Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/40/30cc41-8aab-4463-99f8-dcb56acb777f/1/OFOvUBRJmy-1zSweaKJP-CVtDQ0.mft
File: OFOvUBRJmy-1zSweaKJP-CVtDQ0.mft (raw, json)
Hash identifier: W2lc3OXYICOOuWs9mTRwjZEvOqcbOAe8mf195kyl1Fg=
Subject key identifier: 93:F2:3E:58:2F:2C:68:00:E6:E4:A3:13:EB:C2:0D:B8:A7:4D:0F:B4
Authority key identifier: 38:53:AF:50:14:49:9B:2F:B5:CD:2C:1E:68:A2:4F:F8:25:6D:0D:0D
Certificate issuer: /CN=3853af5014499b2fb5cd2c1e68a24ff8256d0d0d
Certificate serial: 0196C4CC3FCB1EBF6F1B5CB19766F509E892
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OFOvUBRJmy-1zSweaKJP-CVtDQ0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/40/30cc41-8aab-4463-99f8-dcb56acb777f/1/OFOvUBRJmy-1zSweaKJP-CVtDQ0.mft
Manifest number: 11D4
Signing time: Mon 12 May 2025 14:00:41 +0000
Manifest this update: Mon 12 May 2025 14:00:41 +0000
Manifest next update: Tue 13 May 2025 14:00:41 +0000
Files and hashes: 1: OFOvUBRJmy-1zSweaKJP-CVtDQ0.crl (hash: MMrfjCcCS3FTf31NxHGQdAao+jUxNHkZP8qgmQaBEJw=)
2: PQhWLSkGUa_VMVGVuYBQSUZ_P_A.roa (hash: 3kRwsyvbLLbFqSNU/EJCsmBYkp3oO56TR7kGsRhAuv4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/40/30cc41-8aab-4463-99f8-dcb56acb777f/1/OFOvUBRJmy-1zSweaKJP-CVtDQ0.crl
rsync://rpki.ripe.net/repository/DEFAULT/40/30cc41-8aab-4463-99f8-dcb56acb777f/1/OFOvUBRJmy-1zSweaKJP-CVtDQ0.mft
rsync://rpki.ripe.net/repository/DEFAULT/OFOvUBRJmy-1zSweaKJP-CVtDQ0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 13 May 2025 14:00:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:c4:cc:3f:cb:1e:bf:6f:1b:5c:b1:97:66:f5:09:e8:92
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3853af5014499b2fb5cd2c1e68a24ff8256d0d0d
Validity
Not Before: May 12 14:00:41 2025 GMT
Not After : May 13 14:00:41 2025 GMT
Subject: CN=93f23e582f2c6800e6e4a313ebc20db8a74d0fb4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:5c:2a:25:3e:c2:e1:da:5b:80:23:4e:40:fe:
1c:2c:52:76:a7:12:fe:ca:02:a0:ed:e3:3f:7d:33:
a5:06:88:57:97:2e:80:a4:6c:44:cc:3a:89:ee:6d:
59:1c:71:ab:08:77:a2:08:4e:6a:b5:c5:4b:aa:90:
c4:76:9c:b9:6b:ed:2c:1b:17:dc:65:8b:13:80:a8:
0c:fe:7b:7b:bc:c0:20:03:89:23:29:a9:b3:30:87:
19:7d:0b:ef:42:50:73:27:28:c9:38:0d:ca:33:7d:
01:d0:c2:3e:f7:c2:cb:ca:08:25:21:e8:36:9e:b8:
9b:8d:73:42:c2:60:9e:8f:b2:50:d5:55:a4:fc:1d:
19:ac:be:6d:2c:aa:1d:f7:8b:42:1f:11:8f:b2:4e:
ae:ac:55:06:47:6b:7f:b1:03:49:4b:5b:83:8e:c3:
97:ab:60:e1:58:5c:e7:ca:f4:c0:66:ce:c5:bc:39:
e0:de:db:97:76:89:0b:85:22:72:41:40:e4:83:29:
ab:91:fb:ab:d4:e7:6e:ed:50:fe:a2:2b:6d:d2:17:
3f:86:59:0f:2b:35:bc:08:b3:68:a9:f1:a5:d9:a6:
28:ba:4f:d7:bb:57:d7:eb:b9:95:a1:3c:f3:44:77:
e8:c3:54:eb:30:8e:9a:9a:72:f1:0f:65:12:71:ac:
be:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
93:F2:3E:58:2F:2C:68:00:E6:E4:A3:13:EB:C2:0D:B8:A7:4D:0F:B4
X509v3 Authority Key Identifier:
keyid:38:53:AF:50:14:49:9B:2F:B5:CD:2C:1E:68:A2:4F:F8:25:6D:0D:0D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OFOvUBRJmy-1zSweaKJP-CVtDQ0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/40/30cc41-8aab-4463-99f8-dcb56acb777f/1/OFOvUBRJmy-1zSweaKJP-CVtDQ0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/40/30cc41-8aab-4463-99f8-dcb56acb777f/1/OFOvUBRJmy-1zSweaKJP-CVtDQ0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
86:fe:87:85:2e:b2:2c:c4:1c:5b:a4:4e:e9:30:93:63:61:ca:
7e:fa:09:73:af:8f:e9:2b:fa:1e:e3:cc:18:78:7a:50:60:2b:
46:72:b6:51:34:91:64:7b:80:59:98:f4:69:0c:0c:fd:24:29:
9a:23:18:68:d6:b8:9a:ce:51:72:d9:22:1f:fc:70:a4:62:a0:
37:fd:48:6b:85:ec:dd:a0:5b:28:30:d5:62:c9:d0:1c:2e:4b:
8a:83:c0:5a:64:28:5d:e7:b0:d7:4f:f5:23:3f:1d:5a:01:b3:
d1:d4:7c:63:dc:42:2f:a7:70:40:05:8e:ed:17:e9:fa:3c:dd:
57:4a:8b:35:e5:76:51:a1:60:cd:6f:13:cb:3c:62:a8:68:6b:
d6:eb:f6:9c:91:93:05:0f:8b:a4:a3:e0:43:b1:bb:5c:51:e3:
aa:6c:1b:00:a8:80:64:53:ec:11:2b:c5:0d:9d:93:a0:4a:6a:
e4:25:99:be:f3:77:59:5e:1c:9a:a0:63:77:60:c5:5d:47:ec:
2b:93:4b:34:55:d8:77:4d:89:7e:c0:b9:0a:42:3d:12:4c:1d:
7c:44:ed:5c:52:e8:5e:d0:9b:d4:94:11:63:5d:4f:93:b5:17:
67:7b:a1:1c:b7:2e:b7:e5:bf:cf:b6:6c:0b:23:30:48:81:65:
a3:3a:0e:71
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 12 16:51:30 2025 by rpki-client