff:3a:15:08:f6:5e:
fd:dd:c8:65:fd:84:91:43:46:7e:87:1f:30:13:99:
af:53:d2:80:83:5d:e5:0f:dd:54:b3:ee:a1:0b:df:
a9:28:a1:37:e3:ca:10:65:88:30:c6:a4:9d:8b:54:
72:cb:d5:37:36:2a:5f:97:e2:9f:55:bd:ba:4f:5b:
52:d6:fe:a2:ce:fb:ad:08:c8:99:db:f8:cd:bf:e4:
79:bb:e3:9e:d3:75:09:48:c2:9b:d6:fd:84:e7:32:
45:6d:ab:65:07:65:dc:a5:ed:44:eb:87:36:28:60:
a4:1e:c0:94:e7:1d:3e:e4:15:83:60:dd:b7:d2:97:
62:df:5d:d0:b1:d5:00:07:9e:e9:b7:37:3c:0f:9a:
1d:e6:33:6f:bc:4a:ef:16:79:e2:ee:4e:9b:c1:f9:
5e:7e:3f:29:84:b7:32:71:24:b5:25:b8:63:d5:8d:
c7:52:7c:19:53:d4:1a:6d:2d:f4:ac:8e:87:ce:bc:
da:48:bc:ea:b9:2a:08:2e:ba:8a:a5:71:4e:91:fd:
44:01:68:0f:6f:40:43:af:69:ae:6d:a7:8a:21:2e:
11:9f:1d:d6:f2:99:3a:ee:e1:a1:46:61:06:ec:3e:
f3:ef:7a:0d:62:2a:2a:74:8f:ec:f2:96:f0:df:a8:
60:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5D:3A:96:02:5B:7B:5B:66:1B:9D:D9:23:53:FB:F1:A4:28:C7:E5:91
X509v3 Authority Key Identifier:
keyid:38:9C:13:C6:B3:C1:DC:6B:22:15:03:5A:64:2F:1E:FB:9B:00:DD:F5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OJwTxrPB3GsiFQNaZC8e-5sA3fU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/80eb21-af20-48eb-a2dc-6210eab05b70/1/OJwTxrPB3GsiFQNaZC8e-5sA3fU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/80eb21-af20-48eb-a2dc-6210eab05b70/1/OJwTxrPB3GsiFQNaZC8e-5sA3fU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
e7:2c:97:10:ff:6d:bc:5d:da:cd:40:cc:2e:b8:d2:43:cc:56:
89:d5:38:98:54:08:9f:b3:24:a0:46:0c:a0:38:b0:c1:36:7d:
76:2a:a9:7a:00:bd:11:3d:fa:cc:e7:50:a0:5c:cc:28:2b:c9:
b7:d2:81:5d:5a:74:a1:e0:15:a7:68:db:d2:af:39:65:fc:36:
59:c4:cb:bd:d1:06:a3:e2:20:77:d8:d2:c1:f7:0f:dd:fa:ef:
84:37:87:82:7c:ad:df:0f:d3:0e:b2:36:ea:bc:93:f7:9e:51:
ce:84:3f:73:83:e7:a2:2c:b9:34:f5:16:98:7a:4c:e8:04:54:
07:fa:a0:b6:15:5d:dd:14:40:2b:28:31:ba:c3:b9:27:b4:1e:
02:a7:93:2a:59:50:c9:5b:5e:f3:83:1e:3f:f3:06:b3:83:28:
52:3a:77:67:e7:5a:4d:fb:d9:51:60:39:c8:68:31:67:57:b5:
88:c6:7c:bf:03:3e:be:02:1d:cb:5d:ab:69:5a:5a:13:82:31:
49:b6:89:0e:c9:85:ae:57:1b:89:ce:18:b3:19:28:53:e9:65:
82:d5:44:77:bb:5a:c8:28:57:2a:95:09:38:8b:bd:71:1b:6f:
a6:81:c4:33:16:73:29:a0:33:77:82:ca:c3:47:af:12:51:20:
7b:85:67:08
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 11 15:20:21 2025 by rpki-client